Lookauramax — Privacy Policy
Important: This policy was prepared without a lawyer, from official Google Play, GDPR, DPDP, and CCPA guidance, to the best of our ability. It is NOT legal advice and has NOT been reviewed by a lawyer. Residual legal risk remains. If any part of this policy conflicts with the app's actual behaviour, the app's behaviour must be fixed — the policy is the promise, and the Play Data Safety declaration must match it word-for-word.
1. What Lookauramax is
Lookauramax is a private, on-device glow-up app. It analyses a face photo on your phone, gives actionable trait scores, and builds a daily routine, plan, coach guidance, and progress tracking. You must join with Google or with an email magic link to use the app. There is no guest mode.
2. The core promise
- Your face photo never leaves your phone. It is processed in RAM on your device and wiped immediately after scoring. It is never uploaded, never sent to any server, never sold, never used for advertising, and never used to identify you.
- No face template is ever stored. We do not create or keep a face template, embedding, vector, or biometric identifier, on-device or in the cloud.
- No face photo is ever in a backup. Before/After photos (only if you opt in) are stored encrypted in app-private storage on your device only, excluded from device backup, and deletable in one tap.
- Scan results are rule-based estimates, not AI. The scan, Coach, and Preview do not use AI or machine learning. See §5.
3. Data inventory (single source of truth — must match Play Data Safety)
| Data | Collected? | Shared? | Purpose | Retention |
|---|---|---|---|---|
| Face photo | NO (on-device only) | NO | Scan | Deleted immediately after scan |
| Face template / embedding | NO | NO | — | Never stored |
| Scores, plan, progress, streaks, settings | YES, to Supabase | NO (Supabase = processor, not advertiser) | App functionality, sync | Until account deleted |
| Email / Google ID (login) | YES | NO | Account, login | Until account deleted |
| Age band (16–17 / 18+), parental-consent status | YES | NO | Age gating, parental consent | Until account deleted. Exact date of birth is DISCARDED after the age gate. |
| Join Reward claimed status (one-time) | YES | NO | Enforce one Join Reward per account | Until account deleted |
| Crash logs, device model, OS | YES, via Crashlytics | NO | Fix crashes | 90 days |
| Purchase token hash (Play Billing) | YES (hash only) | NO | Verify Pro, prevent replay | Until subscription ends + 30 days. Raw token is never stored. |
| Ad ID, location, contacts, SMS, EXIF location | NO | NO | — | Never |
4. How your data is used
- To provide the app: scores, plan, routine, coach, library, progress.
- To sync your small data (scores, plan, progress, streaks, settings) across your devices after you sign in.
- To verify Pro purchases with Google Play (server-side).
- To fix crashes (Crashlytics, no face data, no Ad ID).
- Never for advertising, never sold, never used to identify you from a photo, never used to rate your attractiveness or compare you to other users.
5. Rule-based disclosure (not AI)
Lookauramax does not use AI or machine learning. The scan is a transparent rule-based estimate: every result is labelled "Rule-based estimate, not AI". Aura Coach guidance is rule-based and on-device. Aura Preview is an enhancement-based illustration, labelled "illustration of potential, not a guarantee". Results are estimates. Lighting, angle, and photo quality affect results. Results vary. For information only, not medical advice.
6. Children and teens
- Under 16: blocked. No scan, no account, no data collected.
- Ages 16–17: parental/guardian consent is required before paid access and before a scan. No personalised ads. Minimal data, no marketing use.
- The app is NOT made for children. Target audience is 16+.
7. Your rights — Delete and Export
- Delete Account & Data (Settings > Delete Account & Data): type DELETE to confirm. Scores, plan, progress, and settings are deleted from the cloud and the phone. Before/After photos are deleted from the phone. Deletion target: immediate; maximum 30 days; no backup restore after 30 days.
- Deleting your account does NOT cancel your Play subscription. Cancel separately in Google Play > Subscriptions to stop renewal.
- Download My Data (Settings > Download My Data): exports scores, plan, and progress as JSON/CSV within 72 hours, after re-authentication.
- GDPR / DPDP / CCPA requests: contact support@lookauramax.com. We respond within 30 days.
8. Security (honest, not absolute)
We protect your data with encryption in transit (TLS 1.2+), encryption at rest, Row-Level Security (you can only read/write your own rows), SQLCipher + Android Keystore on-device, and server-side purchase verification. No app can be 100% secure, and we never claim Lookauramax is "unhackable" or "100% safe". If we learn of a breach, we notify affected users and Google Play promptly, fix it, and publish a post-mortem.
9. SDKs used
Supabase (backend, Auth, Postgres), Google Play Billing, Firebase Crashlytics. No hidden SDKs. Adding an SDK requires updating this policy and the Play Data Safety declaration the same day.
10. Changes
We update this policy when the app changes. Material changes are announced in-app. The version at https://lookauramax.com/privacy is the current one.