Privacy Policy

Effective Date: February 23, 2026

1. Introduction

Abra, LLC (“Abra,” “we,” “us,” or “our”) operates the Abra mobile application and web platform (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, please discontinue use of the Service immediately.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your email address and a securely hashed password. We do not store your password in plaintext.

2.2 Coaching Content

We store the chat messages, goals, and coaching content you create within the Service to provide and improve your coaching experience.

2.3 Voice Audio

When you use voice features, audio is streamed to our third-party speech processing provider (Deepgram) for real-time transcription. Abra does not store your voice audio recordings. Audio is processed in real time and discarded after transcription.

2.4 Photos and Images

You may optionally upload photos or images as part of your coaching interactions. These are stored securely and associated with your account.

2.5 Location Data

With your explicit permission, we may access your location to provide contextual assistance such as directions. Location data is used only for the specific request and is not stored or tracked over time.

2.6 Calendar Data

If you connect your Google Calendar, we access calendar events with your explicit OAuth consent. We read calendar data to help you coordinate and plan; we do not modify your calendar without your direction.

2.7 Device and Usage Data

We automatically collect certain technical information, including your device operating system, app version, and crash logs. This data is used solely for debugging, performance monitoring, and improving the Service.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service
  • Generate AI-powered coaching responses tailored to your goals
  • Improve and develop new features for the Service
  • Respond to your inquiries and provide customer support
  • Monitor and analyze usage patterns to improve reliability
  • Detect, prevent, and address technical issues or security threats
  • Comply with legal obligations

4. How We Do NOT Use Your Information

We want to be explicitly clear about what we do not do with your data:

  • We do not sell your personal information to any third party, under any circumstances
  • We do not serve advertisements or share your data with advertisers
  • We do not engage in behavioral tracking across third-party websites or apps
  • We do not use your personal content to train AI models. Your coaching conversations are yours
  • We do not create advertising profiles based on your data

5. Third-Party Service Providers

We use a limited number of trusted third-party services to operate the Service. Each provider receives only the minimum data necessary to perform their function:

ProviderPurposeData Shared
DeepgramVoice-to-text transcriptionAudio stream (real-time, not stored by Abra)
OpenRouter / Google GeminiAI coaching responsesConversation context for response generation
SupabaseAuthentication and encrypted data storageAccount data, coaching content (encrypted at rest)
GoogleCalendar integration (via OAuth)Calendar events (read-only, with your permission)

These providers are contractually obligated to protect your data and may not use it for purposes beyond providing their service to us.

6. Your Privacy Rights

6.1 Access and Portability

You have the right to request a copy of the personal data we hold about you. Contact us at privacy@tryabra.io and we will provide your data in a portable format within 30 days.

6.2 Deletion

You may delete your account and all associated data at any time through the in-app profile settings. Upon account deletion, we will remove your data within 30 days. Certain anonymized, aggregated data that cannot identify you may be retained for analytics purposes.

6.3 Correction

You may update your profile information at any time through the Service. For corrections to other data, contact us at privacy@tryabra.io.

6.4 California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

  • Know what personal information we collect and how it is used
  • Request deletion of your personal information
  • Opt out of the sale or sharing of your personal information (we do not sell or share your data)
  • Non-discrimination for exercising your privacy rights

6.5 European Economic Area Residents (GDPR)

If you are located in the EEA, you have the right to:

  • Access your personal data
  • Rectify inaccurate personal data
  • Request erasure of your personal data
  • Restrict or object to processing of your personal data
  • Data portability
  • Lodge a complaint with a supervisory authority

7. Data Retention

  • Account and coaching data: Retained until you delete your account or request deletion
  • Voice audio: Not stored. Processed in real time and immediately discarded
  • Post-deletion cleanup: All identifiable data is permanently removed within 30 days of account deletion
  • Anonymized analytics: Aggregated, non-identifiable usage data may be retained indefinitely to improve the Service

8. Children’s Privacy

The Service is intended for users who are at least 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at privacy@tryabra.io.

9. Security

We implement industry-standard security measures to protect your data, including:

  • TLS 1.2+ encryption for all data in transit
  • AES-256 encryption for data at rest
  • Role-based access controls and the principle of least privilege
  • Regular security assessments and monitoring

In the event of a data breach that affects your personal information, we will notify you and applicable regulatory authorities within 72 hours of becoming aware of the breach, as required by applicable law.

While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

10. AI-Generated Content

The Service uses artificial intelligence to generate coaching responses. AI-generated content may contain inaccuracies or errors. It is not a substitute for professional medical, legal, financial, or other expert advice. You should independently verify any information provided by the Service before relying on it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will provide at least 30 days’ notice through the Service or via email before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Abra, LLC
Email: privacy@tryabra.io