Privacy Policy

This privacy policy applies to the Aura Live app for mobile devices, together with any related services operated by Mapcast BV, a company registered in the Netherlands with its registered office at Herengracht 320, 1016 CE Amsterdam, The Netherlands (collectively, the "Application"). Mapcast BV, operating as Aura Live, is hereby referred to as the "Service Provider" and is the data controller for the purposes of this policy. This policy is effective as of 1 June 2026.

Information Collection and Use

The Application collects information when you download and use it. This information may include:

• Your device's Internet Protocol (IP) address
• The pages of the Application that you visit, the time and date of your visit, and the time spent on those pages
• The time spent on the Application
• The mobile operating system you use
• Date of birth

Date of Birth

We collect your date of birth at first sign-in for the sole purpose of verifying you are at least 18 years old. We store the date of birth on your user record; we do not share it with third parties, use it for advertising, or use it for profiling. You may request deletion of your DOB by contacting us — deletion will terminate your ability to broadcast or purchase in-app coins.

Retention: your date of birth is retained for the duration of your account plus up to 7 years thereafter, solely for compliance audit purposes (App Store and EU age-verification obligations), after which it is permanently deleted.

Cookies and Tracking Technologies

The Application or its third-party SDKs may use cookies, SDKs, pixels and similar technologies to support functionality, analytics or service delivery. Where required by applicable law, the Service Provider will obtain consent before using non-essential tracking technologies.

Location — Public by Design

Aura Live is a location-based broadcasting service. Your location is a public signal while you use it. Specifically:

• While broadcasting live: your precise, real-time location is transmitted to our streaming provider and displayed on the map to all viewers who can see your stream (public, follower-only, or a limited audience depending on your settings).
• While offline: your last known coarse location (rounded to approximately 1 km precision) may remain visible on the map as an offline host pin, so viewers can discover your area between broadcasts.
• When another user searches or discovers streams near you, your coarse location is compared against theirs so we can surface nearby live activity.

You control this. You can:

• Deny location permission entirely at the OS level (Settings → Privacy → Location); the app will still work but you won't appear on the map or be discovered by nearby viewers.
• Turn off "share coarse location while offline" in the Profile screen (planned setting).
• Delete your last location by signing out and confirming account deletion.

We do not share your precise location with advertisers or analytics providers. Coarse location may be aggregated (e.g. "100 hosts live in Istanbul today") for aggregate statistics that do not identify you.

Personally Identifiable Information

For a better experience while using the Application, the Service Provider may require you to provide certain personally identifiable information, including but not limited to:

• Email
• Name
• Location
• User-Generated Content (video / audio / chat)
• Purchase History
• Device ID

The information the Service Provider requests will be retained and used as described in this privacy policy. The Service Provider may use the information you provide to send important information, required notices, and, where permitted by law, marketing communications.

Third-Party Sub-Processors

To operate Aura Live we share limited personal information with the following sub-processors. Each has its own privacy policy governing its use of your data.

We do not sell your personal information to any of these parties. Each sub-processor is contractually obligated to process your data only for the purposes listed above.

How Live Broadcasts Are Handled

When you tap Go Live:

• Video and audio are streamed in real time to viewers through our streaming provider. These streams are not recorded by Aura Live today. The provider may briefly buffer streams for delivery but does not persist them on our behalf. If we introduce recording in the future, we will update this policy and require your affirmative consent before enabling it for you.
• A single still-frame poster may be captured from your camera at the moment you start broadcasting and stored on our servers as your broadcast thumbnail. This poster continues to be shown on the map after the broadcast ends until it is replaced by a newer one.
• Chat messages exchanged during your broadcast are stored on our servers to support delivery to late-arriving viewers and moderation. Chat is retained for 30 days after the broadcast ends, then deleted.
• Your live location is transmitted to the streaming provider and displayed to viewers as long as the broadcast is active. When the broadcast ends, your coarse (city-level) last-known location remains visible on the map for discovery, until you delete your account or change your location manually.

By tapping Go Live you understand that anything captured by your camera, microphone or in the chat may be seen and screen-recorded by any viewer.

Payment Information

Aura Live uses Apple's App Store In-App Purchase and Google Play Billing to process all coin purchases. We never see or store your credit-card, debit-card or bank-account details — those are handled exclusively by Apple or Google under their own privacy policies. After a purchase completes:

• We receive a purchase receipt from Apple or Google (transaction ID, product ID, timestamp, amount) which we validate server-side to credit coins to your account.
• We store this receipt data on your account for 7 years to comply with tax and audit obligations.
• We log every in-app coin movement (top-up, gift, tip, host earning) as a transaction record; you can view your own transaction history in the Wallet screen and request deletion when it is no longer required for tax or fraud purposes.

If you are a host earning coins, additional financial disclosures may apply when we introduce cash-outs; those will be described in a supplementary payments agreement at that time.

Your Rights

You may request access to, correction of, or deletion of your personal data held by the Service Provider. To exercise these rights, or to withdraw consent where processing is based on consent, contact the Service Provider at support@auralive.me.

Your California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. To exercise your CCPA/CPRA rights, contact the Service Provider at support@auralive.me.

International Data Transfers

The Service Provider or its third-party service providers may transfer personal data to countries outside your country of residence, including outside the European Economic Area (EEA). Where applicable law requires safeguards for international transfers, the Service Provider will use appropriate mechanisms:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions or other legally recognized transfer mechanisms
• Your consent, where required and legally permitted

Data protection laws in other countries may differ from those in your jurisdiction. Where required by law, the Service Provider will apply appropriate safeguards and obtain any consent required for the transfer.

Information Disclosure

The Service Provider may disclose User Provided and Automatically Collected Information:

• as required by law, such as to comply with a subpoena or similar legal process;
• when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
• with trusted service providers who work on their behalf, do not have an independent use of the information disclosed to them, and have agreed to adhere to the rules set forth in this privacy statement.

Opt-Out Rights

You can stop further collection of information from your mobile device by uninstalling the Application. Uninstalling will stop the Application from collecting data from your device, but it does not automatically delete information that has already been transmitted to the Service Provider or to third parties. To request deletion of your personal data, to withdraw consent, or to exercise any of your rights, contact the Service Provider at support@auralive.me.

Data Retention Policy

The Service Provider retains personal data based on its necessity for the stated purposes:

• User Provided Data: retained for the duration of your use of the Application plus 12 months thereafter, unless longer retention is required by law.
• Automatically Collected Data: retained for up to 24 months from collection, unless longer retention is required for legal compliance.
• Aggregated and Anonymized Data: retained indefinitely as it no longer identifies you.
• Data required for legal compliance: retained as long as required by applicable law.

You may request deletion of your personal data, subject to any legal obligation to retain it. If you want the Service Provider to delete User Provided Data submitted through the Application, please contact them at support@auralive.me. Please note that some User Provided Data may be required for the Application to function properly.

Data Deletion

You can request deletion of your personal data or account by contacting the Service Provider at support@auralive.me. The Service Provider will process your request within the timeframes required by applicable law. Upon verification of your identity, the Service Provider will delete your personal data from its systems, except where retention is required for legal compliance or legitimate business purposes.

Age Requirement — 18+ Only

Aura Live is intended solely for users aged 18 or older. You may not create an account, broadcast, tip, purchase in-app coins or send gifts unless you are 18. To enforce this, we collect your date of birth during onboarding and refuse the requested action if you are under 18. We do not knowingly collect personal information from anyone under 18. If we discover that we have inadvertently collected data from a minor, we will delete that account and all associated data within 30 days. If you believe a minor has provided data through the app, please email support@auralive.me and we will act promptly.

Security

The Service Provider is concerned about safeguarding the confidentiality of your information. The Service Provider provides physical, electronic and procedural safeguards to protect information the Service Provider processes and maintains.

Data Breach Notification

If a data breach occurs that affects your personal data, the Service Provider will notify you in accordance with applicable legal requirements, including, where required, providing information about the nature of the breach and the steps being taken to address it.

Changes

The Service Provider may update this Privacy Policy from time to time. The Service Provider will notify you of material changes by posting the updated Privacy Policy with an effective date. Where required by law, the Service Provider will seek your consent to material changes before they take effect. Previous versions of this Privacy Policy will be maintained and made available upon request by contacting the Service Provider at support@auralive.me. This privacy policy is effective as of 1 June 2026.

Your Consent

Where processing is based on consent, you provide that consent by affirmatively opting in to the relevant feature or action. You may withdraw consent at any time without affecting processing carried out before withdrawal. Processing based on other lawful bases is carried out as described above.

Contact Us

If you have any questions regarding privacy while using the Application, or have questions about our practices, please contact the Service Provider via email at support@auralive.me, or by post at:

Mapcast BV
Herengracht 320
1016 CE Amsterdam, The Netherlands