Biometric and Health Data Policy

This policy is EveryBod, LLC's publicly available written policy for the hand-geometry measurements the Madame Manu app (the "App") uses to read palms. It is our retention schedule and destruction guidelines under the Illinois Biometric Information Privacy Act, our biometric identifier policy under Colorado law, and our consumer health data privacy policy under Washington's My Health My Data Act and similar state laws, which treat biometric data as consumer health data. It applies together with our Privacy Policy.

What this covers

To read your palm, the App measures the geometry of your hand in a photo you choose to take or select: the positions of 21 points on your hand, the proportions of your fingers, thumb and palm, and the paths of the creases on your palm. Some laws treat a scan of hand geometry, or an image of a hand or palm from which one could be extracted, as a biometric identifier, biometric data or consumer health data. We treat these measurements, and the hand photos they come from, as covered by this policy. The App does not use them to diagnose, assess or describe your health, and readings leave out statements about health and lifespan.

Where it happens and who receives it

• Current App (version 1.0.0, TestFlight build 11 and later): the photo is measured entirely on your device. The photo and the measurements are never uploaded or sent to EveryBod, LLC or to anyone else, so we do not collect, receive, possess, store or share them.
• Earlier test versions (TestFlight builds 10 and earlier): the photo was sent over an encrypted connection to our server, hosted by Fly.io in the United States as our processor, measured in memory, and destroyed as described below.

Categories, purpose and sources

• Categories: hand photos you provide, and the hand-geometry measurements taken from them.
• Purpose: only to produce the palm reading you asked for, at that moment. Never to identify or recognize you, to link readings together, to train any model, for advertising, or for any other purpose.
• Source: only you, through the photo you take or select in the App.
• Sharing: none. We do not sell, lease, trade, share or otherwise profit from hand photos or measurements, and we have no affiliates or third parties that receive them. The only exception would be a disclosure required by a valid warrant, subpoena or law, and in the current App we have nothing to disclose.

Retention schedule and destruction guidelines

• On your device (current App): the photo and measurements exist only while your reading is open. When you leave the reading, the App deletes the photo files it made (the camera or picker copy and a resized copy, kept in the App's private cache) and drops the measurements from memory. If the App closes before that, it deletes any leftover photo files the next time it opens. A reading card you choose to save goes to your photo library, and one you share goes where you send it; the App deletes its own copy right after.
• On our server (earlier test versions): photos and measurements were held only in the server's working memory, never written to disk, a database or logs, and permanently destroyed as soon as the reading was delivered, and in every case within 30 minutes of upload.
• Outer limit: in all cases, hand photos and measurements are destroyed once the reading they were made for is complete, which is always well within any legal limit (including three years after your last interaction with us, 24 months after collection, and 45 days after they are no longer needed).

Consent

Before your first palm reading, the App shows a written notice of what is measured, why, and for how long, and asks for your consent with separate boxes that are never pre-checked. This is your written release. The App won't measure a hand without it, and asks again if this policy changes in a way that affects hand measurements. We keep an anonymous record that consent was given (see "Records of your consent" in the Privacy Policy); it never contains your photo or hand geometry. You can withdraw consent at any time on the App's About screen.

Security and incidents

In the current App nothing leaves your device. For earlier test versions, photos traveled only over encrypted connections (HTTPS) and were held only in memory. If we ever learn of a security incident affecting biometric or consumer health data, we will investigate it, contain it, and notify affected people and authorities as the law requires.

Your rights and how to use them

You can ask us to confirm whether we have any of your biometric or consumer health data, to give you a copy, to delete it, or to withdraw your consent, by emailing support@everybodfit.com with the subject "Health data request". We'll respond within 45 days. Because we don't keep hand photos or measurements, our answer will usually be that we hold none; we can also delete the anonymous consent records tied to the install code shown on your About screen. If we decline a request, we'll explain why, and you can appeal by replying with the subject "Appeal"; we'll answer the appeal within 45 days. If you're not satisfied, you can contact your state attorney general. We will never treat you differently for using these rights.

Changes

We'll update this page and its date before any change takes effect. If a change affects how hand measurements are collected or used, the App will ask for your consent again.

Contact

EveryBod, LLC · support@everybodfit.com