Privacy Policy

Last updated 11 October 2026

You are sending us a photograph of your face. That deserves a policy written in plain language rather than boilerplate, so here is exactly what happens to it.

What we collect

Your photograph, your answers to the six quiz questions, your confirmation that you are 18 or over, a random identifier stored in your browser or app so we can show you your results, and a note of which link brought you here. If you sign in, your email address and an account identifier from our sign-in provider. We also record which screens you reach (for example, "saw the result") so we can tell what works; these records carry the random identifier, never your photograph.

When you pay, the payment provider collects your payment details. We never see your card number.

Why we collect it

Your photograph and answers exist to produce your result. Your email and account exist so your results and purchase are saved and work on any device. Nothing is used to build an advertising profile, and we do not sell or share your data with anyone for marketing.

The face scan on your device

The face mesh you see drawn over your photo is calculated on your own phone or computer. A small copy of your photo is kept in your browser for this visit so the result screen can show it, and is cleared when you close the tab. The share card shows your photo; it is made on your device and only leaves it if you share it yourself.

Who can see your photograph

Before your photograph is stored, all embedded information such as location and camera details is removed. It is held in private storage, never public, never shown to other users, and never used in marketing.

Who processes your data

A small number of service providers, each doing one job: Supabase stores your photograph, your results and your sign-in; Vercel and Railway host the website and the service behind it; OpenRouter and the AI model provider it routes to (currently Google) read your photograph to produce your result; Dodo Payments, or Apple and Google in the app, take payment. They act on our instructions and may store data outside your country.

If you arrived from an advert, Meta's pixel records that you visited or paid, so we can tell which adverts work. It never receives your photograph or your result.

How long we keep it

Your photograph is deleted from our storage within 24 hours of upload, unless you ticked the box to let us keep it to improve Auraspire. If you switch on "Keep my photo in my profile", a small copy (with all embedded information removed) is kept privately with your account so you can see your result with your face on any device. Only you can see it, and switching the option off deletes it immediately. You can untick that at any time by deleting your data. Your written result (no photograph) is kept so you can come back to it, until you delete it.

Delete everything yourself at any time: "Delete my data" on your result, or "Delete my account and data" on your profile. It happens immediately. Purchase records are kept as the law requires for tax.

Your rights

You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, or withdraw a consent you previously gave. One email is enough and there is no charge. Depending on where you live you may also have the right to complain to a data protection regulator: the ICO in the UK, your national supervisory authority in the EU, your state attorney general or the FTC in the US, the Privacy Commissioner in Canada, or the Data Protection Board in India.

Age

This service is for adults. You confirm you are 18 or over before taking a photo, and we do not knowingly accept photographs of anyone younger. If you believe a minor has used Auraspire, tell us and we will delete it immediately.

Contact

For anything on this page, email support@auraspire.app. Requests by email are actioned within 7 days.