Privacy Policy

Last updated: May 31, 2026

1. Who We Are

Palmuse ("we", "us") is a mobile application that uses AI technology to provide palm reading entertainment. This policy explains how we handle your data.

Data controller: the Palmuse operator identified in our Legal Notice / Impressum. Privacy contact: support@palmuse.app.

2. What Data We Collect

2.1 Account Data

• Email address (when you sign up)
• Display name (optional)
• Authentication tokens (managed by Firebase)

2.2 Palm Images

• Photos of your palm uploaded for analysis
• Images are processed by Google Gemini AI and are not stored permanently on our servers
• Images are deleted after analysis is complete (within 24 hours)

2.3 Analysis Results

• Text results from palm readings (stored to provide history)
• Purchase records for paid analyses

2.4 Technical Data

• Device type, OS version
• App version
• Anonymous usage analytics (which features are used)

3. How We Use Your Data

• Provide the service: Process palm images through AI to generate readings
• Store your history: Save analysis results so you can revisit them
• Process payments: Verify in-app purchases via Apple/Google
• Improve the app: Anonymous usage analytics to improve features

For EU/UK users, our legal bases include contract performance for providing paid and free readings, legitimate interests for security and product improvement, consent where required for optional features, and legal obligation for purchase, tax, fraud-prevention, and compliance records.

4. AI Processing

Your palm images are sent to Google Gemini AI for analysis. Google processes images according to the Gemini API Terms of Service and related data governance terms, including Google's rules for how API prompts and responses may be processed.

5. Data Storage & Security

• Our primary servers are located in Germany (EU); we also maintain GDPR safeguards for service providers and international processing where applicable
• All data transmission uses HTTPS/TLS encryption
• Authentication is handled by Firebase (Google Cloud)
• Database access is restricted to authorized services only

6. Data Retention

• Palm images: Deleted within 24 hours of analysis
• Analysis results: Kept until you delete them or your account
• Account data: Kept until you delete your account

7. Your Rights (GDPR)

As an EU resident, you have the right to:

• Access: Request a copy of all your data
• Rectification: Correct inaccurate data
• Erasure: Delete your account and all associated data
• Portability: Export your data in a machine-readable format
• Object: Opt out of analytics processing

To exercise these rights, contact us at: support@palmuse.app

8. Third-Party Services

• Firebase (Google): Authentication & push notifications
• Google Gemini AI: Palm image analysis
• Apple App Store: In-app purchase processing

Some providers may process data outside your country or the EEA. Where required, we rely on appropriate safeguards such as provider data processing terms, contractual protections, and platform privacy controls.

9. United States Privacy Rights

We do not sell personal data or share it for cross-context behavioral advertising. Depending on your U.S. state, you may have rights to access, delete, correct, or receive a copy of your personal data, and to opt out of certain processing. You can make a request at support@palmuse.app.

10. Children's Privacy

Palmuse is not intended for children under 13. In regions where parental consent is required for users under a higher age, users should only use Palmuse with parent or guardian consent. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this policy occasionally. We will notify you of significant changes through the app.

12. Contact

For privacy questions: support@palmuse.app