For something like this the privacy policy should be rock solid first, product mvp second. The brevity of the one you have in place seems like you haven't done any work on gdpr / ccpa, etc.
If the profit model requires a loose privacy policy then let me pay for an airtight one. This seems like the needed model for anything in this realm ongoing.