DRAFT TEMPLATE. Have a lawyer review this before launch and fill in the [bracketed] items.

Privacy policy

Last updated: [date]. This app is operated by [legal entity name, address] ("we"). Contact: [email]. Grievance officer (India): [name, email].

What we collect

• Account: your name and email from Google sign-in, or, if you sign up with your mobile number, your name, mobile number, optional email and your password stored only as a one-way scrypt hash (we cannot see your password). Mobile numbers are not verified by OTP and are used only for log-in and support.
• Birth details you enter for each profile: name, date, time and place of birth.
• Palm photos: sent once to our AI provider to read the lines, then discarded. We store only the resulting text facts, never the photo.
• Face: the photo never leaves your device. Only facial proportion numbers are sent and the resulting text facts are stored.
• Payments: handled by Razorpay. We never see or store card or UPI details; we store your subscription status.
• Usage counts (how many readings you used this month) to apply plan limits.

Why we use it

To provide readings, timings and plan features you ask for. We do not sell your data and do not use it for advertising profiles.

Who processes it

Hosting: Railway ([region]). AI: Anthropic (Claude API), for palm photos and writing readings. Payments: Razorpay. Sign-in: Google.

Profiles of other people

If you add family members, you confirm you have their permission. A profile for a child must be added by a parent or guardian.

Your rights

You can delete any profile, or your whole account and all data, from the Account screen at any time. Deletion is permanent. You can also email us to access or correct your data, under India's Digital Personal Data Protection Act, 2023.

Retention

We keep your data while your account is open and delete it when you delete the account. Payment records are kept as required by tax law.