Privacy Policy

Hastrekha · HouseofTech Innovation Pvt Ltd

Last updated: 20 July 2026

HouseofTech Innovation Pvt Ltd (“we”, “us”, “our”, or the “Company”) operates the Hastrekha mobile application, website, and related services (the “App”).

Hastrekha is a palmistry and hand-reading app. You take or upload a photo of your palm, and the App generates a reading based on traditional palmistry concepts — the heart line, head line, life line, fate line, mounts, and hand shape — presented as personalised guidance, daily insights, and reports. Certain readings and features are available only to paid subscribers or via in-app purchases.

We are committed to protecting your privacy and handling your data responsibly. This Privacy Policy explains how we collect, use, store, share, and protect your information when you use Hastrekha, wherever in the world you use it.

By downloading, installing, or using Hastrekha, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the App.

1. Device Permissions We Use

• Camera — used only when you choose to capture a photo of your palm for a reading. The camera is never activated in the background and no image is captured without your action.
• Photos / media access (optional) — used only if you prefer to pick an existing palm photo from your gallery instead of taking a new one. We access only the specific image you choose; we do not scan or upload your whole photo library.
• Storage — used to save reading cards, reports, or images you choose to download. We only write the files you choose to save.
• Notifications (optional) — used to send daily insights and reminders if you enable them. You can turn these off at any time.
• You can grant or revoke these permissions at any time from your device settings; some features (such as palm scanning) will not work without them.

2. Information We Collect

A. Information You Provide Directly

• Account details if you choose to sign up — mobile phone number (for OTP login) and/or email address, or a sign-in identity from Google or Apple (name, email, profile picture as shared by that provider).
• Palm photographs — images of your hand that you capture or upload so the App can generate a reading. See Section 4 for exactly how these are handled.
• Optional personal details for a more tailored reading — such as your name, date and (if you choose) time and place of birth, gender, dominant hand, and relationship or life-focus preferences. These are optional; you can use the App without providing them.
• Questions you ask, topics you select, and readings you save or favourite.
• Subscription and billing-related details when purchasing a premium plan or report.
• Feedback, support queries, or communications you send to us.

B. Automatically Collected Information

• Device information: device type, operating system, app version, IP address, unique device identifiers, language and region settings.
• Usage data: readings generated, sections viewed, reports opened, features used, and in-app navigation.
• Performance data: crash reports, diagnostics, and error logs.
• Approximate location derived from IP address, used for regional pricing, language defaults, content availability, and legal compliance.
• Analytics data collected via third-party tools to improve the App.

C. Information We Do Not Collect

• We do not access your contact list, call logs, SMS, or microphone.
• We do not scan your full photo library or read your existing personal files — photo access is used only for the single image you pick, and storage access only to save what you choose to download.
• We do not use your palm image as a biometric identifier. See Section 4.
• We do not collect government IDs, fingerprints, or health records.
• We do not store your full card or UPI details — payment information is handled directly by our RBI-licensed payment gateway partners (such as Razorpay and PhonePe).

3. How We Use Your Information

• Analyse the palm image you submit and generate the reading, report, or insight you requested.
• Personalise readings, daily insights, and recommended topics using the optional details you provide.
• Save your past readings and preferences and sync them across devices if you sign in.
• Process subscription payments, in-app purchases, and manage billing.
• Send service messages such as OTP, receipts, renewal reminders, and important account notices, and (where enabled) daily insight notifications.
• Detect and prevent fraud, abuse, or unauthorised access, and enforce our usage rules.
• Improve reading quality and App performance, fix bugs, and develop new features (using aggregated or de-identified data wherever possible).

4. How Your Palm Image Is Handled

• Purpose limitation — your palm image is used solely to generate the reading you requested and, where you save it, to let you revisit that reading in your history.
• Processing — the image is transmitted over an encrypted connection and analysed on our servers and/or by third-party AI infrastructure providers acting as our processors under data-protection agreements. Those providers process the image only to return the analysis to us.
• No model training on your image — we do not use your palm photograph to train facial-recognition or biometric-identification systems, and we do not permit our AI processors to retain your image to train their own general-purpose models.
• No sale or advertising use — we never sell your palm image or share it for advertising or profiling by third parties.
• Retention — if you do not save the reading, the uploaded image is deleted from our processing systems once the reading is delivered. If you save the reading, the image is retained with it in your account history until you delete that reading or your account.
• Your control — you can delete any individual saved reading and its image from within the App at any time, or request full deletion via the Delete Account page.
• Where local law treats hand images as sensitive or biometric data (for example under India’s DPDP Act, the GDPR, or state biometric-privacy laws such as Illinois BIPA), we process such data only with your explicit consent, given when you first submit a palm photo, and you may withdraw that consent at any time by deleting your readings or your account.

5. AI-Generated Readings

• Readings are produced by automated systems combining traditional palmistry rules with AI models. They are generated content, not the opinion of a human practitioner, and are provided for entertainment and self-reflection only.
• Automated processing is used to compose your reading; it is not used to make any decision that produces a legal or similarly significant effect on you.
• You may contact us to ask how a reading was generated or to raise a concern about its content.

6. Subscription & Payment Information

• Payments are processed by RBI-licensed payment gateway partners (such as Razorpay, PhonePe, or similar providers), supporting UPI & UPI Autopay, credit/debit cards, and netbanking. The active payment gateway may change from time to time without prior notice.
• Each payment gateway handles and stores your payment details under its own security standards (PCI-DSS). We never see or store your full card number.
• We retain only your subscription status, plan, and transaction reference for billing, accounting, and tax compliance.

7. Information Sharing & Disclosure

We do not sell or rent your personal data. We share limited data only:

• With service providers (cloud hosting and storage, content-delivery networks, AI image-analysis and text-generation infrastructure, analytics, payment gateways such as Razorpay and PhonePe, email/SMS delivery) under data-protection agreements, and only to the extent needed to provide the service.
• To comply with legal obligations, court orders, or lawful government requests.
• In case of mergers, acquisitions, or restructuring (with notice to users).
• To protect rights, safety, and platform security.

8. International Data Transfers

• Hastrekha is offered worldwide. Your data may be processed on cloud infrastructure located in countries other than your own, including India, the United States, and the European Union.
• Where required (for example for users in the EEA, UK, or Switzerland), we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms for cross-border transfers.

9. Data Storage & Security

• All data is encrypted in transit (HTTPS/TLS); stored palm images, readings, and account data are protected with access controls and industry-standard safeguards.
• Access to stored palm images is restricted to the systems that serve your own reading history and to a limited number of authorised personnel for support and security purposes.
• While we take strong precautions, no system is completely secure.

10. Data Retention

• Account and preference data is retained while your account is active.
• Palm images submitted for a one-off reading are deleted from our processing systems once the reading is delivered; images attached to readings you save are retained until you delete the reading or your account.
• Saved readings and reports are retained while your account is active so you can revisit them.
• Transaction records are retained for the duration required by applicable tax and accounting law (typically up to 7 years).
• Analytics data may be retained in anonymised form for up to 24 months.
• You may request account and data deletion at any time — see the Delete Account page.

11. Your Privacy Rights

Depending on where you live, you may have rights under laws such as the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), India’s Digital Personal Data Protection Act 2023, and similar laws, including the right to:

• Access a copy of your personal data, including your saved readings and images
• Correct or update your information
• Request deletion of your data (“right to be forgotten”)
• Object to or restrict certain processing, and data portability
• Withdraw consent at any time, including consent to process palm images (without affecting prior processing)
• Opt out of “sale” or “sharing” of personal information (we do not sell or share personal information as defined by the CCPA)
• Lodge a complaint with your local data-protection authority

To exercise any of these rights, contact us at the email below. We respond within the timelines required by applicable law and never discriminate against you for exercising your rights.

12. Children’s Privacy

• Hastrekha is intended for users aged 18 and above. Palmistry readings deal with adult life themes and are not designed for children.
• We do not knowingly collect data from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.

13. Beliefs & Respect

• Hastrekha presents palmistry as a traditional and cultural practice, offered respectfully and without any claim of scientific validity.
• Readings are never intended to alarm, diagnose, or make claims about your health, lifespan, or fate. If any content concerns you, contact us and we will review it.

14. Third-Party Services

• The App may use third-party tools including Razorpay and PhonePe (payments), Google/Apple sign-in, SMS/OTP providers, cloud storage and content-delivery providers, AI image-analysis and text-generation infrastructure, and analytics services.
• These services operate under their own privacy policies.

15. Changes to This Privacy Policy

• We may update this Privacy Policy from time to time.
• Significant changes will be communicated through the App.
• Continued use of Hastrekha means acceptance of the updated policy.

16. Contact Us

For any questions or requests, including privacy-rights requests:

• Company Name: HouseofTech Innovation Pvt Ltd
• Email: support@houseoftech.ai
• Address: F-118, Adani Galeria, Sector 89A, Gurgaon, Haryana, India