Privacy Policy

Effective June 2026

This Privacy Policy explains what data Charm · 灵 (“Charm”, “we”, “us”) collects, why, and how you can control it. It applies to the Charm iOS app and the charmfate.com website (the “Service”).

1. Data we collect

• Account data. When you sign in with Apple we receive a stable identifier and, if you choose to share it, your name and relay email. You may also set a display name.
• Photos you upload. Hand photos you submit for an AI nail-art preview are processed to generate that preview and the resulting image. We do not sell your photos or use them to train third-party models.
• Fortune & usage data. Draws, saved designs, and preferences (skin tone, nail shape, notification time) needed to run the Service.
• Product analytics. We use PostHog to understand how features are used (e.g. screen views, shake-to-draw, share events). This includes a pseudonymous device/user identifier and basic event metadata. It is used to improve the Service, not sold to advertisers.
• Crash & error reports. We use Sentry to capture crashes and errors (device model, OS version, a stack trace) so we can fix bugs.
• Waitlist email. If you join the waitlist on this website, we store the email address you submit (and any referral or UTM context) to send you a confirmation and an early-access invite.

2. How we use data

We use the data above to provide and operate the Service, generate your AI previews, deliver waitlist and account emails, measure and improve the product, keep the Service secure, and meet legal obligations. We do not sell your personal data.

3. Sharing & processors

We share data only with the service providers that run Charm on our behalf: Apple (sign-in and payments), Supabase (database and storage), our AI image provider (to generate previews), PostHog (analytics), Sentry (error reporting), and Resend (transactional email). Each processes data only as needed to provide its service.

4. Retention

We keep your data for as long as your account is active or as needed to provide the Service. Crash and analytics data are retained on a rolling basis. You can ask us to delete your data at any time (see below).

5. Your rights & deleting your data

You can request access to, correction of, or deletion of your personal data — including your account, uploaded photos, and waitlist email — by emailing [email protected]. We will action verified deletion requests within a reasonable period.

6. Children

Charm is not directed at children under 13 (or the minimum digital-consent age in your country), and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

7. Changes

We may update this policy as the Service evolves; material changes are marked by a new effective date above.

8. Contact

Privacy questions or deletion requests: [email protected].