Aurmora privacy policy
Updated October 8, 2026 · version 1.2 release disclosure.
Who is responsible
Aurmora is provided by Vikassh Dalal, trading as Aurmora. Privacy questions and requests can be sent to hello@getaurmora.com.
Your record, your control
Aurmora 1.2 is an accountless cosmetic skincare journal. Your shelf, routine, check-ins, reference photos and reports are stored on your device. Reference and package photos are encrypted in the local vault. Optional analysis and iCloud sync transfer the information described below only when you choose those features.
Optional cosmetic skin analysis
Before a scan, you review a prepared face photo and approve its upload to Perfect Corp for cosmetic analysis. The selected image, visible appearance observations and visualization outputs are processed by Perfect Corp. Aurmora uses Microsoft Azure services for request authorization, task state, scan allowances and delivery. This is cloud analysis, not on-device skin inference or identity matching. Camera framing and capture checks run locally; camera preview frames are not saved or uploaded for those checks.
Analysis retention and deletion
Aurmora requests early deletion of provider task data after delivery or cancellation and records deletion state. A request or acknowledgment does not guarantee immediate erasure by the provider. Perfect Corp task data may remain for up to 30 days. Aurmora keeps minimal job, security and purchase-allowance records to recover interrupted requests, prevent duplicate charges and abuse, and honor purchase rights. These technical records are separate from the encrypted reference photo you retain locally. Contact the support route below for service-data deletion questions; do not send a face photo or private key.
Identifiers and purchase validation
Apple App Attest protects service access using installation and attestation records. StoreKit transaction information is verified server-side to deliver the lifetime free scan, subscription-month allowance and one scan per Decision Pass purchase. Minimal purchase identifiers and consumed-credit records prevent reset or reinstall from recreating used credits. Apple processes payments; Aurmora does not receive your payment card details. Security and delivery records may be linked to the app installation or Apple transaction identity and are not described as anonymous.
Optional encrypted iCloud sync
Sync is off until you enable it. When enabled, Aurmora sends encrypted records and saved media to your private CloudKit database through Apple. This includes the photos and notes you choose to keep in the app. Turning sync off stops future sync; it does not automatically delete copies already in iCloud. Use the app’s cloud deletion controls to request removal. Sync and recovery depend on Apple account availability and access to encryption keys.
Location and sun protection
If you enable location-based sun protection reminders, Aurmora requests location while the app is open. Approximate coordinates rounded to about 0.1 degrees are sent to Apple WeatherKit for a local UV forecast. Aurmora does not request background location for this flow. Notifications and Live Activities can show sun-protection status and timing on the lock screen; you control their availability in iOS settings. Apple’s processing is governed by its privacy terms.
Product scans, check-ins and optional submissions
Product-label recognition runs on your device. Confirm recognized names, brands, categories, ingredients and directions before saving. Check-ins and local routine decisions stay on device unless optional sync or an export is enabled. The missing-product submission form is optional and uses Google; it sends the product details you provide, not your stored face photos or skin scores. Its form fields and privacy information are shown before submission.
Permissions, sharing and support
Camera access is requested for captures. PhotosPicker lets you select individual photos without broad library access. App Lock uses iOS authentication; Aurmora does not receive Face ID biometric data. Exports share only the sections you select with your chosen destination. Browser visits and voluntary support messages can be processed by the website host and email provider. Do not send photos, health details, passwords or payment credentials to support unless a specific secure process is agreed.
Deletion and purchase rights
Local skincare-data deletion removes journal records and local media according to the choices shown in the app. Cloud and provider copies have separate deletion flows. Deleting data or turning reminders off does not cancel an Apple subscription; manage subscriptions in Apple settings. Minimal verified purchase records may remain to honor unused rights and prevent re-creation of consumed scan credits. Data recovery after app deletion or loss of encryption keys is not guaranteed.
Adult cosmetic use; no advertising tracking
Aurmora is intended for adults 18 and older. Scores describe visible cosmetic observations in a photo; they are not medical diagnosis or measurements of biological hydration. Aurmora does not use these records for advertising tracking or sell face photos. No routine assistant or OpenAI feature is offered in this version. Questions and deletion requests can be sent through Product Support.
Current version and website practices
Version 1.1 keeps app references local. The optional analysis and sync processing above describes the version 1.2 update submitted for Apple review; availability depends on the installed app version.
Website submissions and product updates
When you submit an Aurmora website form, the site collects the fields you enter, consent record, form type, submission time and basic abuse-prevention information. The submission is stored in the WordPress database and a minimal notification may be sent to Aurmora through Microsoft 365. Product-update signups are also added to a first-party lead directory containing only contact details, consent evidence, source, intent and suppression status. The directory does not retain imported skincare answers, advertising click identifiers, referrers, landing pages, device details or browser history. Do not submit progress photos, medical records, credentials or payment-card details.
Analytics, advertising measurement and cookies
The website uses Google tags through Google Site Kit for Google Analytics and Google Ads measurement. Google may receive device and browser information, an IP-derived location, page URLs and interaction events. The website does not display paid ads, and these tags do not receive app photos or private journal data. The app does not use advertising tracking; technical delivery and security records are described above. See the Cookie Policy for controls and more detail.
Purposes and retention
Website submissions are used to respond, protect the service, meet legal obligations and administer consent. Form submissions are scheduled for deletion after 365 days unless a shorter or longer period is required to resolve a request or meet a legal obligation. Product-update lead records are retained while the subscription remains active or while consent evidence and a suppression record are needed to honor an unsubscribe, unless deletion is requested or another legal basis requires retention.
Hosting and service providers
The website runs on a WordPress multisite administered through TechAim and served from Amazon Web Services infrastructure in Canada. Microsoft 365 handles email. Google provides website analytics and advertising-measurement tags. These providers may process limited website information in other countries under their own privacy terms.
Your choices and rights
Depending on your jurisdiction, you may request access, correction or deletion of website information, or withdraw marketing consent. Aurmora records unsubscribe and suppression status to help prevent future sends. Local app records must be managed on the device. Optional private iCloud copies and analysis service records are handled separately as described above. Email hello@getaurmora.com for a website-data request.
Privacy request
Use this form for website privacy questions and requests about optional Aurmora services. Manage local app records in the app; optional skin analysis, purchase verification and iCloud sync have separate privacy controls described in this policy. Do not attach a face photo, password or payment details.
Fields marked required must be completed.