AuraCue Privacy Policy
Last Updated: September 20, 2026
SparkJam Co., Limited ("SparkJam," "we," "us," or "our") operates the AuraCue mobile applications for iOS and Android (the "App"). This Privacy Policy explains how we collect, use, share, retain, and protect information when you use the App.
AuraCue does not require your name, email address, or social login to create an account. When you first use the App, AuraCue creates a pseudonymous guest account to operate requests, store selected preferences, maintain security, and associate tasks with the correct guest account.
Although the guest account does not require your name or email address, information associated with a guest user ID, device identifier, request, task, resource, or installation may be linked to that guest account or device. You can delete the guest account and associated data from within the App.
Information We Collect
Information You Provide
We may collect information you choose to provide, including:
- Personalization information: Settings, preferences, selections, and other context you provide to tailor the Service. This information may be stored locally and in a limited server-side profile linked to your guest account.
- Uploaded content: Screenshots or images you select and content visible in them, such as conversation text, names, usernames, profile images, timestamps, and emojis.
- Request context: The intent, background, or instructions you provide for a reply or analysis.
- Support information: Your email address, feedback, attachments, and diagnostic details when you contact us.
- Content reports (Android): The task or result reference, the report reason you select or enter, and associated guest-account information when you report an AI-generated result. We retain a copy of the reported generated result to investigate the report and enforce our content-safety rules.
Information Generated by the Service
To provide requested features, AuraCue may generate or derive OCR text, conversation structure, contextual signals, suggested replies, explanations, next-step recommendations, safety flags, task status, and error information.
AI-generated interpretations may be incomplete, inaccurate, or ambiguous and should not be treated as verified facts about another person. Content you submit may incidentally contain personal or sensitive information about you or another person. Please do not include information that is unnecessary for your request.
Information Collected Automatically
We may collect:
- pseudonymous guest-account, authentication, service, and device identifiers; Android ID and app-generated identifiers on Android; IDFA on iOS when available after you grant ATT permission; and Google Advertising ID (GAID) on Android when available and permitted;
- device type, operating system and version, App version, language, and time zone;
- App interactions, such as completing setup, submitting requests, viewing results, and using result actions;
- network and service information, including your IP address and limited technical request data used for service operation, security, abuse prevention, and diagnostics;
- crash reports, performance data, network status, and related diagnostic information.
How We Collect Information
We collect information directly from you when you select or enter content, configure available settings, submit a request or content report, or contact support. We collect limited device, usage, and diagnostic information automatically through the App and its integrated SDKs. We may also receive limited installation, referral, or diagnostic information from Apple, Google Play, and our service providers where applicable.
How We Use Information
We use information to:
- create and operate the guest account;
- store and apply personalization information you provide;
- process selected screenshots and request context;
- generate and personalize replies and analysis;
- provide content-safety controls, investigate content reports, and provide customer support;
- maintain security, prevent fraud and abuse, diagnose failures, and enforce our terms;
- measure App reliability and usage, attribute advertising campaigns, and measure approved conversion events;
- comply with legal obligations and protect rights and safety.
For first-party analytics, AuraCue may process product-interaction events, structured preferences and assessment responses, and structured request or result metadata, such as request status, processing duration, error category, and result labels, together with identifiers permitted for the relevant purpose. Our use of advertising identifiers is described under “Analytics, Attribution, and App Tracking Transparency.” We do not use selected screenshots, conversation text, free-text request context, or generated reply or analysis text for first-party analytics.
AuraCue does not provide selected screenshots, conversation content, AI prompts, personalization information, or AI-generated results to third-party analytics or advertising-attribution providers.
AI Processing
When you use an AI feature, AuraCue asks for your explicit permission before sharing selected content with third-party OCR or AI providers.
Selected screenshots are uploaded to private Tencent Cloud Object Storage (COS) and sent to Google Cloud Vision for text extraction.
Extracted conversation text and relevant request details—including your instructions, background, language, and selected personalization settings—are sent to Tencent Cloud Model Service (TokenHub), where DeepSeek and GLM models generate and validate replies and analysis.
AuraCue does not automatically redact personal information in selected screenshots, extracted text, or request details before this processing. Shared content may therefore include personal or sensitive information about you or other people.
AuraCue limits sharing to information reasonably necessary to provide the requested feature. AuraCue does not use submitted content for advertising or to train its own models.
You can withdraw this permission at any time through Me > AI Data & Privacy. After withdrawal, AuraCue will not send new content to these providers unless you allow processing again. Withdrawing permission does not delete data previously submitted. To delete data associated with your guest account, use Me > Delete Account or contact us.
Photos and Information About Other People
On iOS, AuraCue uses Apple’s system photo picker. The App receives only the screenshots or images you explicitly select and does not receive permission to browse or scan your full photo library. Screenshots selected for a reply or analysis request are uploaded only after you initiate that request and allow the AI processing described above.
On Android, AuraCue uses a system-provided image or file selection interface to access only the screenshots or images you choose. The interface may vary by Android version and device. The App does not request broad access to browse or scan your full photo library. Screenshots selected for a reply or analysis request are uploaded only after you initiate that request and allow the AI processing described above.
Before upload, AuraCue removes available EXIF metadata, including GPS coordinates, device model, and capture time. Images may be re-encoded when needed for orientation correction or compression and may retain other metadata, such as XMP.
Before uploading, review the content and remove information that is unnecessary for your request, such as names, usernames, profile photos, contact details, and addresses. Do not upload passwords, verification codes, government identification numbers, or payment account details. Submit information about another person only if you have their permission or are otherwise legally authorized to share it with AuraCue and the providers described in this Policy.
How We Share Information
We do not sell your personal information. We share only the information reasonably necessary to operate AuraCue, provide requested features, measure performance, maintain security, or comply with law.
Service providers may include:
- Tencent Cloud infrastructure and Cloud Object Storage (COS), which host AuraCue’s backend and store the account, preference, uploaded-content, task, result, and operational data needed to provide the Service.
- Google Cloud Vision, which receives selected screenshots to extract conversation text.
- Tencent Cloud Model Service (TokenHub), through which AuraCue uses DeepSeek and GLM models. It receives extracted conversation text, relevant request details, and applicable personalization settings to generate and validate replies and analysis.
- Firebase Analytics and Crashlytics on iOS and Android, which may receive pseudonymous App identifiers, device and App information, approved interaction events, crash reports, and diagnostic information to measure usage, diagnose failures, and improve reliability.
- Meta App Events and Adjust on iOS and Android, which may receive permitted App or advertising identifiers, device and App information, installation and campaign information, App-session information, approved conversion events, and fraud-prevention signals for attribution and measurement. IDFA access on iOS is subject to ATT authorization.
- Google Workspace, which processes information you voluntarily provide when contacting customer support.
Service Provider Safeguards
We require third parties that receive personal information from AuraCue to provide the same or equivalent protection described in this Policy and required by applicable law. When a provider processes information on our behalf, it may use the information only to provide the agreed services and for the purposes described in this Policy. We require appropriate confidentiality, security, access-control, retention, and deletion measures, as well as comparable data-protection obligations for subprocessors. Where a provider acts as an independent controller, its own privacy terms also apply.
We do not provide screenshots, conversation content, AI prompts, personalization information, or AI-generated results to analytics or advertising-attribution providers.
We may also disclose information where required by law, to protect users or maintain security, in connection with a business transfer, or at your direction.
International Processing
Information may be stored or processed outside the country where you live. Uploaded images are currently stored in Tencent Cloud Object Storage (COS) in the Silicon Valley region of the United States.
Other processing may occur in locations used by Google Cloud Vision, Tencent Cloud Model Service (TokenHub), and the other providers described in this Policy. The image-storage region does not determine where all processing occurs.
Analytics, Attribution, and App Tracking Transparency
AuraCue integrates Firebase Analytics and Crashlytics, Meta App Events, and Adjust in its iOS and Android applications. Firebase Analytics supports App-usage measurement, while Crashlytics supports crash reporting and diagnostics. Meta App Events and Adjust support installation attribution, campaign measurement, approved conversion events, and related fraud-prevention activities. The data processed by each provider depends on the platform, SDK configuration, enabled features, and applicable privacy choices.
On iOS, IDFA is available only after you grant App Tracking Transparency ("ATT") permission. Where tracking is authorized, AuraCue and its attribution providers may use permitted identifiers and approved conversion events for advertising attribution and measurement. If permission is denied or unavailable, AuraCue does not provide IDFA for tracking-based attribution and may use Apple-permitted non-tracking measurement. Refusing ATT does not affect AuraCue’s core features. You can change your choice in iOS Settings under Privacy & Security > Tracking.
On Android, AuraCue uses Google Advertising ID (GAID), when available and permitted, for advertising attribution, campaign and conversion measurement, and user analytics.
Data Retention and Account Deletion
Uploaded content and task results. Uploaded images expire 24 hours after the server creates the upload record. Reply and analysis tasks—including stored request context, extracted text, and generated results—expire 24 hours after task creation, regardless of when results are delivered.
After expiry, the content is no longer accessible through the App. Background cleanup processes delete private task content from the active application database and associated image objects from private storage. Because cleanup is asynchronous, physical deletion may occur after the 24-hour availability period. Report records and retained copies of generated results follow the separate content-report retention rules described below.
Content reports. We retain report reasons (including custom reasons), task references, and copies of reported generated results as needed to investigate reports and enforce our content-safety rules. Report records that are no longer needed are deleted through periodic cleanup, subject to applicable legal requirements. Account and user-data deletion requests also cover associated report content, subject to the limited retention described in this Policy.
Account and personalization data. Guest-account records, preferences, Role Match answers, and Role Match reports are retained while the guest account remains active or until they are no longer needed to provide the Service. They are removed from active systems when account deletion succeeds, subject to the limited retention described below.
Analytics, diagnostics, support, and backups. First-party analytics and diagnostic records are retained only for periods reasonably necessary for service operation, security, troubleshooting, and measurement. Support communications are retained as needed to resolve requests and maintain support records. Backup copies and copies held by service providers may remain until their applicable retention cycles end or they are overwritten.
Account deletion. You can request deletion of your guest account and associated data through Me > Delete Account in the App or by emailing ayoubmaameri1995@gmail.com. Deletion requests are handled in accordance with applicable law, subject to the limited retention described below.
Limited account, security, and deletion-audit records may be retained where necessary for legal compliance, fraud prevention, security, or dispute resolution. Deleting the App does not by itself delete your guest account or server-side data.
Your Choices and Rights
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information; object to or restrict certain processing; withdraw consent; opt out of certain advertising disclosures; and appeal a privacy-request decision.
You may choose whether to provide optional personalization information. You can request deletion of your guest account and associated data using the in-app account-deletion control or the email channel described above, and deny or revoke ATT in iOS Settings. To request access to or correction of your personal information, or to make another privacy request, contact ayoubmaameri1995@gmail.com with the subject line “AuraCue Privacy Request.”
Security
We use reasonable technical and organizational safeguards designed to protect information against unauthorized access, use, alteration, or disclosure. No transmission or storage method is completely secure, so we cannot guarantee absolute security.
Children’s Privacy
AuraCue is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that such information has been collected, we will delete it as required by applicable law.
Third-Party Links and Services
The App may link to services that SparkJam does not control. This Privacy Policy does not govern the independent practices of Apple, Google, or other third parties when they act for their own purposes. Please review their privacy policies before providing information directly to them.
Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in the App, our data practices, law, or technology. We will post the updated Policy and revise its effective or last-updated date. Where required, we will provide additional notice or request consent before a material change takes effect.
Contact Us
If you have questions, complaints, or privacy requests, contact us at:
SparkJam Co., Limited
Email: ayoubmaameri1995@gmail.com