◆ AURASHOT

Privacy Policy

Last updated 23 September 2026

Aurashot rates the aura of a photo you choose: how you present yourself through styling, pose, setting and framing. It gives you coaching to look better in it. This page explains exactly what happens to your photo and your data. Aurashot is operated by Carve LLC.

What happens to a photo you score

• The photo is prepared on your device: resized, converted, and stripped of metadata such as location. Checks that it contains a person, and that it is not explicit, also run on your device.
• The prepared image is sent to our server, which passes it to our AI provider for analysis. It is held in memory only for the length of that request.
• The photo is never written to our database, our storage, or our backups. What we keep is a checksum of the image (a short code computed from the file, which cannot be turned back into your photo) and the written analysis it produced. The checksum lets us return the same result instantly if the identical photo is scored again.
• We have zero-data-retention terms in place with our AI provider, meaning your photo is not retained or used to train models.

Face data

Most photos you score include your face. Under Apple's terms, that photo and anything read from it count as face data. This is everything Aurashot does with it.

• On your device. Before anything is uploaded, Apple's on-device Vision framework checks that the photo contains a person, by looking for a body or a face. The result is a yes or no. Where the face sits in the image is discarded immediately; it is never stored and never leaves your device.
• Sent for analysis, only with your consent. Only after you agree on the consent screen is the photo sent to our server and on to our AI provider (Anthropic's model via OpenRouter, served on Amazon Bedrock or Google Vertex) to produce your score. It is held in memory for the length of the request and then discarded. It is never written to our database, storage or backups, and our AI provider keeps nothing and trains on nothing.
• What the analysis says about your face. The expression dimension is a short written read of what your expression projects (for example "engaged" or "natural"), plus a 0 to 10 rating of how visible your face is. These are stored with the rest of the analysis, keyed to the image checksum, and are not linked to your name or your Apple Account.
• Your copy. The photo and your results are saved in your own private iCloud database, which we cannot access. Deleting a shot in the app removes it from your iCloud after 7 days in Recently Deleted.
• Retention and deletion. We do not retain the photo at all. The written analysis is kept so the same photo returns the same result; to have it deleted, contact us at the address below.
• What we never do. We do not measure facial geometry, create a faceprint, face template or any other biometric identifier, or attempt to recognise or identify anyone. We never use face data for authentication, advertising, marketing or building a profile, and we never share it with advertisers, analytics providers or data brokers.

Your score history

Your photos and past results are stored in your own private iCloud database using Apple's CloudKit. They sync across your devices and are governed by Apple's privacy terms. We cannot query, read, or access that data. It is yours. Deleting the app or your iCloud data removes it.

What we do store

• A device identifier from Apple's App Attest and DeviceCheck. This proves requests come from a genuine copy of our app and stops the free score being claimed repeatedly by reinstalling. It is not linked to your name or your Apple Account.
• Your scores and coaching text, keyed to the image checksum above.
• Invite information: your invite code, and which invites have been claimed. When you tap an invite link, we store a salted, hashed version of your IP address for a short window so we can credit the friend who invited you. It is hashed because an unsalted IP hash can be reversed; we never keep the address itself.
• Subscription records: whether you subscribe, which plan, and when it renews or ends, received from Apple through RevenueCat (below). Tied to a random identifier your copy of the app generates, never to your name or Apple Account email. We never see your payment details, because Apple handles payment entirely.
• An App Store transaction identifier for your download of the app, so that notices Apple sends about your account, such as a parent withdrawing consent, can be matched to your device. It identifies the download, not you.

How long we keep it

• Your photo: not at all. It exists only in memory during the request.
• Image checksum and the analysis: kept indefinitely, so the same photo returns the same result. Neither can be turned back into your photo or linked to you.
• Hashed IP for invite attribution: a short matching window measured in minutes, then it is no longer used.
• Device identifier, invite records and subscription status: kept while your device or account is active, and deleted on request.
• Operational measurements: kept as a running record of service health. They contain nothing that identifies you.
• Age category from the App Store: used at the moment it is received and not stored.

Operational analytics

We record technical measurements about our own service: how long scoring took, how often it succeeded or failed, and what it cost us. These records contain nothing that identifies you: no photo, no image checksum, no device identifier, no account, no IP address. They live in our own database. We do not use Google Analytics, Facebook SDKs, advertising identifiers, or any third-party analytics or attribution service.

Automated processing

Your score and coaching are produced automatically by an AI model with no human review. The result is entertainment: it does not affect your legal rights, your access to any service, or anything of similar significance. You can simply not use the app, and you can contact us with any question about a result.

Age, and signals from the App Store

Aurashot is rated 13+ and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has used the app, contact us and we will delete any associated data.

Under app-store age laws in some US states, Apple may tell us an age category for your account (for example 13-15 or 18+) and whether a parent or guardian has consented. We receive a category, never a birth date, we use it only to meet those legal requirements, and we do not store it. If a parent withdraws consent, Apple tells us and access ends.

Who else is involved

• Anthropic (via OpenRouter, served on Amazon Bedrock and Google Vertex): analyses the photo, under zero-data-retention terms.
• Supabase: our database and server hosting.
• RevenueCat: subscription management. Receives your purchase records from Apple and the random app identifier above; never your name, email or photo.
• Apple: the App Store, payments, App Attest / DeviceCheck, and CloudKit.

These are service providers acting on our instructions. We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

Where your data is processed

Aurashot is offered in the United States and our servers and service providers are located in the United States. If you use the app from elsewhere, your information is processed in the US.

Security

Requests are encrypted in transit. Our scoring endpoint only accepts requests that Apple's App Attest confirms came from a genuine copy of our app. Access to our database is restricted and credentials are held server-side only. The strongest protection is that we hold so little: there is no photo store to breach. No system is perfectly secure, and we cannot guarantee absolute security.

Your privacy rights

You can ask us what data we hold about you, ask for a copy of it, ask us to correct it, ask for it to be deleted, or ask us to stop processing it. Because we deliberately store so little, deletion is usually straightforward. Your score history is in your own iCloud and you can delete it yourself at any time.

To make a request, email us at the address below, or use the Help & Support link in the app's Settings screen. We will not discriminate against you for exercising any of these rights.

US state privacy rights

If you live in California, Colorado, Connecticut, Utah, Virginia or another state with a comprehensive privacy law, you have the rights described above, including the right to know what we collect, to delete it, to correct it, and not to be discriminated against for asking. California residents may also designate an authorised agent to make a request.

In the twelve months before the date at the top of this page, we have not sold or shared personal information, and we have not used or disclosed sensitive personal information for any purpose that would give you a right to limit it. The categories we collect are:

• Identifiers: a device identifier from App Attest / DeviceCheck; a random identifier your copy of the app generates for subscription records; an App Store transaction identifier for your download; a salted hash of your IP address briefly, for invite attribution. Collected.
• Commercial information: your subscription status, received from Apple. Collected.
• Visual information: the photo you choose, processed transiently and never stored by us; we retain only a checksum of the image and the written analysis. Processed, not retained.
• Inferences: the aura score and coaching produced from a photo, keyed to the image checksum rather than to you. Collected.
• Biometric information: not collected. We do not create faceprints or any other biometric identifier.
• Sensitive personal information: not collected.
• Precise geolocation: not collected. Location metadata is stripped from your photo on your device before it is sent.
• Protected classifications, professional, education, and browsing-activity information: not collected.

Do Not Track

We do not track you across other apps or websites, so there is nothing for a Do Not Track signal to switch off.

Changes

If this policy changes materially we will update this page and change the date at the top.

Contact

Carve LLC · support@aurashotapp.net