Last updated: March 26, 2026
This Privacy Policy describes how Aurora Iceland (“we”, “us”, “our”) collects, uses, and protects your information when you use our mobile application.
Location Data
We collect your device’s GPS coordinates to calculate aurora visibility scores at your current location, sort viewing spots by distance, and determine drive times. Location data is processed in real time on our servers and is not permanently stored or linked to your identity.
Photos
When you share an aurora sighting, a photo is captured via your device’s camera and uploaded to our cloud storage provider (Supabase). Community photos are stored indefinitely until you or we remove them.
Account Information
When you sign in via Google OAuth or email magic link, we receive and store your user ID, email address, display name, and profile avatar from your authentication provider. You also choose a username within the app, which is stored on our servers.
Device Information
We store a push notification token on your device and on our servers if you opt in to aurora alerts. We do not collect device identifiers or advertising IDs.
Usage Analytics
We collect anonymous usage events (e.g. which features you interact with) and store them locally on your device. This data is not transmitted to our servers or any third party. It is used solely to help us understand which features are most useful and improve the app.
We use your information solely to operate the app:
All uploaded photos are automatically screened by an AI-powered content moderation service (OpenAI) before being stored. Photos flagged as inappropriate are rejected and are not stored on our servers. The moderation service receives only the image data and does not receive your identity or account information.
We do not sell, rent, or trade your personal information. To operate the app, your data may be processed by the following third-party services:
Each service processes only the minimum data necessary for its function.
You can permanently delete your account and all associated data (posts, comments, likes, and profile) from Settings > Delete Account. Deletion is immediate and irreversible.
We use industry-standard security measures including encrypted connections (HTTPS/TLS), secure authentication via Supabase Auth, and row-level security policies on our database. However, no method of electronic transmission or storage is 100% secure.
Aurora Iceland is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
We may update this Privacy Policy from time to time. The updated policy will be accessible within the app under Settings > Privacy Policy. Your continued use of the app after changes constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy or your data, contact us at: aurora.iceland.app@gmail.com