AuraCheckAuraCheck Support

Privacy Policy

Last updated: August 2026  ·  Applies to: AuraCheck iOS App

1. Who We Are

AuraCheck is developed and operated by NovaBranch Pte. Ltd. ("NovaBranch", "we", "us", or "our"), a software company incorporated in Singapore (UEN: 202503038Z).

For privacy enquiries: hello@novabranch.co

2. Information We Collect

When you use AuraCheck, we collect the following categories of data:

Account & Profile Data

  • Apple ID authentication credentials (managed by Apple; we receive only a unique identifier and, optionally, your name)
  • Username you choose within the app
  • Profile photo you upload
  • Campus / Turf affiliation you select

Content You Post

  • Fit photos and any captions you write
  • Fire (reactions) you give and receive

Social & Interaction Data

  • Users you follow and who follow you
  • Users you have blocked or reported
  • Content you have reported

Device & Technical Data

  • Firebase Cloud Messaging (FCM) token for push notifications
  • Device identifiers used by Firebase App Check to verify app integrity
  • Crash logs and performance diagnostics (via Firebase Crashlytics)

Advertising & Analytics Data

  • In-app events (e.g. app opens, post uploads) sent to Meta (Facebook) and TikTok for advertising measurement purposes, subject to your device's ad tracking settings (ATT prompt)

3. How We Use Your Information

  • To create and manage your account
  • To display your profile, fits, and Aura score to other users
  • To operate the Arena feed, Turf leaderboards, and Weekly Heat rankings
  • To send push notifications (new followers, reactions). You can disable these in iOS Settings
  • To enforce community safety (reviewing reports, actioning blocks)
  • To measure advertising campaign effectiveness (Meta, TikTok)
  • To detect fraud and verify app integrity via Firebase App Check
  • To improve app stability using crash logs

4. Information Shared With Third Parties

We do not sell your personal data. We share data only with the following service providers under their respective terms:

  • Google Firebase: Authentication, Realtime Database, Cloud Storage, Cloud Messaging, App Check, Crashlytics (Google LLC, USA)
  • Apple: Sign-In authentication and App Attest (Apple Inc., USA)
  • Meta (Facebook): Advertising measurement SDK (Meta Platforms Inc., USA)
  • TikTok: Advertising measurement SDK (TikTok Inc., USA)

All third-party SDKs operate subject to your device's App Tracking Transparency (ATT) settings. If you deny tracking, advertising event data is not sent to Meta or TikTok.

5. Public Content

Your username, profile photo, Turf, Aura score, follower/following counts, and the fit photos you post are visible to all users of AuraCheck. Do not post content that reveals personal information you wish to keep private.

6. Camera & Photo Library Access

AuraCheck requests access to your camera and photo library solely to allow you to upload fit photos. We do not access your camera or library in the background. You can revoke these permissions at any time in iOS Settings → AuraCheck.

7. Face ID

AuraCheck uses Face ID (via Apple's LocalAuthentication framework) as a re-authentication step before permanent account actions (such as deleting your account). Your biometric data is processed entirely on-device by Apple's secure enclave and is never transmitted to NovaBranch or any third party.

8. Data Retention

Your data is retained for as long as your account is active. When you delete your account:

  • Your Firebase Auth record is permanently deleted
  • Your profile data, posts, and social graph are removed from our Realtime Database
  • Your profile photo and uploaded images are deleted from Firebase Storage
  • Residual anonymised analytics data may be retained for up to 90 days

You can delete your account at any time via your Profile tab → Settings icon → Delete Account.

9. Children's Privacy

AuraCheck is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us at hello@novabranch.co and we will delete it promptly.

10. Your Rights (PDPA)

Under Singapore's Personal Data Protection Act (PDPA), you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate personal data
  • Withdraw consent and request deletion of your data
  • Request information about how your data has been used or disclosed in the past year

To exercise any of these rights, email hello@novabranch.co. We will respond within 30 days.

11. Data Security

We use Firebase App Check to verify that only legitimate instances of AuraCheck can access our backend. Data in transit is encrypted via TLS. Data at rest is protected by Google Firebase's infrastructure security. Despite these measures, no system is 100% secure. If you suspect unauthorised access to your account, contact us immediately.

12. Changes to This Policy

We may update this policy periodically. We will notify you of material changes via a push notification or in-app notice. The "last updated" date at the top of this page will always reflect the most recent version.

13. Contact

NovaBranch Pte. Ltd.
Singapore
hello@novabranch.co