Draft for legal review. Not yet in effect.
Aurette privacy policy
Last updated 3 November 2026
Aurette is an app made by MIJU Limited, a company registered in New Zealand ("we", "us"). This policy explains what we collect when you use Aurette, why, and what you can do about it. The short version: you don't need an account, we only see the photos you choose to edit, and we delete them quickly.
What we collect
Photos you choose to edit
When you tap Create, the app sends the photo you picked to our servers, where it's edited with the look you chose.
- The photo you sent is deleted as soon as your edited photo is ready, or as soon as the attempt fails.
- Your edited photo is kept on our servers for up to 24 hours so the app can download it, then deleted.
- Copies saved on your phone stay there until you delete them or delete the app.
We don't look through your photo library. The app only accesses the photos you pick.
An anonymous app ID
The first time you create a photo, the app gets a random ID and a key, stored securely on your phone. It isn't linked to your name, email or phone number. We use it to keep track of your credits and to show you your own results only.
Purchases
Subscriptions and credit packs are sold through the App Store or Google Play, which handle payment. We never see your card details. We receive your purchase status (which plan, when it started and renews) through RevenueCat, the service we use to manage subscriptions.
Technical logs
Our servers record basic technical information, such as when a request was made, which look was used, and any errors, to keep the service running and to prevent abuse. These logs are kept for a short time.
We don't ask for your name, email, contacts or location. Before we add any advertising or analytics measurement to the app, we'll update this policy.
How your photos are processed
Looks are applied by automated image-editing models. Your photo is first checked for sexual content, which isn't allowed. We don't create face recognition data or biometric templates from your photos, and we don't use your photos to train our own models.
To process photos we use these service providers, which act on our instructions:
| Provider | What it does |
|---|---|
| Cloudflare | Runs our servers and stores photos for the short times described above |
| fal.ai | Runs the image models and the content check |
| Google (Gemini image models) and Black Forest Labs (FLUX models) | The models that apply looks, accessed through fal.ai |
| RevenueCat | Manages subscription and purchase status |
These providers may process data outside New Zealand, including in the United States. We don't sell your information.
Your choices
- Delete my data: in Aurette, go to Settings → Delete my data. This deletes the photos and records we hold for your app ID, removes saved results from your phone, and starts a fresh anonymous ID.
- Access or correction: under the New Zealand Privacy Act 2020, and similar laws where you live (such as the GDPR or California law), you can ask what we hold about you and ask us to correct or delete it. Email us.
- Subscriptions: manage or cancel them in your App Store or Google Play account settings.
Age
Aurette is intended for people aged 18 and over.
Security
Data is sent over encrypted connections, results are only available through short-lived private links, and access to our systems is restricted.
Changes
If we change this policy, we'll update the date above, and for significant changes we'll let you know in the app.
Contact
MIJU Limited, New Zealand (company number 4428158, NZBN 9429030242173) · hello@miju.nz