This Privacy Policy explains what we collect, how we use it, who we share it with, and your rights. Palmy is offered in the United States only and addresses your rights under CCPA/CPRA, BIPA, and COPPA. By using the app you agree to these practices.
Palmy is operated by Samet Birlik, an individual, providing an AI-assisted palmistry and cosmic-personality app offered for entertainment and self-reflection in the United States. We do not provide medical, financial, legal, or psychological advice. You can reach us at samet@palmy.me.
You provide: date of birth (for age verification), an optional name and username, optional email or phone number for sign-in, your palm photo, birth/profile inputs, and purchase status. We also collect limited device and usage data to run and improve the app.
Friends. When you add a friend, star a friendship, or write in a friendship chat, we store the connection and the messages so both of you can see them; Palmy’s replies in the chat are generated by our AI provider from the two readings and the conversation. A friend can remove the connection at any time.
Match links (palmy.me/m). A match link shares only a derived summary of your profile (your archetype, sun sign and personality spectrum — never your palm photo, never your birth date). The person who opens it enters their birthday in their own browser; only their derived result (sign, life path, answers, score) is sent back to you. The web page never captures or processes palm photos.
The tools run in your browser. The calculators on palmy.me (friendship, love, palm, hand shape, big three, moon sign) work entirely on your device. The names, birthdays and taps you type are not sent to us and are not stored on our servers.
Share links carry what you typed. A link you create with one of these tools (the part after #s=, #r= or #j=) encodes the names, birthdays and taps you entered, so the person who opens it sees the same result. Anyone who has the link can read it. Send it only to the person you made it for.
Usage events. The site sends us small usage events: a random id for your browser tab, the name of the event (for example “result shown”) and the page it happened on. We also keep a hashed version of your IP address for 180 days to stop abuse and count visits. No names, birthdays or results are sent with these events.
Emails you give us. If you ask us to email you a result or tell you when the app is live, we store your email address and the first names shown on that page on our waitlist — never a birthday. We use it only to send you that page and the launch note, and you can ask us to delete it at samet@palmy.me.
No palm photos are ever captured or uploaded on the website. The scan runs in the app, never on a website.
To create your readings and cosmic profile, verify your age (13+), process purchases, secure your account, provide support, and improve the app. We do not sell your personal information.
Your palm photo is used only to create your entertainment reading — never to identify, authenticate, or recognize you. We capture it only with your explicit consent, use it solely to generate your reading, and automatically delete it within 12 hours. Only an anonymized feature summary (numbers, not the image) is retained. We never sell, lease, trade, or share it for advertising. As a precaution, palm capture is turned off in Illinois.
Limited service providers that help us run the app (e.g., our AI provider Anthropic for analysis, the App Store for payments, and PostHog (United States) for pseudonymous product analytics that never includes your palm photos or personal identifiers), under contracts that protect your data. We disclose information if required by law. We do not sell your data. You can turn off usage analytics anytime in the app under Privacy Center → Manage consent.
Palm photos: deleted within 12 hours. Readings, history, friendships, chats, and your anonymized summary: kept until you delete them or your account. Match links expire after 14 days. Purchase records: kept as required for tax and legal reasons.
We use reasonable administrative and technical safeguards to protect your information. No system is perfectly secure, but we work to keep your data safe.
Depending on your state, you can access, correct, delete, or download your data, and opt out of the “sale” or “sharing” of personal information. Manage these in the app’s Privacy Center or by contacting us. We won’t discriminate against you for exercising your rights.
Palmy is not for children under 13. We require a date of birth and do not knowingly collect data from anyone under 13. If we learn we have, we delete it.
We don't use your palm reading or personal data for advertising, and keep tracking to a minimum. We choose privacy-preserving defaults.
Readings are produced by AI and are for entertainment only. Your palm photos are not used to train models.
We may update this policy; we’ll post the new version with an updated date and, where appropriate, notify you.
California residents have additional rights under the CCPA/CPRA, including notice at collection and the right to limit use of sensitive information. Contact us to exercise them.
Privacy questions? Reach us at samet@palmy.me.