Privacy Policy

1. Information We Collect

• Account Information: name, username/handle, email, and subscription status.
• Content You Provide: tarot pulls, notes, preferences, decks, and profile details.
• Usage Data: app interactions, device/browser information, approximate location (from IP), and diagnostics.
• Payment Data: processed by our payment processor (e.g., Stripe). We do not store full payment card details on our servers.
• Cookies and Similar Technologies: for authentication, analytics, and user experience.

2. How We Use Information

• Provide, operate, and improve the Services.
• Authenticate users and maintain account security.
• Process subscriptions and manage billing via our payment processor.
• Personalize content, including decks and recommendations.
• Analyze usage for reliability, performance, and product improvement.
• Communicate with you about updates, security, and support.
• Comply with legal obligations and enforce our terms.

3. Legal Bases (EEA/UK Users)

We process personal data under the following bases: performance of a contract (providing the Services), legitimate interests (security, analytics, product improvement), consent (where required, e.g., certain cookies/marketing), and legal obligations.

4. Sharing and Disclosures

• Service Providers: hosting, analytics, customer support, and payment processing, bound by contractual confidentiality and security obligations.
• Legal: if required by law, regulation, or to protect rights, safety, and security.
• Business Transfers: in connection with a merger, acquisition, or asset sale, subject to this Policy.

5. Data Retention

We retain personal data only as long as necessary for the purposes described, to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion as described below.

6. Security

We use administrative, technical, and organizational measures designed to protect your data, including encryption in transit, access controls, and regular reviews. No method of transmission or storage is 100% secure; we continuously work to enhance protections.

7. Your Rights

• Access/Correction: request a copy of your data or corrections.
• Deletion: request deletion of your data, subject to legal requirements. You can also delete your account in Settings.
• Portability: request export of certain data in a portable format.
• Objection/Restriction: object to or restrict certain processing, where applicable.
• Consent Withdrawal: where processing is based on consent, you may withdraw consent at any time.

To exercise these rights, contact us as described below. We may need to verify your identity before responding. For California residents (CCPA/CPRA), you have additional rights including the right to know, delete, correct, and opt-out of sharing/sale of personal information (we do not sell personal information).

8. International Transfers

Your data may be processed in countries outside your own. Where required, we implement appropriate safeguards such as Standard Contractual Clauses.

9. Children

Our Services are not directed to children under 13 (or as defined by local law). We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Policy from time to time. We will post the updated version and revise the effective date. Material changes may be communicated via the app or email.

11. Contact Us

If you have questions or requests, contact our support team at chronoarcana.td@gmail.com.