moved privacy policy into readme