Privacy policy

01Who is responsible for your data?

The controller is Palmir's publisher, OKNILIK (Hungary, Cg. 02-09-086218). For any privacy question, write to hello@oknilik.com. The publisher's full details are at the bottom of this page.

02What we process, and why

• Account: your email address (to send your sign-in code), the display name you choose, the app's language and your time zone, and which version of this policy you accepted. Legal basis: providing the service (GDPR Art. 6(1)(b)).
• Your answers and results: the answers you give in each chapter, the result calculated from them and the colour of your character. You explicitly consent to this when you sign up (GDPR Art. 6(1)(a)); you can withdraw consent at any time by deleting your account.
• Friend circles: circle settings, invitations and your friends' answers. Friends' answers are only ever shown combined, once at least three valid responses are in (four for Honesty); the person who invited them never sees individual answers or who answered.
• Notifications: your device's push token and your notification settings, so we can let you know when new feedback arrives. Notifications never contain a name, an answer or a score.
• Purchases: if you unlock a paid part, the transaction ID, product and time we receive from the store, so we can grant your access. We never see card details.
• Security: short-lived, irreversibly hashed request counters to prevent abuse. Legal basis: legitimate interest (GDPR Art. 6(1)(f)).
• Waiting list: if you sign up, your email address and chosen language, so we can tell you when Palmir launches. Legal basis: consent, which you can withdraw at any time.

03Friends who share their perspective

People you invite answer without signing up. We do not ask for their name or email address. Their browser receives a cookie that only Palmir can read (HttpOnly, valid for 30 days) so they can answer a circle only once and come back to unfinished answers; we store only an irreversible fingerprint of it. If you send an invitation by email, the address is used for that one message only: it is neither stored nor logged.

After answering, a friend can also fill in a chapter about themselves in their own browser. Their browser scores it and keeps it (in local storage, for up to 7 days); it reaches our server only if they ask for a transfer code for the app. We then store the ten answers and an irreversible fingerprint of the code, without any link to the invitation, the circle or the person who invited them; it is deleted when the code is redeemed or after 7 days. The person who invited them sees none of it.

Pair picture (Palmir+): if you accept someone's invitation, they see your figure's colour and your own band in the chapters you have both finished (with a rounded position). Not your friends' feedback and not your exact scores. Either of you can end it at any time, and it is deleted for both at once. The invitation works for 24 hours; only its fingerprint is stored.

The threshold reduces, but in a very small circle cannot fully rule out, that someone guesses how a particular friend answered. That is why Palmir never shows the person who invited them an individual answer.

04What we don't do

• No third-party analytics, advertising or tracking cookies. We keep only anonymous daily totals about how the service runs, with no identifier tied to a person (for example how many chapters were completed that day, or how often the purchase screen opened in the app).
• We do not sell your data or share it for advertising.
• We make no automated decisions about you based on your results that have legal or similarly significant effects.
• Palmir is not a diagnostic tool: results are for self-reflection.

05Who helps us run Palmir

Palmir runs on the infrastructure of trusted providers. They act as processors, on our instructions and under contractual confidentiality. Where data may leave the European Economic Area (typically to the US), the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses provide appropriate safeguards.

06Apple and Google

You download the app from the App Store or Google Play, and they also handle purchases. For this, Apple and Google are independent controllers under their own privacy terms; we only receive the fact of a purchase and its identifier.

07How long we keep data

• Account, answers, results and circles: for as long as your account exists. When you delete it, everything is deleted immediately, including the answers your friends gave you.
• Guest cookie: 30 days in the browser.
• A friend's own chapter: up to 7 days in the browser; answers held for a transfer code until it is redeemed, at most 7 days.
• A first chapter answered without an account: only on your phone, until you save it or delete the app; once saved, it is removed from the phone.
• Request counters: a few minutes.
• Purchase events: as long as needed to prove a purchase and handle refunds, at most 8 years.
• Waiting list: until you unsubscribe, and at most 12 months after launch.
• Backups: deleted data disappears from backups within 30 days.

08Your rights

You can ask to access, correct or delete your data, to restrict its processing, or to receive it in a machine-readable format (portability). You can object to processing based on legitimate interest and withdraw consent at any time. Write to hello@oknilik.com; we reply within one month.

If you believe we have infringed your rights, you can complain to the Hungarian supervisory authority (NAIH, Falk Miksa utca 9–11, 1055 Budapest, naih.hu), to the authority where you live, or go to court.

09Age

Palmir is for people aged 18 and over, which you confirm when signing up. If we learn that a minor has created an account, we delete it.

10Changes

If the way we handle your data changes materially, we will tell you in the app and, where needed, ask for your consent again. Earlier versions are available on request.