Privacy Policy

• Your photo is never stored. It is resized on your device, sent once to produce your reading, and discarded.
• We do not use your photo to identify you, to train models, or for advertising.
• If you create an account we keep your email, a hashed password, your name if you give one, and your credit balance. Nothing else.
• Your reading and card live on your device only, in your browser’s storage.
• You can delete your account and everything linked to it at any time by emailing us.

Soulfie (“we”, “us”) operates the website and web app at soulfie.app (the “Service”). For any privacy question or request, write to ricko1@live.no.

When you take or upload a photo of your face or open palm:

• Your browser first shrinks the photo (to at most 1280 px on the long side) and removes camera metadata such as location. Only this reduced copy leaves your device.
• The reduced photo is sent over an encrypted connection to our server, which forwards it once to our AI provider (currently OpenAI) together with instructions to write a reading. The provider returns text; it does not return or keep the image for us.
• We do not save the photo on our servers, in logs, or in any database. Once the reading is returned, the photo is gone from our side.
• The AI provider processes the image under its own terms. Under OpenAI’s API policy, data sent through the API is not used to train their models and is retained only for limited abuse-monitoring periods. You can read their policy at openai.com/policies.
• The reading is written for entertainment and reflection. It does not detect identity, age, ethnicity, health or emotion, and we instruct the model never to comment on such things.

The text of your reading and the card image are stored only in your browser (session storage), so you can move between the reading and the card. They disappear when you close the tab, when you tap “Try another reading”, or when you clear your browser data. We do not keep a copy. If you download or share the card, that copy is yours and lives wherever you put it.

You can use the daily free palm reading without an account. If you sign up, we store:

• Email address — to identify your account and let you log in.
• Password — stored only as a salted, one-way hash (scrypt). We cannot see your password.
• Name — optional, only if you type one.
• Credit balance and the date of your last free palm reading — so the Service knows what you can use.
• Account creation date.

This data is kept in a managed database (Upstash Redis, hosted on infrastructure in the United States) and is used solely to run your account. We do not sell it, rent it, or share it with advertisers.

• Everyone can take one free palm reading per day. For visitors without an account we remember this with a small cookie that holds only today’s date; for account holders we store the date on the account.
• Extra palm readings and all face readings use credits from your balance. We record the deduction on your account; we do not record the content of the reading.
• Cards from free readings carry a small “Free edition” ribbon. Cards from credit readings do not. This is the only difference in what is produced.
• When credit purchases open, payments will be handled by a payment provider (such as Stripe). We will never see or store your full card number.

We use a minimal set, all strictly necessary for the Service to work:

• soulfie_session — a signed cookie that keeps you logged in for up to 30 days. HttpOnly and secure.
• soulfie_free_palm — the date of today’s free palm reading, for visitors without an account. Expires after two days.
• Browser storage for your language choice and your current reading and card.

We do not use advertising or cross-site tracking cookies. We use Vercel Web Analytics for aggregate, cookie-free usage statistics (page views and product events such as “reading completed”). It does not store IP addresses or build personal profiles, and it cannot see your photo or your reading.

• Photo: not kept at all.
• Reading and card: only on your device, until you clear them.
• Account data: for as long as your account exists. Delete it whenever you like (see below).
• Server logs: technical logs (time, endpoint, status, error messages) are held by our hosting provider for a short period and never contain photos or readings.

Wherever you live, you can ask us to see, correct, export or delete the personal data we hold about you — which, for most people, is only an email address and a credit balance. Email ricko1@live.no from the address on your account and we will act within 30 days. Deleting your account removes your email, name, password hash and credits permanently; unused credits are not refunded unless the law where you live requires it.

If you are in the EU/EEA or UK you also have the right to complain to your data-protection authority. Our legal bases are: performance of a contract (running your account and delivering readings), your consent (uploading a photo), and legitimate interest (keeping the Service secure).

Soulfie is for people aged 16 and over. We do not knowingly accept photos or accounts from anyone younger. If you believe a child has used the Service, contact us and we will remove the account.

All traffic is encrypted (HTTPS). Passwords are hashed, sessions are signed, API keys never reach your browser, and the database is reachable only from our servers. No system is perfect; if we ever learn of a breach affecting your data we will tell you promptly.

If we change this policy in a way that matters, we will update the date at the top and, for account holders, mention it in the app. Continued use after a change means you accept the updated policy.

See also our Terms of Service.