Last updated August 28, 2026
This Privacy Notice for Danish Nazar ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at aurax.app@gmail.com.
What personal information do we process? When you use our Services, we may process personal information depending on how you interact with us, the choices you make, and the features you use.
Do we process any sensitive personal information? Yes — with your explicit, dated consent, we process facial photos and facial-geometry measurements derived from the selfie you provide for analysis. We do not use this information to identify or authenticate you, create a face-recognition template, or infer characteristics such as race, religion, or sexual orientation.
Do we receive information from third parties? If you subscribe, we receive subscription status and transaction metadata from Apple or Google through RevenueCat. We do not receive your full payment-card details.
How do we process your information? To provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law — only when we have a valid legal reason to do so.
Do we sell your data or run ads? No. We do not sell or share your personal information, and Aurax contains no third-party advertising.
How do we keep your information safe? We use organizational and technical measures to protect your information, though no system can be guaranteed 100% secure.
What are your rights? Depending on where you live, applicable privacy law may give you rights regarding your personal information, including access, correction, and deletion.
In short: We collect personal information that you provide to us.
We collect personal information that you voluntarily provide when you register on the Services, express an interest in our products and Services, participate in activities on the Services, or otherwise contact us. This may include:
Facial photos and measurements. When necessary, and with your consent or as otherwise permitted by applicable law, we process the selfie you submit and facial-geometry measurements computed from it so we can provide facial analysis, scoring, coaching, and progress features. Consent is recorded with a timestamp before any scan takes place. We do not use this information for identity verification or face recognition.
Profile and service content. We process the name and intake answers you choose to provide, scan results, program activity, check-ins, and messages you send to the AI coach so we can provide and personalize the Services.
Payment data. If you purchase a subscription, payment is processed by the store where you obtained Aurax: Apple App Store on iOS or Google Play on Android. RevenueCat helps us manage subscription entitlements. We receive limited purchase information such as product, transaction, subscription status, renewal status, and expiration date, but we do not receive or store your full card number or security code. See Apple's privacy notice and Google's privacy policy.
Account information. Aurax is anonymous-first, so you can use core features without providing an email. If you choose to save or access an existing account, we process your email address and authentication data through Supabase.
Application data. If you use our application, we may collect, with your permission: mobile device data (device ID, model and manufacturer, operating system and version, configuration and identification numbers, device features accessed), and push-notification tokens (you can turn notifications off in your device settings).
In short: Some information — such as your IP address and/or device characteristics — is collected automatically when you use our Services.
This information does not reveal your specific identity but may include device and usage information, IP address, device characteristics, operating system, language preferences, country, and information about how and when you use our Services. It is primarily needed to maintain security and operation of our Services and for internal analytics and reporting. This includes log and usage data (diagnostic, usage, and performance information, including crash reports) collected automatically when you use the Services.
In short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.
In short: We only process your personal information when we have a valid legal reason to do so.
If you are located in the EU or UK, the GDPR and UK GDPR require us to explain the valid legal bases we rely on. These may include: your consent (which you can withdraw at any time); performance of a contract with you; legitimate interests (such as analyzing how the Services are used to improve them, diagnosing problems, and preventing fraud) that do not override your rights; legal obligations; and vital interests.
If you are located in Canada, we process your information with your express or implied consent, which you can withdraw at any time. In limited exceptional cases permitted by law, we may process information without consent (for example, for fraud detection and prevention, or where legally required).
In short: We may share information in specific situations and with the service providers described in this section. We do not sell your personal information.
We may share your personal information in the following situations:
In short: We use limited tracking technologies for analytics and to keep the app working. We do not use them for advertising, and we do not sell or share your data.
Aurax is a mobile application and does not rely on traditional browser cookies. We do use SDK-based analytics (PostHog) with session identifiers to understand how the app is used so we can improve it. This analytics does not capture your photos, does not capture on-screen text (no autocapture), does not record your session, and is not used for advertising. We do not permit third-party advertising trackers in Aurax, and we do not "sell" or "share" personal information for targeted advertising as those terms are defined under US state privacy laws. For details, see our Cookie Policy.
In short: We offer products and features powered by artificial intelligence.
As part of our Services, we offer features powered by artificial intelligence and machine learning (collectively, "AI Products"), including AI-based image analysis, AI insights, and an AI coach. We provide these through a third-party AI service provider, Alibaba Cloud AI (the Qwen models, accessed through Alibaba Cloud's API). To enable these features, the relevant input — which may include your selfie, intake context, coach message, and prior scan or program context — and the resulting output are transmitted to and processed by this provider. We do not use your photos to train our own or third-party AI models.
AI output is automated and may not be fully accurate. Aurax's scores and recommendations are algorithmic estimates for informational purposes only and are not a substitute for professional advice. To opt out of AI processing, do not run a scan or use the coach; you can also delete your account at any time.
In short: Aurax begins with an anonymous account and lets you optionally sign in to an existing account.
When you first use Aurax, Supabase creates an anonymous account identifier so your scans and program data remain separated from other users' data. You can optionally sign in to an existing Aurax account with email and password. Authentication tokens are stored in encrypted device storage where supported. Aurax does not offer Apple or Google social sign-in.
In short: We keep your information only as long as necessary for the purposes in this Privacy Notice, unless otherwise required by law.
We keep profile information, scan results, coach messages, program activity, and scan photos while your account remains active, unless a shorter period applies or a longer period is required by law. Daily progress photos are automatically deleted after 30 days. Scan photos remain until you delete your photos or account. You can delete photos or your account from within the app, and you can request account deletion outside the app through our Account & Data Deletion page. When you delete your account, we remove associated personal information — including photos, scan data, coach messages, and program data — from our active systems. We may retain limited records only where reasonably necessary for security, fraud prevention, dispute resolution, or legal compliance, and we will disclose applicable retention if it affects your request.
In short: We aim to protect your personal information through organizational and technical security measures.
We have implemented appropriate technical and organizational security measures designed to protect the personal information we process, including access-controlled private storage of photos and encrypted session storage on your device. However, no method of electronic transmission or storage is 100% secure, so we cannot guarantee absolute security. You should only access the Services within a secure environment.
In short: We do not knowingly collect data from or market to children under 13 years of age.
Aurax is intended only for users who are at least 13 years old. The app blocks users who indicate they are under 13, and parental consent does not override this restriction. We do not knowingly collect, solicit data from, or market to children under 13. If we learn that personal information from a user under 13 has been collected, we will deactivate the account and take reasonable measures to promptly delete the data. If you believe we may have collected information from a child under 13, contact us at aurax.app@gmail.com.
In short: Depending on your location, you may have rights that allow you greater access to and control over your personal information.
Depending on where you live — including the European Economic Area (EEA), United Kingdom (UK), Switzerland, Canada, and certain US states — you may have rights under applicable data protection laws. These may include the right to request access to and a copy of your personal information, to request correction or deletion, to restrict or object to processing, to data portability, and not to be subject to solely automated decision-making that produces legal or similarly significant effects. You may review, change, or terminate your account at any time.
To exercise any right, contact us at aurax.app@gmail.com. We will consider and act upon your request in accordance with applicable data protection laws, and may need to verify your identity first.
Withdrawing your consent. If we rely on your consent to process your information, you can withdraw it at any time by contacting us or by deleting the relevant data or your account in the app. This will not affect the lawfulness of processing before withdrawal.
If you are located in the EEA or UK and believe we are unlawfully processing your personal information, you also have the right to complain to your local data protection authority. If you are in the UK, you may contact the Information Commissioner's Office (ico.org.uk/make-a-complaint). If you are in Switzerland, you may contact the Federal Data Protection and Information Commissioner.
Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature. Because no uniform technology standard for recognizing and implementing DNT signals has been finalized, we do not currently respond to DNT browser signals. If a standard is adopted that we must follow, we will inform you in a revised version of this Privacy Notice.
In short: If you are a resident of certain US states, you may have rights to access, correct, delete, and obtain a copy of your personal information, and to opt out of certain processing.
If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and details about the personal information we maintain about you, to correct inaccuracies, to obtain a copy of, or to delete your personal information, and to withdraw consent. These rights may be limited in some circumstances by applicable law.
Categories of personal information we collect. In the past twelve (12) months we have collected the following categories:
| Category | Collected |
|---|---|
| A. Identifiers (e.g., email address, online identifier, IP address) | YES |
| C. Protected classification characteristics (e.g., gender, age) | YES |
| D. Commercial information (e.g., subscription/transaction information) | YES |
| E. Biometric information (facial-geometry measurements) | YES |
| F. Internet or other network activity (e.g., app usage, interactions) | YES |
| H. Audio, electronic, or similar information (photos you provide) | YES |
| K. Inferences drawn to create a profile or summary | YES |
| L. Sensitive personal information (account login and biometric data) | YES |
We only collect sensitive personal information with your consent or as permitted by law, and we do not collect or process sensitive personal information for the purpose of inferring characteristics about you. We have not sold or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months, and we will not sell or share your personal information in the future.
Your rights include: the right to know whether we are processing your personal data; to access, correct, and delete it; to obtain a copy of it; to opt out of processing for targeted advertising, sale, or profiling with legal/significant effects (note: we do none of these); to limit the use of sensitive personal data; and the right to non-discrimination for exercising your rights. To exercise these rights, or to appeal a declined request, contact us at aurax.app@gmail.com. If an appeal is denied, you may contact your state attorney general.
In short: Yes, we will update this notice as necessary to stay compliant with relevant laws.
We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Last updated" date. If we make material changes, we may notify you by prominently posting a notice or by sending a direct notification. We encourage you to review this Privacy Notice frequently.
If you have questions or comments about this notice, email Danish Nazar, the developer of Aurax, at aurax.app@gmail.com.
Based on applicable laws where you live, you may have the right to request access to the personal information we collect, details about how we process it, correction or deletion, and withdrawal of consent. You can delete photos or your account directly in Aurax at Profile → Privacy & data. You can also request account and associated-data deletion outside the app using our Account & Data Deletion page, or contact aurax.app@gmail.com. We may need to verify that you control the account before fulfilling a request.
Account & Data Deletion · Terms of Service · Cookie Policy · Support