Anna-LeePrivacyPolicy
✨

Legal

Privacy Policy

PRIVACY POLICY

Anna-Lee Palmistry · Part of Heart@ Group Ltd Last Updated: September 2026

1. INTRODUCTION

Heart@ Group Ltd ("we", "us", "our") operates the Anna-Lee Palmistry application ("the App"). This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the App.

We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the EU General Data Protection Regulation (GDPR).

By creating an account and using the App, you consent to the practices described in this policy.

2. DATA CONTROLLER

Heart@ Group Ltd is the data controller responsible for your personal data. For any privacy-related queries, contact:

Heart@ Group Ltd Anna-Lee Palmistry Email: info@heartgroupltd.com Website: www.heartgroupltd.com

3. DATA WE COLLECT

3.1 Information You Provide Directly

  • Account details: Your name and email address when you register.
  • Profile information: Birth date, birth time, birth place, and sun/moon/rising signs for astrology features.
  • Consultation bookings: Your selected consultation type, preferred date/time, and any notes you provide about your focus areas.
  • Chat messages: Questions and messages you send to the Anna-Lee AI assistant, including any reading context (tarot cards drawn, astrology chart data).
  • Hand photos: If you use the palm photo analysis feature, images of your hand(s) uploaded for analysis.
  • Community content: Forum posts, replies, and reviews you submit.
  • Journal entries: Any reflections or notes you save within the App.
  • Payment information: We do not store your full card details. Payment is processed securely through Stripe (see Section 6).

3.2 Information Collected Automatically

  • Usage data: Which features you use, lessons completed, quiz scores, and progress data.
  • Device information: Browser type, device model, and operating system.
  • Approximate location: Derived from your browser locale and, for a closer guess, your IP address checked against a country lookup service, for the purpose of providing localised crisis support resources. You can always pick a different country yourself in the crisis support screen. We do not track your precise GPS location.

3.3 Data We Do NOT Collect

  • We do not collect precise GPS location data.
  • We do not store your full payment card numbers (Stripe handles this).
  • We do not sell your personal data to third parties.

4. HOW WE USE YOUR DATA

We use your personal data for the following purposes:

| Purpose | Data Used | Legal Basis | |---|---|---| | Providing your account and App access | Email, name | Contract | | Delivering readings, consultations, and AI chat responses | Chat messages, reading context, profile info | Contract | | Processing subscription payments | Email, Stripe transaction ID | Contract | | Booking and managing consultations | Email, booking details, calendar invites | Contract | | Generating personalised content (horoscopes, coaching) | Birth data, sun/moon/rising signs | Consent | | Community features (forums, reviews) | Your posts and replies | Consent | | Sending consultation reminders and affirmations | Email | Consent | | Gamification and progress tracking | Quiz scores, lesson progress, points | Consent | | Detecting distress in AI chat to offer crisis resources | Chat messages (analysed by AI) | Legitimate interest (user safety) | | Improving the App and fixing issues | Usage data, error logs | Legitimate interest | | Legal compliance and record-keeping | Account records | Legal obligation |

5. MENTAL HEALTH SAFETY PROTOCOL

Because the App includes an AI chat assistant, we have implemented an automated safety screening system. When you send a message to the Anna-Lee AI assistant, the system analyses your message for signs of emotional distress, hopelessness, or crisis.

  • If distress is detected, the App will display local crisis support resources (such as Samaritans 116 123 in the UK).
  • This screening runs automatically and is designed to support your wellbeing.
  • The App is not a medical or mental health service and does not replace professional care.
  • See our Legal Disclaimer for full details on the limitations of the App.

If you are in immediate danger, contact your local emergency services (999 in the UK).

6. PAYMENTS AND STRIPE

Subscriptions and consultation payments are processed through Stripe, a PCI-DSS compliant payment processor.

  • When you make a payment, Stripe processes your card information directly. We never see or store your full card number.
  • We store a record of your transaction (amount, date, Stripe transaction ID, subscription tier) for account management and legal record-keeping.
  • You can view and manage your subscription at any time within the App.

For details on how Stripe handles your payment data, see Stripe's Privacy Policy.

7. DATA STORAGE AND SECURITY

  • Your data is stored securely on the Base44 cloud platform with encrypted connections (HTTPS/TLS).
  • Access to your personal data is restricted to authorised personnel only.
  • We apply Row-Level Security (RLS) so that your readings, journal entries, and consultation details are only visible to you and authorised administrators.
  • We regularly review our security practices and run security scans.

Despite these measures, no system can be guaranteed 100% secure. We will notify you and the relevant authorities if a data breach occurs that affects your rights.

8. DATA RETENTION

We retain your personal data only for as long as necessary:

  • Account data: Retained while your account is active. Deleted within 30 days of account closure request.
  • Consultation records: Retained for 6 years for legal/tax record-keeping (UK HMRC requirement).
  • Chat messages: Retained while your account is active to provide conversation history.
  • Community posts: Retained until you delete them or close your account.
  • Payment records: Retained for 7 years for tax and legal compliance.

You may request deletion of your data at any time (see Section 10).

9. SHARING YOUR DATA

We do not sell your personal data. We share data only with:

  • Stripe — for processing payments (transaction ID, email).
  • Google Calendar — if you connect your calendar for consultation reminders (only with your explicit OAuth consent).
  • LinkedIn — if you choose to share a reading or skill to LinkedIn (only with your explicit action).
  • IP country lookup service (ip-api.com): We send your IP address only, to work out your approximate country for localised crisis support resources. No account details or personal information are sent.
  • Our hosting provider (Base44) — for storing app data and running backend functions.
  • Legal authorities — if required by law, court order, or to protect the safety of users or others.

We never share your chat messages, journal entries, or reading details with third-party marketers.

10. YOUR RIGHTS UNDER UK GDPR / GDPR

You have the following rights regarding your personal data:

  1. Right of access — Request a copy of the personal data we hold about you.
  2. Right to rectification — Request correction of inaccurate data.
  3. Right to erasure ("right to be forgotten") — Request deletion of your data.
  4. Right to restrict processing — Request we limit how we use your data.
  5. Right to data portability — Receive your data in a structured, machine-readable format.
  6. Right to object — Object to processing based on legitimate interests.
  7. Right to withdraw consent — Withdraw consent for any processing based on consent (e.g., personalised horoscopes, email reminders) at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at info@heartgroupltd.com. We will respond within 30 days.

If you are unsatisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

11. INTERNATIONAL DATA TRANSFERS

Your data is primarily stored and processed within the United Kingdom and the European Union. Where any data is processed outside the UK/EU, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs), in compliance with UK GDPR and GDPR requirements.

12. CHILDREN'S PRIVACY

The App is intended for users aged 18 and over. We do not knowingly collect data from children under 18. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

13. COOKIES AND SIMILAR TECHNOLOGIES

The App uses essential storage (local storage) to:

  • Remember your language preference.
  • Remember that you have accepted the Legal Disclaimer.
  • Cache horoscope data for offline viewing.
  • Keep you logged in during your session.

We do not use third-party advertising cookies or tracking pixels.

14. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. The most current version will always be available within the App. We will notify you of significant changes via email or in-app notification. Continued use of the App after any update constitutes acceptance of the revised policy.

15. CONTACT

If you have any questions about this Privacy Policy or how we handle your data, please contact:

Heart@ Group Ltd Anna-Lee Palmistry Email: info@heartgroupltd.com Website: www.heartgroupltd.com

© 2026 Anna-Lee · Heart@ Group Ltd · "Putting Heart in everything we Do"