This policy describes how the operator of AuraGlow AI (the “Service Provider”) processes information through the AuraGlow AI mobile application (the “Application”). You can contact the Service Provider at auraglowsup@gmail.com.
With your permission, the Application accesses the camera or a photo you select to provide aura analysis and outfit feedback. Your onboarding portrait is saved in the Application’s local storage on your device; outfit check photos are also saved locally. Quiz answers and AI readings are stored locally on your device. These local files and values are not uploaded to Supabase Storage or stored in a Supabase database.
When you request an AI feature, the information needed for that request, which may include a photo and relevant answers or text, is sent over an encrypted connection to our Supabase Edge Function and then to OpenAI for analysis. The function does not intentionally save submitted photos to a file, storage bucket or database. Supabase may process request metadata and operational logs; an error log may include an OpenAI error message or model output, but our function does not intentionally log the submitted image or request body. Please avoid including sensitive information in text you submit.
OpenAI API inputs are not used to train OpenAI models by default unless the Service Provider explicitly opts in to data sharing. The Application uses OpenAI’s Chat Completions API without requesting stored completions. OpenAI may retain API data in abuse monitoring logs for up to 30 days, subject to its applicable policies and settings. See OpenAI’s API data controls.
The Application creates an anonymous account with a random identifier; no name, email or login is required. When you use an AI feature, our server records this identifier, the feature used, the time and a non-reversible network identifier. These records do not contain your photos, quiz answers or AI results, and are used only to apply free-sample and usage limits and to prevent abuse. On iOS, the anonymous sign-in may remain in the device Keychain after the Application is deleted.
Firebase Analytics helps us understand feature use and improve the Application. Events may include whether a photo came from the camera or gallery, a result’s archetype category key, a selected life domain, a paywall placement, a plan type and a short purchase outcome label. We do not intentionally send photos, image URLs, quiz answer text, AI-generated aura text or email addresses as event parameters. Analytics also uses an app-instance identifier and may automatically collect device and usage information.
Firebase Crashlytics collects crash and stability information to diagnose errors in release builds. We do not intentionally attach photos or quiz answers, set a Crashlytics user identifier, or add custom keys or logs. Crash reports can nevertheless include exception messages and diagnostic context generated when an error occurs. When Firebase Analytics and Crashlytics are used together, crash reports may include recent analytics event breadcrumbs.
We have disabled advertising storage and personalization in the Application’s analytics configuration. We do not use the iOS advertising identifier (IDFA) or these services for cross-app advertising or tracking across other companies’ apps and websites. See Privacy and Security in Firebase and Google’s Privacy Policy.
RevenueCat processes subscription and purchase information, such as product identifiers, subscription status, transaction and receipt information, app user identifiers and limited device information, to validate purchases and provide access to paid features. The anonymous account identifier is used as the RevenueCat app user identifier. Apple or Google processes payment card details; we do not collect or store your payment card number.
We share information needed to operate the Application with the following providers:
We only work with providers that protect user data to the same or an equivalent standard as described in this policy, and we share only the information each provider needs to perform its service for us.
We may also disclose information when required by law or reasonably necessary to protect the rights, security and integrity of users and the Application. We do not sell your personal information or share it for cross-context behavioral advertising.
To request access to, correction of, or deletion of data we can identify and control, email auraglowsup@gmail.com. We may need information to verify your request. Some provider-held analytics and diagnostic records cannot be matched to a person from an email address alone. We will explain what we can delete and what must be retained for legal or transaction purposes. If the Application later offers account creation, account deletion controls will be provided in the Application as required by the applicable app store rules.
You can decline camera or photo access and avoid using AI features that require an image. Before a photo is first sent for AI analysis, the Application asks for your permission. You can withdraw this permission at any time in the Application under Settings > Data > AI photo analysis; no photo is sent for analysis until you allow it again. Settings > Data > Clear local data removes the readings, photos and quiz answers saved on your device and also resets this permission. You can remove the Application to stop future collection from your device. You can also contact us at the address below to withdraw consent or make a privacy request; withdrawal does not undo processing already completed.
Our providers may process information outside your country, including in the United States. Where required, applicable legal safeguards govern these transfers. We use reasonable technical and organizational measures, including encrypted transport for AI requests, to protect data, but no system can guarantee absolute security.
The Application is not directed to children under 13, or under the applicable minimum age in their region. If you believe a child has submitted personal information, contact us so we can review and address it.
We may update this policy to reflect changes to the Application or our data practices. The effective date below will be updated when the policy changes.
Effective date: November 3, 2026
AuraGlow AI · auraglowsup@gmail.com
AuraGlow AI – All Rights Reserved.