Your taste, kept private

Account data (email address, sign-in credentials) to create and secure your account — necessary to perform our contract with you. Curation inputs (colours, vibe, occasion, time of day, optional weather context), saved collection items and recommendation feedback, to generate and improve your recommendations.

Support messages you send us, to answer them. Usage and device telemetry (screen views, feature usage, outbound clicks, device type, coarse locale, IP address) under our legitimate interest in keeping Aura secure and understanding which features are useful. We never sell your personal data or use your photos to build advertising profiles.

The scanner asks for camera access only when you open it and releases the stream when you close it. Nothing is recorded — Aura captures a single still frame when you tap Capture.

That scan-only frame is sent over an encrypted connection to our AI processor. Aura does not write the frame to its database or file storage; only the structured result you confirm persists. Processing by the AI provider is subject to that provider's processing and retention controls. Photos you choose to save with collection items are stored privately with your account. You can also type an item by hand.

Optional selfie colour analysis works the same way, and only when you choose it: the photo is downscaled on your device and sent over an encrypted connection to our AI processor, which returns a skin-tone depth band, an undertone (warm, cool or neutral), a short descriptive note and a five-colour palette. Neither the selfie nor its analysis is written to our database or file storage. The photo stays in your browser's session storage for the current tab only and is discarded when you close the tab or clear the selfie. You are asked to confirm before the photo leaves your device.

In Local Guest Mode your collection, taste profile and generated compositions are stored in your browser on your device only — they never reach our database, and clearing browser data removes them permanently.

When you sign in, Aura offers to migrate that local data into your account. From then on your rows are protected by row-level security: only your authenticated session can read or write them. We also use small amounts of local and session storage for essentials — session token, theme, language, unit preference and an anonymous analytics session id.

Our service providers are: Lovable Cloud for hosting, authentication, database and managed email delivery; Lovable AI Gateway and its Google Gemini and OpenAI model providers for curation inputs and scans; PostHog for product analytics and error tracking; OpenWeatherMap for the optional weather reading; and Paddle for checkout, subscriptions, billing, tax and refunds. OpenWeatherMap receives only the approximate coordinates your device offers (rounded to four decimal places) or the city name you type — never your identity, collection or photos. Professional advisers and competent authorities may also receive data where the law requires it.

Some of our service providers may process data outside your country of residence, including outside Canada. We use providers that publish their own data protection terms.

Paddle.com Market Ltd, our Merchant of Record, for the sale of Aura Premium — Paddle handles checkout, subscription management, payments, invoicing and sales tax compliance as an independent controller of that payment data. We never receive or store your full card details.

Sharing is optional. When you publish a pairing, its title, outfit summary, fragrance name, occasion, vibe and note tags, optional caption, and curator display name become public. Your account ID, email, and photos are not published. You can unpublish your own entry from the Community Lookbook; deleting your account also removes your entries. Report concerns to support@composeaura.com.

Shopping actions are routed through our /go redirect so we can attribute the click. Aura may earn a referral commission when you buy through those links, at no extra cost to you, and commissions never influence which pieces the engine recommends. The redirect logs the destination category and a coarse timestamp; it does not pass your email, photos or collection contents to the merchant.

Account and collection rows are retained while your account is active and are deleted when you delete your account — including your saved collection photos and any generated lookbook files. Locally stored referral and traffic-attribution values expire after 30 days. A daily cleanup then applies fixed periods: emailed lookbook download links expire after 30 days and the underlying PDF file is deleted on the same clock; email send logs and login-throttle records are deleted after 90 days; analytics events after 24 months; support tickets 24 months after they are closed. Unsubscribe and suppressed-address records are kept indefinitely so your opt-out continues to be honoured. Billing records are kept for as long as tax and accounting law requires, and Paddle holds its own copy as an independent controller.

We protect data with encryption in transit, row-level access controls and least-privilege service credentials.

Subject to the law where you live, including Canadian privacy law and other applicable regional laws, you may request access, correction, deletion where available, restriction, portability, objection, or withdrawal of consent. You may also complain to the privacy regulator in your region. In the app you can export or delete your collection, adjust learned taste weights, revoke camera access and request account deletion.

Privacy requests: privacy@composeaura.com. General support: support@composeaura.com. Billing and payment questions may also be raised directly with Paddle at paddle.net. We respond within one month.

Data controller: Jean Paul Musana. Address: 912-240 Brittany Drive, K1K 0R7, Ottawa, Ontario, Canada. Contact: contact@composeaura.com. Privacy: privacy@composeaura.com. Support: support@composeaura.com.

We use essential cookies and local storage to keep you signed in and remember preferences, and analytics storage to measure feature usage. A creator referral code is stored under aura_affiliate_ref in local storage and a SameSite=Lax cookie for 30 days; first-touch attribution credits visits and sign-ups without changing prices or recommendations. General traffic attribution is stored locally for 30 days. We do not run advertising cookies.