Privacy

1. Data controller

EXPERT FORCE, SARL unipersonnelle — 1 B avenue du Général Leclerc, 77000 Melun, France (RCS Melun B 948 669 965), as publisher of the aurame.ai service. Contact: hello@aurame.ai.

2. Data collected

• Account: email address, public handle, password (stored exclusively as a bcrypt hash).
• Profile: display name, age, gender, bio, interests, photos.
• Location: processed in real time using approximate distance bands — your exact coordinates are never exposed to other users and are deleted under a short retention period.
• Media: EXIF metadata (including GPS) is stripped before any storage.
• Technical logs: request logs with anonymized identifiers (request_id), containing no location data.

3. Purposes and legal bases

• Service provision (contract performance): account, feed, matching, messaging.
• Legitimate interest: service security, abuse prevention.
• Consent: processing of your content by AI services for recommendation and writing assistance — withdrawable at any time from your consent settings.
• Consent: geolocation, requested through your device's location permission and withdrawable at any time in its settings.
• Legal obligation: accounting retention of merchant payments.

4. Processors and transfers

Hosting: Hetzner Cloud (EU, Germany). Merchant payments: Stripe. Transactional email: Purelymail. AI: selected providers with automatic failover, processing only the data strictly necessary for the request. No data selling. No advertisers. No third-party trackers: no tracking cookies — only technical authentication tokens are stored locally on your device.

5. Retention periods

Account: lifetime of the subscription, then deleted on request. Location: short retention by design. Technical logs: limited period required for security. Payments: applicable legal period.

6. Your rights (GDPR)

Access, rectification, erasure, portability, restriction, objection. Exercise them directly in the app (Settings → personal data: DSR request, export, deletion) or by email. The account can be deleted at any time; deletion also removes associated content and profiles.

7. Security

Encryption in transit (TLS) and at rest for persistent storage. Bcrypt passwords. Automatic lockout after failed sign-ins. Data minimization by architecture: sensitive fields structurally cannot leak into API responses.

8. Cookies and trackers

No tracking cookies, no advertisers, no third-party trackers. Only technical authentication tokens are stored locally on your device. Details: cookie policy.

9. Complaints

You may contact the CNIL (cnil.fr) or any data protection authority of your country.