Privacy Policy

1. Introduction

Welcome to PalmMingle ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered palmistry application.

By using PalmMingle, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

2.1 Personal Information

When you create an account or use our services, we collect:

• Account Information: Name and email address. Sign-in is handled by a third-party authentication provider — your password or passkey is held by them, never by us
• Profile Information: Optional profile details you choose to provide
• Payment Information: Processed securely through Stripe (we do not store full credit card details)

2.2 Palm images and biometric-adjacent data

A photograph of your hand sits close enough to biometric data that we would rather over-explain it than summarise it. This is exactly what happens to a palm photo you upload, in order:

• Upload and analysis: Your photo is sent from your browser to our server, which passes it to a third-party AI provider for analysis. It is held in memory for the length of that request.
• No server-side storage: We do not save your palm photo to our database or to any file storage. Once the reading is generated, the server has no copy of the image.
• What we keep: The written reading — the text produced from your photo — is stored in your account so you can return to it. The image is not part of that record.
• The sign-in step: If you upload a photo before signing in, your browser stores a compressed copy of it in that browser's own local storage so it is still there when you come back from the sign-in screen. It never leaves your device in that form. It is deleted as soon as the photo is restored to the upload area. If you abandon sign-in and never return, that copy stays in your browser until you clear the site's data — we cannot see it or remove it for you.
• What we do not do: We do not use palm images to identify you, do not match them against any database, do not build a biometric template from them, and do not sell or share them with anyone beyond the AI provider performing the analysis.

You can delete any stored reading, or your whole account, from your account settings — see section 7. Deleting a reading removes its text; there is no separate image to delete.

2.2b Analysis Results

Reading results and insights are stored in your account for future reference until you delete them or close your account.

2.3 Usage Information

We automatically collect information about how you use our service:

• Device information (device type, operating system, browser type)
• IP address and general location (country/region level only)
• Usage patterns and feature interactions
• Performance data and error logs (through Sentry)
• Web vitals and analytics data

2.4 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. See our Cookie Policy for detailed information.

3. How We Use Your Information

We use your information for the following purposes:

3.1 Service Provision

• Process and analyze palm images to generate readings
• Maintain your account and provide personalized experiences
• Store your reading history for future reference
• Enable compatibility matching features
• Process payments and manage subscriptions

3.2 Service Improvement

• Analyze usage patterns to improve our AI algorithms
• Monitor performance and identify technical issues
• Develop new features and enhancements
• Conduct research and analysis (anonymized data only)

3.3 Communication

• Send service-related notifications and updates
• Respond to your inquiries and support requests
• Send marketing communications (with your consent, which you can withdraw at any time)

3.4 Legal Compliance and Safety

• Comply with legal obligations and regulations
• Protect against fraud, abuse, and security threats
• Enforce our Terms of Service and other policies

4. Third-Party Services

We use trusted third-party service providers to help us operate our service. These providers have access to your information only to perform specific tasks on our behalf and are obligated to protect it:

Important: When you upload a palm image, it is processed by Google's Generative AI service. Images are transmitted securely and are not permanently stored by Google for training purposes. Analysis is performed in real-time, and images are immediately discarded after processing.

5. Data Security

We implement industry-standard security measures to protect your personal information:

• Encryption: All data transmission is encrypted using HTTPS/TLS
• Authentication: Secure authentication through Clerk with encrypted password storage
• Access Controls: Strict access controls and role-based permissions
• Image Processing: Palm images are processed in real-time and automatically deleted after analysis
• Monitoring: Continuous security monitoring and regular security audits
• Data Minimization: We collect only the information necessary to provide our services

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for different periods depending on the type:

• Account Data: Retained while your account is active and for 30 days after deletion
• Palm Images: Never stored on our servers — held only for the length of the analysis request (see section 2.2)
• Reading Results: Stored in your account until you delete them or close your account
• Payment Records: Retained for 7 years for tax and legal compliance purposes
• Analytics Data: Anonymized data may be retained indefinitely for statistical purposes

7. Your Rights and Choices

Under applicable data protection laws (including GDPR for EU users and CCPA for California residents), you have the following rights:

7.1 Access and Portability

• Request a copy of your personal data
• Download your reading history and account information
• Receive your data in a machine-readable format

7.2 Correction and Deletion

• Update or correct your personal information
• Request deletion of your account and associated data
• Delete individual readings from your history

7.3 Consent and Objection

• Withdraw consent for marketing communications at any time
• Object to processing of your data for specific purposes
• Opt-out of cookies and tracking (see Cookie Policy)

7.4 How to Exercise Your Rights

To exercise any of these rights, please:

• Use the account settings page within the app
• Email us at: akash@chaitonix.com
• Contact us through our Contact Page

We will respond to your request within 30 days as required by applicable law.

8. International Data Transfers

PalmMingle operates globally, and your information may be transferred to, stored, and processed in countries other than your country of residence, including the United States and European Union.

When we transfer data internationally, we ensure appropriate safeguards are in place through:

• Standard Contractual Clauses approved by the European Commission
• Service providers certified under applicable data protection frameworks
• Adequate data protection measures as required by GDPR and other regulations

9. Children's Privacy

PalmMingle is not intended for children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at akash@chaitonix.com. We will take steps to delete such information from our systems.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: What personal information we collect, use, and share
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of personal information (note: we do not sell personal information)
• Right to Non-Discrimination: Exercise your rights without discriminatory treatment

To exercise these rights, contact us at akash@chaitonix.com.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

We will notify you of material changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending an email notification to your registered email address
• Displaying a prominent notice within the app

Your continued use of PalmMingle after changes are posted constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For EU residents: You also have the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.