Privacy Policy

Aurelia ("we", "us") provides an AI-powered aura color reading from selfies. This policy explains what we collect and how we use it.

1. Information We Collect

• Photos (including facial images): Selfies you capture or photos you select (of yourself, a pet, a place or an object) are sent for AI analysis to generate your aura reading. An image is only stored if you choose to save a reading to your history.
• Account data: Email address (and, for social sign-in, basic profile info) used for authentication.
• Usage and diagnostics: counts of steps in the app (for example opening the camera, completing a reading or opening the subscription screen) and crash and error reports, linked to an anonymous account ID. They tell us where the app breaks or where people get stuck.
• Feedback you send: your message, its category, an optional contact email, and the app version and device model, so we can reply and fix the problem.
• Contact preferences (only if you opt in): whether you agreed to news and offers by email and by push notification, when and where in the app you answered, your device language and country (to choose the language and the regional offer), and, if you turn on notifications, an identifier for this device that lets us send to it.

2. Face & Photo Data

Because your selfie may contain your face, we want to be explicit about how it is handled:

• What we collect: the photo (image) itself. We do not create a faceprint or biometric template, and we do not perform facial recognition or identify you.
• How it is used: solely to generate an entertainment "aura color" reading. It is not used for advertising, tracking, or any purpose other than producing your reading.
• Consent: before your first analysis, the app asks for your explicit permission to send your selfie to our AI provider. Analysis does not happen unless you agree.
• Who it is shared with: the image is sent to OpenAI for analysis, through Cloudflare's AI Gateway, which forwards the request and is configured not to log its content. Only if you save the reading is the image stored on Cloudflare R2 and referenced in our Supabase database. It is not shared with anyone else.
• Photo fingerprint: so that the same photo always gets the same reading, we keep a short fingerprint of each analysed photo (a cryptographic hash and a 64-bit visual hash) together with its reading. A fingerprint cannot be turned back into the photo and is not a faceprint or biometric template.
• Retention & deletion: images used only for analysis are not permanently retained. A saved reading and its image remain until you delete that reading or your account. Photo fingerprints remain until you delete your account.

3. How We Use Your Information

• To generate and display your aura analysis.
• To authenticate your account and manage subscriptions.
• To store your saved readings so you can revisit them.
• Only if you opt in: to send you news, new features and offers by email or push notification. Nothing is sent unless you agree. Every email has an unsubscribe link, and you can turn both off in Settings → Notifications at any time. Emails about your account (such as password resets) are not marketing and are always sent.

4. Third-Party Services

We share data only as needed with the providers below. Each is contractually required to protect your data with the same or equal protection described in this policy, and none is permitted to use your data for their own purposes.

• OpenAI — receives the selfie image you submit in order to generate your aura reading. This is the third-party AI service that analyzes your photo. OpenAI does not use data submitted through its API to train its models.
• Cloudflare — AI Gateway forwards analysis requests to OpenAI without logging their content; R2 stores images from readings you choose to save.
• Supabase — authentication and database (stores your account, saved readings, photo fingerprints, monthly usage counts and feedback messages).
• RevenueCat — subscription management.
• Sentry — crash and error diagnostics and anonymous usage counts: error reports, stack traces, device/OS model, app version, the screens visited and buttons tapped leading up to a problem, and counts of app steps, linked to an anonymous account ID. It never receives your photos, email address or name.
• Resend — sends news and offers emails to people who opted in: receives your email address and the email it delivers.
• Google Firebase Cloud Messaging — delivers push notifications if you turn them on: receives this device's push identifier and the notification text.

5. Data Retention

Images used only for analysis are not permanently stored. Readings (and their images) you explicitly save remain until you delete them or your account. Photo fingerprints, usage counts, contact preferences, device push identifiers and the record of which news emails or notifications we sent you are deleted with your account. Feedback messages are kept after an account is deleted, no longer linked to it; ask us and we will delete them.

6. Your Rights

You can delete any individual saved reading from within the app at any time. To delete your entire account, go to Settings → Delete Account in the app: this permanently removes your account, your saved readings and their images, and your photo fingerprints. You can also ask us at hello@fabulalabs.net (see our account deletion page).

7. Children's Privacy

Aurelia is not directed to children under 13 (or the minimum age in your country). We do not knowingly collect data from children.

8. Data Security

We use reasonable security measures to protect your data. No system is fully secure, and we cannot guarantee absolute security.

9. Disclaimer

Aurelia is for entertainment and self-reflection. Aura readings are AI-generated interpretations and are not scientific, medical, or psychological assessments.

10. Contact

Questions or data requests: hello@fabulalabs.net