Privacy Policy
This policy explains what Palmora collects, why, and how long it is kept. We collect as little as we can to deliver your reading.
What we collect
- Your palm photo. Before storage it is resized (longest side 1280px), re-encoded and stripped of metadata such as location and camera details. The original file is not saved.
- Analysis results. Structured descriptions of visible palm features, your preview, and — if purchased — your report text.
- Purchase records. Amount, currency, status and Razorpay order/payment IDs. UPI, card and bank details are entered in Razorpay's secure checkout; we never receive or store them. Razorpay may collect your phone number or email to process the payment, under its own privacy policy; we don't store them.
- A private access cookie that ties your reading to your browser. No account, name, birth date or health information is requested.
- Abuse prevention. We keep short-lived, in-memory counters keyed by a salted hash of your IP address to limit repeated scans. Raw IP addresses are not stored by the application.
- Anonymous usage events (e.g. "scan started") with no photo, reading text, identifiers or personal data.
How we use it
Only to analyze your photo, produce your preview and report, process payment and prevent abuse. Your photo is sent to our AI model provider (Anthropic, or Google Gemini on a paid plan that excludes training on your data) solely to perform the analysis. We do not sell your data or use it for advertising.
How long we keep it
- Unpurchased scans (photo, observations, preview): deleted automatically after 24 hours.
- Photos that can't be read are not stored at all.
- Purchased readings (photo, observations, report): deleted automatically after 30 days. Download the PDF to keep a copy.
- Minimal purchase records (amount, status, payment reference) are retained as required for accounting and refunds.
Your choices and rights
You can delete your photo and reading instantly with the "Delete my photo & reading" button on your reading page. Depending on where you live (for example under the GDPR or CCPA), you may have rights to access, correct, delete or port your data, or to object to processing. Contact us at hello@theastravia.com and we will respond within 30 days.
Age
Palmora is intended for adults aged 18 and over.