हस्तरेखा·palmistry, reimagined

Privacy Policy

Effective August 2026

Who we are

fateline is an AI palm-reading product operated by Momentra Technologies Private Limited (“Momentra”, “we”, “us”), a company registered in India. The service is available globally. Product support: [email protected]. Company site: momentralabs.com.

What we collect

When you use fateline, we collect:

  • Your phone number, if you sign in via OTP (used to sign you in; IN users)
  • Your Google account profile — name, email address, and Google's stable user ID — if you sign in with Google (US users and others who choose Google sign-in)
  • Your email address (populated automatically from Google for Google sign-in; optional for OTP sign-in; used for receipts and account recovery)
  • Your name, birth year, and gender (used to personalize your reading)
  • A photo of your palm that you upload
  • Your detected country at signup (derived from your IP address), used to set the right currency for pricing — INR for India, USD for the United States
  • Your approximate signup location (country, region, city, and timezone), detected automatically from your network
  • The reading content (AI-generated text) we create for you
  • Basic usage information: device type, page views, and reading completion events

Payment information: We do not collect or store your card, UPI, or net-banking details. Payments are processed by third-party payment providers (for example Paytm in India). Those providers handle your payment credentials under their own policies.

How we use it

  • Your phone number or Google account is used only to sign you in. We do not market to you over SMS. We do not send promotional emails unless you have opted in; transactional email (receipts, support) may still be sent when relevant.
  • Your palm photo is processed by our AI provider to generate your reading. We retain the photo in our storage for up to 30 days for support and troubleshooting; after that it is automatically deleted. You can ask us to delete it sooner.
  • Your reading is stored under your account so you can return to it anytime.
  • We use analytics tools (PostHog) to understand how people use the service — for example, detecting cases where the AI fails to generate a usable reading, and tracking conversion events in our funnel.
  • We use advertising attribution tools (Meta Pixel and Meta CAPI) to measure which ads lead to purchases, so we can run our ad campaigns efficiently. This involves sharing conversion events (like a completed purchase) with Meta. We do not share your reading content with Meta.
  • Your detected country is used to display prices in your local currency.

Who we share data with

We share limited data with third-party service providers who help us run fateline. They include:

  • An SMS provider (to deliver your OTP, for phone sign-in users)
  • Google (for Google sign-in — your profile data is fetched from Google when you authenticate)
  • An AI processing provider (to generate your reading from your palm photo)
  • A payment processing provider (to take and refund payments)
  • A cloud hosting and content-delivery provider (where the service runs)
  • PostHog (analytics — page views, conversion events, and user identification for funnel analysis; data is not used for third-party advertising)
  • Meta (advertising attribution — we share conversion events such as purchases with Meta via the Meta Pixel and Meta Conversions API, so that we can attribute ad spend to real purchases. Meta may use this data under its own privacy policy to improve ad delivery)

We may also disclose information if required by law, to protect our rights, or in connection with a legal process. We do not sell your data. We do not share your reading content with advertisers. We do not use your reading content to train AI models for anyone else.

Data security

We implement appropriate technical and organisational measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. These include encrypted transport (HTTPS), access-controlled storage, and signed session tokens. No method of transmission or storage is completely secure; if you believe your account has been compromised, email us immediately.

Data retention

We retain personal information only as long as needed to provide the service and meet legal or accounting obligations, then delete or anonymise it:

  • Palm photos: up to 30 days for support and troubleshooting, then automatically deleted (or sooner on request).
  • Account and reading content: while your account is active, so you can reopen past readings. You may request deletion at any time.
  • Payment and order records: retained as required for tax, fraud prevention, and dispute resolution (typically several years under applicable law).
  • Analytics events: retained according to our analytics provider's configuration for product improvement.

Your rights (under India's DPDP Act)

You have the right to:

  • Ask what data we hold about you
  • Ask us to correct it if it's wrong
  • Ask us to delete it
  • Withdraw your consent and close your account at any time
  • Complain to the Data Protection Board of India if you believe we've mishandled your data

To exercise any of these rights, email us at [email protected]. We respond within seven business days. Under CCPA (below), the legal maximum is 45 days.

Your rights (US residents)

If you are a California resident, the California Consumer Privacy Act (CCPA/CPRA) gives you the following rights. Residents of Colorado, Virginia, Connecticut, Utah, Texas, and Oregon have similar rights under their state laws, and the same process applies to all of them.

  • Right to know. You can ask us what personal information we hold about you, where it came from, and who we share it with.
  • Right to delete. You can ask us to delete your personal information. We'll honor the request unless we're required to keep it for a legal obligation.
  • Right to correct. You can ask us to fix inaccurate personal information.
  • Right to opt out of the “sale” or sharing of your personal information. We do not sell your data. However, under CCPA, sharing personal data with an advertising platform for cross-context behavioral advertising counts as a “sale.” We share conversion event data with Meta (see the section above) for ad attribution, which may fall under this definition. To opt out, email us at [email protected] with the subject line “Do Not Sell or Share My Personal Information” and we'll suppress Meta Pixel events for your account.
  • Right to non-discrimination. We will not treat you differently or deny you service because you exercised any of these rights.
  • Authorized agent. You may designate an authorized agent to submit a request on your behalf. We'll honor the request after we verify your identity via the email on your account.

We aim to respond to all US privacy requests within 7 business days. The legal maximum under CCPA is 45 days (with one 45-day extension if we notify you).

EU/UK residents

We do not currently operate or actively market in the European Union or United Kingdom. If you are an EU or UK resident and you reach this service, you have GDPR-style rights: the right to access, rectify, erase, and port your data, as well as the right to restrict or object to processing. Our lawful basis for processing is contract performance (you purchased a reading) and legitimate interest (improving the service).

For questions or complaints, email us at [email protected]. You may also contact your national data protection supervisory authority.

Cookies and tracking

We use the following cookies and similar technologies:

  • Session cookie (httpOnly, signed JWT). Set when you sign in. Keeps you logged in. This is a first-party httpOnly cookie; it cannot be read by JavaScript.
  • Anti-bot cookie (Cloudflare Turnstile). Set by our third-party anti-bot service when it verifies you're human.
  • PostHog analytics. PostHog sets a session-keyed cookie to track page views and conversion events (e.g., reading started, purchase completed). This data is used for product improvement only — it is not shared with or sold to advertisers.
  • Meta Pixel (advertising). The Meta Pixel fires conversion events (ViewContent, InitiateCheckout, AddPaymentInfo, Purchase) to Meta's servers to help us attribute ad spend to real purchases and improve our ad campaigns. Meta may set its own cookies and may use this data under its own privacy policy. To opt out, see the “Do Not Sell or Share” option in the US residents section above, or use your browser's cookie controls.

You can disable non-essential cookies through your browser settings. Blocking essential session cookies will prevent sign-in.

Children

fateline is for users aged 18 and older. We don't knowingly collect data from anyone under 18. If you believe a minor has registered, please email us and we'll close the account.

Updates to this policy

We may update this policy as the service evolves. The “Effective” date at the top reflects the latest version. We will notify existing users of material changes before they take effect.

Grievance officer (IT Act, 2000)

In accordance with the Information Technology Act, 2000 and the rules made thereunder, if you have a complaint or concern about how your personal information is handled, you may contact our Grievance Officer:

Nidhi Kharnokhya
Momentra Technologies Private Limited
Email: [email protected]

We aim to acknowledge complaints promptly and resolve them within a reasonable period as required by applicable law.

Contact

For privacy questions or data requests about fateline, write to Momentra Technologies Private Limited:

Privacy Policy — fateline