Auramy Privacy Policy

Last updated: 14 October 2026

This policy explains what Auramy ("the app") does with your information. It applies to the Auramy apps for iPhone and iPad (App Store) and for Android (Google Play), and to the shared-link page at auramyy.github.io/s/. Auramy is developed and operated by Mustafa Yağız ("the developer", "I", "me").

1. Information the developer collects

None. Auramy has no backend service. There is no account to create, no server that receives your data, and no way for the developer to see your photos, your library, your searches, what you share or how you use the app.

Specifically, Auramy does not:

• collect, transmit or store your photos or videos on any server operated by the developer;
• include any analytics, crash-reporting, advertising or attribution SDK;
• track you across apps or websites, or build a profile of you;
• sell or share personal information with anyone.

2. Information that stays on your device

Auramy stores the following locally. The developer never receives any of it, and it is removed when you delete the app.

Your phone's own backup (iCloud or Google) may include Auramy's settings and the encrypted vault, like any app's data. That copy belongs to your Apple or Google account; the developer cannot access it.

3. Google Drive backup (optional)

Auramy works fully without a Google account. Cloud backup is an opt-in feature. If you turn it on and connect Google Drive:

• Auramy uploads the photos and videos you select to a folder named Auramy in your own Google Drive. The developer has no access to that folder or to your Drive.
• Auramy requests a single, narrow permission — drive.file — plus your email address to show which account is connected. The drive.file scope lets the app see and manage only the files it created itself. It cannot read the rest of your Drive.
• Connecting is handled by Google: by Google's official Sign-In SDK on iPhone and iPad, and by Google Play services on Android. Your Google password is never seen or handled by Auramy.
• Signing out revokes Auramy's access, removes the stored sign-in and clears the app's cached record of what has already been backed up. Files already in your Drive are left untouched — they are yours.

Your relationship with Google is governed by Google's own terms and privacy policy: policies.google.com/privacy. Auramy's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Sharing photos and videos

Sharing only happens when you start it, and only with the photos and videos you pick. Nothing passes through a server of the developer's.

Nearby, phone to phone

• The two phones connect to each other directly — over the Wi-Fi network they share, a temporary network one of them opens, or a direct peer-to-peer link, using Bluetooth to find each other. No internet connection is used, and nothing goes through any server.
• The connection is end-to-end encrypted. The phones prove they are talking to each other with the code on screen or the scanned code before anything is sent, and the receiving phone must accept each transfer.
• The other phone sees this phone's name (which you choose and can change) and a list of what is offered: file names, sizes, types and capture dates.
• Received photos are saved to your photo library like any other photo.

By link, through your own Google Drive

• When you share by link, Auramy uploads the photos and videos you picked to a folder named Auramy Shares in your own Google Drive — kept apart from your backup — along with a small list file describing them: your phone's name, file names, sizes, types, capture dates and checksums.
• These files are made readable by anyone who has the link. Share the link only with people you want to see the photos.
• The link stops working after 7 days, when Auramy deletes the files from your Drive, or earlier if you choose Stop Sharing. If Auramy cannot reach your Drive at that moment, it tries again the next time it opens; you can also delete the Auramy Shares folder in Google Drive yourself.
• Location is removed from shared files when "Remove Location When Sharing" is on in Settings.

Opening a link

• Opening a link needs no Google account. The Auramy app downloads the files directly from Google Drive, checks each one against the list, and saves them to your photo library.
• Without the app, the link opens a web page at auramyy.github.io/s/. The page runs entirely in your browser: it reads the files directly from Google Drive through Google's Drive API and lets you save them. The part of the link that identifies the share comes after the #, which browsers never send to the website. The page sets no cookies, contains no analytics and loads nothing from anyone but this site and Google Drive.

Network destinations

Besides the App Store or Google Play for purchases, Auramy contacts only Google's servers — googleapis.com and Google's sign-in pages for backup and for sharing by link, and drive.usercontent.google.com and drive.google.com to download shared links and their previews — and, while sharing nearby, the other phone directly. There are no other network destinations.

5. This website

This website, auramyy.github.io, sets no cookies and contains no analytics, advertising or third-party scripts. It remembers the language you pick in your own browser's storage, which never leaves your device. It is hosted by GitHub Pages, which, like any web host, may keep technical logs of visits under GitHub's privacy statement.

6. Permissions Auramy asks for

Photo library

Required for the app's core purpose: showing your gallery, finding duplicates and clutter you can delete, editing, backing up what you choose, and saving what you receive. Auramy works with limited access too — it will then only see the photos you have shared with it. Deleting a photo always goes through the system, so the system shows its own confirmation.

Bluetooth and nearby devices

Used only while you are sending or receiving nearby, so the two phones can find each other and agree on how to connect, even without Wi-Fi. Auramy does not use Bluetooth to determine your location.

Local network (iPhone)

Used only while sharing nearby, to find other phones running Auramy on the same network and connect to them directly.

Camera (iPhone)

Used only to scan the code on another phone when you share nearby. Nothing is recorded or saved. On Android, codes are scanned by Google Play services' scanner and Auramy never gets access to the camera.

Location (Android 12 and earlier)

On these Android versions, the system requires location permission before an app may open its own Wi-Fi network or look for nearby Wi-Fi devices. Auramy asks for it only for nearby sharing without a common network, and never reads your location.

Face ID / Touch ID / fingerprint

Optional, used only to unlock the app when you enable App Lock. The system returns nothing but a success or failure result — Auramy never receives or stores biometric data.

Notifications

Optional. Used to tell you a background backup finished and, if you turn on storage alerts, that there is a lot of space you could free. Notifications are generated on your device; there is no push server.

Background activity

Used to continue an in-progress backup, and to run the occasional storage check, when the app is not on screen. Both run entirely on your phone.

7. Location data

Auramy never reads your location. Photos, however, may carry GPS coordinates recorded by the camera. When you share a photo or video out of Auramy, location metadata is removed by default. You can turn this off in Settings if you want location to travel with the file. Backups to your own Google Drive always keep the original file.

8. Purchases

Auramy Pro is bought through the App Store or Google Play. Apple or Google handles the payment; Auramy only learns from them whether Pro is active on your account. The developer never sees your payment details.

9. Retention and deletion

• Everything Auramy stores lives in the app's own storage. Deleting the app removes all of it, including the search index, your settings and any stored sign-in.
• Deleting the app also deletes the Private Vault. Move photos out of the vault first if you want to keep them.
• To disconnect Google Drive without deleting the app, use Sign Out in Settings. You can also revoke Auramy's access at any time at myaccount.google.com/permissions.
• Photos you backed up remain in your Google Drive until you delete them there. They are your files in your account.
• Shared links are deleted from your Drive after 7 days or when you stop sharing them. Photos someone has already saved from a link stay with them.

10. Children

Auramy is not directed at children under 13 and does not knowingly collect information from them. Since the developer collects no information from anyone, there is nothing to delete on request — but if you have a concern, please get in touch.

11. Your rights

Depending on where you live, you may have rights under the GDPR (Europe), the KVKK (Türkiye), the CCPA/CPRA (California) or similar laws — for example, to access, correct, export or delete personal data held about you.

Because the developer holds no personal data about you, there is nothing to disclose, export or erase on the developer's side. Data held on your device is under your direct control and is removed by deleting the app. Data in your Google Drive is under your control through your Google account. If you still want to exercise a right or ask a question, contact details are below and I will respond.

12. Security

Auramy relies on the protections the operating system provides: app sandboxing, encrypted storage, and the system's secure store for credentials. All internet traffic uses HTTPS, nearby transfers are end-to-end encrypted, and the Private Vault is encrypted with a key that only your PIN can produce. Optional App Lock adds Face ID, Touch ID, a fingerprint or your passcode in front of the app, and hides the gallery from the app switcher while the app is in the background.

No system is perfectly secure. Keeping your device updated and passcode-protected is the single biggest thing you can do to protect what is on it.

13. Changes to this policy

If this policy changes materially, the updated version will be posted here with a new date at the top. Continued use of the app after a change means you accept the revised policy.

14. Contact

Questions, concerns or privacy requests: @dev.yagiz (Instagram)