Privacy Policy

Last updated: October 2026

This policy explains how Palmist handles your personal data, in line with India’s Digital Personal Data Protection Act, 2023 (DPDP).

What we collect

Account data (email), profile data you provide for readings (name, gender, date, time and place of birth), wallet/transaction records, and technical data (device, language). We also use Google Analytics and Microsoft Clarity to understand how the Service is used — including anonymised usage statistics and session interactions — to improve it. Birth details are treated as sensitive and collected only with your explicit consent.

If you choose to add them: your marital status, work and number of children (including a marital status you state in chat, which you can change in Profile), and the details of family members or a partner you save (their name, how they are related to you, their date, time and place of birth, and a reading of their palm). Save someone else's details only with their agreement.

Your palm photos

We do not store your palm images. To write your reading, the photo is sent to our AI provider, Microsoft Azure OpenAI. We don't keep it — only the text reading is saved to your account — but Microsoft may keep it for a limited time to detect abuse (see Sharing).

How we use your data

To generate your readings, run your wallet, provide support, and improve the Service. We compute your birth chart from your birth details to make readings accurate. During a voice call, your microphone audio streams live from your device to our AI provider so the astrologer can answer; we don't record or keep the audio or a transcript. We do not sell your personal data.

Sharing

We share data only with service providers that run Palmist for us and act on our instructions. Microsoft Azure OpenAI generates readings, chat replies and voice-call answers, and receives your profile, birth chart, reading and recent chat as context; it does not use this data to train its models, but may keep it for a limited time to detect abuse, and may process it outside India. Google Play and our payment gateways process payments — we never see your card or UPI details. OpenStreetMap receives the place name you type, to find your place of birth. Our email and hosting providers deliver messages and run our servers.

The names of the family members and partner you saved, and how they are related to you, go to Azure OpenAI with your chat messages, so the astrologer knows who you mean. When you ask about one of them, their birth details, birth chart and palm reading go too, in the same way as yours.

Your rights

You can delete your account yourself at any time, at palmist.io/account/delete or in the Palmist app (Profile, then Delete account). Deletion removes your profile (name, email address, phone, photo, gender, reading hand and birth details) and your consent to use your birth details, your palm readings, your birth chart, the text of your reports, your chats and any ratings you gave in them, feedback you sent from this account or its email address and your survey answers, our record of the emails we sent you and of how you used Palmist, the IP address you signed up from, your account from the old Palmist site if you had one, your sign-in links and codes, and your devices, and signs you out everywhere. It cannot be undone.

Deletion also removes your marital status, work and number of children, and every family member and partner you saved, with their palm readings. You can also delete any one of them yourself, in Profile.

Some records are kept after deletion, under an anonymous id and without your name or email address: payment and order records (including the price and date of each report), your wallet history and the billing lines of your calls and chats, which Indian tax law requires us to keep for about six years, with any note our staff added to them replaced by a standard line; a few details that don't identify you (your country, your language, the date you joined and the date your account was deleted); and an anonymous code for the phone or browser you signed up on. We keep that code so the same device can't collect the new-user bonus twice. Because of it, a new account made later on the same phone or browser could be connected to this anonymous history. If you had an account on the old Palmist site, we also keep a one-way code made from its email address, only so that the old account is never brought back; it can't be turned back into the address, though someone who already has the address could match it. Your payment provider also keeps its own record of each payment.

You can also access or correct your data, withdraw consent, or make any other request about your data by emailing [email protected].

Security

Data is encrypted in transit; credentials and sessions are protected. No system is perfectly secure, but we take reasonable measures to safeguard your information.

Privacy Policy | Palmist