Privacy Policy
Last updated: November 4, 2026
Information We Collect
We collect information you provide directly: email address, username, profile photo, wardrobe photos of clothing, festival saves, journal entries, mood check-ins, intentions, and conversations with our AI companion. We also collect usage data including pages visited, features used, and device information. If you turn on push notifications, we collect a device notification ID so we can send reminders.
How We Use Your Information
We use your information to provide and personalize the RaveAura experience, send post-festival aftercare emails you've opted into, improve our AI companion responses, and analyze app usage to improve features via PostHog if you accept analytics on the website. If you accept on the quiz, PostHog learns that you opened it and finished a step, not which words you picked. On raveaura.com/quiz, that same acceptance also turns on Meta (Facebook/Instagram) advertising measurement, described under Ads measurement. In the iPhone and iPad app we do not show that cookie banner; usage analytics there start only if you tap Allow on Apple’s tracking prompt. Payments: on the website we use Stripe; in the iPhone and Android apps we use Apple and Google billing through RevenueCat.
Data Storage & Security
Your data is stored with Supabase (database) and Vercel (website hosting). It is encrypted while it travels to us. Supabase and Vercel encrypt stored data as part of their service; we do not add a second lock of our own. We never sell your personal data. If you are in California, Decline on the cookie banner means do not share my personal information for advertising, and a browser signal that asks sites not to share is treated the same way. We keep your account data until you delete your account, or until we close RaveAura. We do not automatically wipe old accounts after a set number of days.
Third Party Services
RaveAura uses the following third-party services: Supabase — database and authentication; Stripe — payment processing on the website; Apple App Store and Google Play for in-app subscriptions, with RevenueCat on both iPhone and Android; Anthropic — AI companion and guided-journal narratives; Brevo — transactional email delivery; OneSignal — push notifications; PostHog — usage analytics (on the website, if you accept analytics we attach your account ID and email; if you decline, we do not. In the iPhone and iPad app, PostHog starts only if you tap Allow on Apple’s tracking prompt); Meta (Facebook/Instagram) — advertising measurement on raveaura.com/quiz only, and only if you accept the cookie banner, as described under Ads measurement; TikTok — ads measurement in the iPhone and Android apps only, as described below; Vercel — app hosting and deployment.
Ads measurement
On the iPhone and Android apps only (not the website in a browser), we use TikTok’s ads measurement tools so we can tell which TikTok ads led someone to download or open RaveAura. We do not send TikTok your name, email, photos, chat, or journal. We also do not send TikTok your account ID. On iPhone and iPad copies that include ads measurement, we show Apple’s tracking prompt on Home after you finish sign-up or sign-in. We do not show the website analytics cookie banner in that app. If you tap Allow, the TikTok toolkit starts and Apple’s advertising identifier can be included, and PostHog usage analytics may start without analytics cookies. If you tap Ask App Not to Track, or tracking is restricted, we do not start TikTok or PostHog. The rest of the app works the same either way. iPhone copies that do not include ads measurement never start this toolkit and do not show that prompt. When the toolkit is running, it can automatically record app installs, app opens, and in-app purchases. On Android there is no Apple-style tracking prompt; the toolkit starts in the app and may use Android’s advertising ID if the phone provides one. This does not show extra ads inside RaveAura. On the website, Meta (Facebook/Instagram) advertising measurement is separate from TikTok and runs only on raveaura.com/quiz. The Meta pixel loads only after you accept the cookie banner. If you decline the banner, or leave it up without choosing, it does not load. If you accept later in that visit, the quiz events from that visit are sent then. It records a page view, that the first question was shown, that you finished the quiz, and that you tapped a store button, including whether the button was for the App Store or Google Play. It does not receive your quiz answers, name, email, or account ID. Meta’s script may set its own cookie in your browser. To opt out, decline the banner. If you already accepted, clear this site’s data in your browser; the banner comes back, and the pixel does not load unless you accept again. You can also limit how Meta uses this for ads in Facebook or Instagram ad preferences. Those settings belong to Meta, not to a switch in RaveAura.
Your Rights
You can update your profile in the app. To delete your account, go to Profile → Settings → Delete Account. That removes your RaveAura login, profile, photos, and in-app records we store (festivals, packing, journal, chat on our side, and similar), and we also ask Brevo, OneSignal, and Stripe (website payments) to delete what they hold for you. It does not erase copies already sent to PostHog, Meta, Anthropic, or TikTok, Apple or Google purchase records, or a RevenueCat subscriber file. Those companies keep data under their own rules. To request a copy of the data we hold, email hello@raveaura.com. There is no download button in the app.
Sensitive Content
RaveAura may contain content related to festival culture including references to harm reduction. We do not collect medical records. Journal entries and mood check-ins are stored on your account and are not sold. Chat messages are sent to Anthropic so the AI companion can reply. If you complete a guided journal, a festival debrief, or the 14-day integration journal, that text may be sent to Anthropic to write a narrative. Ordinary journal entries you type yourself are stored with us and are not sent to Anthropic unless you use one of those AI-written summaries. If you dictate into Open Journal, your phone turns the speech into text on the device, we do not receive or store a recording, and we save that text only when you tap Save.
Children's Privacy
When you create an account you must check a box confirming you are 18 or older on iPhone, Android, and the website. We do not check ID. We do not knowingly collect data from anyone below that age.
Changes to This Policy
We may update this policy. The date at the top of this page will change when we do. We do not automatically email or send a push when the policy changes. Continued use of RaveAura after a change means you accept the updated policy.
Contact Us
For privacy questions or data requests: hello@raveaura.com