Privacy Policy

Last updated 4 September 2026

You are sending us a photograph of your face. That deserves a policy written in plain language rather than boilerplate, so here is exactly what happens to it.

What we collect

Only what is needed to write your report: the photograph you upload, your email address, whatever you tell us you want to improve, your confirmation that you are 18 or over, and a note of which link brought you here.

We do not ask for your name, address, date of birth or phone number, and we never see your card details — payment is handled entirely by Stripe.

Why we collect it

Your photograph and description exist so we can prepare your report. Your email exists so we can send it to you, and to reply if you write back. Nothing here is used to build an advertising profile, and we do not sell or share your data with anyone for marketing.

Who can see your photograph

Photographs are held in private storage. They are never publicly accessible, never shown to other customers, and never posted on social media or used as an example unless you have separately and explicitly agreed to it. The consent checkbox at upload is optional — declining it changes nothing about the report you receive.

Only the person handling your report opens your photo, and only through a link that expires shortly after it is created.

Who processes your data

We use a small number of service providers, each doing one job: Supabase stores the photograph and the record of your submission, Stripe processes payment, Vercel and Railway host the website and the service behind it, and an email provider delivers your report. Algorithms produce the first draft of your report — this may include measuring where your features sit in the photo — and a third-party model service is part of that step, so your photograph is sent to that provider for it. It is not used to train their models, and any measurements are kept only for your report and deleted with your photograph. They all act on our instructions and may store data outside your country.

If you arrived from an advert, Meta's pixel records that you visited, started checkout, or paid — so we can tell which adverts work. It never receives your photograph, your email address or your report.

How long we keep it

Your photograph is deleted from storage 30 days after your report is delivered. If you upload but never complete payment, we may email you once, and the photograph is deleted after 14 days regardless. Your email address and the text you wrote are kept so we can answer questions about your order; ask and those go too.

Ask us to delete your photograph and report at any point and we will, without asking why — email support@auraspire.app.

Your rights

You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, or withdraw a consent you previously gave. One email is enough and there is no charge. Depending on where you live you may also have the right to complain to a data protection regulator — the ICO in the UK, your national supervisory authority in the EU, your state attorney general or the FTC in the US, the Privacy Commissioner in Canada, or the Data Protection Board in India.

Age

This service is for adults. You confirm you are 18 or over when you upload, and we do not knowingly accept photographs of anyone younger. If you believe a minor has submitted a photograph, tell us and we will delete it immediately.

Contact

For anything on this page — deletion, a copy of your data, or a question about how it works — email support@auraspire.app. Deletion requests are actioned within 7 days.