Privacy Policy

Introduction

1. Information We Collect

• Authentication & Google User Data: When you sign in to Tarot Journal using Google Sign-In or Apple Sign-In, we collect basic account information necessary for authentication. This includes your unique user ID, email address, display name, and profile picture URL (if provided).
• User-Generated Content: When using the App, you may create and save Tarot readings, card interpretations, personal notes, custom card decks, and custom spreads. By default, this data is stored locally on your device.
• Technical & Diagnostic Data: Minimal operational data (such as app version and basic crash reports) may be collected to ensure app reliability and performance.

2. How We Use Your Information

• Identity & Account Management: Your authentication credentials (such as Google or Apple account identifiers) are used strictly to authenticate your identity, secure your account, and manage your subscription status.
• Cloud Synchronization & Backup: For subscribed users who enable cloud synchronization, your user-generated content (readings, decks, notes, and spreads) is securely transmitted and stored on our cloud servers to enable seamless access and real-time synchronization across your devices.
• Customer Support & Communication: If you contact us for assistance or feedback, your email address is used solely to respond to your inquiry.

3. Google API Services User Data Policy (Limited Use)

4. Data Sharing, Advertising, and AI Protection

• No Sale of Personal Data: We do not sell, rent, trade, or monetize your personal information or Google user data under any circumstances.
• No Advertising or Tracking: We do not use your personal data, reading logs, or Google account information for advertising or behavioral tracking purposes.
• Third-Party Infrastructure Providers: We only share data with trusted cloud infrastructure providers (such as secure cloud databases and serverless hosting) strictly necessary to deliver app functionality and data synchronization. These providers are bound by strict data confidentiality agreements.
• No AI Model Training: Your private journal entries, reading interpretations, and personal notes are never used to train generalized artificial intelligence (AI) or machine learning (ML) models.

5. Data Storage and Security

• Encryption in Transit and at Rest: All communication between the App and cloud services is encrypted using industry-standard HTTPS/TLS protocols. Synced data is stored securely in access-controlled databases with encryption at rest.
• Local Storage by Default: If you choose not to enable cloud sync, all your readings, decks, and personal notes remain stored entirely on your local device.

6. Data Retention and Deletion (Your Rights)

• Data Retention: We retain your cloud-synced data only for as long as your account remains active and in accordance with providing you services.
• Account & Data Deletion: You have the right to access, export, or permanently delete your account and all associated cloud data at any time. You can request deletion directly within the App settings, by submitting our feedback form, or by emailing us at tarotjournal@thekietdev.id.vn.
• Upon receiving a deletion request, all your personal data and cloud-synced records will be permanently removed from our active servers within 30 days.

7. Changes to This Privacy Policy

8. Contact Us