FateOS processes only the data needed for records, AR palm reflection, and AI self-reflection you explicitly request. Observations, traditional symbolic interpretations, and scenario assumptions remain separate.
1. Scope & Controller
This policy applies to the FateOS web app, overseas iOS app, and Android app. FateOS is a lifestyle and self-reflection tool. It does not provide medical or psychological diagnosis, legal or investment advice, fertility or mortality predictions, or guaranteed outcomes.
Data controller/operatorNot configured
Registered addressNot configured
Privacy contactNot configured
Effective dateNot configured
2. Data We Process
Your chosen name, birth city, local birth date and time, IANA time zone, and time-confidence level.
Energy, progress, and mood check-ins, observed events, and action reviews you save.
Palm descriptors you explicitly confirm, such as length, clarity, continuity, and curve.
Questions you submit, bilingual AI readings, cited evidence, actions, and reading history.
Purpose-specific consent and withdrawal records, plus server-verified subscription entitlement; external transaction identifiers are retained only as irreversible hashes.
Pseudonymous operational data such as task, status, latency, token count, quality outcome, and random trace ID. Logs exclude user question bodies, model response bodies, API credentials, and original palm images.
3. Camera & Palm Data
The camera is used only for on-device hand positioning, capture guidance, and live AR overlays. Frames are not uploaded, written to the FateOS service, or retained. Hand landmarks are not palm-line recognition; only descriptors you explicitly confirm can enter an AI reading.
FateOS does not perform identity recognition, biometric-template creation, palm-change detection, or social matching. You can deny or revoke system camera permission and continue using features that do not require it.
4. AI Processing
Every personalized conclusion is generated live by the administrator-configured model service; local templates are never presented as AI output. Only while `ai_guidance` consent is current and you actively request a feature does FateOS send the profile, records, question, and confirmed palm descriptors needed for that task. Camera frames, administrator API credentials, and model configuration are not sent to user clients or written to user exports.
Output passes schema, evidence, safety, and bilingual quality checks. Insufficient evidence, failed validation, or model unavailability produces an unavailable state rather than a fabricated conclusion. Production processors and regions:
Production processors are not configured.
5. Purposes & Legal Bases
Profile, trend, AR palm, and AI reflection features: performance of the service you request and purpose-specific consent where applicable.
Birth-data storage and time normalization: only while `birth_data_processing` consent is current.
Camera access: an in-app explanation plus iOS or Android system permission.
Abuse prevention, reliability, and troubleshooting: legitimate interests in secure service delivery using minimized logs.
Subscription verification: necessary to fulfill purchases, restore purchases, and prevent transaction abuse.
6. Processors & International Transfers
Data is disclosed only to processors needed for hosting, databases, AI inference, and store transaction verification. FateOS does not sell personal data or use it for third-party targeted advertising or data brokerage. Each production processor's region and transfer safeguard is disclosed above.
7. Retention
Inactive accountsDeleted or anonymized after 730 days, with notice where required.
Operational logsUp to 30 days.
Encrypted backupsExpire through rotation within 35 days.
Purchase verificationUp to 2555 days, or a shorter/longer period required by law.
Permanent account deletion removes profiles, records, readings, entitlements, and linkable audits from the active database. Backup copies expire within the rotation period above.
8. Your Choices & Rights
You can withdraw camera, birth-data, and AI-data consent in the app, export a machine-readable archive, and permanently delete your account and data. You may also contact the operator to request access, correction, restriction, objection, portability, or complaint. Withdrawal does not affect processing lawfully completed before withdrawal.
If deletion is temporarily unavailable, the client clears local data, retains a deletion marker, retries when connectivity returns, and blocks new personalized uploads until completion.
9. Security
Production uses HTTPS, protected administrator secrets, least-privilege access, PostgreSQL persistence, server-side transaction verification, deletion auditing, and verified backup restoration. No system can guarantee absolute security; legally notifiable incidents will be handled under applicable law.
10. Children
The minimum age is 18. FateOS is not directed to children. Data discovered to fall below the applicable age threshold will be deleted or restricted.
11. Changes, Law & Contact
Material changes will be disclosed in the app or website and renewed consent requested where required. Governing law and jurisdiction: Not configured. Privacy questions: Not configured.