Privacy Policy

1. Who is responsible

Jangar Global Commerce LLC is the controller of your personal data. Jangar Global Commerce LLC, [registered address]. Support: [support email]. Privacy: [privacy email].

2. Data we collect

• Account: your email address, sign-in method (email link or Google), language and time zone.
• Profile: the name you enter, birth date, birth time (optional) and birth place with its coordinates; optional gender, used only for one Mongolian calculation (the yearly суудал / parkha).
• People you add: name and birth details of a partner or other person you enter for compatibility.
• Palm reading: the features extracted from your palm photo (for example line and mount descriptions). The photo itself is not stored.
• Results: calculated results, your AI Full Report and palm reading, and the date they were created.
• Survey answers: if you answer our short survey, your answers and the language you used.
• Consents: which policies and consents you accepted, their version and time.
• Payments: your purchases and subscription status. Card details are collected and stored by Stripe, not by us.
• Technical data: security logs such as IP address and device/browser type, kept for a short time to protect the service.

3. Why we use your data (and legal bases)

• To provide the app and your profile — performance of our contract with you.
• To analyse a palm photo — your explicit consent, which you can withdraw at any time in Settings.
• To process payments, keep records and meet tax duties — contract and legal obligation.
• To improve the app from survey answers — our legitimate interests; answering is optional.
• To keep the service secure and prevent abuse — our legitimate interests.
• To send service emails (sign-in links, renewal reminders, important changes) — contract and legal obligation. We do not send marketing emails without your consent.

4. Palm photos

When you choose to read your palm, the photo is resized on your device, its metadata (such as location) is removed, and it is sent to our server and to our AI provider for analysis. The photo is discarded right after the analysis; we never store it in our database or files. Only the extracted features are saved, and you can delete them or withdraw your palm consent at any time — this deletes all palm-derived data.

5. Who processes data for us

These providers act on our instructions under data processing agreements. We do not sell your personal data and do not share it for cross-context behavioural advertising.

• Supabase — database and sign-in, hosted in the European Union (Frankfurt, Germany).
• Cloudflare — hosting and content delivery of the app.
• Anthropic, PBC (USA) — AI that writes your Full Report from your calculated results and analyses palm photos. It receives sign and number keys, not your name, email or birth date; palm photos are sent only when you ask for a palm reading. Data sent through the API is not used to train models.
• Stripe (USA) — payments and taxes.
• [Email provider] — sending sign-in and service emails.
• Google — only if you choose to sign in with Google.

6. International transfers

Some providers are in the USA. Where data leaves the European Economic Area, the UK or your country, we rely on safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

7. How long we keep data

• Palm photos: not stored — discarded right after analysis.
• Account, profile, results and survey answers: until you delete them or your account.
• After account deletion, data is removed from our live systems immediately and from backups within [30] days.
• Payment and tax records: as long as tax law requires (usually up to 7 years), kept by us and Stripe.
• Security logs: up to [30] days.

8. Your rights

Depending on where you live (for example under the EU/UK GDPR, the California CCPA/CPRA, the Law of Mongolia on Personal Data Protection or the Law of the Republic of Kazakhstan on Personal Data), you can ask to access, correct, delete or receive a copy of your data, object to or restrict some uses, and withdraw consent at any time. Many of these you can do yourself in Settings (edit profile, delete palm data, delete account). For other requests write to [privacy email]; we may ask you to confirm your identity first and will reply within the time the law requires (usually within 30 days).

We honour Global Privacy Control (GPC) browser signals as an opt-out of any sale or sharing — although we do neither. You can also complain to your local data protection authority.

9. Children

AUNIRA is for people aged 16 and over. Sign-up checks the birth date. If we learn that we hold data of someone younger, we delete it.

10. Security

Data is encrypted in transit, stored in the EU with row-level access rules so each user can reach only their own data, and the app never holds administrator database keys. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

11. Country-specific information

Kazakhstan: [section to be completed after legal advice on data localisation].

EU/UK representative: [to be completed after legal advice].

12. Changes

We will update this policy when our processing changes. The version and date are shown at the top; we will notify you of material changes at least 14 days in advance.

13. Contact

Jangar Global Commerce LLC, [registered address]. Support: [support email]. Privacy: [privacy email].