Privacy policy
1. Controller
ramraver interactive AG
Max-Brauer-Allee 218
22769 Hamburg
Germany
Email: nexzrtiktok@gmail.com
This policy explains which data we process when you visit harmonily.com and use Harmonily. Harmonily is intended for people aged 16 and over.
2. Hosting and server logs
The site is run on Render (Render Services, Inc., USA) and delivered through Cloudflare (Cloudflare, Inc., USA). Technically necessary data such as your IP address, date and time, the page requested and browser details are processed. Legal basis: Art. 6(1)(f) GDPR (secure and stable operation). Logs are kept only for a short time.
3. Account
For an account we store your email address, your password (as a hash only), confirmation codes and the sign-up date. Legal basis: Art. 6(1)(b) GDPR (contract). Confirmation and password emails are sent through Resend (Resend, Inc., USA).
4. Your photo and your analyses
Landmarks and ratios are measured in your browser. Your history keeps a small preview image, the position of the points, your measurements and the results. Photos of faces can be biometric data. We use them only for your analysis and not to identify people. By uploading a photo you explicitly consent to this processing (Art. 6(1)(a) and Art. 9(2)(a) GDPR). You can withdraw consent at any time by deleting your history or your account.
5. AI scoring (Pro)
For the Pro results (Angularity, Dimorphism, Features) your photo is sent once to our AI provider Groq (Groq, Inc., USA) to be graded. We do not store the photo for this purpose, only the result and the small preview. Legal basis: your consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR). The transfer to the USA relies on standard contractual clauses or the EU-US Data Privacy Framework.
6. Payments
Payments are handled by Stripe (Stripe Payments Europe, Ltd., Ireland) or PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg). We do not receive payment details such as your card number, only the confirmation, amount and date. We keep purchase records for up to ten years because of commercial and tax law (Art. 6(1)(c) GDPR).
7. Emails with tips and offers
We send you such emails only if you agreed when signing up. You can unsubscribe at any time with the link in every email (Art. 6(1)(a) GDPR).
8. Referral and creator links
If you arrive through a link with a code (for example harmonily.com/a/name), we keep that code in your browser until you sign up or buy and attribute your purchase to the link. The creator sees numbers only, not who you are (Art. 6(1)(f) GDPR). At sign-up we also store a salted hash of your IP address (not the address itself) to detect repeated sign-ups made to farm referral rewards (Art. 6(1)(f) GDPR, abuse prevention). It is deleted with your account.
9. Web analytics (Google Analytics)
We use Google Analytics (Google Ireland Limited, Ireland; Google LLC, USA) only if you agree in the notice (Art. 6(1)(a) GDPR, section 25(1) TDDDG). Without your consent Google Analytics is not loaded. You can change your choice at any time under "Cookie settings".
10. Local storage in your browser
We store technically necessary information in your browser, such as your sign-in status, a creator code and your choice in the notice. This is allowed without consent under section 25(2) TDDDG.
11. Retention
We keep your data until you delete your account (in the app: account menu, "Delete account"). We then remove your email address, analyses, photos and sign-in data. Purchase records stay, anonymised, for the legal retention periods.
12. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection. You can withdraw any consent at any time with effect for the future. Write to nexzrtiktok@gmail.com. You can also lodge a complaint with a data protection authority, for example the Hamburg Commissioner for Data Protection and Freedom of Information.
13. No automated decisions
Results are estimates for personal insight. No automated decision with legal effect for you is made.