Privacy Policy

1. Who We Are

Aurathon (“we”, “our”, “us”) is an AI-powered glow-up, fashion, and beauty SaaS platform built for Indian Gen Z. We are operated by Saket Kumar, India. Contact: saket.creative95@gmail.com.

2. Data We Collect

We collect the following categories of personal data:

• Account data: name, email address, username, phone number (optional), date of birth, gender.
• Profile data: skin tone, face shape, body type, fashion preferences, Indian state, lifestyle tags.
• Biometric & facial analysis data (sensitive): We process photos you upload to extract facial geometry metrics including: jawline definition, cheekbone prominence, facial symmetry, orbital alignment, cranial structure, skin clarity, and nasal harmony. These scores are stored as numeric values (0–100). We do NOT store facial embeddings, face IDs, or biometric templates that could uniquely identify you across systems.
• Streak selfies: Daily photos you voluntarily upload for your glow-up streak. These are stored in our secure cloud storage (Supabase) under your user ID.
• Usage data: Features used, pages visited, upload timestamps, subscription tier.
• Payment data: Processed entirely by Razorpay. We do not store your card details.
• Device data: IP address, browser type, device fingerprint (for fraud prevention on free trials).

3. Why We Collect Biometric Data

Facial analysis is the core feature of Aurathon. We collect facial metric data only with your explicit action — you must upload or take a photo to trigger analysis. We use this data to:

• Generate your Glow Score and Face Card biometrics.
• Track your glow-up progress over your streak.
• Provide personalised improvement tips and outfit recommendations.
• Power the PSL Tier, Aura Twin (celebrity match), and Beauty Tracker features.

We do NOT sell your facial data. We do NOT use it to train third-party AI models. Analysis is performed by Anthropic's Claude API — see Section 7.

4. Legal Basis for Processing (India)

Under the Digital Personal Data Protection Act 2023 (DPDPA) of India, we process your data on the following bases:

• Consent: You provide explicit consent when you create an account and when you upload photos for analysis.
• Contractual necessity: To deliver the services you subscribed to (Aura+, Iconic).
• Legitimate interests: Fraud prevention, platform security, and service improvement.

For biometric/facial data specifically, we rely on your explicit consent given at the time of photo upload. You may withdraw consent at any time by deleting your data (see Section 9).

5. How We Store & Protect Your Data

• Photos and scores are stored in Supabase (PostgreSQL + object storage), hosted on servers in the EU/US region under SOC 2 compliance.
• All data in transit is encrypted via TLS 1.2+.
• Storage buckets are access-controlled — your photos are accessible only to you (and our AI pipeline during analysis).
• We retain your facial analysis scores and streak photos for as long as your account is active. You can delete them at any time.
• Backups are encrypted at rest.

6. Data Sharing

We share your data only with:

• Anthropic (Claude API): Photos you upload for face analysis are sent to Anthropic's API to generate scores. Anthropic's privacy policy applies: anthropic.com/privacy. Anthropic does not use API inputs to train models (as per their usage policy).
• Razorpay: Payment processing for Indian users. PCI-DSS compliant.
• Sentry: Error tracking (no personal data — only stack traces and device metadata).

We do NOT share your data with advertisers, data brokers, or social networks.

7. AI Analysis Transparency

All facial analysis on Aurathon is performed by Claude Vision AI (Anthropic). Scores are generated with temperature: 0 for consistency. Results are based solely on visible, objective facial geometry — not race, ethnicity, or identity.

Glow Scores and biometric metrics are not used for any purpose other than showing you your personal progress. They are never surfaced to other users without your consent and are never sold or used in aggregate profiling.

PSL Tier labels are entertainment-oriented indicators of facial geometry metrics. They are not medical assessments and should not be interpreted as such. Aurathon is a personal glow-up tool, not a medical or psychological service.

8. Your Rights

Under Indian DPDPA 2023 and applicable law, you have the right to:

• Access: Request a copy of all personal data we hold about you.
• Correction: Update incorrect profile data via Settings.
• Deletion: Delete your account and all associated data (photos, scores, profile) from Settings → Delete Account. Active data is permanently erased within 24 hours. Encrypted backup copies are purged within 30 days.
• Withdraw consent: Stop facial analysis at any time — simply don't upload photos. Existing analysis data can be deleted on request.
• Data portability: Request an export of your data in JSON format. Email us at saket.creative95@gmail.com.
• Grievance redressal: You may lodge a complaint with India's Data Protection Board.

9. Data Deletion

To delete all your data (including facial analysis scores, streak photos, and profile): go to Settings → General → Delete Account. This is irreversible and will delete all biometric data from active storage within 24 hours. Encrypted backup copies are purged within 30 days.

To delete only your streak photos or face analysis data without deleting your account, email us at saket.creative95@gmail.com and we will process your request within 7 working days.

10. Children's Privacy

Aurathon is not intended for users under 13 years of age. We do not knowingly collect facial data or personal information from children under 13. If you believe a child under 13 has created an account, please contact us immediately.

11. Cookies & Tracking

We use essential cookies for authentication (Supabase session tokens). We do not use advertising cookies or cross-site tracking cookies. Session data is stored in localStorage for UI preferences only (no personal data).

12. Changes to This Policy

We may update this Privacy Policy as the product evolves. Material changes (especially to biometric data handling) will be notified via email or in-app notification at least 14 days before taking effect. Continued use of Aurathon after the effective date constitutes acceptance.

13. Contact Us

For privacy-related queries, data requests, or complaints:

• Email: saket.creative95@gmail.com
• Grievance Officer: Saket Kumar, India

We aim to respond to all privacy queries within 5 business days.