Aura Sync legal

Privacy Policy

Effective date: June 21, 2026

This Privacy Policy explains how Aura Sync collects, uses, stores, and shares information when you use the website. Aura Sync is an entertainment project that creates an aesthetic result using quiz answers, an optional Spotify connection, a colour choice, birthday information, and an optional camera scan.

Camera privacy: camera frames are analyzed locally in your browser for simple brightness and contrast values. Aura Sync does not upload or save your photo or video.

1. Information we collect

Account information: your made-up username and a system-generated login identifier. Your password is handled by Firebase Authentication and is not visible to Aura Sync.
Quiz and result information: selected artists, colour choice, birthday and zodiac result, aesthetic scores, camera-derived aesthetic category, and the final generated description.
Spotify information: when you choose to connect Spotify, Aura Sync requests read-only access to your top artists. Artist names and genre information are used to calculate your music aesthetic. Up to five artist names may be saved with your final result.
Camera information: the browser temporarily displays your camera stream. A small frame is processed on your device to calculate brightness and contrast. The image itself is not transmitted to Aura Sync, Firebase, Spotify, or Gemini.
Local browser data: progress, selected answers, Spotify artist data, and a user ID may be stored in localStorage or sessionStorage so the experience can continue after navigation or refresh. Logging out clears active progress stored by Aura Sync on that browser.
Technical information: hosting and service providers may automatically process IP address, browser type, device information, timestamps, request logs, and security data needed to operate their services.

2. How we use information

We use information to create and display your Aura Sync result, save your account and results, restore in-progress activity, connect to Spotify when requested, generate a short Gemini summary, prevent abuse, troubleshoot errors, and maintain service security.

3. AI processing

A limited set of validated result data may be sent to Google Gemini to generate the summary shown on the results page. The payload may include your username, aesthetic categories and scores, selected artist answers, up to five Spotify artist names, colour, zodiac sign, and the text result of the local camera analysis. Camera images, passwords, Spotify access tokens, and your full date of birth are not sent to Gemini by Aura Sync.

4. Service providers and sharing

Aura Sync does not sell your personal information. Information may be processed by providers that help run the site, including Firebase for authentication and database storage, Spotify for optional music authorization, Google Gemini for AI-generated text, Vercel or another hosting provider, and content-delivery providers used to load website libraries, fonts, or assets. These providers handle data under their own privacy terms.

5. Storage and retention

Account and result records may remain in Firebase until they are deleted by the project owner or deletion is requested. Browser storage remains on your device until you log out, clear your browser data, or the browser removes it. Spotify access tokens are used temporarily during the active connection flow and are not intentionally stored in localStorage or Firebase.

6. Your choices and rights

You can skip Spotify and use the non-Spotify option.
You can deny camera permission. A demo result may be used instead.
You can clear local browser storage by logging out or clearing site data in your browser.
You may request access to, correction of, or deletion of information associated with your account, subject to applicable law and reasonable identity verification.

7. Security

Aura Sync uses input validation, restrictive database rules, HTTPS hosting, and server-side handling for private API keys. No system can guarantee absolute security. Do not reuse a password from another account, and do not enter confidential information as your username.

8. Children

Aura Sync is not intended for children under 13 or the minimum age required to consent to online services in their jurisdiction. We do not knowingly collect information from children below that age. A parent or guardian may contact us to request deletion.

9. International processing

Service providers may process information in Canada, the United States, or other countries where they operate. Privacy protections may differ from those in your location.

10. Changes to this policy

We may update this Privacy Policy as the project changes. The effective date at the top of this page identifies the current version. Material changes may require renewed acknowledgement before a new account is created.

11. Contact

Questions or privacy requests can be sent to taniyatj26@gmail.com. Include your Aura Sync username and do not include your password.