Privacy Policy

What we collect

When you create an account we store the name you choose, your email address, and a one-way hash of your password. We never store your password in plain text. You may also save a zodiac sign.

When you use the app we store the readings you draw (spread type, question if you typed one, card ids, reversed flags, and the written insight) and journal notes you save. Session tokens are stored so we can keep you signed in and so you can sign out for real.

What we do not collect

We do not sell your personal information. We do not run advertising networks in the app. We do not collect precise location, contacts, photos from your camera roll, or payment card numbers in this version of the app.

Push notifications are not sent yet. A notification switch in Settings, if shown, does not upload a device token or schedule reminders.

How we use the data

We use this information to run your account, show your history, and keep the service secure (for example rate-limiting sign-in attempts and revoking tokens when you sign out).

If an AI interpretation feature is enabled on the server, the cards and question for that reading are sent to Anthropic to generate the insight. That happens only for that feature, and only when the operator has configured it.

Where it is stored

Account data, readings and journal entries are stored in MongoDB (self-hosted or MongoDB Atlas, depending on how the operator deploys the API). Access and refresh tokens are stored hashed or denylisted as needed to sign you out.

How long we keep it

We keep your account data until you delete the account. Deleting the account permanently removes your user record, readings and journal entries. Signed-out access tokens are remembered only until they would have expired, then they are dropped.

Your rights

You can view the name and email on your profile, change your name and password, download nothing extra beyond what the app already shows you, and delete the account in-app. Deletion is the way to erase the data we hold about you.

Children

Tarotail is not directed at children under 13. Do not create an account if you are under 13.

Contact

Questions about this policy can be sent to privacy@tarotail.app. The Privacy Policy shown inside the app and this page are the same document.