Privacy Policy

Who we are

Karmik is operated by Auteli LLC, a limited liability company organized in the State of New York, United States. For privacy questions or requests, contact contact@autelillc.com; for help with the app, write to support@karmaknot.app or see the Support page.

This policy is specific to Karmik. How Auteli handles information on its own company website and in business correspondence is described separately in the Auteli privacy policy.

Information we collect

Account and sign-in details. You can sign in with Apple, Google, or an email verification code, or use a guest account. We receive the account identifiers and, where provided, your name and email address. Apple may provide a private relay address. Email sign-in uses a one-time code rather than an account password. We keep verification and security records associated with sign-in.
Guest accounts. A guest account has an identifier on our servers and a credential saved on your device. It can be linked to the information you provide and the features you use; guest use does not mean that all information stays on your phone.
Birth and profile details. Your name, birth date and, when provided, birth time, time zone, place and coordinates, language, and preferences. Compatibility features may also use another person’s birth details that you provide.
Your content and activity. Questions, recent conversation context, goals, tasks, decisions, notes, ratings, outcomes, saved readings and related activity used to provide the features you choose.
Palm photos and measurements. Optional palm-reading features process the photo, detected hand or line measurements, and reading results. The photo is transmitted to our server and OpenAI for analysis; this is not solely on-device processing.
Location. Places you enter and, when you grant device permission, your location coordinates and time zone for local timing and location-based features. Device permission can be changed in iOS Settings.
Purchases. Subscription status, product and transaction identifiers, purchase verification and usage records. Apple processes App Store payments; we do not receive your full payment card details.
Technical information. Device and app information, errors, performance diagnostics, account identifiers in some diagnostic events, and technical request logs. If you enable push notifications, we receive the device notification token.
Advertising on the free plan. Karmik’s free version shows native advertising on the Today screen, and those ads may refresh while you use the app; Pro and Elite subscriptions show no ads and never load the advertising software. When an ad is shown, Google (AdMob) receives device and app identifiers, a coarse location derived from your IP address, and information about the ad shown and whether you tapped it. If you allow tracking in the iOS prompt, Google also receives your device’s advertising identifier (IDFA) to select more relevant ads; if you decline, ads still appear but are not personalised. We never pass your name, gender, birth details, readings, questions or messages to the ad network.
Correspondence. Your email address and the information you choose to include when contacting us.

Only provide another person’s information or palm photo if you have their permission. Do not submit information about a person under 18 to compatibility or palm-reading features.

How we use your information

To create and secure accounts and provide the calculations, planning tools, saved content, and personalization you request.
To generate AI-assisted explanations and conversations, check submitted content for safety, and compare relevant past decisions when you use those features.
To deliver reminders you enable, sign-in codes, and necessary account or service messages.
To verify purchases, provide paid access, recover interrupted requests, and prevent duplicate redemption or misuse of purchase credits.
To investigate faults, protect the service, and respond to support and privacy requests.
To show advertising on the free plan and confirm that ads were delivered, as described in sections 2 and 4. Paid plans are ad-free.

Contacting us does not subscribe you to a marketing mailing list.

Service providers and AI processing

We do not sell personal information. The only third party that receives information for its own advertising purposes is Google, for ads on the free plan, as described under Advertising on the free plan below. The following providers support the features you use:

Apple — Apple sign-in, App Store payments and subscription services, push delivery, and Apple location and place-search services used by the app.
Google — Google sign-in, if you choose it; and Google AdMob for advertising on the free plan only (see below).
OpenAI — AI text generation, photo analysis, safety checks, and text similarity processing, as described below.
Resend — delivery of email sign-in codes.
Hosting and diagnostics — server and database hosting, including Render, and Sentry error and performance reporting. Technical records may include an account identifier and details needed to investigate a problem.

What goes to OpenAI depends on the feature.

Karmik conversations: your question, recent messages, relevant calculated context, and profile details such as your name, birth date, birth time and birthplace when available. Relationship questions may include the partner details you provide.
Planning and decisions: submitted task or decision text, relevant context and outcomes. Past-decision comparison can send the current decision and a selection of your earlier decisions for text similarity analysis.
Palm reading: the photo you submit and information needed to analyze it and produce the reading.
Briefings and chart explanations: calculated chart, cycle or timing information and the requested language; some cycle readings include ages and event dates. Location explanations can also include the selected city and country. Relevant saved reading details may be sent when you discuss a feature with Karmik. These feature-specific reductions do not make every AI request anonymous.

OpenAI states that API data is not used to train its models by default unless the API customer opts in. Its retention rules depend on the service and account settings: standard abuse-monitoring logs may retain customer content for up to 30 days, with exceptions, including legal obligations and certain image safety reviews. We do not promise zero retention or immediate deletion by OpenAI. See OpenAI’s API data controls.

Avoid including medical records, financial account details, identity documents, or other information unnecessary for your request. Camera or location permission is separate from permission for third-party AI processing.

Advertising on the free plan. Ads are served by Google AdMob and appear only for free-plan accounts, as clearly labelled native advertising on the Today screen; ads may refresh while you use the app. Before the first ad request the app shows the advertising consent message required where you live and the iOS tracking prompt; the Google advertising software is not started, and no ad request is made, until that has happened, and it is never started on a paid plan. For each ad Google receives device and app identifiers, a coarse location derived from your IP address, and ad impression and tap data; with your tracking permission it also receives your advertising identifier (IDFA) and may use it for personalised ads and ad measurement across other apps. Without that permission ads are not personalised. Google acts as an independent business for ad selection and measurement and keeps this data under its own rules — see How Google uses information from sites or apps that use its services and Google’s Privacy Policy. Our servers keep no record of the ads you see; they only hold the setting that turns advertising on or off. You can change your advertising choices at any time (section 8).

Storage, retention and deletion

Account and feature records. Your profile and server-backed content are kept to operate your account and the features you use. Some readings and conversations also have on-device copies. Signing out preserves account data for a later sign-in; it is not a deletion request.

Optional account backup. If you enable account backup in Karmik, a copy of your saved profile, practices, planner entries, journals, chat history, palm reading reports and measurements, and profile photo (avatar) is stored on our server for that account. You can restore an existing account backup by signing in to the same account on another device. Guest accounts need a linked sign-in method for recovery on another device. Creating or restoring this backup does not send its contents to OpenAI or otherwise process them with AI. Palm scan photos are not included in account backups.

Karmik conversations. Conversation history is stored on your device and is included in a server copy if you enable account backup. Recent messages are sent to generate replies when you use chat. Separately, the server temporarily stores completed replies for recovery after an interrupted request. These replies have a seven-day recovery window; an automated cleanup removes expired reply content. Limited request identifiers and matching records can remain until account deletion. The seven-day window does not apply to chat history in an optional account backup, separate logs, or provider records.

Palm features. Palm scan photos are processed for the request and sent to OpenAI. We do not save these photos in our application database or include them in account backups. Saved palm measurements, findings and reading reports are stored on your device and are included in an account backup if you enable that separate feature. Technical logs may contain excerpts of analysis results, and provider retention is separate from your saved reading history.

Recovery of paid palm readings. When you use a paid palm-reading feature, our server automatically stores the completed result, including measurements and the reading report, so an interrupted delivery can be recovered without generating the same reading or charging for it again. This recovery copy is part of providing the paid feature and is stored even if account backup is turned off. It has a 90-day recovery window from the scan request; expired result content is removed by automated cleanup. Limited matching records, including an opaque operation identifier, request fingerprint, scan type and timestamps, are linked to your account and retained until you delete that account. These matching records contain no palm photo or reading report. Account deletion removes the recovery copy and matching records from the active application database. The 90-day window does not apply to readings saved on your device, optional account backups, separate logs or provider records.

Advertising data. Information Google receives when an ad is shown on the free plan is held by Google under its own retention rules; it is not stored by us and is not part of your account or its deletion.

Delete an account. Use Settings → Account → Delete Account in Karmik, including for a guest account. This removes the account and associated records from the active application database and initiates removal of that account’s on-device data. It does not delete other accounts on the same device.

Records outside the active account. Limited matching records for redeemed purchases and registered purchase requests are retained after account deletion to prevent reuse. Separate sign-in security records, diagnostic logs, backups and records held by service providers may remain after the in-app deletion process. It does not guarantee immediate erasure of every local file or external copy. Contact contact@autelillc.com with questions or a request concerning those records; we assess requests under applicable law.

Deleting the app or an account does not cancel an Apple subscription. Manage billing separately in Apple subscription settings. See our Support page for help.

Security

We use measures such as encrypted network connections, account authentication and access controls to protect information. No method of transmission or storage is completely secure. Do not send passwords, verification codes or full payment details to support.

Adults only

Karmik’s initial United States release is intended only for people aged 18 or older. People under 18 may not create an account or use the app. Do not submit a minor’s personal information or palm photo. If you believe a person under 18 has provided personal information, contact contact@autelillc.com so we can investigate and address the account and information.

Your choices and privacy requests

Advertising choices (free plan). To stop personalised ads, turn off tracking for Karmik in iOS Settings → Privacy & Security → Tracking; ads will still appear but will not be personalised. Where an advertising consent message applies, you can change the choices you made in it from Settings → Privacy & permissions → Ads in the app. Pro and Elite subscriptions remove ads entirely.

You can manage camera, location and notification permissions in iOS Settings, edit available profile details in the app, and request account deletion. Where applicable law gives you rights to access, correct, delete or obtain a copy of your information, or to object to certain processing, contact contact@autelillc.com. We may need information proportionate to verifying the request. If a request cannot be fulfilled in full, we will explain the applicable reason and any available review or appeal process.

This policy does not itself grant permission for every use of your data. Where processing requires a separate consent, you may contact us about withdrawing it; withdrawal does not undo processing already lawfully carried out.

United States state privacy rights

Our first release is planned for the United States. Additional privacy rights can depend on your state and whether a particular law applies to our business and processing. We do not sell personal information. If you allow tracking on the free plan, Google’s use of your advertising identifier for personalised ads may be considered “sharing” for cross-context behavioral advertising under California law; you can opt out at any time as described in section 8 (your privacy choices), and the app is for adults only, so we do not knowingly share the personal information of anyone under 18. We do not discriminate against you for exercising applicable privacy rights. California and other state residents may send privacy requests to contact@autelillc.com.

Where information is processed

Auteli LLC operates from the United States. Our service providers may process information in the United States and other locations where they operate. Availability of the website outside the United States does not mean the app has launched in that country. This policy does not ask you to waive mandatory privacy rights or treat use of the service as consent to every international transfer.

This website and email

This website, karmik.help, presents Karmik and links to our email addresses. It has no account system, no email signup form and no mailing-list enrollment. Selecting an email link opens your email application; we receive your address and message only if you send it.

The website code does not add advertising trackers or analytics — the advertising described in this policy happens only inside the app, never on this site — and the Newsreader font is served with the site rather than requested from Google Fonts. The site is hosted on Netlify, which processes technical request information such as IP addresses in its server logs for a limited period under its own policies and uses mechanisms needed to deliver and secure the site. Restricted previews may require authentication provided by the hosting platform.

Correspondence is used to answer your request and keep relevant support records. Avoid attaching sensitive information that we do not need. Privacy requests can be sent to contact@autelillc.com.

Changes to this Policy

We may update this policy as the app and our practices change. We will update the date above and provide additional notice or request consent when required.