KARMI — PRIVACY, DATA & AI TRANSPARENCY POLICY

Your privacy is sacred to us.

At Karmi, awareness begins with trust — and trust begins with transparency.

We handle your personal information responsibly, respectfully, and with full clarity.

This policy explains:

• What data we collect
• How we use it
• How we protect it
• How you can manage or delete it
• How our AI systems work

You are always in control.

We only collect information that is essential for personalization, security, and improving your experience.

A. Personal Details You Provide

• Name (optional)
• Birth details (date, time, and place)
• Email or login credentials
• Gender or pronouns (optional)
• Time zone or location (for accurate daily timing)

B. Usage & Device Data

Automatically collected to maintain app performance and security:

• Device type, OS version, app version
• IP address and approximate location
• Session duration, feature usage, and interaction logs

C. Reflection & Journal Entries

If you use in-app journals, check-ins, or notes:

• These are stored securely
• They are never used for advertising or sold
• They are never used for AI training without explicit consent

D. Payment Data

Handled entirely by: Stripe, Apple App Store, or Google Play Store

We never store or see your credit card details.

We use your information to:

• Generate personalized insights, timing maps, and reflections
• Display the Tree of Self, Life Blueprint, Life Path, and Today's Dashboard
• Send daily guidance, reminders, and relevant updates
• Recommend learning content if you opt in
• Improve app functionality, performance, and accuracy
• Maintain platform safety and comply with legal requirements

We do not sell, rent, or trade your personal data — ever.

We use industry-leading security protocols:

• Encrypted in transit (TLS/HTTPS)
• Encrypted at rest (AES-256)
• Strict access controls & authentication
• Secure cloud infrastructure (AWS or equivalent)
• Routine security audits and compliance checks

We adhere to: GDPR • CCPA • UAE Federal Data Protection Law

We keep your data only as long as necessary to provide the Service.

You may delete your account any time via:

Settings → Privacy → Delete Account or email contact@karmi.ai

Upon deletion:

• All personal data, birth details, and journal entries are erased within 30 days
• Identifiers are removed from backups automatically during their scheduled purge cycle

Data deletion is permanent and irreversible.

Karmi uses AI models to create symbolic interpretations, insights, and timing narratives.

We guarantee:

• Your identifiable data is never sent to external AI platforms (e.g., OpenAI, Google Gemini)
• AI runs within Karmi's secure, private systems
• Only anonymized and aggregated data may be used to improve models
• You may opt out of non-essential AI analytics

Our AI Principles:

• Transparency
• User control
• Privacy by design
• No predictive determinism
• No behavioral manipulation

Karmi's AI supports awareness — it does not define you.

We share limited, essential data only with compliant service providers who enable core functionality:

• Cloud hosting (AWS, Google Cloud, or equivalent)
• Payment processors
• Email and push notification services (e.g., Mailchimp, Firebase)
• Analytics tools (anonymous, used for product improvement only)

All partners follow strict confidentiality and data protection standards.

We do not share your data with advertisers.

Karmi uses minimal cookies and similar technologies.

A. Types of Cookies We Use

We do not use advertising cookies or cross-site trackers.

B. Managing Cookies

You can disable cookies in your browser or device settings.

Some features may not work properly without them.

You have the right to:

• Access your personal data
• Correct inaccuracies
• Delete your data permanently
• Export your data (data portability)
• Withdraw consent at any time
• Opt out of non-essential communications

To exercise any rights, email contact@karmi.ai.

We respond within 30 days.

Karmi is not intended for users under 16, or under the digital-consent age in your country.

If we learn that data from a child has been collected, we will delete it promptly.

Your data may be stored or processed in servers located outside your home country.

All international transfers follow:

• GDPR Standard Contractual Clauses (SCCs)
• Equivalent international safeguards

Your data remains protected no matter where it's processed.

Karmi is built with the philosophy that technology should enhance consciousness, not overshadow it.

We ensure:

• AI insights reflect patterns symbolically — they are not predictions
• You remain the ultimate decision-maker
• We audit models for bias, quality, and integrity
• No AI system makes autonomous decisions about your life

Karmi's role is to illuminate your rhythm, not dictate it.

We may update this Privacy Policy periodically.

If changes are significant, we will notify you through the app or email.

The "Effective Date" reflects the most recent version.

For privacy inquiries or data requests: