Privacy Policy
Last updated 2026-10-22
This policy describes what Dtox collects, why, and what happens to it. It is written to be read, not to be survived.
The short version. We store your account, your practice history, and the readings and plans generated for you. We do not store the photographs you take. A photo of your palm or face is sent for analysis, the text of the analysis is kept, and the image itself is discarded. There is no copy on our servers.
Who is responsible for your data
The data controller is Threadlane Private Limited. For any question about this policy, or to exercise any right described below, contact connect@threadlane.in.
What we collect
| Data | Why | Kept |
|---|---|---|
| Email address and name | To identify your account | Until you delete the account |
| Password | To sign you in. Stored only as a bcrypt hash — we cannot read it | Until you delete the account |
| Birth date, time and place | Required to compute an astrological chart. Without an exact time and place there is no chart | Until you delete the account |
| Practice history — which practices, how long, how you rated them | Streaks, progress and plan recommendations | Until you delete the account |
| Photographs of your palm or face | To generate a palm reading or a skin plan | Not stored. Held in memory for the duration of the analysis only |
| The text of readings, skin analyses and plans | So you can return to them without paying to regenerate | Until you delete the account |
| Questions you ask about your chart, and the answers | To keep conversation context | Until you delete the account |
| Payment records — amount, currency, store order id | To grant what you paid for, and for tax records | Until you delete the account, subject to legal retention |
We do not collect location, contacts, advertising identifiers or device identifiers. There is no advertising in Dtox and no third-party analytics or tracking SDK — nothing of that kind is built into the app at all.
How we count usage
We do keep aggregate usage statistics, and it is worth being exact about what that means, because "analytics" covers a lot of ground.
- The tool is Umami, which we host ourselves at page-analytics.threadlane.in. It is not a third-party service — no outside company receives any of it.
- It is cookieless. Nothing is stored on your device and nothing follows you between websites. Visitors are counted with a hash of IP address and browser, salted and rotated daily by Umami, which we cannot reverse into a person.
- From the app, the events are coarse counts only: the app was opened, a sign-up happened, a session started, a practice was completed and in which category, a purchase of which product. Each carries whether it came from iOS, Android or the web, so we can tell the platforms apart. No email address, no name, no account id, and nothing whatever from a reading, a chart or a photograph.
- App opens are counted once per person per day, so the number means "how many people used Dtox today" rather than how often you switched apps. Your account id is used on our server to do that collapsing and is never sent to the statistics tool.
- From this website, it is page views and which links get clicked.
We use it to know whether people can find things and whether features get used. It is never used to build a profile of you, target anything at you, or make a decision about you.
Where the place list comes from
The birth-place search runs entirely on our own server against a copy of the GeoNames gazetteer, used under the Creative Commons Attribution 4.0 licence. We mention it because of what it means for you: searching for your birth place sends nothing to Google, to a mapping company, or to anyone else. A birth place is among the most identifying things you could tell us, and no third party receives it.
About your photographs
This matters enough to state separately.
- Photographs are transmitted over HTTPS to an AI model provider for analysis, and processed in India.
- The provider is the threadlane model gateway, which runs the Qwen 3.5 vision model. Text-only generation may also use OpenRouter as a fallback.
- We do not write the image to disk or to object storage. Our database has an image column and it is null on every row.
- Retention: none. A photograph exists only in memory for the few seconds the analysis takes, and is discarded when the response is returned. It is never written to a database, a log or a backup, so there is nothing to delete afterwards and nothing that could be recovered. What we keep is the written result — observations such as "visible dryness on the cheeks" — never the picture it came from.
- Face images are used only to produce a skin plan. They are never used for identification, facial recognition, or to build any face template, and they are never shared or sold.
What we never do
- We do not sell your data.
- We do not share it for advertising or marketing by anyone.
- We do not use your health or skin information to target anything at you.
Who we share with
Only the processors needed to run the service: the AI model provider described above, our database and hosting provider, and the payment processor that handles your purchase (Google Play, Apple, or Razorpay depending on where you bought). Each receives only what its function requires. The usage statistics described above go to no one — that instance is ours.
Your rights
- Deletion. You can delete your account and everything in it at any time — in the app under Profile, or on the web at /delete-account. Deletion is immediate, cascades across every table, and there is no recovery window.
- Access and export. Contact us and we will send you what we hold.
- Correction. Profile details can be edited in the app.
Children
Dtox is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.
Security
All traffic is encrypted in transit with HTTPS. Passwords are stored as bcrypt hashes. Access to the production database is restricted to the operators of the service.
What Dtox is not
Dtox does not provide medical advice, diagnosis or treatment. The skin feature suggests exercise, food and lifestyle routines; it does not name conditions and it is not a substitute for a clinician. Astrological and palmistry readings are traditional interpretive systems presented for reflection. They are not scientifically established and nothing in them predicts your future.
Changes
If this policy changes materially we will update the date above and notify you in the app before the change takes effect.