Privacy Policy

Last updated: July 6, 2026

Application and Developer Information

This Privacy Policy applies exclusively to the mobile application FluxAura (the "App") published on Google Play.

The App is developed, owned, and operated by Novi Anggara Developer (the "Developer", "we", "our", or "us"). All references to "we", "our", or "us" throughout this Privacy Policy refer to Novi Anggara Developer as the legal entity responsible for the operation of FluxAura.

If you downloaded FluxAura from Google Play, this Privacy Policy governs the collection, use, storage, and disclosure of your information while using the App.


Process Summary

  1. Users upload photos and choose a preferred template.
  2. A copy of the stable diffusion model is retrained using this data to personalize the experience.
  3. After retraining, the system generates an avatar based on the personalized model.
  4. Once the avatar is created, both the uploaded photo and the retrained model copy are permanently removed from our servers. Please note that certain restrictions apply to avatar usage—for example, nude images or using someone else’s photos without permission are not allowed.
  5. Your personal data is never used for general model training or to develop other separate AI products.

User-Initiated Cloud Processing

FluxAura provides certain AI-powered editing, enhancement, and rendering features through secure cloud processing. Cloud processing is performed only when you intentionally use a feature that requires server-side computation.

Upload Trigger

Images, videos, or other media are uploaded to our secure servers only after you actively select a cloud-based feature and explicitly initiate the processing. FluxAura never uploads your personal media automatically, in the background, or without your direct interaction. Before any upload occurs, the App clearly indicates that cloud processing is required.

Data Retention and Deletion

Uploaded media is stored only for the time necessary to complete the requested processing. Original uploaded files and generated results are automatically and permanently deleted within 72 hours after processing is completed. Novi Anggara Developer does not retain backups of your uploaded media and does not use your content for advertising, AI model training, profiling, or any unrelated purpose.

Security

All uploads and downloads are protected using industry-standard TLS encryption. Access to uploaded content is strictly limited to automated processing systems and authorized infrastructure required to complete the requested service.

Content Notice

We strive to configure the AI model as appropriately as possible. However, you may still encounter content that feels unsuitable for you. If you see anything offensive or inappropriate, please report it to us at istifazahz@gmail.com. We will take prompt action, and your feedback also helps us improve the algorithm over time.

Information We Collect

1. Platform Activity Data

We may collect information related to how you interact with our Platforms. This includes your browsing behavior, clicks, downloads, shared content, video editing actions, and any other data you provide while using our services. Such information helps us deliver the Platform's features to you.

2. Device and Log Data

To ensure stable and secure operation, improve user experience, support advertising and message delivery, and protect your account security, we collect certain device and log details when you access our services through the Platforms. These include: unique device identifier, GAID, device model, system language, country, advertising ID, operating system and version number, IP address, software version, network access type, network quality metrics, and service logs.

3. Feedback and Support Data

When you reach out to us for support or to provide feedback, we collect the information and materials you submit, along with your contact details (such as phone number and email address). This allows us to respond to your inquiries and offer customer assistance.

4. Face Recognition Information

When you use face editing or synthesis features, we automatically detect the position and shape of your facial features to analyze necessary information for photo processing. The resulting renderings are then returned to you. We do not store these photos, videos, facial feature data, or renderings, nor do we share them with any third party. This processing is done solely to enable the face recognition function and improve your output quality. If your editing involves someone else’s facial features, you are responsible for informing that individual and obtaining their permission.

5. Cloud-Based Processing

To enable fast and accurate image or video processing, we may temporarily upload your materials or related tags to a cloud server for effect generation. These uploads are used only for the specific processing task you request. We do not retain the materials, tags, or associated data longer than necessary, nor do we use them for any other purpose or share them with third parties.

Device Permissions

To provide you with better products, efficient services, and an improved user experience, we may request certain permissions on your device when offering additional features. With your consent and following the principle of collecting only the minimum necessary data, we may access the following permissions and the corresponding information:

  1. Read/Write External Storage Permission – Used to read from and write to your device’s external memory card for video editing purposes.
  2. Camera Permission – Allows you to take photos and record videos within the app.
  3. Network Access Permission – Enables various online services, such as accessing and downloading materials.

The data tied to these permissions is considered sensitive. If you decline a permission, it will only prevent you from using the specific feature that requires it; your ability to use other functions in the app will not be affected. You can check the current status of your permissions at any time through your device’s system settings. You are free to enable or disable any or all of these permissions according to your own preferences.

Please be aware that when you grant a permission, you are authorizing us to collect and use the related personal information solely for providing the corresponding service. If you later disable a permission, this cancels or revokes your previous authorization, and we will stop collecting or using personal information based on that permission from that point forward. However, turning off a permission will not affect any data collection or usage that occurred while the permission was still enabled.

Third-Party SDKs and Service Providers

To deliver core features, process analytics, and support in-app purchases, FluxAura integrates with the following third-party software development kits (SDKs). Each SDK may collect and process certain device and usage data as described below. All such processing occurs only after you have consented to this Privacy Policy.

1. AppsFlyer (provided by AppsFlyer Ltd.)

Purpose: Mobile attribution, marketing analytics, and campaign performance tracking.

Data collected: Device identifiers (Android ID, Google Advertising ID), IP address, app install source (referrer), conversion events, and in-app user actions. This data helps us understand how you discovered our app and improve our promotional activities.

2. Google Play Billing (provided by Google LLC)

Purpose: Processing in-app purchases and subscription transactions.

Data collected: Purchase details, transaction history, and order identifiers. We do not store or have access to your full payment card information; all payment data is handled directly by Google Play.

3. Google Install Referrer (provided by Google LLC)

Purpose: Identifying the source (channel) that led to your app installation.

Data collected: Referrer information (e.g., which campaign or ad led to the install) and installation timestamp. This data is used exclusively for attribution analysis.

4. Google Ads Identifier & AppSet ID (provided by Google LLC)

Purpose: Providing anonymized identifiers for analytics and ad performance measurement.

Data collected: Google Advertising ID (AAID) and AppSet ID. You may reset or limit these identifiers at any time via your device settings.

5. Google Sign-In (provided by Google LLC)

Purpose: Enabling Google account-based login and authentication.

Data collected: Only when you actively choose to sign in, we receive your basic profile information (name and email address) as provided by your Google account. No data is collected passively.

6. Functional Libraries (No Data Collection)

The following tools are used solely for technical operations such as networking, image loading, media playback, local storage, and background scheduling. They do not collect, transmit, or process any personal data: Retrofit & OkHttp (networking), Glide (image loading), ExoPlayer (media playback), DataStore (local preferences), WorkManager (background tasks), and Hilt (dependency injection).

Analytical Data

We collect and examine data to continuously improve our Service and user experience. This information is processed in aggregated form, allowing us to better understand usage patterns and refine our products. Such summarized insights may be shared with our affiliates, agents, and business partners for purposes including research, development, and commercial planning. Please be assured that this data is anonymized and does not personally identify you or your end users.

How We Use Your Personal Information

We may use the information you provide, consistent with this policy, to deliver our services or to communicate with you. Specific use cases include the following:

1. Service Enhancement

Your information helps us create, develop, operate, deliver, and improve our offerings. For example, by studying how users interact with the platform, we can ensure it remains intuitive and easy to use.

2. Security Purposes

We use your information to maintain account and network security, protecting our services for all users. This may include pre-screening or scanning uploaded content for potentially unlawful material. Your data may also be used for risk prevention, customer security support, and related safety measures.

3. Sending Important Communications

We use your information to deliver critical notices, such as alerts about your account or updates to our terms, conditions, and policies.

4. Compliance with Legal Obligations

We retain and manage your information as necessary to meet our legal responsibilities. This may involve recording, auditing, analyzing, or processing your data in line with applicable laws, including in emergency situations.

Your Choices

You may limit data collection by:

Your Right to Delete Data

While using our app, you retain full control over your information and may delete saved records at any time. We are committed to protecting your privacy and ensuring that data removal is possible. You can clear your history and other stored information through the app’s settings menu. Additionally, uninstalling the app will automatically erase any data stored locally on your device. Please be aware that once data is deleted, it cannot be restored. If you have any questions regarding your deletion rights, feel free to reach out to our support team for help.

Cookies and Similar Data Technologies

Like most online services, we use cookies, web beacons, and similar technologies. Cookies are small data files stored on your hard drive or in your device's memory. They retain information about how you use our services, helping with tasks such as user authentication, remembering your preferences and settings, analyzing traffic and usage patterns, measuring ad campaign performance, and enabling social features. Web beacons are small pieces of software placed on web pages or in emails, which help us understand your interaction with that content.

Most web browsers accept cookies by default. You can usually adjust your browser settings to delete or block browser cookies if you prefer. Please be aware, however, that doing so may affect the availability and functionality of our services.

We use third-party analytics tools to measure traffic and usage trends for our services. These tools collect data sent by your device or our services, including the pages you visit, add-ons you use, and other information that helps us improve our offerings. This analytics data is aggregated with similar data from other users in a way that does not reasonably identify any specific individual.

We work with third-party advertising agencies to serve ads on the internet or other media. To assess ad effectiveness and determine payment amounts to these agencies, we integrate third-party modules into our applications. Additionally, we may include such modules to better understand how users interact with our services.

How Long We Keep Your Personal Information

We retain your personal data for a period of 48 months. We may keep and use your information as necessary to fulfill legal obligations (for example, complying with applicable laws), resolve disputes, and enforce our agreements and policies.

We also retain Usage Data for internal analytical purposes. This type of data is generally kept for a shorter duration unless it is needed to enhance security, improve our Service functionality, or we are legally required to retain it for a longer period.

Data Sharing

We do not sell or rent your personal data to third parties. The SDKs listed above share data only with their respective providers for the purposes stated, and we contractually require them to process data in accordance with applicable privacy laws.

How We Share Your Information

Novi Anggara Developer does not sell, rent, or trade your personal information to any third party. We share personal information only when necessary to provide the services you request, operate and maintain FluxAura, process transactions, comply with applicable laws, or protect our legal rights and the security of our services.

Third-Party Service Providers

To provide the core functionality of FluxAura, we work with carefully selected third-party service providers. These providers support services such as user authentication, payment processing, analytics, installation attribution, cloud infrastructure, fraud prevention, and application performance monitoring.

Depending on the feature you use, these providers may process limited categories of information, including:

Each third-party provider processes personal information solely for the purpose of delivering the services they perform on our behalf and in accordance with their own privacy policies and applicable data protection laws. We do not authorize our service providers to use your personal information for their own independent advertising or marketing purposes.

AI Content Processing

When you voluntarily upload photos, videos, or other media for AI-powered processing, your content is used solely to generate the results you request.

Your uploaded content is never sold, licensed, or shared with third parties for advertising, profiling, or training general artificial intelligence models. Media files are processed only for the requested service and are automatically deleted according to the retention period described in this Privacy Policy.

Legal Disclosure

We may disclose your personal information only when we believe such disclosure is necessary to:

Business Transfers

If FluxAura or Novi Anggara Developer becomes involved in a merger, acquisition, corporate reorganization, financing, sale of assets, or similar business transaction, your personal information may be transferred as part of that transaction.

In such cases, the receiving entity will be required to protect your personal information under privacy protections that are substantially equivalent to those described in this Privacy Policy and in accordance with applicable data protection laws.

Data Security and Protection Measures

We take the security of your personal information seriously. To guard against unauthorized access, disclosure, or other potential risks, we have implemented reasonable physical, electronic, and organizational safeguards for data collected through your use of our Platform services. We are committed to doing our utmost to protect your information.

Our security practices are regularly reviewed and updated as needed to align with business developments, technological changes, and legal requirements. These measures include, but are not limited to, technical and organizational security policies, access controls, and employee training programs.

While we place a high priority on protecting your data, please understand that no method of internet transmission or electronic storage is entirely secure. Although we strive to protect your personal information using industry-standard practices, absolute security cannot be guaranteed.

In the event that we become aware of a security breach affecting your personal information, we will notify you as required by applicable laws. By using the Platform, you agree to receive such notifications electronically.

Your Privacy Rights

If you wish to learn more about your legal rights under applicable laws or would like to exercise any of them, please feel free to reach out to us using the contact details provided in the “How to Contact Us” section below. Depending on your local regulations, you may have the right to ask us to:

  1. Provide access to, or a copy of, certain personal information we hold about you.
  2. Stop using your information for direct marketing purposes, including any marketing activities based on profiling.
  3. Correct any outdated or inaccurate information we have about you.
  4. Erase specific information we maintain on you.
  5. Limit how we process or share certain information related to you.
  6. Transfer your information to another third-party service provider.
  7. Withdraw any consent you previously gave regarding the processing of your information.

We will evaluate all requests and respond within the timeframe required by applicable law. Please be aware that in some situations, certain information may not be subject to such requests — for example, if we need to continue processing your data to protect our legitimate interests or to comply with legal obligations. Before processing your request, we may ask you to provide reasonable information to verify your identity.

Privacy Protections for Minors

Our services are not designed for users under 18 years of age (referred to as “minors”). We do not knowingly collect personally identifiable information from anyone below this age. If you are a parent or legal guardian and become aware that your child has provided us with Personal Data, please get in touch with us. Upon discovering that such information has been collected without verified parental consent, we will take appropriate steps to delete it from our records.

Rights Under CCPA, VCDPA, GDPR, and LGPD

We adhere to the privacy requirements set forth by California (CCPA), Virginia (VCDPA), the European Union (GDPR), and Brazil (LGPD). For users residing in these jurisdictions, applicable laws grant you rights such as accessing, correcting, deleting, or objecting to the processing of your personal data. To exercise any of these rights, please reach out to our support team for assistance.

Legal Grounds for Processing Your Data

We process your personal information in compliance with relevant data protection laws, including the General Data Protection Regulation (GDPR). Depending on the specific purpose of processing, we rely on one or more of the following legal bases:

1. Legitimate Interests

We may process certain non-sensitive data to pursue our legitimate interests, which include:

When relying on legitimate interests, we carefully weigh our interests against your rights and freedoms.

2. Legal Obligations

In certain situations, we are required to process your data to meet legal obligations, such as complying with applicable financial, tax, or regulatory requirements.

3. Vital Interests

In exceptional circumstances, we may process your data to protect your vital interests or those of another person — for example, in response to a security incident affecting an application.

Right to Lodge a Complaint

If you consider that our processing of your personal data violates applicable data protection laws or your rights under those laws, you have the right to file a complaint with a supervisory authority. This applies, for example, to EU residents under the General Data Protection Regulation (GDPR), as well as other local data protection laws that may apply in your region.

Where to Submit a Complaint

Should you wish to file a complaint, you may contact the relevant data protection authority in your country. Their contact information is typically available on their official websites. Alternatively, you can reach out to us directly for further guidance.

Internal Resolution First

Before escalating to a formal complaint, we kindly encourage you to contact us so we may make reasonable efforts to address your concerns. You can reach our Data Protection Officer (DPO) or contact us at istifazahz@gmail.com.

Data Controller Information

For the purposes of applicable data protection laws, the data controller responsible for processing personal information collected through FluxAura is Novi Anggara Developer. Novi Anggara Developer determines the purposes and means of processing personal data and is responsible for ensuring compliance with applicable privacy legislation. For any privacy-related questions, please contact us at istifazahz@gmail.com.

Data Protection Officer

We have appointed a Data Protection Officer to oversee our privacy practices. The DPO can be contacted as follows:

Updates to This Privacy Policy

We may revise our Privacy Policy from time to time. We encourage you to review this page periodically for any updates. When changes are made, we will post the revised policy on this page. All changes take effect immediately upon posting.

Get in Touch

If you have any questions, concerns, or suggestions regarding our Privacy Policy, please don’t hesitate to contact us at istifazahz@gmail.com.