Privacy Policy
Effective date: 2026-10-19
Suki App Studio ("we", "us") is responsible for personal information processed through the Mystic Lens mobile application (the "App"). This policy explains what is processed, why, and what choices you have.
1. Summary
The App analyses your palm and face photos on your device. Photos, hand landmarks and face landmarks are never uploaded to us or to anyone else, and the App works offline. We do not run user accounts and we do not operate servers for this App. Advertising is provided by Google AdMob, which collects the data described in section 2.
2. Information processed
Photos you take or choose (on your device only). When you take a photo with the camera or pick one from your gallery, the App reads it in memory to make your reading. The App never accesses other photos: the gallery is opened through the Android photo picker and only the photo you select is shared with the App.
Hand and face landmarks (on your device only). Google's MediaPipe technology, built into the App, finds points on your hand (21 points) or face (478 points) in the photo. From these points and the photo, the App measures features such as palm lines, hand and finger proportions, face shape and the proportions of facial features. This processing happens entirely on your device. It is not used to identify you or to recognise you in other photos, and it is not used to infer sensitive information such as health, ethnicity or religion.
Your saved readings (on your device only). Each reading you make is saved in the App's private storage: the measurements and landmarks of the reading, a reduced copy of the photo, and the date. Any corrections you make ("Choose it yourself") are saved with it. This history is not sent to us or to any third party and is excluded from Android cloud backup and device-to-device transfer. Photos and landmarks that are not part of a saved reading (for example the live camera check, or a photo that could not be read) are discarded right away.
Live camera check (on your device only). While the camera screen is open, small preview frames are checked on your device to tell you whether a hand or face is in view. They are not stored.
App settings (on your device only). Whether you have seen the welcome screen, your language, the number of readings made and when an advertisement was last shown, so that advertising stays within the limits described in the Terms.
Advertising data (collected by Google). The Google Mobile Ads SDK collects, for advertising, measurement and fraud prevention: the advertising ID, IP address (from which an approximate location is derived), device and app information, and how you interact with advertisements. Google LLC and its partners process this data as described at https://policies.google.com/technologies/partner-sites and https://policies.google.com/privacy. Your photos, landmarks and readings are never given to the advertising SDK.
We do not collect your name, email address, contacts or precise location. The camera permission is requested only on the camera screen, and you can always choose a photo from your gallery instead.
3. Purposes and legal bases
Analysing photos and saving readings: providing the function you asked for (performance of the Terms you accepted). Photos and landmarks of your face may be considered biometric data in some jurisdictions; they are processed only on your device, only when you ask for a reading, and only to make that reading.
Advertising: your consent where the law requires it (for example in the EEA, the United Kingdom and Switzerland, collected through Google's consent message before any advertisement is requested), otherwise our legitimate interest in funding a free App.
4. Sharing and international transfers
We do not sell personal information. We receive no photos, landmarks or readings. A reading card is shared only when you tap Share and choose an app; the photo is included only if you switch it on, with fingertips blurred on palm photos.
Advertising data is collected directly by Google LLC (USA) and may be processed in the United States and other countries where Google and its advertising partners operate, under the safeguards Google describes in its policies (including standard contractual clauses and the EU–U.S. Data Privacy Framework where applicable). Under some laws, showing personalised advertising is treated as "sharing" for cross-context behavioural advertising; you can opt out as described in section 6.
5. Retention
Saved readings and photos stay on your device until you delete them in the App (one by one, "Delete all" in History, or "Delete all data" in Settings), clear the App's data or uninstall the App. Photos that are not saved are discarded immediately after the reading. Google retains advertising data according to its own policies.
6. Your choices and rights
Your readings: delete any reading in History, or everything in Settings > Delete all data.
Camera: you can refuse or withdraw the camera permission in Android settings and use gallery photos instead.
Advertising choices: open "Ad privacy options" in Settings (where available) to change or withdraw consent; reset or delete your advertising ID, or turn off ad personalisation, in Android Settings > Google > Ads (or Privacy > Ads).
Depending on where you live, you have the right to access, correct, delete or port your personal information, to restrict or object to processing, to withdraw consent at any time, and to lodge a complaint with your data protection authority. Because we hold no personal information about you on any server, most requests are fulfilled on your own device; for data held by Google, use Google's tools. You can always contact us at the address below and we will answer within the period required by law.
7. Regional information
European Economic Area, United Kingdom, Switzerland: the GDPR / UK GDPR rights in section 6 apply; you may complain to your local supervisory authority.
Republic of Korea: items processed, purposes and retention periods are those in sections 2, 3 and 5. Processing is entrusted or transferred overseas only as follows: recipient Google LLC (googlekrsupport@google.com); country: USA and other countries where Google operates; items: advertising ID, IP address, device information, ad interaction data; time and method: transmitted over the network when advertisements are requested; purpose: advertising delivery and measurement; retention: according to Google's policy. You may refuse the transfer by declining consent or turning off ad personalisation, in which case advertisements may be limited. Personal information is destroyed by deleting readings in the App or deleting the App's data. Children under 14 are not allowed to use the App.
United States (including California, Illinois, Texas and Washington): we do not sell personal information. Face and hand geometry is processed only on your device to give you the reading you requested; we never receive, sell or disclose it. You may opt out of "sharing" for cross-context behavioural advertising through the choices in section 6. We do not discriminate against you for exercising your rights.
Brazil: you have the rights listed in Article 18 of the LGPD and may contact the ANPD.
Japan: we handle personal information in accordance with the Act on the Protection of Personal Information; advertising data is provided to Google LLC in the United States as described above.
India: you have the rights provided by the Digital Personal Data Protection Act, 2023, including the right to nominate and the right to grievance redressal through the contact below.
Russia, Vietnam: you have the rights provided by your national personal data law, including to withdraw consent and to request deletion.
8. Children
The App is not directed to children and may not be used by anyone under 14 (or under the higher age that applies in your country without a guardian's consent). We do not knowingly process children's personal information. If you believe a child has used the App, contact us.
9. Security
The App stores its data in the private storage that Android protects from other apps, and nothing is transmitted except the advertising data collected by Google.
10. Changes
We will post any update to this policy in the App and on its store page, with a new effective date, before the change takes effect.
11. Contact
Suki App Studio (Republic of Korea, business registration number 505-39-62156)