Privacy Policy

1. Introduction

Welcome to Telve.ai ("we," "our," or "us"). We are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application Telve.ai (the "App").

Telve.ai is an AI-powered coffee fortune reading (tasseography) application that uses computer vision and artificial intelligence to analyze patterns in coffee cups and generate personalized fortune readings.

2. Data Controller

The data controller responsible for your personal data is:

Trakifaj Pro
Zagreb, Croatia
European Union

Data Protection Contact: [email protected]

For all privacy-related inquiries, data access requests, or to exercise your rights under GDPR, please contact us at the email address above.

3. Data We Collect

3.1 Information You Provide Directly

3.2 Information Collected Automatically

3.3 Information from Third Parties

If you choose to sign in using social login (Google, Facebook), we receive:

• Your name and email address from your social account
• Profile picture (if publicly available)
• Account identifier from the social platform

We do not access your social media posts, friends list, or other social data.

4. How We Use Your Data

We use your personal data for the following purposes:

4.1 Core Service Delivery

• Process and analyze your coffee cup images to generate fortune readings
• Provide personalized dream interpretations
• Generate daily, weekly, monthly, and yearly horoscopes
• Maintain your reading history and saved fortunes

4.2 Account Management

• Create and manage your user account
• Authenticate your identity when you log in
• Process payments and manage your reading credits
• Send service-related communications (password resets, purchase confirmations)

4.3 Service Improvement

• Analyze usage patterns to improve app features
• Train and improve our AI models for better accuracy
• Fix bugs and technical issues
• Develop new features based on user feedback

4.4 Legal Compliance

• Comply with legal obligations
• Respond to lawful requests from public authorities
• Protect our rights and prevent fraud

5. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

6. Data Sharing & Third Parties

We share your data with the following categories of third parties:

6.1 Service Providers

6.2 We Do NOT

• Sell your personal data to third parties
• Share your data with advertisers
• Use your photos for purposes other than generating your readings
• Share your reading history with anyone without your explicit consent

6.3 Legal Disclosures

We may disclose your information if required by law, such as:

• To comply with a legal obligation or court order
• To protect our rights, privacy, safety, or property
• In connection with a merger, acquisition, or sale of assets

7. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including:

• United States: Google Cloud services (Firebase, Vision API), OpenAI

When we transfer your data outside the EEA, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs): Approved by the European Commission
• EU-US Data Privacy Framework: For transfers to certified US organizations
• Adequacy Decisions: For countries deemed to provide adequate protection

You can request a copy of the safeguards we use by contacting us at [email protected].

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

9. Your Rights Under GDPR

As an EU resident, you have the following rights regarding your personal data:

9.1 Right of Access (Art. 15)

You can request a copy of your personal data and information about how we process it.

9.2 Right to Rectification (Art. 16)

You can request correction of inaccurate or incomplete personal data.

9.3 Right to Erasure (Art. 17)

You can request deletion of your personal data ("right to be forgotten") when:

• The data is no longer necessary for its original purpose
• You withdraw consent and there's no other legal basis
• You object to processing and there are no overriding legitimate grounds

9.4 Right to Restriction (Art. 18)

You can request that we restrict the processing of your data in certain circumstances.

9.5 Right to Data Portability (Art. 20)

You can request your data in a structured, commonly used, machine-readable format.

9.6 Right to Object (Art. 21)

You can object to processing based on legitimate interests or for direct marketing purposes.

9.7 Right to Withdraw Consent (Art. 7)

Where processing is based on consent, you can withdraw it at any time.

9.8 Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority. In Croatia, this is:

Agencija za zaštitu osobnih podataka (AZOP)
Croatian Personal Data Protection Agency
https://azop.hr

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

Technical Measures

• Encryption: Data encrypted in transit (TLS/HTTPS) and at rest
• Authentication: Secure password hashing, optional two-factor authentication
• Access Controls: Role-based access, principle of least privilege
• Infrastructure: Hosted on secure cloud platforms (Google Cloud, Firebase)

Organizational Measures

• Regular security assessments and updates
• Employee training on data protection
• Incident response procedures
• Regular backups and disaster recovery plans

11. Children's Privacy

Telve.ai is intended for users who are 18 years of age or older.

We do not knowingly collect personal data from anyone under 18 years of age. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at [email protected].

If we discover that we have collected personal data from a child under 18, we will promptly delete that information from our systems.

12. Cookies & Tracking Technologies

Our mobile app uses minimal tracking technologies:

12.1 What We Use

• Firebase Analytics: Anonymous usage statistics to understand how users interact with the app
• Local Storage: To save your preferences and session data on your device
• Authentication Tokens: To keep you logged in securely

12.2 What We Don't Use

• Third-party advertising cookies
• Cross-app tracking
• Social media tracking pixels

You can opt out of Firebase Analytics by adjusting your device's privacy settings or contacting us.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

How We Notify You

• Material Changes: We will notify you via email and/or in-app notification at least 30 days before changes take effect
• Minor Changes: Updated policy will be posted with a new "Last Updated" date

We encourage you to review this Privacy Policy periodically. Your continued use of the App after any changes constitutes acceptance of the updated policy.

14. Contact Us