Privacy Policy

1. Introduction

Welcome to PalmMingle ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered palmistry application.

Who we are. PalmMingle is the trading name under which this service is run, and it is the controller of the personal data described here. Contact: akash@chaitonix.com.

By using PalmMingle, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

2.1 Personal Information

When you create an account or use our services, we collect:

• Account Information: Name and email address. Sign-in is handled by a third-party authentication provider — your password or passkey is held by them, never by us
• Profile Information: Optional profile details you choose to provide
• Payment Information: Processed securely through Stripe (we do not store full credit card details)

2.2 Palm images and biometric-adjacent data

A photograph of your hand sits close enough to biometric data that we would rather over-explain it than summarise it. This is exactly what happens to a palm photo you upload, in order:

• Upload and analysis: Your photo is sent from your browser to our server, which passes it to a third-party AI provider for analysis. It is held in memory for the length of that request.
• Free photo check: When you press “Read my palms”, and only after you have given your age, we first check that both photos are clear enough to read, before you pay or sign in. For that check both photos are sent to the same AI provider and are not kept: nothing is written to our database or to file storage, and no reading is made.
• No lasting server-side storage: A photo you upload on the device you are reading on is never written to our database or to file storage. Once the reading is generated, the server has no copy of the image.
• Phone hand-off: If you start on a computer and take your photos with your phone, the phone sends them to our server so your computer can collect them. They are held only for the hand-off and deleted when your computer collects them. The link stops working after 10 minutes and can never be collected after that; photos that were never collected are erased the next time our server handles any hand-off, or at the daily clean-up at the latest.
• What we keep: The written reading — the text produced from your photo — is stored in your account so you can return to it. The image is not part of that record.
• Temporary recovery: Your browser temporarily stores your entered age and compressed palm photos together so you can continue after signing in or paying, or retry a failed reading without uploading again. Recovery is limited to the same browser tab and account. The recovery window lasts up to 30 minutes from saving; restoring or retrying does not restart it. The saved record remains through restoration and successful payment, and is cleared after successful reading generation, when you discard the photos, or when the account associated with it signs out or is successfully deleted. Expiry is checked when the record is accessed and while the restored upload is open. A closed browser or unavailable storage can delay physical removal; you can also clear the site's browser data.
• What we do not do: We do not use palm images to identify you, do not match them against any database, do not build a biometric template from them, and do not sell or share them with anyone beyond the AI provider performing the analysis.

You can delete any stored reading, or your whole account, from your account settings — see section 7. Deleting a reading removes its text; there is no separate image to delete.

2.2b Analysis Results

Reading results and insights are stored in your account for future reference until you delete them or close your account.

Your answers inside a reading (how well each card fits, the lines you traced, your questions to Mina) are stored with it, used to improve readings, never sold, and deleted with the reading.

2.2c What other readers can see

Other readers see your first name, your profile photo if you added one, and your Mark after you both say hello. Never your palm photo, your answers, or your full reading.

2.3 Usage Information

We automatically collect information about how you use our service:

• Device information (device type, operating system, browser type)
• IP address and general location (country/region level only)
• Usage patterns and feature interactions
• Performance data and error logs (through Sentry)
• Web vitals and analytics data

2.4 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. See our Cookie Policy for detailed information.

3. How We Use Your Information

We use your information for the following purposes:

3.1 Service Provision

• Process and analyze palm images to generate readings
• Maintain your account and provide personalized experiences
• Store your reading history for future reference
• Enable compatibility matching features
• Process payments and manage subscriptions

3.2 Service Improvement

• Analyze usage patterns to improve our AI algorithms
• Monitor performance and identify technical issues
• Develop new features and enhancements
• Conduct research and analysis (anonymized data only)

3.3 Communication

• Send service-related notifications and updates
• Respond to your inquiries and support requests
• Send marketing communications (with your consent, which you can withdraw at any time)

3.4 Legal Compliance and Safety

• Comply with legal obligations and regulations
• Protect against fraud, abuse, and security threats
• Enforce our Terms of Service and other policies

4. Third-Party Services

We use trusted third-party service providers to help us operate our service. These providers have access to your information only to perform specific tasks on our behalf and are obligated to protect it:

AI processing: Palm images are transmitted to Google's Generative AI service for analysis. See Google's Privacy Policy and the Gemini API terms for information about Google's handling of submitted data.

5. Data Security

We implement industry-standard security measures to protect your personal information:

• Encryption: All data transmission is encrypted using HTTPS/TLS
• Authentication: Secure authentication through Clerk with encrypted password storage
• Access Controls: Strict access controls and role-based permissions
• Image Processing: See section 2.2 for how palm images are handled in your browser, on our application servers, and by our analysis provider.
• Monitoring: Continuous security monitoring and regular security audits
• Data Minimization: We collect only the information necessary to provide our services

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for different periods depending on the type:

• Account Data: On successful account deletion, identifying profile details are anonymized and private readings, reading conversations, your conversations with Mina, personality data and matching preferences are removed. Shared messages and match records remain for other participants; limited moderation records and an anonymized account record may remain.
• Palm Images: Held only for the length of the analysis request. Photos sent by phone hand-off are held only for the hand-off and deleted when your computer collects them; photos never collected are erased at the daily clean-up at the latest (see section 2.2)
• Reading Results: Stored in your account until you delete them or close your account
• Payment Records: Retained for tax and legal compliance purposes after account deletion.
• Analytics Data: Anonymized data may be retained indefinitely for statistical purposes

7. Your Rights and Choices

Under applicable data protection laws (including GDPR for EU users and CCPA for California residents), you have the following rights:

7.1 Access and Portability

• Request a copy of your personal data
• Download your reading history and account information
• Receive your data in a machine-readable format

7.2 Correction and Deletion

• Update or correct your personal information
• Request deletion of your account and associated data
• Delete individual readings from your history

7.3 Consent and Objection

• Withdraw consent for marketing communications at any time
• Object to processing of your data for specific purposes
• Opt-out of cookies and tracking (see Cookie Policy)

7.4 How to Exercise Your Rights

To exercise any of these rights, please:

• Use the account settings page within the app
• Email us at: akash@chaitonix.com
• Contact us through our Contact Page

We will respond to your request within 30 days as required by applicable law.

8. International Data Transfers

PalmMingle operates globally, and your information may be transferred to, stored, and processed in countries other than your country of residence, including the United States and European Union.

When we transfer data internationally, we ensure appropriate safeguards are in place through:

• Standard Contractual Clauses approved by the European Commission
• Service providers certified under applicable data protection frameworks
• Adequate data protection measures as required by GDPR and other regulations

9. Children's Privacy

PalmMingle is not intended for children under the age of 18. We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at akash@chaitonix.com. We will take steps to delete such information from our systems.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: What personal information we collect, use, and share
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of personal information (note: we do not sell personal information)
• Right to Non-Discrimination: Exercise your rights without discriminatory treatment

To exercise these rights, contact us at akash@chaitonix.com.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

We will notify you of material changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending an email notification to your registered email address
• Displaying a prominent notice within the app

Your continued use of PalmMingle after changes are posted constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For EU residents: You also have the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.