Privacy Policy — Mystic Tarot

Effective date: 26.01.2026

App: Mystic Tarot (“the App”)

This privacy policy explains what data the App handles, why, and how you can control it. It is designed to satisfy App Store requirements and major privacy frameworks (GDPR/UK-GDPR, CCPA/CPRA).

1) What we do

Mystic Tarot provides tarot card readings and optional AI-generated interpretations. The App can be used without an account. Ads may be shown in the free version. Users can purchase Premium subscriptions and/or in-app coins.

Entertainment only. Tarot content and AI output are for informational/entertainment purposes and are not professional advice.

2) Data we handle

2.1. Data you provide

Text you type (e.g., a question for a spread).
Purpose: to generate the reading/AI interpretation.
Storage: on-device; optionally cached to show history if you use “Save”/“Favorites”. We do not maintain a server-side account.
Support requests (email or in-app form): your email and message.
Purpose: customer support.
Storage: in our support inbox/tools.

Please do not include personal identifiers or sensitive health/financial information in your tarot questions.

2.2. Device data & diagnostics

App crash logs & performance data (e.g., via Apple or our analytics SDK if enabled).
Purpose: app stability and improvement.
Linked to you: No (we do not try to identify you).

2.3. Advertising & identifiers

Ad identifiers (e.g., IDFA) and device signals may be collected by ad partners (e.g., Google AdMob; later AppLovin MAX).
Purpose: show ads; if you allow tracking via App Tracking Transparency (ATT), partners may use data for cross-app ad personalization.
If you deny tracking, ads are contextual/non-personalized and IDFA is not available to partners.

2.4. AI processing

To deliver an AI interpretation, the App sends only what’s required (your question text and spread configuration) to an AI processing provider such as OpenAI, Anthropic, DeepSeek, or a self-hosted model.

Purpose: generate an interpretation.
Storage: we do not store your prompts on our servers. The AI provider may log requests per its policy.
We avoid sending personal identifiers and configure providers to not use your data for training where controls exist.

You can use “Card meanings only” (no AI) if available in your settings, which avoids sending prompts to AI providers.

3) App Store Privacy summary

Helper for App Store Connect:

Data Linked to You	Contact Info (Email) — if you email support → App functionality / Support Identifiers (Device or Ad ID) — via ad partners → Third-party advertising
Data Not Linked to You	Usage Data (Product interaction) — app improvements / analytics (if used) Diagnostics (Crash data, Performance) — app stability
Tracking	Yes, if user consents via ATT. Ad partners may track across apps/sites for ad personalization. No, if user declines ATT. Only contextual ads are shown.

Final answers depend on exactly which SDKs you enable. Review each partner’s “Data types” before submitting.

4) Legal bases (GDPR/UK-GDPR)

Performance of a contract: deliver requested reading/AI interpretation.
Legitimate interests: app security, crash logs, fraud prevention.
Consent: ad personalization/tracking, optional notifications, optional AI processing in certain regions if required.

You can withdraw consent at any time in Settings or device settings.

5) Your rights

Depending on your region, you may have rights to access, correct, delete, export, or object to processing. Contact us at support@kinapp.dev.

For California residents, you have CCPA/CPRA rights to know, delete, and opt-out of “sharing” for cross-context behavioral advertising (handled via ATT + in-app ad preferences).

6) Children

The App is not directed to children under 13 (or the age of digital consent in your country). If you believe a child provided data, contact us for deletion.

7) Data retention & security

On-device saved readings remain until you delete them or the App is uninstalled.
Support emails are retained as needed for customer service and legal compliance.
We employ industry-standard security measures; no method is 100% secure.

8) International transfers

If we or our processors operate outside your region, your data may be transferred internationally with appropriate safeguards (e.g., SCCs).

9) Third-party partners (examples)

Advertising: Google AdMob (and later AppLovin MAX)
AI Processing: OpenAI / Anthropic / DeepSeek / self-hosted LLM
Crash/Analytics: Apple, or other SDKs if enabled

Review each provider’s privacy policy for details. We will update the in-app “Third-Party Services” list if partners change.

10) Changes

We may update this Policy. If changes are material, we will notify you in-app or by other means. Continued use constitutes acceptance.

11) Contact

Email: support@kinapp.dev