Alaura Privacy Policy
Effective date: July 31, 2026 · Last updated: August 9, 2026
Alaura is a personal leadership coaching service operated by Midas AI Advisor B.V., a company registered in the Netherlands (KvK 42000266, registered office at Brouwersgracht 77, 1015 GC Amsterdam). In this policy, "Alaura", "we" and "us" refer to Midas AI Advisor B.V. We are the data controller for the personal data described here under the EU General Data Protection Regulation (GDPR).
Alaura is built on a simple principle: your conversations are yours alone. Everything we collect exists to give you, and only you, coaching feedback on how you lead. We do not sell your data, we do not share your transcripts or scores with anyone else, and we do not use your conversations to advertise to you.
1. What Alaura does
You wear a small pendant that captures audio of your conversations during the day. The Alaura app receives that audio from the pendant over Bluetooth and uploads it to our servers, where it is transcribed and analyzed by AI to produce leadership coaching reports that only you can see.
This means Alaura processes recordings of your voice and, unavoidably, the voices of people you talk to. Section 6 explains your responsibilities toward those people.
2. Data we collect
Account data. Your name, email address, and authentication identifiers (managed by our sign-in provider, Clerk). If you sign in with Apple using Hide My Email, we only receive the relay address Apple gives us.
Conversation audio and transcripts. Audio captured by your pendant is uploaded to our servers and transcribed. We store the transcript, per-speaker segments, timestamps, and the analysis derived from it (leadership signal scores, coaching narratives, business attention estimates). Raw audio is kept while your account is active so that transcription, voice recognition and your own playback features keep working, and is erased when you delete your account.
Voice profile (biometric data). To recognize which voice in a conversation is yours, Alaura builds a numerical voice profile (a "voice embedding") from conversations you confirm. This is biometric data under GDPR Article 9. We process it only with your explicit consent, given in the app before the profile is built, and only for one purpose: labeling you in your own transcripts. Voice recognition is optional, the app is fully usable without it, and you can turn it off or delete the profile in Settings at any time, effective immediately. The profile is stored on our EU servers (Frankfurt), is never shared with anyone, and is never used to identify anyone else.
Other speakers' voice characteristics. To tell your voice apart from others in a conversation, Alaura computes short-lived numerical voice representations of the other speakers in that conversation. These are used once, solely to distinguish your voice; they are never linked across conversations, never used to identify anyone, never shared, and are deleted with the conversation and with your account. We process them on the basis of our legitimate interest in providing accurate speaker labeling, with strict data minimization.
Voice clone samples (optional). If you opt in to hearing your daily report read in your own voice, you record short voice samples in the app. These are sent to our voice synthesis provider (ElevenLabs) solely to create your personal voice clone. You can delete the clone at any time in Settings.
Device and usage data. Pendant identifiers, connection and battery status, firmware version, app version, push notification tokens, and basic product interaction data needed to run and improve the service.
Payment data. If you pre-order or subscribe, payments are handled by Stripe. We never see or store your card details.
3. Why we process it (legal bases)
| Processing | Legal basis |
|---|---|
| Providing the coaching service (transcription, analysis, reports, chat advisor) | Performance of our contract with you (Art. 6(1)(b)) |
| Voice profile for speaker recognition | Your explicit consent (Art. 9(2)(a)), given in-app |
| Voice clone | Your explicit consent, opt-in per feature |
| Push notifications (daily nudge) | Your consent via the iOS permission prompt |
| Service operation, security, abuse prevention | Legitimate interest (Art. 6(1)(f)) |
| Payments and invoicing | Contract and legal obligation |
You can withdraw consent at any time: reset voice recognition or delete the voice clone in Settings, disable notifications in iOS Settings, or delete your account entirely.
4. Who processes data on our behalf
We use a small set of processors, each bound by a data processing agreement. No processor may use your data for its own purposes.
| Processor | Purpose | Data involved |
|---|---|---|
| Supabase (EU, Frankfurt) | Database and audio storage | All service data |
| Vercel | Application hosting | Data in transit through the app |
| Clerk | Authentication | Name, email, sign-in identifiers |
| Soniox | Speech-to-text transcription | Conversation audio (deleted from their systems after transcription) |
| Google (Gemini) | AI analysis of transcripts | Transcript text |
| Anthropic (Claude) | AI advisor chat and coaching narratives | Transcript-derived text, chat messages |
| ElevenLabs | Voice clone synthesis (opt-in only) | Your voice samples |
| Expo | Push notification delivery, app updates | Push tokens |
| Stripe | Payments | Payment details (handled entirely by Stripe) |
Some processors are located outside the EEA. Where that is the case, transfers are covered by the EU Standard Contractual Clauses or an adequacy decision.
No human at Alaura reads your conversations in the normal operation of the service. Access to production data is restricted to what is strictly necessary to operate and debug the service, under confidentiality.
No AI training. We never use your recordings, transcripts, or anyone's voice to train AI or machine-learning models, and our agreements with the AI providers listed above prohibit them from using your data to train theirs.
5. Retention
- Conversation transcripts, scores and reports: kept while your account is active, so your coaching history works.
- Raw conversation audio: kept while your account is active, erased when you delete your account.
- Voice profile and voice clone (biometric data), retention and destruction schedule: your voice profile is permanently destroyed within 30 days of the earliest of: you disabling voice recognition or deleting the profile in Settings, you deleting your account, or 3 years after your last interaction with Alaura. The voice clone follows the same schedule, measured from deleting the clone. Other speakers' per-conversation voice representations are deleted with the conversation and with your account. We never sell, lease, trade, or otherwise profit from biometric data, and never disclose it except as consented (ElevenLabs, only for your requested voice clone).
- Account deletion: deleting your account in the app (Settings, Delete account) permanently erases your account, raw conversation audio, transcripts, reports, voice profile and voice clone. Residual copies in encrypted backups are purged on the backup rotation cycle (at most 30 days).
6. People you talk to
Your pendant records conversations continuously while it is on. The people around you have privacy rights too. As the wearer, you are responsible for complying with the recording and privacy laws that apply where you are, and for informing the people around you that conversations may be recorded. If someone objects, mute or take off the pendant.
For our part: Alaura processes the voices of people you talk to only as an unavoidable part of transcribing and labeling your own conversations, only on your behalf, and never to identify, profile or contact those people. We build no profiles of them, keep no voice data about them beyond the conversation itself, and never use their speech to train AI models.
If you believe your voice was recorded by an Alaura user and want it removed, contact us at privacy@alaura.ai and we will help. Where we become aware that audio was captured unlawfully, we will delete it.
7. Your rights
Under the GDPR you have the right to access, correct, export and erase your personal data, to restrict or object to processing, and to withdraw consent. Most of these you can exercise directly in the app (Settings). For anything else, email privacy@alaura.ai. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or your local supervisory authority.
8. Security
Data is encrypted in transit (TLS) and at rest. Access to production systems is restricted. The app stores its session credentials in the iOS secure keychain.
9. Children
Alaura is a professional coaching tool and is not directed at children. You must be at least 18 to create an account.
10. Website visitors
Our website (alaura.ai) uses Google Tag Manager to load analytics that help us understand how visitors use the site. These tools may set cookies. You can block cookies in your browser settings; the site works without them. The app itself contains no advertising or cross-site tracking.
11. Changes
We will post any material changes to this policy here and update the date at the top. If a change affects how we handle biometric data, we will ask for your consent again in the app.
12. Contact
Midas AI Advisor B.V.
Brouwersgracht 77, 1015 GC Amsterdam, the Netherlands
KvK 42000266
Email: privacy@alaura.ai
Midas AI Advisor B.V. · Brouwersgracht 77, 1015 GC Amsterdam · KvK 42000266