Privacy policy

1. Who we are

Aura Wonder is an app made by Openkan.

• Controller: TODO(counsel): legal entity name, registration number (CNPJ / EIN) and address
• Data protection officer (Encarregado, LGPD art. 41): TODO(counsel): name and contact
• Privacy questions: contact@aurawonder.com TODO(counsel): confirm a dedicated privacy address

2. What we collect and why

Your account

• Your email address, to sign you in with a one-time code. No password.
• Your birth year, which you enter yourself. We use it to work out your age group. Under 13: you can't use Aura Wonder. 13 to 17: you get a restricted teen experience (see section 7).
• Your privacy choices (consents), with the date and policy version.

Selfies and your palette

• The selfie photos you take never leave your phone.
• The app cuts out small skin and reference patches (64 × 64 pixels or smaller) and sends only those. Our color service processes them in memory and doesn't store them.
• We store the derived color measurements (your latest 5 analyses) and your palette (season, swatches, confidence).
• Why: to find and show your palette. Basis: your consent to color analysis. TODO(counsel): confirm the legal basis and whether color measurements count as sensitive data under LGPD art. 11

Avatar and reveal video (adults only, optional)

• To make your avatar, the app sends a face photo to OpenAI, which generates the image. We don't store that photo.
• We store the generated avatars and reveal videos until you delete them. Each carries an AI-generated label, on screen and in the file.
• Basis: your separate consent to avatar likeness.

Product checks

• When you share a product, we store the link you shared, exactly as you shared it, and the result (your latest 200 checks).
• Our crawler fetches the store's product page and photo. Product details are cached for 24 hours. For Shopee links, we read product details through the Shopee Affiliate Open API; this never changes the link you shared.
• If you send a screenshot, the app resizes it (1600 pixels or smaller) and sends it to our color service and to Anthropic (Claude), which reads the product details. The screenshot is then deleted from your phone. We don't store it.

Virtual try-on (when available; adults only, paid, optional)

• If you use virtual try-on, the photo you take live in the app is sent to Fashn.ai to create the try-on. The result is checked by OpenAI's moderation service.
• We store results until you delete them. Each is labelled "AI-generated try-on". Reporting a result hides it immediately.
• Basis: your separate try-on consent.

Pair

• An optional first name, your label (partner, best friend, and so on), your guesses and your challenges. Only the person you're paired with can see them, and your guesses stay hidden until you reveal together.
• People who join from an invite link on the web can find their palette with the browser camera. As in the app, only small color samples are sent.

Gift links

• Gift links are for adults. The gift page shows your palette only: no photo, no measurements, no skin-tone description.
• When someone checks a gift on your page, we process the product link they paste. If you approve visitors, we ask for their name.
• We store only a scrambled (hashed) version of each link. The link itself stays on your phone.

Purchases

• Subscriptions (and try-on credits, when try-on is available) are sold by Apple and Google and managed through RevenueCat. Your card details never reach us. We receive the purchase status and keep a record of credits.

Affiliate picks (adults only)

• Some recommendations link to stores through Awin and Lomadee. They are always labelled "Ad · affiliate link".
• Verdicts are computed without any affiliate data, and we never add affiliate codes to links you share.
• We keep a record of affiliate clicks for 12 months.
• Teens never see affiliate picks.

Analytics and crash reports

• PostHog (usage analytics) and Sentry (crash reports), in the app only. We don't send them your photos, measurements, palette text, email or other personal details, and we don't record your screen.
• This website uses no analytics and no cookies.

Access logs

• Brazil's Marco Civil da Internet requires us to keep access logs for 6 months. They contain a pseudonymous ID (not your name or email), the event, your IP address and the time.
• To stop abuse of public pages, we keep scrambled (hashed) IP addresses for 24 hours.

3. What we never do

• We don't store your selfie photos or the color samples taken from them.
• We don't create face templates or faceprints.
• We don't infer or show race or ethnicity.
• We don't rank people or give compatibility scores.
• We don't sell your personal information. TODO(counsel): confirm wording for US state laws ("sale" and "sharing")
• We don't change a verdict because of an affiliate or partner deal.

4. Who processes your data

We use these service providers. They process data only to provide their service to us.

5. International transfers

We're based in Brazil and the United States, and our main servers are in the United States. Transfers of Brazilian users' data rely on the standard contractual clauses approved by the ANPD (Resolution 19/2024). TODO(counsel): confirm the entity and the SCC status for each provider

6. How long we keep data

7. Teens and children

• Aura Wonder is not for children under 13. If you tell us you're under 13, you can't create an account.
• Teens aged 13 to 17 get a restricted experience: no likeness avatar, no try-on, no Pair, no gift links and no affiliate picks.
• TODO(counsel): ECA Digital (Lei 15.211/2025) age assurance and guardian requirements; this section must be reviewed before launch

8. Your rights

Under Brazil's LGPD (art. 18), and under US state privacy laws where they apply, you can:

• confirm we process your data, and access it;
• correct it;
• get a copy (portability): Settings › Privacy & account › Download my data;
• delete it: Settings › Privacy & account › Delete account, or see Delete account;
• withdraw consent at any time. Turning off color analysis deletes your measurements, palette and product checks. Turning off the avatar deletes your avatars and videos;
• ask which companies we share data with (section 4);
• complain to the ANPD in Brazil, or to your state authority in the US.

To use a right we can't handle in the app, email contact@aurawonder.com from your account email. TODO(counsel): response time and identity verification

9. Security

Data is encrypted in transit. Files are kept in private storage. Share links are stored only as hashes. Our color service has no access to our database and keeps what it receives in memory only.

10. Changes

If we change this policy in a way that matters, we'll tell you in the app before it applies, and ask again where the law requires consent.

11. Contact

contact@aurawonder.com · TODO(counsel): postal address and DPO contact