Last Updated: October 15, 2026
This Privacy Policy ("Policy") is issued by NUCLEAR MAN ("we," "us," or "our"). It governs the data practices for our mobile application, Hastgy: AI Palm Reading (the "App"), and all related services (the "Services").
About Hastgy: Hastgy is a palm reading, tarot and astrology entertainment application that allows users to scan their palm, explore palm line interpretations and discover personalized zodiac and daily guidance content for self-reflection. The application provides features including but not limited to AI Palm Reading, Life Guide with daily, monthly and yearly insights on love, family, marriage, business, wealth and health, Tarot Card Reading across topics such as luck, finance, health, love, protection and business, Daily Horoscope for all 12 zodiac signs, and Love Compatibility based on both Western zodiac and Chinese zodiac signs. The following Privacy Policy sets out how your data is handled in connection with this service.
This Policy is a legally binding agreement. By downloading, installing, or using our Services, you acknowledge that you have read, understood, and agree to the data practices described herein. If you do not agree with this Policy, you must not use the Services. For the purposes of applicable data protection laws, such as the EU General Data Protection Regulation (GDPR), we are the Data Controller of your Personal Data.
Our approach to privacy is founded on the following core principles:
2.1. Transparency: We are committed to being open and clear about how we handle your data.
2.2. Purpose Limitation: We will only collect and process your data for the specified, explicit, and legitimate purposes set out in this Policy.
2.3. Data Minimization: We collect only the data that is necessary to provide and improve our services. The App asks for your name, gender and date of birth to personalize your readings, and requests camera access so you can scan your palm. You may also choose to upload a palm photo from your device instead of using the camera.
2.4. Security by Design: We integrate appropriate technical and organizational security measures to protect the confidentiality, integrity, and availability of your Personal Data.
2.5. Processing Only What Is Needed: We process information only as necessary to provide the features you choose to use. Certain information may be stored locally on your device, while other information, such as the palm images you capture or upload, is transmitted to our servers or service providers to generate your readings. Palm images are used solely to provide palm reading features and are not used to identify you. Further details are provided in the sections below.
3.1. Profile and Preference Data (Processed On-Device): During onboarding, you may provide information such as your name, gender and date of birth, and choose your preferred language. We use this information to personalize your experience in the App, such as greeting you by name and tailoring your readings.
3.2. Palm Images: When you use the Palm Reading or Life Guide features, you may choose your left or right hand and either take a photo of your palm using your device camera or select an image from your device gallery. The palm image is transmitted to our servers or service providers to generate your palm reading, Life Guide insights and related interpretations. Palm images are used solely to provide these features and are not used to identify you. Camera or photo access is requested only when you choose to use a feature that requires it.
3.3. Horoscope Data: When you use the Daily Horoscope feature, the App processes the zodiac sign you select in order to display horoscope content for the chosen day.
3.4. Tarot Reading Data: When you use the Tarot feature, the App processes the reading topic you choose (such as luck, finance, health, love, protection or business) and the tarot card you select in order to display the relevant interpretation.
3.5. Compatibility Data: When you use the Compatibility feature, you select your zodiac sign or Chinese zodiac sign and that of your partner. This information is used only to generate the compatibility result displayed within the App. We do not ask for your partner’s name or any other personal information about them.
3.6. Feedback Data: When you rate the App or tell us what is not working for you, we collect your star rating, the reasons you select and any additional details you choose to provide. We use this feedback solely to improve the App. Please avoid including personal information in free-text feedback.
3.7. Device, Usage and Advertising Data: When you use the App, we and our third-party partners, such as advertising and analytics providers, may automatically collect certain technical information, including device model, operating system version, language settings, app interactions, crash reports and advertising identifiers. This information is used to operate and improve the App and to display advertisements. Further details about these partners are provided in the sections below.
3.8. Technical & Usage Data (Collected Automatically for Service Operation and Advertising): To ensure our App functions correctly, to resolve technical issues, and to support our advertising-based model, we automatically collect certain technical data.
3.9. Device and Network Information: Your IP address, device manufacturer and model, operating system version, screen dimensions, time zone, network state (e.g., Wi-Fi), and system language.
3.10. Application and Advertising Identifiers: Your device's advertising identifier (e.g., Google Advertising ID on Android), the App's version, unique device identifiers, and install attribution data provided by the application marketplace from which you installed the App, such as the install referrer string, which we and our attribution partners use to determine which campaign led to your installation.
3.11. Usage and Interaction Data: Information about your interactions with the Services, such as app launches, features used, readings completed, time spent on screens, and clicks. This also includes information about your interaction with advertisements shown to you, including rewarded advertisements.
3.12. Crash and Diagnostic Data: If the App crashes or encounters an error, crash logs and related diagnostic information (such as stack traces and device state at the time of the crash) are collected to help us fix the issue.
3.13. Purchase Data: If you purchase a subscription, Google Play processes your payment. We and our subscription management partner receive a purchase token, product identifier, transaction date, trial status, and subscription status in order to unlock premium features. We do not receive your payment card details.
3.14. Communications Data (Voluntarily Provided): When you voluntarily contact us for customer support, send feedback, or submit a rating comment by email, we collect your email address and the content of your communications. This data is used exclusively to respond to your inquiries.
3.15. Push Notification Data: If you allow notifications, Firebase Cloud Messaging assigns your installation a registration token so that we can deliver notifications to your device, including daily reading reminders. This token is not linked to your name or email address, and you can stop its use at any time by turning off notifications for the App in your device settings.
We only process your Personal Data when we have a valid legal basis for doing so under applicable data protection laws like the GDPR.
4.1. To Provide Core App Features: Performance of a Contract. We process the information you provide or generate through the App as necessary to provide the features you request, including palm reading, Life Guide insights, tarot readings, daily horoscopes, and zodiac and Chinese zodiac compatibility.
4.2. To Personalize Your Experience: Performance of a Contract. Where you provide information such as your name, gender, date of birth or preferred language, we process that information as necessary to personalize the readings, insights and other content you request.
4.3. To Provide and Manage Subscriptions: Performance of a Contract. Where the App offers subscriptions or other in-app purchases, we process purchase and subscription information as necessary to verify purchases, manage free trials or subscription status, restore purchases, and provide access to premium features.
4.4. To Maintain and Improve the Services: Legitimate Interests. We may process usage, performance, crash and diagnostic data, as well as any feedback you choose to submit, where necessary for our legitimate interests in maintaining the reliability and security of the App, resolving technical issues, fixing bugs, measuring performance, and improving existing or developing new features.
4.5. To Provide and Measure Advertising: Consent and/or Legitimate Interests. The App is supported by advertising. Where required by applicable law, we rely on your consent to access or use information for personalized advertising and related measurement purposes. Where permitted by applicable law, we may process limited information for non-personalized or contextual advertising and related service operations based on our legitimate interests in supporting and funding the Services.
4.6. To Measure Marketing Campaigns and Attribution: Consent and/or Legitimate Interests. We may process installation, advertising, and attribution information to understand how users discover the App, measure the effectiveness of advertising campaigns, prevent attribution fraud, and optimize our marketing activities. Where required by applicable law, such processing is based on your consent.
4.7. To Send Notifications: Consent and/or as Permitted by Applicable Law. If you enable notifications, we may use notification-related information to deliver daily readings, reminders, quick access shortcuts and other notifications, including on your device’s lock screen. You can disable notifications at any time through your device settings.
4.8. To Ensure Security and Prevent Fraud: Legitimate Interests. We have a legitimate interest in processing information where necessary to detect, investigate, and prevent fraudulent, abusive, unauthorized, or malicious activity and to protect the security and integrity of the App and our Services.
4.9. To Comply with Legal Obligations: Legal Obligation. We may process your Personal Data where necessary to comply with applicable laws, regulations, legal processes, or lawful requests from courts, regulators, law enforcement agencies, or other competent authorities.
We integrate third-party Software Development Kits (SDKs) to provide and maintain the full functionality of our Services, including analytics, advertising, attribution and subscription management. These partners may collect data directly from your device and typically act as independent "Data Controllers." We strongly encourage you to review their privacy policies to understand their data practices. Our primary partners include:
- Google (AdMob, User Messaging Platform, Firebase Analytics, Crashlytics, Cloud Messaging, Remote Config & ML Kit): https://policies.google.com/privacy
- Meta (Facebook SDK, Facebook Audience Network & Analytics): https://www.facebook.com/about/privacy/
- AppLovin: https://www.applovin.com/privacy/
- Adjust: https://www.adjust.com/terms/privacy-policy/
- AppsFlyer: https://www.appsflyer.com/legal/privacy-policy/
- Vungle: https://vungle.com/privacy/
- InMobi: https://www.inmobi.com/privacy-policy/
- Pangle: https://ad.oceanengine.com/union/media/privacy
- Mintegral: https://www.mintegral.com/en/privacy/
- Unity: https://unity3d.com/legal/privacy-policy/
- IronSource: https://developers.is.com/ironsource-mobile/air/ironsource-mobile-privacy-policy/
- In-App Purchases (RevenueCat): https://www.revenuecat.com/privacy/
We may add or replace advertising mediation partners over time; the current list is maintained in this Policy and updated when it changes.
Our App requests only the minimum permissions necessary to provide its features. You are in complete control of these permissions and can manage them at any time through your device's settings menu. This section explains exactly which permissions the App may request and why we need them.
- android.permission.INTERNET: To connect to the internet to provide online app features, retrieve content, display advertisements, and communicate with supporting services.
- android.permission.CAMERA: To take a photo of your palm when you choose to use the Palm Reading or Life Guide features.
- android.permission.POST_NOTIFICATIONS: To send optional notifications, such as reminders and relevant app updates. Users can disable notifications at any time.
- android.permission.RECEIVE_BOOT_COMPLETED: Used to restore scheduled notifications or reminders after the device restarts, so previously scheduled reminders can continue to work.
- android.permission.USE_FULL_SCREEN_INTENT: The app uses this permission to display feature reminders on your lock screen at scheduled times feature suggestions). This permission only controls how a notification is displayed; it does not collect, read, or share any personal data. You can turn these notifications off anytime in your device Settings (Special app access → Full screen notifications) or via the app's notification settings.
- android.permission.ACCESS_NETWORK_STATE: To check network connectivity before accessing online features and services.
- android.permission.WAKE_LOCK: Allows the app and its supporting services to temporarily keep the device awake while certain background operations are being completed.
- android.permission.FOREGROUND_SERVICE: Declared by the WorkManager library used to schedule background tasks such as notifications and reminders. The app does not run any foreground services.
- com.google.android.gms.permission.AD_ID: Used to access your device's unique, user-resettable advertising identifier. This helps our partners show you ads that are more relevant to you.
- android.permission.ACCESS_ADSERVICES_AD_ID: For Advertising, to access the advertising-specific ID on supported Android versions.
- android.permission.ACCESS_ADSERVICES_ATTRIBUTION: For Advertising, to help measure the effectiveness of advertising campaigns.
- android.permission.ACCESS_ADSERVICES_TOPICS: For Advertising, allows interest-based advertising while preserving privacy.
- android.permission.ACCESS_ADSERVICES_CUSTOM_AUDIENCE: Allows supported advertising services to use Android Privacy Sandbox custom audience functionality where available.
- com.google.android.c2dm.permission.RECEIVE: Default permission in Android applications used for push notifications.
- com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE: Default app permission used to securely attribute app installs for analytics.
- com.samsung.android.mapsagent.permission.READ_APP_INFO: Allows the app to identify which marketing campaign led to the install on Samsung devices, for advertising measurement and attribution purposes only. No personal information is collected.
- com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA: Allows our install-attribution partner (AppsFlyer, via Huawei's install referrer service) to identify which marketing campaign led to the app installation on Huawei devices, for advertising measurement and attribution purposes only. No personal user data is collected through this permission.
- com.ai.palmistry.palmreading.lifeguide.horoscope.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION: Default app permission to ensure secure communication between the app's components.
We operate globally, and your Personal Data may be transferred to, stored in, and processed in jurisdictions outside your country of residence, where our third-party partners operate. We ensure that all such transfers comply with applicable data protection laws by using legally-recognized transfer mechanisms like Standard Contractual Clauses (SCCs) or other safeguards required by the law of your country of residence.
You have rights concerning your Personal Data, subject to limitations provided by law.
8.1. Opt-Out of Personalized Advertising: You can limit ad tracking by resetting or deleting your device's advertising identifier through your device settings (e.g., On Android: Settings > Privacy > Ads). Where our consent management platform is shown to you, you can also change your advertising consent choices from within the App. This will limit, but not eliminate, the ads you see.
8.2. Notifications: You can turn off notifications at any time in your device settings.
8.3. Formal Rights Requests: Depending on your jurisdiction, you may have the right to Access, Rectify, or Erase the Personal Data we hold about you, or to withdraw consent you have given. Because Reading Data is stored only on your device, you can delete it at any time by clearing the App's data or uninstalling the App. Erasure requests to us will primarily apply to Technical Data and Communications Data associated with you. To exercise any of your rights, please submit a formal request to the email address provided in Section 14.
9.1. Technical and Usage Data is collected and stored by our analytics and advertising partners acting on our behalf or as independent controllers. Where we control the retention period, that data is retained for up to 24 months from the date of collection, or until it is no longer necessary for the purposes described in Section 4, whichever is earlier. Retention by independent controllers is governed by their own privacy policies, linked in Section 5.
9.2. Purchase Data is retained for as long as your subscription is active and thereafter for the period required to handle billing disputes and meet accounting or tax obligations.
9.3. We retain Communications Data (the content of your support inquiries and correspondence with us) for up to 24 months following the resolution of your inquiry, to allow us to handle any follow-up questions or complaints.
9.4. Advertising identifiers are controlled directly through your device's operating system settings; we do not separately retain them beyond your active use of the Services.
9.5. Notwithstanding the periods above, we may retain data for a longer period where required to comply with a legal obligation, to resolve disputes, or to enforce our agreements, and we will securely delete or anonymize data once it is no longer needed for these purposes.
We apply the data protection law of the country or state in which you reside.
10.1. For Residents of the European Economic Area (EEA), UK, and Switzerland (under GDPR): You have the rights detailed in Section 8, as well as the right to data portability, the right to object to processing based on legitimate interest, and the right to lodge a complaint with a supervisory authority. The legal bases we rely on are detailed in the table in Section 4.
10.2. For Residents of California and Other U.S. States with Consumer Privacy Laws (including CCPA/CPRA): You have the right to know what personal information is collected, to delete it, to correct it, and to opt-out of the "sharing" of your personal information for cross-context behavioral advertising. Our use of third-party advertising SDKs may be considered "sharing" or "targeted advertising." You can exercise your right to opt-out at any time by contacting us at the address in Section 14. You may additionally reset or delete your device advertising identifier as described in Section 8.1. We do not "sell" your data for monetary consideration.
10.3. For Residents of India (under the Digital Personal Data Protection Act, 2023): You have the right to access information about your personal data, to request correction and erasure, to withdraw consent, to nominate another person to exercise your rights, and to have your grievances addressed. You may contact us using the details in Section 14 for any such request or grievance.
10.4. For Users in Other Jurisdictions: Depending on the data protection laws that apply to you (including, among others, the personal data protection laws of Saudi Arabia, the United Arab Emirates, Qatar, Bahrain, Brazil's LGPD, Canada's PIPEDA, South Korea's PIPA, Australia's Privacy Act, and other applicable national or regional data protection laws), you may have similar rights to access, correct, delete, restrict, or object to the processing of your Personal Data, and to lodge a complaint with your local data protection authority. To exercise any of these rights, please contact us using the details in Section 14, and we will respond in accordance with the law that applies to you.
11. STRICT COMPLIANCE WITH COPPA & CHILDREN'S PRIVACY
11.1. Not Directed at Children: The Hastgy App and all related Services are strictly intended for a general audience and are not directed to children under the age of 13 (or 16 in certain jurisdictions such as the EEA/UK, or such other minimum age as required by the law of your country of residence).
11.2. No Collection from Minors: We rigorously comply with the Children's Online Privacy Protection Act (COPPA) and equivalent global regulations. We do not knowingly solicit, collect, or maintain personally identifiable information from anyone under the age of 13.
11.3. Enforcement and Deletion: If we become aware that a child has provided us with Personal Data, we will take steps to delete such information immediately. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us immediately.
We apply technical and organisational measures appropriate to the risk, including encryption of data in transit, restricted access to systems, and periodic review of our third-party processors. No method of transmission or storage is completely secure. If a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority and, where required, affected users, in accordance with applicable law.
We may update this Policy from time to time. If we make material changes, we will provide notice through the App or by other means to allow you to review the changes before they become effective. Your continued use of the Services after a revision becomes effective constitutes your acceptance of the updated terms.
For any questions, concerns, or requests relating to this Privacy Policy, please contact us:
- Developer: NUCLEAR MAN
- Support Email: nuclear.backup.260126@outlook.com