Legal

Privacy Policy

Effective Date: June 1, 2026 · Last Updated: September 4, 2026

This Privacy Policy explains how Isaac Company, operated by Wei Jun Xie ("AuraScanner," "we," "our," or "us") collects, uses, stores, and shares information when you use the AuraScanner mobile application and the website located at https://aurascans.app (together, the "Service").

By downloading, accessing, or using AuraScanner, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

AuraScanner has no accounts. You never create a login, and we never ask for a password or your real name. The only email address we ever receive is one you choose to type into the in-app support form so that we can reply to you. We collect only the information necessary to operate the Service.

a) Information you provide to us

  • Photos: selfies and images you choose to scan or "Level-Up." A photo is transmitted to our server only for the seconds it takes the AI to score or re-render it, and is never saved in our database.
  • Your scans, photos, scores and display name are stored on your own device only.
  • Your age bracket, gender and aura goal are stored on your device and are also sent to our own analytics, where they are held in an install profile keyed to a random install identifier (see Section 6). They are not linked to your name or to any login.
  • Communications you send to us (support requests, feedback), including any email address you enter in the support form.

b) Information collected automatically

  • Device information: device type, operating system, app version, language, and time zone.
  • Usage data: daily counts of activity such as screens viewed, scans started and finished, paywall views, and purchases. These are recorded against a random install identifier by our own server — the app contains no third-party analytics or crash-reporting SDK.
  • Approximate location derived from your IP address (country/region level only).
  • Cookies and similar technologies on our website (see Section 9).

c) Information from third parties

  • Apple shares subscription and receipt validation data, including an anonymous subscription identifier. We use that identifier alone to record which plan is active and how many scans and Level-Ups the subscription has used in the current billing period. It is not linked to your name, email or Apple ID.

We do not knowingly collect precise GPS location, contacts, microphone data, or health data.

2. How We Use Your Information

We use your information to:

  • Process your uploaded photos to generate AI-based Aura Scores, category breakdowns, improvement tips, and "Level-Up" AI previews.
  • Deliver, maintain, and improve the Service.
  • Manage subscriptions, renewals, refunds, and receipts.
  • Prevent fraud, abuse, and violations of our Terms of Service.
  • Comply with legal obligations.
  • Send transactional communications where applicable (receipts, security notices).
  • With your consent, send optional product updates (you can opt out at any time).

3. How AI Processing Works

AuraScanner uses third-party AI providers to analyze your uploaded photo and generate results:

  • Anthropic (Claude vision models) — used to analyze the image and produce your score breakdown, tips, and written verdict.
  • OpenAI (image generation) — used to generate your "Level-Up" enhanced image preview.

When you submit a scan:

  • Before your first scan, we ask for your explicit permission to send your photo to these providers, disclosing what is sent and to whom. Nothing is sent unless you agree.
  • Your image is sent securely (HTTPS/TLS) to these providers strictly to generate your result.
  • These providers act as data processors on our behalf. Per their policies, images processed through their APIs are not used to train their models.
  • The image is not retained on our servers once your result is returned — the result and the photo are saved on your device.
  • We do not sell your images. We do not share your images with advertisers.

Results are generated by AI and are provided for entertainment and self-improvement purposes only. They are not medical, psychological, dermatological, or professional advice.

3.1 Face Data

AuraScanner does not use facial recognition and does not identify, or attempt to identify, anyone from a photograph. We run an automated check that a person is actually present in the photo, which measures facial landmark positions in memory for a fraction of a second. Those measurements are never stored, never used to identify or recognise anyone, and cannot be used to match you against any other photo or database. We do not build, keep, sell or share any biometric identifier, biometric template or “faceprint.” Apart from that momentary check, the only face-related data we handle are the photographs you voluntarily upload, which may contain your face.

How we use it. Photographs are used solely to (1) generate your Aura Score and written feedback, and (2) if you choose, generate a “Level-Up” AI preview image. We do not use them for any other purpose.

Consent before sharing. Before your first scan, the app presents a consent screen describing exactly what is sent and who receives it, and requires your explicit agreement. If you decline, no photograph is sent to any AI provider.

Who we share it with. Photographs are transmitted over encrypted connections (HTTPS/TLS) to our AI processors — Anthropic (image analysis) and OpenAI (image generation) — only after you grant that permission in the app, and solely to generate your results. Per those providers' API policies, images sent through their APIs are not used to train their models. Both providers act as data processors on our behalf and are bound by their API terms and data processing agreements to provide protections equivalent to those described in this Policy, including confidentiality, security, and restrictions on any further use of your data. Face data is never sold, and is never shared with advertisers, data brokers, or any other third party.

How we store it. Photographs and their results are stored on your device only, inside the app's private storage area. We do not keep a copy on our servers.

Retention and deletion. Photographs and results stay on your device until you remove them. You can delete any individual scan, delete all your photos, or reset all app data at any time from within the app (Profile → Your data). Deletion is immediate and permanent because the data never left your device. Deleting the app also deletes everything.

4. Legal Bases for Processing (GDPR / UK GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, we rely on the following legal bases:

  • Contract — to provide the Service you signed up for.
  • Consent — for optional features such as sending your photo to our AI processors, and marketing.
  • Legitimate interests — to secure the Service, prevent fraud, and improve product quality.
  • Legal obligation — to comply with applicable laws, tax, and accounting requirements.

You may withdraw consent at any time by contacting us.

5. How We Share Information

We share information only in the following limited situations:

  • Service providers / processors: cloud hosting, AI providers (Anthropic and OpenAI), email delivery (used to send support messages through to us and to reply to you), and payment processing (Apple). These providers are contractually bound to protect your data. Analytics is handled by our own server — the app contains no third-party analytics or crash-reporting SDK, and no analytics or advertising company receives your data.
  • Legal requirements: to comply with laws, court orders, or lawful government requests, and to protect the rights, safety, and property of AuraScanner, our users, or the public.
  • Business transfers: in the event of a merger, acquisition, or sale of assets, information may be transferred to the successor entity, subject to this Privacy Policy.
  • With your consent: for anything not described in this Policy.

We do not sell your personal information. We do not share your photos or personal data with advertisers.

6. Data Retention

There is no account, so there is no account data. Your photos, scans and history live on your device and are deleted the moment you remove them or delete the app. Photos and scan results are never written to our database.

We do keep the following limited records on our servers. None of them contains photos, real names or logins, and apart from a support email address you choose to give us, none of them identifies you:

  • Subscription record — one row per subscription: an anonymous subscription identifier, the plan, the renewal date, and how many scans and Level-Ups have been used in the current billing period.
  • Install profile — keyed to a random install identifier: your age bracket, gender and aura goal, your scan and Level-Up counters, the date the install was last seen, and the app's internal Account ID.
  • Daily event counts — keyed to the same install identifier: how many screens were viewed, scans started and finished, paywall views, and purchases.
  • Free-scan counter — a per-install record of whether the one free scan has been used.
  • Support tickets — the message you send us and, if you provide one, the email address you type into the support form so that we can reply.

We retain the subscription record for as long as required for billing, tax and fraud-prevention purposes. The install profile, event counts and free-scan counter are retained while the install is active and for a reasonable period afterwards for product analytics and abuse prevention. Support tickets are retained for as long as needed to resolve your request and to keep a record of it.

Backups of these limited records are rotated and purged on a rolling basis (typically within 90 days).

7. Your Rights

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Delete your data ("right to be forgotten").
  • Restrict or object to certain processing.
  • Data portability (receive a copy of your data in a machine-readable format).
  • Withdraw consent.
  • Lodge a complaint with your local data protection authority.

Because your scans, photos and settings are stored on your device, you can exercise access and deletion rights instantly and directly in the app (Profile → Your data).

California residents (CCPA/CPRA): you have the right to know, delete, correct, and opt out of "sale" or "sharing" of personal information. AuraScanner does not sell or share personal information as defined by the CCPA.

To exercise any of these rights, contact us at mrimcooler@gmail.com. We will respond within the timeframe required by applicable law.

8. Children's Privacy

AuraScanner is not intended for children under 13 (or under the minimum age required in your jurisdiction, such as 16 in parts of the EEA). We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it promptly. A parent or guardian who believes their child has provided us with personal information may contact mrimcooler@gmail.com.

9. Cookies and Analytics

Our website may use cookies and similar technologies to remember preferences, measure traffic, and improve performance. You can control cookies through your browser settings.

The mobile app contains no third-party analytics or crash-reporting SDK. The usage counts described in Section 1(b) are recorded by our own server against a random install identifier, and are not shared with any analytics or advertising company.

10. Data Security

We use industry-standard measures to protect your data, including HTTPS/TLS encryption in transit, restricted internal access, and secure cloud infrastructure. Because your photos and history are stored on your own device rather than on our servers, they are also protected by your device's own passcode and encryption. No system is 100% secure; you use the Service at your own risk.

11. International Data Transfers

We may process data in countries outside of your country of residence, including the United States, when your photo is sent to our AI processors and when your subscription is validated. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) to protect international transfers.

12. Third-Party Links and Services

The Service may include links to third-party websites or services that we do not control. This Privacy Policy does not apply to those third parties. Please review their policies before providing them with your information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date and, if the changes are material, notify you within the app. Continued use of the Service after the changes take effect constitutes acceptance of the updated Policy.

14. Contact Us

If you have any questions or requests regarding this Privacy Policy or your personal data, contact us at:

Isaac Company (operated by Wei Jun Xie)
Email: mrimcooler@gmail.com
Discord: discord.gg/bM85kAtkgZ
Website: https://aurascans.app