TarotPath Privacy Policy
Effective date: 31 August 2026
This Privacy Policy explains how Ritual Journey (“we”, “us”), the developer of the TarotPath mobile application (“TarotPath” or the “App”), handles personal data. Ritual Journey is based in Rzeszów, Poland. For privacy questions or a data-deletion request, contact us at support@tarotpath.app.
1. Data we collect
Depending on how you use the App, we process the following data:
- Account and authentication data: an anonymous account identifier created for the App and, if you choose to secure or recover your account, your email address and confirmation status.
- Reading content: the questions, card numbers and cards, dream descriptions, numerology inputs, follow-up questions, and AI-generated responses you submit or receive. This is needed to provide a reading and, when saved, your reading history.
- Purchase and entitlement data: purchase status, product identifiers, and crystal balance required to provide in-app purchases. We do not receive or store your full payment-card number.
- App settings and local history: language, theme, notification preferences, local reading history, and other settings stored on your device to operate the App.
- Technical and security data: authentication tokens and limited request information necessary to protect the service, prevent abuse, and diagnose failures.
2. How we use data
We use this data to create and display readings, maintain your account and crystal balance, synchronise saved history, process purchases, provide account recovery, send notifications you enable, prevent fraud and abuse, maintain security, and respond to support and deletion requests. We do not sell personal data or use reading content for advertising.
3. Service providers and sharing
We share the minimum data needed to operate the App with these service providers:
- Supabase: authentication, cloud database, saved reading history, and crystal balances.
- Cloudflare: secure API proxy and request handling between the App and AI service.
- Google Gemini: the reading inputs needed to generate an AI response, such as your question, selected cards, dream description, numerology input, or follow-up question.
- RevenueCat and Google Play: purchase processing and purchase-entitlement management when in-app purchases are enabled.
These providers may process data in countries other than your own under their applicable terms, privacy notices, and data-protection safeguards. We may also disclose data where required by law or necessary to protect the security of the App, our users, or others.
4. Storage, retention, and deletion
Local data remains on your device until you clear it in the App where available, clear the App’s storage, or uninstall the App. Cloud account data, saved readings, and related crystal records are retained while your account is active and as needed to provide the service, resolve disputes, prevent fraud, and meet legal obligations.
You can permanently delete your account directly in the App: open Profile, select Delete account, and type DELETE to confirm. This immediately deletes your cloud account, saved readings, profile data, and unused crystals. The action cannot be undone. We retain only transaction records where required by tax, accounting, security, fraud-prevention, or other legal obligations. Deleting cloud data does not automatically erase copies stored locally on your device; you can remove those by clearing App data or uninstalling the App. If you cannot access the App, contact support@tarotpath.app for help.
5. Security
We use HTTPS/TLS for data in transit, authenticated access controls for cloud data, and server-side controls for crystal balances. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
6. Your rights
Depending on applicable law, you may have rights to access, correct, delete, restrict, or object to processing of your personal data, and to request portability. Where processing relies on consent, you may withdraw it. To exercise these rights, contact support@tarotpath.app. You may also have the right to complain to your local data-protection authority.
7. Children
TarotPath is not directed to children. If you believe that a child has provided personal data to us, contact us and we will take appropriate steps to delete it.
8. Changes to this policy
We may update this policy when the App or our data practices change. We will publish the updated version at this address and change the effective date above.
9. Contact
Ritual Journey, Rzeszów, Poland
Email: support@tarotpath.app