Aura Scan Health ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (the "Service"). By using the Service, you consent to the practices described in this policy.

We collect the following categories of information: • Account information: email address and authentication details provided when you register. • Profile information: date of birth, country, Fitzpatrick skin type, known conditions, allergies, current skincare routine, and skincare goals. • Photographs: front-facing and profile images of your face that you submit for skin analysis. These images are processed to generate your analysis results and are stored as part of your analysis history. • Analysis data: skin scores, detailed findings, and personalised recommendations generated from your photos. • Subscription and billing information: subscription tier and billing status. Payment processing is handled by Stripe; we do not store full card details. • Usage data: device identifiers, app interactions, and crash reports used to improve the Service.

We use your information to: • Provide skin analysis and personalised recommendations. • Maintain your analysis history and track progress over time. • Manage your subscription and verify access to paid features. • Send service-related communications, such as subscription confirmations and renewal notices. • Improve the accuracy and quality of our analysis models and user experience. • Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information. We may share information with: • Service providers: third-party vendors that support our operations, such as Stripe (payments), cloud storage, and AI processing infrastructure. These providers are bound by confidentiality obligations. • Legal compliance: when required by law, court order, or to protect the rights, property, or safety of our users or others. • Business transfers: in connection with a merger, acquisition, or asset sale, subject to the protections of this policy.

We retain your account information and analysis history for as long as your account is active. You may request deletion of your account and associated data at any time from the Profile screen, after which we will permanently remove your information within 30 days, except where retention is required by law.

We implement appropriate technical and organisational measures to protect your information, including encryption in transit and at rest, access controls, and regular security reviews. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have the right to: • Access the personal information we hold about you. • Request correction of inaccurate information. • Request deletion of your personal information. • Withdraw consent to certain data processing. • Object to or restrict certain processing. To exercise these rights, contact us using the details in Section 10.

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will promptly delete it.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy within the app or by sending a notification. Continued use of the Service after changes constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or your data, please contact us at support@aurascanhealth.com or through the Support page in the app.