Privacy Policy

Last updated: October 15, 2026

1. Who We Are

Palmuse ("we", "us") is a mobile application that uses AI technology to provide palm reading entertainment. This policy explains how we handle your data.

Data controller: the Palmuse operator identified in our Legal Notice / Impressum. Privacy contact: support@palmuse.app.

2. What Data We Collect

2.1 Account Data

• Email address (when you sign up)
• Display name (optional)
• Authentication tokens (managed by Firebase)

2.2 Palm Images

• Photos of your palm uploaded for analysis
• Images are processed by Google Gemini AI and are not stored permanently on our servers
• Images are deleted after analysis is complete (within 24 hours)

2.3 Analysis Results

• Text results from palm readings (stored to provide history)
• Purchase records for paid analyses

2.4 Technical Data

• Device type, OS version
• App version
• Service reliability metrics (request status, performance and AI failures)
• Privacy-filtered diagnostics such as app page, API route and status, response time, release version, error fingerprint, and a short redacted trace

Service reliability and payment operations

The owner can explicitly mark their own browser’s test requests with a 7-day diagnostic cookie. Ordinary app users do not receive this marker; it grants no admin access.

Palmuse uses aggregate usage counters to improve core flows, including photo capture, analysis, result-reading milestones, price displays and checkout attempts. Counts are grouped by UTC day, app version, platform, device language and region setting, approved entry-source categories, feature and product/price variants. The device region setting is not a detected location. These counters contain no account, installation, device or session identifier, exact event time, photo, prompt, reading text or payment token. Analytics creates no tracking identifier and stores no analytics events on your device; counters are temporarily merged in memory. They are not joined to account or purchase records, used for advertising, or used to reconstruct individual journeys. Aggregate step ratios count events, not people; they do not measure individual retention.

To operate the requested service and diagnose technical faults, our backend records daily API request/status counts and average response times by fixed service category, and AI execution type, model, prompt version, token counts where available, latency, retries and fixed failure categories. AI records use a server-generated operation ID with no account, device or analytics session linkage. They contain no palm images, prompts or reading text. Verified purchase monitoring supports payment fulfilment/accounting; it contains product, store/platform and verified amount/currency where available, with a purchase ledger reference for deduplication, without payment tokens or credentials. These records are not used for advertising or to reconstruct individual browsing journeys.

Aggregate usage counters are retained for 90 days. New technical AI/API/revenue monitoring facts are retained for 45 days; separate privacy-filtered diagnostics and account-linked AI usage records are normally retained for 90 days. Purchase lifecycle reconciliation records are retained for 400 days; entitlements and financial records are kept separately as needed for access, fraud prevention and legal accounting obligations. Monitoring tables are excluded from new database backups. Anonymous counters provide no individual record to retrieve or erase. You can delete your account and linked records or contact support@palmuse.app about privacy rights and objections. Contract performance, proportionate legitimate interests in reliability/security, consent where required, and applicable legal obligations apply to the relevant personal-data processing; aggregate counts are not treated as evidence of consent.

Before storing a submitted photo, Palmuse removes embedded metadata, including supported location tags. For AI processing we also correct orientation and may resize the photo before sending the processed image to Google Gemini API. Palmuse does not use your photos to train its own models and keeps photos for no longer than 24 hours. Google processes API inputs and outputs under the applicable Gemini API terms, including provider retention for safety and abuse monitoring; this does not promise zero retention by the provider.

3. How We Use Your Data

• Provide the service: Process palm images through AI to generate readings
• Store your history: Save analysis results so you can revisit them
• Process payments: Verify in-app purchases via Apple/Google
• Improve the app: Minimal operational metrics to diagnose technical faults

For EU/UK users, our legal bases include contract performance for providing paid and free readings, legitimate interests for security and product improvement, consent where required for optional features, and legal obligation for purchase, tax, fraud-prevention, and compliance records.

4. AI Processing

Your palm images are sent to Google Gemini AI for analysis. Google processes images according to the Gemini API Terms of Service and related data governance terms, including Google's rules for how API prompts and responses may be processed.

5. Data Storage & Security

• Our primary servers are located in Germany (EU); we also maintain GDPR safeguards for service providers and international processing where applicable
• All data transmission uses HTTPS/TLS encryption
• Authentication is handled by Firebase (Google Cloud)
• Database access is restricted to authorized services only

6. Data Retention

• Palm images: Deleted within 24 hours of analysis
• Analysis results: Kept until you delete them or your account
• Account data: Kept until you delete your account
• Aggregate usage counts: 90 days. Technical AI/API/revenue monitoring: 45 days. Diagnostics and account-linked AI usage: 90 days. Purchase lifecycle reconciliation: 400 days; financial records have separate legal retention

7. Your Rights (GDPR)

As an EU resident, you have the right to:

• Access: Request a copy of all your data
• Rectification: Correct inaccurate data
• Erasure: Delete your account and all associated data
• Portability: Export your data in a machine-readable format
• Object: Object to processing based on legitimate interests

To exercise these rights, contact us at: support@palmuse.app

8. Third-Party Services

• Firebase (Google): Authentication & push notifications
• Google Gemini AI: Palm image analysis
• Apple App Store: In-app purchase processing

Some providers may process data outside your country or the EEA. Where required, we rely on appropriate safeguards such as provider data processing terms, contractual protections, and platform privacy controls.

9. United States Privacy Rights

We do not sell personal data or share it for cross-context behavioral advertising. Depending on your U.S. state, you may have rights to access, delete, correct, or receive a copy of your personal data, and to opt out of certain processing. You can make a request at support@palmuse.app.

10. Children's Privacy

Palmuse is not intended for children under 13. In regions where parental consent is required for users under a higher age, users should only use Palmuse with parent or guardian consent. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this policy occasionally. We will notify you of significant changes through the app.

12. Contact

For privacy questions: support@palmuse.app