Short version: Gemini Flash checks the photo, OpenAI can be used as a fallback, and after a pass Aura attempts to save a private Wall of Wins copy on your device and, when you are signed in, sync it to private account storage.
During the check. After you explicitly allow AI photo verification, the image travels over an encrypted connection to Aura's verification service, which sends it to Gemini Flash or, if Gemini is unavailable, OpenAI. Aura does not store the image for verification.
After it passes. Aura attempts to save a copy in your Wall of Wins on your device. When you are signed in, Aura also attempts to upload it to private, owner-scoped Supabase Storage. A failed write or upload can prevent the corresponding copy from being saved. You can delete an individual win, and the account-deletion flow is intended to remove stored account media.
If a photo is flagged by automatic safety screening, the habit doesn't pass, nothing is saved to your Wall of Wins, and nobody at Aura reviews the image.
Full detail is in our Privacy Policy.