Privacy Policy

Who is responsible

Elaura is the service described in this policy. The operator's legal identity, business location and privacy contact are awaiting confirmation before public launch. This draft must be completed with those details.

Information we process

We process account details such as your name and email, authentication information, uploaded face and optional full-body photos, photo quality measurements, colour and style results, your selections, generated previews, credit transactions and consent preferences. The service also processes technical information needed for authentication, security and operation.

Why we use it

We use this information to provide requested analysis and previews, save results, manage your account and credits, respond to requests and protect the service. Local face/framing and full-body checks run on your device; saving a photo uploads it to private storage. Camera access alone does not upload a photo. Face measurements support colour and styling analysis, not identity matching. The legal grounds that apply depend on your location and include providing the requested service, your consent where required, security interests and legal obligations.

AI providers and remembered permission

AI features use OpenAI to process the inputs needed for the requested feature. Personal outfit generation sends your saved full-body image and outfit choices to OpenAI only when you request generation with your saved outfit permission enabled. Other requested AI styling features may process face photos and analysis details. Supabase supplies authentication, database and private photo storage. Hosting and operational service providers process information needed to run the application. Information may be processed outside your country; applicable transfer protections and the deployment's provider locations must be confirmed before public launch.

OpenAI data handling

OpenAI states that its API inputs and outputs are not used to train its models by default. Provider retention and safety-monitoring rules are separate from Elaura's photo expiry. Do not assume immediate deletion or zero retention at the provider. Review OpenAI's current API data controls for details.

Storage and retention

Photos are stored privately and displayed using expiring links. The expiry recorded for each analysis controls access; temporary photos and their linked full-body images follow the application's expiry and deletion process. Saved outfit previews remain available after original upload expiry, until you delete the related photo or account. Saved analysis results and account information may remain until deleted. Credit and transaction records may need to remain for accounting, fraud prevention or legal obligations. Backup and provider retention can differ from active storage. We do not promise that withdrawing consent deletes information already processed.

Your choices and deletion

The saved outfit permission can be turned on or off in Account settings. Declining it does not prevent use of free illustrations. Turning it off blocks future personal outfit generations; it does not cancel an in-flight request. Delete a photo from History to remove its associated private images, or use Account settings to request account and related data deletion. Depending on your location, you may also have rights to access, correct, export, restrict or object to processing and complain to a data-protection authority.

Cookies and analytics

Authentication uses cookies to maintain your session. Where enabled, operational analytics help us understand service use; private photo pixels and signed photo links should not be included in analytics events. Additional non-essential tracking must be disclosed and controlled as required in the locations where the service operates.

A preference cookie remembers your language choice for up to one year.

Children, security and updates

Elaura accounts are intended for adults aged 18 or older. We use access controls and private storage to protect data, but no service can guarantee absolute security. Policy updates will be published here. A materially new photo-processing purpose will not be treated as covered by an old permission.