Privacy Policy

1. Who we are

Aura is published by Penfai LLC. For privacy questions, contact us at info@penfai.com.

2. Information we collect

Aura is designed to minimize personal data collection. We do not require an account, email, or password to use the App.

2.1 Information you provide directly

• Custom prompts (Create mode): When you use the Create feature to design a custom wallpaper, the text prompt you enter is sent to our backend and forwarded to a third-party AI image generation service. Prompts are processed transiently and are not stored on our servers beyond the duration of the generation request. The third-party AI service may temporarily process the prompt according to its own privacy policy.
• Push notification preferences: If you opt in to daily reminders, we store your Apple device push token on Apple Push Notification Service (APNs) to deliver notifications. We do not associate the token with any personal identifier.

2.2 Information collected automatically

• Anonymous device identifier ("Guest ID"): A random identifier is generated on your device and sent with each artwork-generation request so we can enforce the free daily limit (one wallpaper per device per day for free users). This identifier is held in memory on our server only — it is not stored persistently and resets on server restart.
• Crash and diagnostic data (Sentry): If the App crashes or encounters an error, Sentry collects technical information including the iOS version, device model, anonymous session ID, and stack trace. This data is not linked to your identity.
• Subscription state (Adapty): When you subscribe to Aura Plus, Adapty stores the Apple App Store transaction receipt and an anonymous Adapty user identifier to verify your subscription. We do not see your Apple ID or payment card information.
• Advertising identifiers (AdMob): If you grant App Tracking Transparency (ATT) permission, your IDFA (Identifier for Advertisers) is shared with Google AdMob to personalize advertising. If you decline ATT, AdMob serves non-personalized ads using your device ID only. AdMob may also receive coarse location and ad-interaction signals per its own policy.
• Photo library write access: When you save a wallpaper to your camera roll, the App writes to the Photos library on your device. We do not read or transmit any other photos.

2.3 Information we do NOT collect

• We do not collect your name, email address, phone number, or postal address.
• We do not require sign-up or login.
• We do not collect your precise location.
• We do not access your contacts, microphone, camera, calendar, or other photos.
• We do not collect health, financial, or biometric data.

3. How we use information

We use the information collected for the following purposes:

• To provide and operate the App: Generate wallpapers, deliver the daily drop, enforce the free-tier daily limit, deliver push notifications you opted in to.
• To improve the App: Aggregate crash and error data via Sentry to identify and fix bugs.
• To process subscriptions: Verify Aura Plus subscription status via Adapty and Apple's StoreKit.
• To show advertising (free tier): Deliver ads via Google AdMob; personalize ads only if ATT consent is granted.

We do not sell personal information. We do not use any collected information for profiling, automated decision-making with legal effects, or building advertising profiles outside the ATT-governed AdMob integration.

4. Third-party services

The following third parties may receive information as described in Section 2:

If we change the AI image generation provider, we will update this list and the App.

5. Data retention

• Custom prompts: Not stored on our servers beyond the duration of the generation request.
• Guest ID: Held only in server memory; cleared on every server restart.
• Saved wallpapers: Stored locally on your device only. We do not have a copy.
• Subscription state: Held by Adapty for as long as your subscription is active plus a reasonable retention period for billing reconciliation.
• Crash data: Retained by Sentry per its default retention policy (currently 90 days).
• Ad data: Retained by Google AdMob per its own policy.

6. Your choices and rights

6.1 Universal choices

• Stop generation: Uninstall the App. All locally stored wallpapers, preferences, and the device Guest ID are removed with the App.
• Disable push notifications: iOS Settings → Notifications → Aura → toggle off.
• Revoke advertising tracking: iOS Settings → Privacy & Security → Tracking → toggle off Aura.
• Cancel subscription: iOS Settings → [your name] → Subscriptions → Aura Plus → Cancel. The subscription remains active until the end of the current billing period.

6.2 EU / EEA / UK residents (GDPR)

Where GDPR applies, our legal bases for processing are: (a) Contract — to deliver the wallpaper generation service you requested; (b) Legitimate interest — for crash reporting and fraud prevention; (c) Consent — for advertising tracking (ATT) and push notifications. You have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing. To exercise these rights, contact info@penfai.com. Because we do not maintain user accounts, in many cases the most effective way to exercise your right to erasure is simply to uninstall the App and revoke any cloud-side consents (Adapty, AdMob) via the third-party services' own controls. You also have the right to complain to your local data protection authority.

6.3 California residents (CCPA / CPRA)

We do not "sell" personal information as defined under CCPA. We do "share" device identifiers with AdMob for cross-context behavioral advertising only if you grant ATT consent. You have the right to: (a) know what categories of personal information we collect, (b) request deletion, (c) opt out of "sharing", (d) non-discrimination for exercising your rights. The ATT controls in iOS Settings serve as the opt-out for advertising-related sharing. For other requests, contact info@penfai.com.

6.4 Türkiye sakinleri (KVKK)

Veri sorumlusu sıfatıyla Penfai LLC, KVKK kapsamındaki haklarınıza saygı gösterir: kişisel verilerinizin işlenip işlenmediğini öğrenme, işlenmişse buna ilişkin bilgi talep etme, işleme amacını ve amacına uygun kullanılıp kullanılmadığını öğrenme, yurt içinde veya yurt dışında aktarıldığı üçüncü kişileri bilme, eksik veya yanlış işlenmişse düzeltilmesini isteme, KVKK 7. madde kapsamında silinmesini veya yok edilmesini isteme. Bu hakları kullanmak için info@penfai.com adresine yazabilirsiniz.

7. Children's privacy

Aura is not directed at children under 13 (or under 16 in the EEA, where applicable). We do not knowingly collect personal information from children. The App is rated 12+ on the App Store because AI-generated content can be unpredictable. If you believe a child has provided us with information, contact us and we will delete it.

8. International transfers

Our backend infrastructure and third-party processors may process data in countries outside your country of residence, including the United States. Where required by GDPR, transfers are protected by Standard Contractual Clauses or equivalent mechanisms maintained by the respective processors.

9. Security

We use industry-standard measures to protect data in transit (HTTPS/TLS for all network requests) and at rest (encrypted local storage via iOS Keychain). No system is perfectly secure; we recommend keeping your iOS device up to date.

10. Changes to this Policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the "Last updated" date at the top and, where appropriate, notify you in-App. Continued use of Aura after changes are posted constitutes acceptance.

11. Contact

For questions, concerns, or to exercise privacy rights:

Penfai LLC
Email: info@penfai.com