Privacy Policy

Face photos are the most sensitive data in the App and we treat them to the highest standard. Photos are collected only when you capture or upload them yourself, and their use is strictly limited to generating your makeup analysis and tutorials.

• No identity recognition.We do not use face recognition to identify who you are, we do not match you against other users, and we do not compare your face against any external database.
• No face database.We do not build, maintain or sell any form of facial feature database or biometric template.
• Never used to train public models.Your photos are not used to train publicly released AI models and will not appear in any marketing material unless you give separate, explicit written consent.
• Visible only inside your account.Photos and analysis results are tied to your account alone and other users cannot see them. Our staff look at them only when you raise a support request and give consent.
• Delete at any time.You can delete any single photo and its analysis in the App, or delete your entire account. We then remove the corresponding files from storage automatically.

Analysis requires sending the image to an AI provider for processing (see section 05). The transfer is encrypted end to end, and the provider is contractually barred from using your data to train its models or for any other purpose.

• Sell, rent or trade your personal data.
• Use your facial data or preferences for third-party advertising or cross-site tracking.
• Publish your photos, results or analysis without your consent.
• Hand your data to governments or third parties without due legal process.

Your data is stored on Amazon Web Services (AWS) cloud infrastructure. Photos and database contents are kept with encryption at rest, and all traffic between devices and servers uses TLS encryption in transit.

We apply least-privilege access, allow only necessary staff into production, and keep access logs. Even so, no method of transmission or storage is completely secure. If a serious incident affects your personal data we will notify you within the period your local law requires and explain the scope and recommended steps.

To provide the service we work with the providers below. Each receives only the minimum data its function requires:

In addition, the App Store and Google Play act as distribution and payment channels and process your transaction data under their own privacy policies. Purchase links in product recommendations take you to third-party retailer sites, which have their own policies and fall outside this one.

Depending on where you live (for example Taiwan’s Personal Data Protection Act or the EU GDPR) you have the following rights:

• Access and copy — ask what data we hold about you and receive a copy.
• Rectification — ask us to correct inaccurate or incomplete data. Most fields can be edited directly in the App.
• Erasure — ask us to delete your photos, analysis results or entire account. See the account deletion guide.
• Restriction and objection — ask us to stop specific processing activities.
• Withdraw consent — you may withdraw consent for facial image processing at any time. We then stop the related analysis features and delete images already uploaded.
• Portability — receive the data you provided in a common format.

To exercise these rights, email privacy@auramakeup.org from the address you registered with so we can verify your identity. We respond within 30 days of receiving a request.

While your account exists we retain your data to keep the service running. When you delete a photo or analysis we remove it immediately; when you delete your account we erase your personal data from production within 30 days, and backup copies are cleared with rotation within 90 days at most.

Transaction and tax records that law requires us to keep (invoice details, for example) are retained separately for the period local regulation sets; these contain no facial images. Anonymous aggregate statistics that cannot identify an individual may continue to be used for product improvement.

The App is not intended for children under 13 and we do not knowingly collect personal data from children under 13. Where your region sets a higher age of consent for digital services, that age applies.

If we learn that we have collected data from a child under 13 we delete the account and related data immediately. Parents or guardians who find a child using the App without consent should email privacy@auramakeup.org and we will act promptly.

Our service providers may be located outside your country or region, so your data may be transferred to and stored in other countries. We ensure such transfers carry appropriate safeguards (contractual clauses and encryption, for example) so protection is no lower than your local law requires.

We may revise this policy as features or regulations change. The “Last updated” date at the top of this page will change accordingly. If a revision materially affects your rights we will tell you separately by in-app notice or email. Continued use of the App means you accept the revised policy.

For questions about this policy, or to exercise your data rights, contact: