Privacy
Version 2026-09-1 · Last updated 15 September 2026
This notice describes what Aura collects, why, and what you can do about it. It is written for India’s Digital Personal Data Protection Act, 2023. Aura is operated by TO CONFIRM: registered entity name and CIN, TO CONFIRM: registered address.
The short version
- Your face is analysed in your browser. The frames from the camera are not uploaded.
- One processed portrait is stored, in a private bucket only your account can read.
- We do not sell anything and we do not sell your data. We earn commission on outbound retail links.
- You can export everything as JSON, and delete everything, from Account — no email required.
What we collect
| Account | Your name, email address and a hashed password. Handled by Supabase Auth. |
| Intake | The answers you give at onboarding: age band, skin feel, concerns, hair and scalp, exposure, and a safety screen. |
| Facial images | Camera frames are read in your browser and discarded there. A single composed portrait is uploaded and stored against your account. |
| Readings | The numbers derived from the capture — seventeen markers, zone notes, and the relative skin, hair and Aura indices. |
| Activity | Which protocol steps you logged, when, and any note you added. You can edit the time or delete an entry. |
| Conversation | What you ask Aura and what it answers. |
| Technical | Standard server logs at our host, and a salted hash of your IP address on sign-up, kept to rate-limit abuse. The raw address is not stored. |
Sensitive personal data
A photograph of your face, and readings taken from it, are personal data about your body. We treat them as the most sensitive thing in the system: they are never used for advertising, never shared with a retailer, and never used to train a model. Your intake may mention a health concern; it is stored only to shape your own protocol.
Why we are allowed to hold it
Consent. You give it at sign-up for the account, and separately before your first scan for face scanning specifically. The scan consent is recorded with its notice version and you can withdraw it at any time from Account, which stops any further scan.
Who else sees it
- Supabase — database, authentication and file storage. Our project is hosted in the ap-south-1 (Mumbai) region.
- Vercel — application hosting. Serves pages and runs server code. TO CONFIRM: Confirm your Vercel function region is set to Mumbai (bom1) so requests do not leave India.
Both act on our instructions and are contractually barred from using your data for their own purposes. No one else receives it. We do not sell or rent personal data, ever.
How long we keep it
- While your account is open — scans, readings, protocol and activity stay until you delete them.
- When you delete a scan — the portrait and its readings go immediately.
- When you delete your account — profile, intake, scans, portraits, protocol, activity, conversation and the account itself are removed immediately. Encrypted infrastructure backups roll off within 30 days.
- Rate-limit hashes — deleted automatically after 24 hours.
Your rights
- Access — Account → Download everything as JSON. Generated live, so it is never a stale summary.
- Correction — retake the intake, edit or delete any activity entry, delete any scan.
- Erasure — Account → Delete my account. Immediate and irreversible.
- Withdraw consent — Account → Consent → Withdraw.
- Grievance — write to our Grievance Officer, TO CONFIRM: name and email of the Grievance Officer required by s.13 DPDP Act. We respond within 30 days.
- Escalation — you may complain to the Data Protection Board of India if you are not satisfied with our response.
Security
Every table is protected by row-level security, so a query can only ever return rows belonging to the signed-in account — the rule is enforced by the database, not by our application code. Portraits live in a private bucket and are served through short-lived signed URLs. Traffic is TLS-encrypted end to end.
Children
Aura is for adults. You must be 18 or older to create an account. If we learn an account belongs to a child, we delete it.
Changes
When this notice changes materially we bump its version. If the change affects face scanning, your existing scan consent stops counting and you are asked again against the new wording before your next scan.
Contact
TO CONFIRM: support email address · TO CONFIRM: postal address for notices