1. Introduction

Welcome to AURA ("we," "our," or "us"). AURA is an iOS application that uses artificial intelligence to generate photorealistic images based on your photos. We are committed to protecting your privacy and handling your personal data with transparency and care. This Privacy Policy explains how we collect, use, store, and share your information when you use the AURA app and our related services (collectively, the "Service").

By downloading, installing, or using AURA, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Service.

2. Information We Collect

We collect the following categories of information to provide and improve the Service:

2.1 Photos and Images

When you use AURA, you upload face and body photos so our AI can create a personalised avatar. These photos are used exclusively for AI avatar creation and image generation within the Service.

2.2 Account Information

We may collect your email address when you create an account, contact support, or subscribe to communications.

2.3 Device Information

We automatically collect certain device information, including your device model, operating system version, unique device identifiers, and general network information. This helps us optimise the app experience for your device.

2.4 Usage Analytics

We collect anonymised usage data such as features used, session duration, styles selected, and app interactions. This data helps us understand how the Service is used and identify areas for improvement.

3. How We Use Your Information

We use the information we collect for the following purposes:

Avatar and image generation: Processing your face and body photos to create AI-generated avatars and photorealistic images in your chosen styles.
App improvement: Analysing usage patterns and feedback to enhance features, performance, and the overall user experience.
Communication: Sending you service-related notifications, responding to support requests, and (with your consent) sharing updates about new features or styles.
Security and compliance: Detecting and preventing fraud, abuse, or other harmful activities, and complying with legal obligations.

4. Data Retention

Your uploaded face and body photos are processed and stored securely for the purpose of avatar creation and image generation. Generated images are associated with your account so you can access them within the app. We retain your data for as long as your account is active and as necessary to provide the Service.

If you request account deletion, we will delete your personal data, including uploaded photos, avatars, and generated images, within 30 days of your request, unless we are required to retain certain data to comply with legal obligations or resolve disputes.

5. Third-Party Services

We work with trusted third-party service providers to operate and improve the Service. These include:

Apple:We use Apple's App Store for distribution and StoreKit for in-app purchase processing. Apple may collect data in accordance with their own privacy policy.
Analytics providers: We use analytics services to collect anonymised usage data and crash reports to help us improve the app.
Cloud infrastructure: We use secure cloud services for data storage and AI processing.

These third parties are contractually obligated to protect your data and only process it on our behalf and in accordance with our instructions.

6.Your Rights Under GDPR & UK GDPR

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR) and the UK GDPR:

Right of access: You have the right to request a copy of the personal data we hold about you.
Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data.
Right to erasure: You have the right to request the deletion of your personal data, subject to certain legal exceptions.
Right to restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances.
Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to object: You have the right to object to the processing of your personal data for direct marketing or where we rely on legitimate interests.

To exercise any of these rights, please contact us at support@auraimage.app. We will respond to your request within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.

7.Children's Privacy

AURA is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have inadvertently collected personal data from a child under 13, we will take steps to delete such data as soon as possible. If you believe that a child under 13 has provided us with personal data, please contact us at support@auraimage.app.

8. Data Security

We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data, including:

Encryption of data in transit (TLS/SSL) and at rest.
Secure storage of photos and generated images with access controls.
Regular security assessments and monitoring.
Strict access controls limiting employee access to personal data on a need-to-know basis.

While we strive to protect your personal data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining industry-standard safeguards.

9. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) or the United Kingdom, including countries that may not provide the same level of data protection. When we transfer your data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission or the UK Information Commissioner's Office, to protect your personal data in accordance with GDPR and UK GDPR requirements.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Effective date" at the top of this page and, where appropriate, providing notice through the app or via email. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: support@auraimage.app

We aim to respond to all enquiries within 30 days.