Privacy Policy

To provide our services, we may collect the following categories of personal information:

1. Account information
   • The email address you provide at sign-up;
   • Authorization details when you sign in with a third-party account (such as Google or GitHub);
   • Your display name, avatar and other basic profile details.
2. Profile information
   • Birth date, birth time and birth place you voluntarily provide for readings (similar to the details an astrologer needs to cast a birth chart);
   • Zodiac sign, gender and other profile details.
3. Service usage information
   • Questions and content you submit when using our features (such as tarot questions, dream descriptions or names);
   • AI-generated reading results and your reading history;
   • Your bookmarks, favorites and similar activity records.
4. Device and log information
   • Device model, operating system version, browser type and version;
   • IP address, access date and time, pages viewed;
   • Information collected via cookies and similar technologies (see Section 7).
5. Transaction information
   • Order details for paid services (order number, amount, time);
   • Payment details are processed by our third-party payment provider (Creem); we never store your card information.

We use your personal information to:

1. Provide, maintain and improve our services;
2. Generate personalized readings for you;
3. Handle registration, sign-in and account management;
4. Process paid services and refund requests;
5. Keep the platform secure and prevent fraud and abuse;
6. Respond to your support requests and feedback;
7. With your consent, run anonymized analytics to improve quality and user experience;
8. Comply with legal obligations;
9. Fulfil any other purpose you have expressly consented to.

We will not use your personal information for purposes beyond those listed above without obtaining your consent first.

1. Retention: we keep your personal information only for as long as necessary to fulfil the purposes it was collected for. After you delete your account, we will erase or anonymize your personal information within a reasonable period, unless the law requires otherwise.
2. Storage location: your personal information is stored with reputable international cloud providers (our database and hosting vendors) that meet industry security standards. See Section 10 for cross-border transfer safeguards.
3. Security measures:
   • Industry-standard encryption in transit (SSL/TLS);
   • Encryption at rest for sensitive information;
   • Access controls limiting who can view personal information;
   • Regular security assessments and vulnerability fixes.
4. While we take reasonable measures to protect your data, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

1. We do not sell your personal information.
2. We may share or disclose your personal information only in the following situations:
   • With your consent: when you have explicitly agreed to the sharing;
   • Service providers: with trusted vendors as needed to run the platform (cloud hosting, AI model providers, payment processing), all bound by confidentiality obligations;
   • Legal requirements: when required by law, legal process or a competent authority, or to protect the rights of the platform and its users;
   • Business transfers: if we are involved in a merger, acquisition or asset sale, your information may be transferred as part of the transaction, and we will require the new owner to honor this policy.

We extend the following rights to all users; if you are in the European Union or European Economic Area, they are guaranteed under the GDPR:

1. Right of access: request a copy of the personal information we hold about you.
2. Right to rectification: ask us to correct inaccurate information.
3. Right to erasure ("right to be forgotten"): ask us to delete your personal information when it is no longer needed, when you withdraw consent, or when processing is unlawful.
4. Right to restriction: ask us to limit processing in certain circumstances.
5. Right to data portability: receive the data you provided to us in a structured, commonly used, machine-readable format.
6. Right to object: object to processing based on our legitimate interests.
7. Right to withdraw consent: withdraw consent at any time — including analytics consent via the "Do Not Sell or Share My Personal Information" link in the footer. Withdrawal does not affect the lawfulness of prior processing.
8. Right to delete your account: after deletion we stop providing services and erase or anonymize your personal information within a reasonable period.
9. To exercise any of these rights, contact us via the in-app feedback feature or the contact details at the end of this policy. We will respond within 15 business days (extendable to 30 days for complex requests, in which case we will notify you). You also have the right to lodge a complaint with your local data protection authority.

If you are a California resident, you have the following additional rights under the CCPA as amended by the CPRA:

1. Right to know: what categories of personal information we collect, the sources, purposes and third parties we share it with (see Sections 1, 2 and 4).
2. Right to delete and correct: request deletion or correction of your personal information.
3. Right to opt out of sale or sharing: we do not sell your personal information. For analytics-related sharing, you can opt out at any time via the "Do Not Sell or Share My Personal Information" link in the page footer.
4. Right to non-discrimination: we will never deny service, charge different prices or degrade quality because you exercised any of these rights.
5. Submit requests via the contact details at the end of this policy; we will verify your identity as required by law before responding.

1. Strictly necessary cookies: used to keep you signed in and secure your account (authentication session cookies). These are essential to the service, do not require consent, and cannot be disabled through our settings.
2. Analytics (with your consent): after you accept via the cookie consent banner, we use a privacy-friendly analytics service (Vercel Analytics) to understand page traffic and improve the product. It does not use cross-site tracking cookies, and the data is anonymized.
3. Local storage: we use browser localStorage to remember interface preferences and your cookie consent choice. This data stays on your device.
4. Managing your choices:
   • On your first visit, choose Accept or Decline in the consent banner;
   • Change or withdraw your choice at any time via the "Do Not Sell or Share My Personal Information" link in the footer;
   • You can also view, manage or delete cookies in your browser settings.
5. Effect of declining: declining analytics does not affect any core feature of the platform.

1. Our services are intended for adults. We do not knowingly collect personal information from anyone under 16.
2. If we learn that we have collected a minor's personal information without verified parental consent, we will delete it promptly.
3. If you are a parent or guardian and believe a minor has provided us with personal information, please contact us using the details at the end of this policy.

1. The sensitive personal information we may process includes your birth date and birth time, used solely to calculate your readings.
2. By voluntarily providing this information you acknowledge the purpose and method of processing and consent to it under this policy.
3. We apply enhanced safeguards to sensitive information, including encrypted transmission and storage and strict access controls.
4. You may stop providing, or request deletion of, sensitive information at any time, though some features may become unavailable as a result.

1. We serve users worldwide, so your personal information may be transferred to and processed on servers outside your jurisdiction.
2. Where personal information is transferred out of the EU/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) to ensure an equivalent level of protection.
3. Wherever your data is processed, we protect it in accordance with this policy and applicable law.

1. We may update this policy from time to time. Updates will be posted on this page with a revised "Last updated" date.
2. For material changes (such as new processing purposes or new sharing recipients), we will notify you in advance via platform announcements or in-app notices and, where required, obtain your consent again.
3. We encourage you to review this policy periodically.

1. If you have any questions, comments or concerns about this policy or our data practices, you can reach us at:

We will respond within 15 business days of receiving your request. If you are not satisfied with our response, you have the right to complain to your local data protection authority.