Legal

Privacy Policy

Effective Date: 1 October 2026
Last Updated: 30 September 2026

This Privacy Policy explains what information the AuraCam app and the website at https://auracam.co (the "Service") collect, and how it is used. The Service is provided by Jean Leon HIRWA MUNYANEZA (trading as AuraCam), Kabuhunde I, Kagugu, Kinyinya, Gasabo, Kigali, Rwanda ("AuraCam", "we", "us"), which is responsible for your information.

In short: we collect what we need to run your account, your scans and your subscription. We don't store your scan photos, and we don't sell your information.

1. Information We Collect

1.1 Your account

Email address, and your sign-in method (password or Google). Passwords are handled by Firebase Authentication; we never see them.
If you sign in with Google: your name and profile photo as provided by Google, kept by Firebase Authentication.

1.2 Your use of the app

Scan counts and limits: how many AI Vibe Scans you used today, bonus scans from ads, and the dates these reset.
Scan records: the time of each scan and the pose suggestions returned (not the photo).
App analytics (Google Analytics for Firebase): events about how the app is used, such as which onboarding steps are viewed, the pose style you choose and whether camera access was granted. They contain no photos, camera frames or text you type.
Device information: device model, Android version and app version, to fix problems.

1.3 Camera frames

When you run an AI Vibe Scan, the app captures one camera frame. It goes to our server and on to Google's Gemini API for analysis, and it is not stored by us. Everything else the camera sees stays on your phone.

1.4 Subscriptions

When you buy AuraCam Pro, Paddle (our reseller and merchant of record) collects your payment details, billing country and email. We never receive your card number. Paddle tells us your subscription status, plan, renewal date, and your Paddle customer and subscription IDs, which we keep on your account so Pro works in the app.

1.5 Ads (free plan)

Google AdMob shows rewarded ads and may use your device's advertising ID. Where the law requires it (for example in the EEA, the UK and some US states), you are asked for consent first. We send AdMob an identifier of your account so it can confirm that you finished an ad and earned a bonus scan.

2. How We Use Information

To run your account and sign-in.
To run AI Vibe Scans and apply daily limits.
To know whether you have Pro, and to handle renewals, cancellations and refunds.
To reward ads on the free plan.
To improve the app, fix problems and prevent abuse.
To contact you about your account or subscription (not for marketing, unless you agree).
To meet legal, tax and accounting obligations.

Legal bases (EEA/UK): performing our contract with you (account, scans, subscription), our legitimate interests (security, abuse prevention and improving the app), your consent (personalised ads and analytics, where required), and legal obligations.

3. Who We Share It With

We do not sell or rent personal information. We share it only with the service providers that run the Service:

Provider	What for	What they receive
Google Firebase (Authentication, Firestore, Cloud Functions, Analytics)	Accounts, data storage, the scan server, app analytics	Account data, scan counts and records, analytics events
Google Gemini API	Analysing scan frames	One camera frame per scan (not stored by us)
Google AdMob	Rewarded ads on the free plan	Advertising ID (with consent where required), an account identifier for rewards
Paddle	Checkout, payments, tax, receipts, refunds	Your email, payment details and billing country (collected by Paddle directly)

We may also disclose information when the law requires it, or to protect the rights and safety of our users or ourselves. If AuraCam is ever sold or merged, your information may transfer to the new owner under this policy.

4. Storage, Security and International Transfers

Account and app data are stored in Google Cloud (Firebase) data centres, which may be outside your country, including the United States. Paddle stores payment data under its own policies.
Data is encrypted in transit and at rest. Security rules allow only you to read your own profile, and only our server can change your scan counts or Pro status.
Where the law requires safeguards for international transfers, we rely on our providers' standard contractual clauses.

5. How Long We Keep It

Account, scan counts and scan records: until you delete your account.
Camera frames: not kept.
Subscription and transaction records: kept as long as tax and accounting law requires, even after you delete your account. Paddle keeps its own records as the seller.
Analytics: kept by Google Analytics for up to 14 months.

6. Your Choices and Rights

Delete your account: in the app (Settings › Account › Delete account). This deletes your profile and scan history immediately. You can also email privacy@auracam.co; we act within 30 days.
Cancel your subscription: on the Account page at https://auracam.co. Deleting your account does not cancel it.
Ad privacy choices: in the app (Settings › About › Ad privacy choices, where it applies), or reset your advertising ID in Android settings.
Your rights: depending on where you live (for example under the GDPR, UK GDPR, California's CCPA/CPRA or Rwanda's data protection law), you may have the right to access, correct, delete or export your data, and to object to or restrict its use. Email privacy@auracam.co. We will not treat you differently for using these rights. You can also complain to your local data protection authority.

7. The Website and Cookies

The website uses your browser's storage to keep you signed in. This is necessary for the Account page to work.
When you open the checkout, Paddle may set cookies needed for payment and fraud prevention; see Paddle's Privacy Policy.
The website does not use advertising or analytics cookies.

8. Children

AuraCam is not intended for children under 13, and we do not knowingly collect their information. If you believe a child under 13 has given us information, contact privacy@auracam.co and we will delete it.

9. Changes to This Policy

If we make significant changes, we will tell you in the app or by email before they take effect. The date at the top shows when the policy last changed.

10. Contact Us

Data controller: Jean Leon HIRWA MUNYANEZA (trading as AuraCam), Kabuhunde I, Kagugu, Kinyinya, Gasabo, Kigali, Rwanda
Privacy questions: privacy@auracam.co
Website: https://auracam.co