Privacy Policy

Last updated: February 02, 2026

1. Data Controller

Palmly is operated by CrayonVoyage. For any questions regarding your personal data, please contact us at: privacy@palmly.app

2. Data We Collect

We collect and process the following personal data:

  • Account information: email address, username, password (encrypted)
  • Profile information: date of birth, sex, dominant hand (optional)
  • Palm images: photographs of your hands that you upload
  • Reading data: AI-generated analysis, personality profiles, and action plans
  • Usage data: timestamps of account creation and readings

3. How We Use Your Data

Your data is used to:

  • Provide the palm reading service (image analysis, profile generation)
  • Maintain your account and authenticate you
  • Improve our AI models and service quality
  • Send service-related communications (password reset, etc.)

We do not sell your personal data. Your palm images are processed by OpenAI's API for analysis purposes only.

4. Data Retention

Your data is retained as long as your account is active. When you delete your account, all associated data (profile, images, readings) is permanently deleted within 30 days.

5. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

  • Access: Request a copy of all your personal data
  • Rectification: Correct inaccurate personal data
  • Erasure: Delete your account and all associated data
  • Portability: Export your data in a machine-readable format
  • Objection: Object to certain processing of your data

6. Data Security

We implement appropriate technical and organizational measures to protect your data:

  • Encrypted passwords (bcrypt)
  • HTTPS encryption for all data transmission
  • Secure cloud hosting with access controls
  • Regular security updates

7. Third-Party Services

We use the following third-party services:

  • OpenAI: For AI-powered image analysis and text generation
  • Heroku: Cloud hosting
  • Cloudinary: Image storage

These providers have their own privacy policies and data protection measures.

8. Cookies

We use essential cookies only for authentication and session management. We do not use tracking or advertising cookies.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes via email or through the application.

Back to home