Privacy Policy (draft)
This page describes how Aro actually handles data today. It will be replaced by a reviewed, binding Privacy Policy before Aro is generally available.
What Aro collects
Your account details (name and email address, held by our sign-in provider); what a caregiver enters about a senior, such as their name, phone number, medications and schedules; summaries and transcripts of companion phone calls; and safety events such as an SOS press. The Consumer Health Data policy explains the health-related items in more detail.
The iPhone app
The Aro app signs in with the same account as the website and shows your family's medications, circle and trends from Aro's servers. It contains no advertising, and no analytics or tracking software. In this version it does not read Apple Health data. Your sign-in session is kept in the phone's secure storage.
Data isolation
Every family's data is scoped to that family's account (a Clerk Organization) and to nothing else. No page or action in Aro can be reached with another family's identifier.
We don't sell data
Aro does not sell personal data or health-adjacent data to third parties, and has no advertising business.
Who else touches your data
Aro uses a small number of providers to operate, and only to run the product for your family: sign-in (Clerk), database hosting (Neon), web hosting (Vercel), rate-limit counters (Upstash), telephony (Twilio), email alerts (Resend), and AI providers for the voice companion (Anthropic, and ElevenLabs or AssemblyAI where configured).
Keeping and deleting data
Aro does not currently delete data automatically on a schedule. To have your family's data deleted, email hello@arohealth.net from your account address. There is no self-service delete button yet, so requests are handled by hand.
Children
Aro is for adults who look after older adults. It is not directed at children under 13.
Questions
Reach us at hello@arohealth.net with any question about your data.