Privacy Policy

Last updated: October 2026

1. Who we are

Aura: Looksmaxxing ("we", "our", "us") operates the website www.aura-looksmaxxing.com. We provide an AI-powered image generation service. If you have questions about this policy, contact us at support@aura-looksmaxxing.com.

The controller responsible for data processing under the GDPR is Elias Fiedler (eFeat Digital), Spiekerooger Straße 14, 65199 Wiesbaden, Germany, efeatdigital@gmail.com. See also the Impressum.

2. What data we collect

We collect the following categories of data when you use our service:

  • Account data: Your email address and display name when you register. If you sign up with Google, we receive your name and email from Google.
  • Photos you upload: Images you upload to generate AI photos. These are used solely to process your generation request.
  • Generated images: The images produced by the AI based on your prompts and uploads.
  • Payment data: Billing is handled by Stripe. We do not store your card number or full payment details. We receive transaction confirmations and subscription status from Stripe and RevenueCat.
  • Usage data: Logs of feature usage, credit consumption, and generation history to operate the service and prevent abuse.
  • Analytics: We use Vercel Analytics and PostHog to understand how users interact with our site.

3. How we use your data

We use your data to:

  • Provide, operate, and improve the Aura: Looksmaxxing service
  • Process AI image generation requests
  • Manage your account, credits, and subscription
  • Send transactional emails (account confirmation, receipts)
  • Prevent fraud and abuse
  • Comply with legal obligations

We do not sell your personal data to third parties. Aura does not use your uploaded photos to train its own AI models. Processing providers handle requests under their respective service terms.

4. Data storage and security

Account data, credit balances and reports are stored in Google Firebase / Firestore. The public tool-upload flow forwards photos to our AI analysis service through a server-side processing proxy; Aura does not save these original uploads in its report database. Detailed tool reports are encrypted. Unclaimed previews become inaccessible after 24 hours and saved unpaid previews after seven days. Expired records are removed by database cleanup. Unlocked reports are kept in your account until deletion. Other app features can retain scan photos and generated images as part of your saved history.

We use industry-standard security measures including encrypted connections (HTTPS/TLS), access controls, and secure authentication.

5. Third-party services

We use the following third-party services to operate Aura: Looksmaxxing:

  • Google Firebase - authentication and database
  • AI analysis service / OpenAI proxy - processing uploaded photos and generating reports
  • fal.ai - AI image generation processing
  • Stripe - payment processing
  • RevenueCat - subscription management
  • Vercel - hosting and infrastructure
  • PostHog - product analytics

6. Your rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate data.
  • Deletion: Request deletion of your account and all associated data.
  • Portability: Request an export of your data in a machine-readable format.
  • Objection: Object to certain processing of your data.

To exercise any of these rights, contact us at support@aura-looksmaxxing.com. We will respond within 30 days.

7. Cookies

We use essential cookies for Firebase-based session authentication and a 24-hour guest cookie to associate a tool preview with its uploader. The tool checklist and pending-payment state use browser local storage. We also use PostHog analytics as described above; tool photos and report text are excluded from session recordings.

8. Children's privacy

Aura: Looksmaxxing is not directed at children under the age of 13. The public photo-analysis tools are intended for adults aged 18 and over. We do not knowingly collect personal data from children.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the date at the top of this page.

10. Contact

If you have any questions about this Privacy Policy, contact us at support@aura-looksmaxxing.com.