Privacy policy

Iris image processing (biometric data)

Your iris photo is special-category biometric data (GDPR art. 9). It is processed only with your explicit consent, for the sole purpose of generating your reading, and is deleted immediately and irreversibly after processing. It is never stored, shared or used to identify you.

What data we keep

We keep the text of your reading, your email (if provided) and marketing attribution data (UTM). Legal basis: consent and service delivery. You may request access, rectification or deletion by writing to our contact email.

Data processors

We use GDPR-compliant providers: AI image processing (through OpenRouter), payments (Stripe) and email (Brevo, EU servers). We never sell your data.

Friends, ranking and shared readings

If you use the social features, we process your nickname (optional, chosen by you), your friend code, your mascot and avatar, your streak and your weekly XP to show them to your friends and in the weekly ranking; never your email. Friendships are created only when both sides accept and you can undo them at any time. When you send a reading to a friend, you share with them the link to that report and the message you write; do this only with readings you want to share. Streak reminders and friend alerts require your notification permission and can be turned off from your profile or from your browser or device settings; for this we store the chosen hour, your time zone and the push subscription identifier. Legal basis: performance of the service you request and your consent for notifications.