Privacy policy

Who we are

GroupUltra Limited operates and publishes auramaxxing and is responsible for the personal information described in this policy. For questions or privacy requests, contact service@intent.inc.

auramaxxing is not directed to children below the minimum age required by applicable law. We do not knowingly collect personal information from children who are not eligible to use the service. If you believe a child has provided information to us, please contact us so we can investigate and take appropriate action.

Information we collect

• Account information. Your email address, email verification information, account identifier, and information necessary to sign you in and keep your account secure. When you choose Apple or Google sign-in, we receive the provider account identifier and verified email address, and any name you choose to share. Apple may supply a private relay email address. We use a matching verified email to connect sign-in methods to one account; an external Google email may require an email verification code. Provider identifiers and sign-in credentials remain private.
• Profile and selected content. Your display name, handle, avatar, biography, hobbies, social links, and music, movies, series, books, people, destinations, or other preferences you choose to add. These fields are optional except where needed to create your first website.
• Content you create. Photos, captions, website content and drafts, creative requests, guestbook notes, game results, messages, attachments, and reports or support requests you send.
• Social activity. Follows, reactions, comments, activity notifications, and related interactions needed to provide the service.
• Device and technical information. IP address, browser and device information, network and request logs, usage events, performance information, and errors. If you allow push notifications, we process the device push token needed to deliver them.
• Necessary browser storage. Authentication and browser Guest identifiers, including cookies or equivalent local storage used to preserve sessions, optional Guest nicknames, notes, and scores.

We do not request access to your contacts or your device’s location. Photo-library or camera access is used when you choose to provide a photo. You can control permissions in your device settings.

What is public, and what is not

Your published website is public. The profile fields, selected favorites, photos, captions, and social links you choose to display can be viewed by anyone who can access it. Guest notes and published game results, including their public names, are also visible to visitors. Consider what you want to share before publishing or submitting content.

Unpublished website drafts are not public. Private chat content is available to its participants and is processed by us and the service providers needed to deliver, store, secure, and support chat. Private chat is not published on your homepage. We do not describe chat as end-to-end encrypted.

Other people may copy or share public content. Removing it from auramaxxing cannot guarantee that copies held by others will also disappear.

How we use information

We use information to provide and personalize auramaxxing: authenticate accounts, create and publish websites, save chosen media and preferences, deliver messages and notifications, maintain guestbooks and game results, answer requests, and keep content available.

We also use necessary technical and usage information to understand how the service works, diagnose failures, improve performance, prevent fraud and abuse, enforce our rules, and meet legal obligations.

Where a law requires a legal basis, our processing depends on the circumstances: providing a service you request, our legitimate interests in running and protecting the service, compliance with legal obligations, or your consent. Where processing relies on consent, you can withdraw it for future processing.

We do not sell personal information, serve advertising, or track you across other companies’ apps and websites for advertising.

AI-assisted creation and editing

When you request AI-assisted website creation or editing, auramaxxing sends Anthropic and OpenAI the information needed to generate the result. Depending on the action, this may include your display name, profile photo, selected profile preferences and content, creative instructions, current website content and code, and images supplied as references. Anthropic uses these inputs to edit website content and code, and OpenAI uses them to create artwork.

For an edit to a selected part of your website, the app can capture a website preview screenshot, upload it privately, and send it with your selection and edit request to Anthropic. The screenshot is not added to your public website by this action. The app does not supply your sign-in token, password, or private messages as inputs to these AI features.

This data use is described in the app’s terms of service and this privacy policy. You choose whether to start an AI creation or edit. Only include information and images you have the right to use and want processed for that request. Photo references support creative output; this feature is not facial recognition. Stopping future use of AI features does not cancel an operation already started or recall information already sent to a provider. You can contact us about privacy or deletion requests.

Anthropic and OpenAI process submitted data under the terms and settings applicable to their API services. Their practices are described in Anthropic’s Privacy Center and OpenAI’s business data privacy information. We do not use your personal information or content to train AI models. Anthropic and OpenAI each state that API inputs and outputs are not used for model training by default unless the customer explicitly opts in. This is separate from retention for service operation, safety, or legal obligations; we do not promise zero retention by a provider.

Interactive websites and games

Published personal websites contain software made by their owners, including interactive pages and games. When you open a website, its interactive features may receive your public display name, profile identifier, and avatar. When you use those features, they may also receive your scores, progress, and guestbook notes; public notes and ranked scores can be seen by other visitors. A visitor can leave one love on each homepage; it is stored with their account or browser Guest identity, the homepage shows only the total, and network addresses are used only transiently for rate limiting and are not stored with a love. This software does not receive your sign-in token, email address, or private messages, and opening a website does not grant it access to your device’s camera, photo library, or other protected capabilities. Choosing media or making an upload public requires a separate action. You can report content or block people using the website actions menu.

Providers and other recipients

We use service providers for the functions described below. They receive the information needed to provide their services, subject to the arrangements and obligations that apply to them.

• Anthropic: AI editing of website content and code as described above.
• OpenAI: AI artwork for website creation and editing as described above.
• Stream: chat delivery, message and attachment processing, and related chat functionality.
• Apple and Google: optional account authentication. The selected provider handles your sign-in and sends us credentials needed to verify your identity. We do not receive your Apple or Google password or access your mailbox. We encrypt and retain Apple authorization tokens to revoke access when you delete your account.
• Resend: authentication emails and necessary email delivery information.
• Vercel, Railway, and object-storage services: website and API hosting, databases, uploaded files, and operational logs.
• Content sources: Apple Music, TMDB, Open Library, Wikidata, GeoNames, and Pexels support the searches and content you choose. Catalog requests can share the terms you search for and server connection information with the relevant provider.

When you choose to play a song preview, your browser connects to Apple’s media servers, which may receive your IP address and connection information under Apple’s privacy policy. We store selected song metadata and preview addresses; we do not download preview audio or access your Apple Music account or listening history. Following an external link or interacting with another provider’s service is governed by that provider’s own terms and privacy practices.

We may disclose information when reasonably necessary to comply with law, respond to a valid legal request, protect people and the service, or address fraud, security incidents, and violations. If the business is reorganized or transferred, relevant information may be transferred subject to applicable law and appropriate notice.

Cookies and browser Guests

Necessary storage helps keep you signed in and connects your browser’s Guest nickname, notes, and game results. A Guest identity is separate from an app account. Clearing storage, switching browsers, or using private browsing may prevent us from recognizing the same Guest.

Our website does not use advertising or cross-site tracking cookies. Third-party embedded content may use its own cookies as explained above. Browser controls can limit or remove storage, but some functions may stop working or lose continuity.

Retention and deletion

We keep information for as long as it is needed to provide the relevant features, operate and protect the service, or comply with legal obligations. Different records have different purposes; there is no single retention period for all information.

You can delete your account in the iPhone app under Settings → Delete account, opened from your profile photo in My Space or, before your first website is published, from the Account options (⋯) button. Account deletion removes the profile, uploaded content, chat data, notes, and scores associated with the account from the service and revokes sessions. Provider cleanup, including revoking Apple sign-in authorization for linked accounts, may complete asynchronously, with failed cleanup work retried automatically. Revoking access at Apple or Google does not by itself delete your auramaxxing content; use the in-app account deletion action to request deletion.

Limited information may be retained for security, fraud prevention, legal obligations, or resolving disputes where justified. Backup copies disappear through normal backup rotation. We cannot guarantee deletion of material already copied by other people or retained by an independent third-party service under its own obligations.

If you cannot access the app, or need help with Guest data, contact service@intent.inc. We may verify your identity or authority before completing a request.

Your choices and rights

You can edit your profile, chosen content, and album in the app, and control camera, photo, and notification permissions through your device settings. Avoid submitting additional personal information that you do not want processed.

Depending on where you live and the circumstances, you may have rights to access, correct, delete, or receive a copy of your personal information; object to or restrict processing; withdraw consent; or complain to a data protection authority. Contact service@intent.inc to make a request. These rights are subject to applicable conditions and exceptions. We will not discriminate against you for exercising rights provided by law.

International processing and security

Our providers may process or store information in countries other than your own, including the United States. Privacy laws may differ between countries. We apply the safeguards required by applicable law to relevant transfers; this policy does not claim that every transfer uses one particular mechanism.

We use technical and organizational measures intended to protect information and restrict inappropriate access. No online service or transmission is completely secure. Protect your sign-in email and verification codes, and contact us if you believe your account is at risk.

Changes and contact

We may update this policy when the service or our practices change. The date above identifies the current version. We will provide additional notice when required by law or appropriate for a material change.

Privacy questions for GroupUltra Limited: service@intent.inc. You can also visit Help & support.