Privacy Policy — UpRelay: AURA

This Privacy Policy explains how your personal data is processed when you use the UpRelay: AURA app (“AURA”), provided by UpRelay (“UpRelay”, “we”, “us”). AURA is a privacy- and compatibility-focused dating and connection app designed for adults who live in Bali or spend time on the island.

Data controller: UpRelay Yazılım Teknolojileri Limited Şirketi, Atatürk Mah. Ertuğrul Gazi Sk. Metropol İstanbul Sitesi C1 Blok No: 2B İç Kapı No: 131, 34758 Ataşehir / İstanbul, Türkiye. For any privacy question: [email protected].

1. In short

No phone number is required to start.
No social media account connection is required.
Your contact list is not uploaded or used for matching.
Email is optional; if you add it, it is used for sign-in and account recovery.
AURA has no ads. Your personal data is not sold or shared for advertising targeting.
Your live location and precise location are not shown to other users.
Compatibility is assessed using information you choose to provide. AURA does not decide for you.
You can delete your profile and related data directly in the app.

Using AURA requires some data to be processed. Below we explain which data we process, why, and for how long.

2. Data we process

When you first open the app, a technical user identifier is created to identify your account.
Email (optional): If you add it, it is used for sign-in and account recovery. It may also be used for required account-security and purchase-related messages. If you turn on email notifications in settings (for example, a weekly summary or product updates), it is also used only for the notifications you choose.
Sign in with Apple (optional): If you choose this method, the identifier Apple provides to us (and the email address you choose to share) is linked to your account.

2.2 Profile and compatibility data

Information you provide when creating your profile, for example: display name, birth date (for age and compatibility), gender identity, who you want to see, relationship intent, interests, values, communication style, lifestyle preferences, region and how and how long you are in Bali, your “about me” text, profile prompts and your answers, and your photos.

You may optionally provide additional details such as birth time and birth place; these are used only for the symbolic insights in the app.

Some information, such as gender identity and who you want to see, may be considered special-category or sensitive data under the law that applies where you are. We process this information only to the extent you choose to provide it and so that the app can show you people you may be compatible with.

2.3 Verification data

Some features, such as expressing interest, may require you to be a verified member. During verification, a selfie you take in the app is processed for trust and safety review. No identity documents are required. To confirm that your profile is genuine, your selfie is compared with your profile photos using face-matching technology; this involves processing biometric data. With your permission, the selfie is checked by a third-party AI provider on our behalf; our team may also review it. If you don’t give permission, our team reviews your selfie instead; this takes longer.

2.4 Interaction and message data

Interest you express, profiles you save, matches, messages and message reactions, users you block, reports you submit, and support requests.

2.5 Location and proximity data

Region selection: The region or city you select in your profile.
Crossed Paths (optional): If you turn on this feature and grant location permission, your device’s approximate (low-accuracy) location is sent to our servers at intervals while the app is open and the feature is active. Location is not sent for this purpose while the app is in the background. This data is used to determine whether your path has crossed with people who use the same feature.
Your live location and precise location are not shown to other users. Other people using the feature may see that your paths crossed, with a general area or venue label and an approximate time.
In discovery, other users may see only your approximate distance (for example, “3 km”), not your exact location.
You can turn off location permission in your device settings and Crossed Paths in the app settings at any time, and you can clear your crossed-paths history in the app.

2.6 Purchase data

Paid subscriptions such as Pro are purchased through the App Store or Google Play. Your payment details are not passed to us. We receive your subscription status (e.g., active plan, renewal and expiry dates) from the store and from our subscription-management provider.

2.7 Device and technical data

Device model, operating system and version, app version, installation identifier, language preference, push notification token, session records, and error information needed for the app to work.

We also collect in-app usage events (such as screens viewed, interests sent, matches, messages sent and subscription starts, without message content) and crash reports through Google Firebase Analytics and Firebase Crashlytics, to understand how AURA is used and to fix errors. Advertising identifiers are not collected. You can read how Google uses this data at www.google.com/policies/privacy/partners/.

2.8 Data we do not collect

We do not upload your contact list. We do not ask for a phone number. We do not ask you to connect a social media account.

3. How we use data

To create your account, let you sign in, and recover your account.
To show your profile to other users within the app and prepare discovery suggestions.
To assess and explain compatibility (see Section 4).
To operate matches and messaging; messaging opens only after mutual selection.
To operate Crossed Paths (only if you turned it on).
To translate profile texts into other users’ languages.
For trust and safety, such as verification, photo moderation, reviewing reports, and preventing abuse.
To manage your subscriptions and access rights.
To send the notifications you choose and respond to support requests.
To keep the service secure and working, and to fix errors.
To meet our legal obligations.

4. AI-assisted compatibility assessment

AURA compares, across multiple dimensions, the profile and compatibility information that two people choose to share, assesses potential compatibility, and explains the areas that may bring them together. AI models are used for this; AI may also be used to translate profile texts, moderate photo content, and check verification selfies.

The assessment is based on the information you provide; accurate, up-to-date answers lead to more meaningful insights.
AURA does not decide for you. You decide whom you want to get to know. Compatibility insights are for information only.
The compatibility assessment is not used as a solely automated decision that produces legal effects concerning you or similarly significantly affects you.
For AI processing, your data may be passed to service providers acting on our behalf and under our instructions.
Before your personal data is shared with third-party AI providers, we ask for your explicit permission in the app, separately for each use:
- Compatibility insights and translations: If you don’t give permission, these AI-based features are not available to you.
- Photo checks: If you don’t give permission, our team reviews your profile photos instead; this takes longer.
- Selfie verification: If you don’t give permission, our team reviews your selfie instead; this takes longer.
You can change the first two permissions at any time in the app settings. To withdraw your permission for selfie verification, contact us through in-app support or at [email protected].

5. Legal bases

Depending on the applicable law (e.g., Turkey’s KVKK and the EU General Data Protection Regulation — GDPR), we process your data on these bases:

Performance of a contract: Your account, profile, matches and messaging, subscription.
Explicit consent: Profile information that may be sensitive, optional location (Crossed Paths), verification selfie, push and email notifications, sharing data with third-party AI providers. You can withdraw consent at any time; this does not affect the lawfulness of processing before withdrawal. To withdraw consent, turn off the relevant setting in the app or in your device settings (location, notifications, AI permission), or write to [email protected].
Legitimate interests: Security, preventing abuse, reviewing reports, and improving the service.
Legal obligation: Data we are required by law to retain or provide to competent authorities.

Your personal data is not sold or shared for advertising targeting. Your data is shared only in the following cases:

Other users: Your profile is shown to other users within the app according to your visibility settings. When you express interest, the other person may be able to see it in the app, depending on their plan. Your messages are delivered only to the person you matched with after mutual selection. Your last active time may be visible to your mutual matches.
Service providers: Providers acting on our behalf and under our instructions; for example, cloud hosting and database, push notification services (Apple and Google/Firebase), subscription management, Sign in with Apple, email delivery, and AI model providers. We contractually require these providers to use your data only to provide services to us and to protect it at a level at least equal to this policy. Our AI model providers: OpenAI.
App stores: Purchases are processed by Apple or Google under their own privacy policies.
Legal requirements: To competent authorities where required by law or where necessary to protect users’ safety.
Corporate transactions: In the event of a merger, acquisition, or asset transfer, with the protections in this policy maintained.

Our service providers may process your data outside your country. Where this happens, we apply the safeguards required by applicable law.

7. Retention

Your account and profile data are kept while your account is active.
Your verification selfie and any biometric data derived from it are kept while your account is active and are deleted when you delete your account. In any case, they are deleted no later than 3 years after you last used AURA. Where applicable law requires a shorter period, or additional notices or consent for biometric data, we follow those requirements.
Crossed Paths location data is kept for as long as needed for the feature to work; you can clear your crossed-paths history at any time.
When you delete your account, your profile, matches, and conversations are permanently removed. Some data may be retained for a limited period where needed for legal obligations, safety and abuse prevention (e.g., report records), or resolving disputes, and is then deleted or anonymized.
Data in backups is deleted within the regular backup cycle.

8. Account and data deletion

You can delete your profile and related data directly in the app: Profile → Settings → Delete Account. Deletion cannot be undone.

Deleting your account does not cancel your subscription. You must cancel your subscription separately in your App Store or Google Play account settings.

If you cannot access the app, you can send a deletion request to [email protected].

9. Age requirement (18+)

AURA is only for people aged 18 or over. We do not knowingly collect data from anyone under 18. If we learn that someone under 18 has an account, we close the account and delete the related data. You can report such cases in the app or notify us at [email protected].

10. Your rights

Depending on the applicable law where you are (e.g., KVKK Article 11 or the GDPR), you may have the right to:

Learn whether your data is processed and access your data,
Request correction of inaccurate or incomplete data,
Request deletion of your data,
Request restriction of processing and object to processing,
Data portability,
Withdraw your consent at any time,
Learn the third parties to whom your data is transferred,
Lodge a complaint with a data protection authority (in Turkey, the Personal Data Protection Authority; in the EU, your local data protection authority).

You can edit most profile information in the app. For other requests, write to [email protected]. We may need to verify your identity before responding to your request.

11. Security

We apply technical and organizational measures such as encrypted connections and access controls to protect your data. No system is entirely free of risk; if you notice anything suspicious, please tell us right away.

12. Changes

We may update this policy from time to time. We will announce significant changes in the app or by another appropriate means. The current version is always on this page; the date at the top shows the latest update.

13. Contact

UpRelay Yazılım Teknolojileri Limited Şirketi
Atatürk Mah. Ertuğrul Gazi Sk. Metropol İstanbul Sitesi C1 Blok No: 2B İç Kapı No: 131
34758 Ataşehir / İstanbul, Türkiye
MERSIS No.: 0893065512700001
Trade Registry No.: 1140837

Email: [email protected]

In the app: Profile → Settings → Support