Privacy · effective May 24, 2026
The lawyer-grade language other companies use is doing a lot of work to hide what they actually do. We do not have anything to hide, so we are going to write this the way we would tell you in a kitchen.
Your household data lives in Aule's infrastructure only. It is not sold, not shared with third parties, and not used to train shared AI models — not now, not later.
On our public marketing pages we run conventional marketing measurement (Meta, TikTok, Vibe, PostHog, Vercel Analytics) so we can reach the households we serve. None of that touches what happens inside your household.
Household data is everything Aule sees while running your household: your calendar, your messages with the agent, your grocery preferences and orders, your billing history, your photos when you ask the agent to use them, your vendor records, the household members you choose to include, the rules you wrote yourself, and the receipts of every loop Aule closed on your behalf.
Household data does not include the conventional analytics events we collect on our public pages — pageviews, clicks on a CTA, what blog post you read before applying. Those are kept separate, by design.
Household data lives in Aule's production database (Supabase, hosted in the United States) and in encrypted object storage for documents and images. Access is restricted to the operations team members who need it to run your household and to the on-call engineer responsible for keeping the service up.
When Aule calls a vendor, books a service, or completes a transaction, it uses the integration credentials you authorized for that purpose only. We do not bulk-export your data to brokers, ad networks, or any third-party analytics platform.
We do not train shared AI models on the contents of your household. Period.
We may use anonymized, aggregated patterns — "the average household runs about eleven grocery loops a month," "the most common escalation reason is X" — to inform product decisions and the annual State of Household Intelligence report. Individual records, member-level data, message contents, or anything that could be traced back to your household is never part of that aggregation.
If you choose Aule Bespoke, the fine-tuned model trained on your household lives only inside your dedicated instance and is never combined with another household's data.
When you visit a public page on getaule.com — the homepage, pricing, the Mental Load Index, founder essays, the resources library — your browser sends us standard analytics events: which page you loaded, your device class, your referrer, UTM parameters, and a session-scoped anonymous identifier. We use Meta Pixel, TikTok Pixel, Vibe, PostHog, and Vercel Analytics for these signals.
If you give us your email through the Mental Load Index, an application form, or a partner invite, we associate that email with the prior anonymous identifier so we can answer your application personally and run the founding-cohort waitlist. We do not append that email to any third-party identity graph.
Marketing measurement on public pages is never linked to your individual answers on the Mental Load Index, the contents of your application, or anything that happens after you become a member. Those are kept on a different rail.
Authentication is handled by industry-standard providers. Passwords are hashed and salted; sessions are scoped and revocable; we support multi-factor authentication; webhook signatures are verified on every inbound integration call.
We do not store payment card details. Card processing is handled by Stripe, who is PCI Level 1 certified.
We use a small set of well-known sub-processors to run the service: Supabase (database and storage), Vercel (application hosting), Stripe (payments), Anthropic / OpenAI (agent reasoning), Voyage AI (semantic memory embeddings), Twilio and Vapi (telephony), SendGrid (transactional email), Clerk (authentication), and our marketing measurement vendors named above.
Each sub-processor is bound by a contract that prohibits using your data for any purpose other than providing the service to us. We will update this page when we add or remove a sub-processor.
You can delete your household at any time. Inside the app: Settings → Data → Delete my household. You will be asked to confirm twice. On confirmation we erase your household data from our production database and queue your storage objects for permanent deletion. Backups are kept for thirty days and then rotated out.
A portability export is available the same way: Settings → Data → Export. We will return your data as a structured archive (JSON for records, the original files for documents and images) so you can take it wherever you want to take it.
You can also request deletion or export by writing to hello@getaule.com from the email address on your account. We will respond within five business days.
Aule is built for adult household members and the children they are responsible for. Children do not have their own accounts; their information appears only inside the household their parents created and is treated with the same protections as the rest of the household record.
We do not target children with marketing, do not solicit information from children, and do not run analytics that profile children individually.
If we change anything material about how we handle household data — what we collect, where it lives, who has access — we will email every active member at least thirty days before the change takes effect. Non-material changes (a sub-processor swap, a wording clarification) will appear on this page with an updated effective date and a changelog entry at the bottom.
Privacy questions, data-subject requests, or anything that does not feel right — write to brennan@launchitservices.com or hello@getaule.com. A human will read and respond.
If you give us a mobile number and opt in during onboarding, Aule sends you service text messages: setup and onboarding steps, household operational updates from the agent, and confirmations before a grocery order or before any single spend at or above $200. We only text members who asked us to, and agreeing to texts is never a condition of becoming a member.
Message frequency varies with what your household has Aule doing. Message and data rates may apply. Reply STOP to any message to opt out, or HELP for help. Opting out of texts does not affect your membership.
Your mobile number and your SMS consent are never sold, rented, or shared with third parties or affiliates for their own marketing or promotional purposes. They are used only to deliver the Aule service. Telephony is carried by Twilio and Vapi, the sub-processors named above, under contracts that prohibit any other use.