Privacy Policy
Last updated: July 7, 2026
1. Data We Collect
We collect: your name, date of birth, current concern, selfie and palm photos you upload, email (for account and receipts), and standard technical data (IP, device, browser). Payment data is collected directly by our payment processor (Paddle) — we never store your full card details.
2. How We Use Data
To generate your personalized reading, deliver the Service, process payments, prevent fraud, provide support, and improve the product. Photos and personal details are sent to our AI provider(s) solely to produce your reading.
3. Legal Basis (GDPR)
Performance of a contract (delivering the reading you purchased), consent (photo uploads), and legitimate interest (fraud prevention, analytics).
4. Sharing
We share data only with: (a) payment processor Paddle; (b) AI model providers used to generate readings; (c) hosting and analytics providers. We do not sell personal data.
5. Retention
Photos are processed to generate the reading and then deleted from active storage within 30 days. Account and billing records are retained as required by law.
6. Your Rights
You may request access, correction, deletion, or export of your data at any time by emailing us. EU/UK users have rights under GDPR; California users under CCPA.
7. Cookies
We use essential cookies for authentication and basic analytics. No third-party advertising cookies.
8. Security
Data is transmitted over HTTPS and stored on secured infrastructure. No system is perfectly secure; use the Service at your own risk.
9. Children
The Service is not intended for anyone under 18.
10. Contact
Data requests: privacy@aura-insight-scan.lovable.app.