Privacy Policy
How Palmyst collects, uses, shares and protects your data — including your palm photos. Last updated 25 August 2026.
This Privacy Policy explains how Palmyst (“Palmyst”, “we”, “us”) handles your information when you use the Palmyst mobile app, the Palmyst web app at web.palmyst.com, and this website. Palmyst is operated by Aumadi. Questions: support@palmyst.com.
1. Information we collect
- Palm photos. Photos you capture or upload for a reading. They are used only to generate your palm analysis and your reading history.
- Account information. Email address or the sign-in identifier from the provider you choose, plus optional profile details you enter (such as name, date of birth or gender) that improve your reading.
- Reading and usage data. The readings you generate, tools you open, and in-app actions, along with device and app information (device model, OS version, app version, language, approximate region derived from IP, crash logs).
- Purchase data. If you buy a paid tool or subscription, the app store (Google Play or the Apple App Store) processes the payment and tells us the purchase status. We never receive or store your card or UPI details.
- Support messages. Anything you send us by email.
2. How we use it
- To generate palm readings and deliver the tools and reports you request.
- To keep your reading history available across your sessions and devices.
- To operate, secure, debug and improve the app and website.
- To process purchases and honour refunds.
- To respond to support requests and, where required, to comply with law.
We do not sell your personal information, and we do not use your palm photos to identify you outside Palmyst or share them with advertisers.
3. Palm photos specifically
A palm photo is processed to produce your reading and is stored with your account so you can revisit that reading. You can delete an individual reading in the app, which removes its photo, and deleting your account removes all of them (see section 8). Palm photos are not used for advertising, are not sold, and are shared only with the infrastructure providers described in section 4 that host and process them on our behalf.
4. Who we share data with
We share data only with service providers that help us run Palmyst:
- Hosting, storage and database providers that store your account, readings and photos.
- AI/model processing providers used to analyse a palm image and produce the reading text.
- Google Analytics 4 on this website, with IP anonymisation enabled, for aggregate traffic measurement.
- Google AdMob in the mobile app, which may serve ads and use advertising identifiers. See how Google uses data from apps that use its services. You can limit ad personalisation in your device settings (Android: Ads → Delete/Reset advertising ID; iOS: Settings → Privacy & Security → Tracking).
- Google Play and the Apple App Store for purchases and subscription management.
We may also disclose information if required by law, or as part of a merger or acquisition, in which case this policy continues to apply to the transferred data.
5. Children
Palmyst is not directed to children under 13 (or the minimum age of digital consent in your country). We do not knowingly collect their data. If you believe a child has provided us data, email support@palmyst.com and we will delete it.
6. Security
Data is transmitted over encrypted connections (HTTPS/TLS) and stored with access controls limiting it to personnel who need it to operate the service. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
7. Retention
We keep your account data, readings and palm photos while your account is active. Deleted readings are removed from active systems promptly and from backups within 30 days. Purchase and tax records are kept for as long as applicable law requires.
8. Your rights and choices
- Access, correction, export or deletion of your data — email support@palmyst.com from your registered address.
- Account deletion — request it at palmyst.com/request-account-deletion. We confirm within 48 hours and complete deletion within 30 days.
- Analytics and cookies — see our Cookies Policy.
- Ad personalisation — control it from your device settings as described in section 4.
Depending on where you live, you may have additional rights under laws such as the EU/UK GDPR or India’s DPDP Act, including the right to complain to your data protection authority.
9. International transfers
Our providers may process data in countries other than yours, including the United States and India. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.
10. Changes to this policy
We will update this page when our practices change and revise the “last updated” date above. Material changes will be announced in the app.
11. Contact
Palmyst (Aumadi) — support@palmyst.com. See also our Terms & Conditions and Refunds & Cancellations.