Back to home AuraGlow App

AuraGlow Privacy Policy

Note: This privacy policy applies to the AuraGlow iOS application published by Bulsu Labs (BLS Logistics and Storage d.o.o.). For questions, email info@bulsulabs.com.

1. Overview

AuraGlow ("the app", "we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use the AuraGlow mobile application on iOS.

By using AuraGlow, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the app.

2. Information We Collect

2.1 Information you provide directly

• Account information: email address and display name when you create an account.
• Onboarding answers: skin type, skin concerns, age range, gender, goals.
• Selfie photograph: used exclusively for the AI skin analysis. The image is sent to our secure backend for a single analysis request and is not stored on our servers after the analysis completes.
• Wellness inputs you choose to log: water intake, sleep hours, mood, menstrual cycle information, skin diary entries, face yoga completions, routine completions.
• Subscription and purchase data: handled entirely by Apple App Store and RevenueCat. We do not see or store your payment card details.

2.2 Information collected automatically

• Device information: device model, operating system version, app version, locale.
• Usage analytics: anonymous aggregate data about which features you use (no personally identifying data).
• Location (optional): only if you grant permission, we use your approximate GPS coordinates to fetch the local UV index from Open-Meteo. Coordinates are never stored on our servers — they are used in a single API request and discarded.

2.3 Information we do NOT collect

• We do not access your contacts, calendar, microphone, health data, or browsing history.
• We do not track you across other apps or websites.
• We do not sell or rent your personal data to third parties — ever.

3. How We Use Your Information

We use the information we collect to:

1. Provide you with personalized AI skin analysis, recommendations, and routines.
2. Track your progress, streaks, badges, and wellness habits.
3. Send you push notifications for routines, hydration, face yoga, and UV alerts (only if enabled in Settings).
4. Process your subscription and restore purchases.
5. Respond to your support requests.
6. Detect and prevent fraud or abuse.
7. Comply with legal obligations.

4. AI Skin Analysis & Third-Party Processing

When you take a selfie for analysis:

1. The image is transmitted over HTTPS to our secure backend (Supabase Edge Functions).
2. Our backend forwards the image to OpenAI (GPT-4o Vision) for analysis.
3. The analysis result (scores, recommendations, insights) is returned to the app and saved only on your device.
4. The original image is not stored on our servers after the analysis.
5. OpenAI may process the image according to its own data usage policy, which we have configured to not use your data for model training.

OpenAI's privacy policy: openai.com/policies/privacy-policy

The AI analysis is a cosmetic and educational tool only. It is not a medical diagnosis. For any health or skin conditions, consult a licensed dermatologist.

5. Third-Party Services

AuraGlow integrates with the following third-party services. Each has its own privacy policy:

• OpenAI — AI skin analysis · privacy policy
• Supabase — Secure backend proxy · privacy policy
• RevenueCat — Subscription management · privacy policy
• Cloudflare R2 — Video content delivery · privacy policy
• Apple App Store — Payments · privacy policy
• Open-Meteo — UV index data, no personal data · terms

6. Data Storage & Security

• Most of your personal data (analysis results, wellness logs, streaks, diary) is stored locally on your device using iOS secure storage.
• Server-stored data (email, account ID) is kept on Supabase infrastructure with industry-standard encryption at rest and in transit (TLS 1.2+).
• We use reasonable administrative, technical, and physical safeguards to protect your information.

No system is 100% secure. In the unlikely event of a data breach, we will notify affected users within 72 hours as required by applicable law.

7. Data Retention

• Local data: retained until you delete the app or use the "Delete Account" function in Settings.
• Account data on our servers: retained until you request deletion.
• Selfie images sent for analysis: not retained after the analysis request completes.

8. Subscriptions (AuraGlow Pro)

AuraGlow offers auto-renewable subscriptions to unlock premium features:

• Weekly: $9.99 per week
• Yearly: $59.99 per year

Auto-renewal: Subscriptions automatically renew unless cancelled at least 24 hours before the end of the current period. Your iTunes/Apple ID account will be charged at confirmation of purchase. Renewal is charged within 24 hours prior to the end of the current period.

Manage / cancel: You can manage or cancel your subscription at any time in Settings > Apple ID > Subscriptions on your iOS device. Cancellation takes effect at the end of the current billing period. No refund is provided for the unused portion of the term.

Payment processing: All payments for in-app purchases are processed by Apple. We do not have access to your payment card details.

Terms of Use (EULA): The standard Apple End User License Agreement applies to the use of AuraGlow.

9. Your Rights

Depending on your location, you have the following rights:

All users

• Access: request a copy of your personal data.
• Correction: update inaccurate information.
• Deletion: delete your account at any time from Settings → Danger Zone → Delete Account. This immediately wipes all local data and closes your server-side account.

European Economic Area (GDPR)

In addition to the above, you have the right to:

• Restrict processing
• Data portability (receive your data in a portable format)
• Object to processing
• Lodge a complaint with your local data protection authority

California residents (CCPA)

• Right to know what personal information is collected.
• Right to delete personal information.
• Right to opt out of the sale of personal information. AuraGlow does not sell personal information.
• Right to non-discrimination for exercising your rights.

To exercise any of these rights, email info@bulsulabs.com from the address associated with your account.

10. Children's Privacy

AuraGlow is intended for users 13 years and older. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has provided us with personal information, contact us and we will delete it immediately.

11. International Data Transfers

AuraGlow is operated globally. Your data may be transferred to and processed in countries other than the one you reside in, including the United States. Where required, we use appropriate safeguards such as Standard Contractual Clauses for transfers out of the European Economic Area.

12. Push Notifications

We send push notifications for routines, hydration reminders, face yoga, and UV alerts. You can disable individual notification channels at any time from Settings → Notifications, or disable all notifications from your device's system settings.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page reflects the effective date of the current version. Material changes will be reflected in the app and on this page.

14. Contact

If you have any questions about this Privacy Policy or AuraGlow's data handling, please contact us at info@bulsulabs.com.

Bulsu Labs is the trading name of BLS Logistics and Storage d.o.o., a Montenegrin limited liability company.