Privacy Policy

1. Introduction

Welcome to PALMReader ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered palmistry application.

By using PALMReader, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

2.1 Personal Information

When you create an account or use our services, we collect:

• Account Information: Name, email address, password (encrypted)
• Profile Information: Optional profile details you choose to provide
• Payment Information: Processed securely through Stripe (we do not store full credit card details)

2.2 Palm Images

• Image Upload: Photographs of your palm(s) that you upload for analysis
• Processing: Images are analyzed using Google's Generative AI technology
• Temporary Storage: Images are processed in real-time and automatically deleted after analysis is complete
• Analysis Results: Reading results and insights are stored in your account for future reference

2.3 Usage Information

We automatically collect information about how you use our service:

• Device information (device type, operating system, browser type)
• IP address and general location (country/region level only)
• Usage patterns and feature interactions
• Performance data and error logs (through Sentry)
• Web vitals and analytics data

2.4 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. See our Cookie Policy for detailed information.

3. How We Use Your Information

We use your information for the following purposes:

3.1 Service Provision

• Process and analyze palm images to generate readings
• Maintain your account and provide personalized experiences
• Store your reading history for future reference
• Enable compatibility matching features
• Process payments and manage subscriptions

3.2 Service Improvement

• Analyze usage patterns to improve our AI algorithms
• Monitor performance and identify technical issues
• Develop new features and enhancements
• Conduct research and analysis (anonymized data only)

3.3 Communication

• Send service-related notifications and updates
• Respond to your inquiries and support requests
• Send marketing communications (with your consent, which you can withdraw at any time)

3.4 Legal Compliance and Safety

• Comply with legal obligations and regulations
• Protect against fraud, abuse, and security threats
• Enforce our Terms of Service and other policies

4. Third-Party Services

We use trusted third-party service providers to help us operate our service. These providers have access to your information only to perform specific tasks on our behalf and are obligated to protect it:

Important: When you upload a palm image, it is processed by Google's Generative AI service. Images are transmitted securely and are not permanently stored by Google for training purposes. Analysis is performed in real-time, and images are immediately discarded after processing.

5. Data Security

We implement industry-standard security measures to protect your personal information:

• Encryption: All data transmission is encrypted using HTTPS/TLS
• Authentication: Secure authentication through Clerk with encrypted password storage
• Access Controls: Strict access controls and role-based permissions
• Image Processing: Palm images are processed in real-time and automatically deleted after analysis
• Monitoring: Continuous security monitoring and regular security audits
• Data Minimization: We collect only the information necessary to provide our services

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for different periods depending on the type:

• Account Data: Retained while your account is active and for 30 days after deletion
• Palm Images: Deleted immediately after analysis is complete (not stored)
• Reading Results: Stored in your account until you delete them or close your account
• Payment Records: Retained for 7 years for tax and legal compliance purposes
• Analytics Data: Anonymized data may be retained indefinitely for statistical purposes

7. Your Rights and Choices

Under applicable data protection laws (including GDPR for EU users and CCPA for California residents), you have the following rights:

7.1 Access and Portability

• Request a copy of your personal data
• Download your reading history and account information
• Receive your data in a machine-readable format

7.2 Correction and Deletion

• Update or correct your personal information
• Request deletion of your account and associated data
• Delete individual readings from your history

7.3 Consent and Objection

• Withdraw consent for marketing communications at any time
• Object to processing of your data for specific purposes
• Opt-out of cookies and tracking (see Cookie Policy)

7.4 How to Exercise Your Rights

To exercise any of these rights, please:

• Use the account settings page within the app
• Email us at: privacy@palmreader.app
• Contact us through our Contact Page

We will respond to your request within 30 days as required by applicable law.

8. International Data Transfers

PALMReader operates globally, and your information may be transferred to, stored, and processed in countries other than your country of residence, including the United States and European Union.

When we transfer data internationally, we ensure appropriate safeguards are in place through:

• Standard Contractual Clauses approved by the European Commission
• Service providers certified under applicable data protection frameworks
• Adequate data protection measures as required by GDPR and other regulations

9. Children's Privacy

PALMReader is not intended for children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@palmreader.app. We will take steps to delete such information from our systems.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: What personal information we collect, use, and share
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of personal information (note: we do not sell personal information)
• Right to Non-Discrimination: Exercise your rights without discriminatory treatment

To exercise these rights, contact us at privacy@palmreader.app.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

We will notify you of material changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending an email notification to your registered email address
• Displaying a prominent notice within the app

Your continued use of PALMReader after changes are posted constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For EU residents: You also have the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.