Effective September 30, 2026

Privacy Policy

RoasTarot provides tarot readings, journals, rewards, purchases, notifications, and the optional Fate matching experience. This policy explains what information we process, why we process it, and the choices available to you.

Information we process

• Account: email address, authentication provider, internal user ID, and account status.
• Profile: display name, avatar, date of birth, gender, phone number if supplied, city, and country.
• Tarot activity: selected topic, question, spread, drawn cards, reading results, journal entries, checklist progress, and rewards.
• Fate: preferences, approximate area, representative card, matches, limited chat messages, and social contact details you choose to add or reveal.
• Transactions: product, price, currency, purchase status, and store transaction reference. Full payment-card details are handled by the app store and are not stored by RoasTarot.
• Support and communications: feedback, notification status, and invitation recipient email when you send a reading.
• Technical, analytics, and advertising: app version, device and operating-system information, approximate location derived from network information, app interactions, diagnostics, advertising identifiers, and consent choices where permitted.

How we use information

• Authenticate accounts, sync data, and provide app features.
• Generate and save readings, Journal insights, and AI-assisted summaries.
• Process rewards, purchases, subscriptions, and reading gifts.
• Provide Fate matching according to selected preferences and location filters.
• Deliver transactional email, in-app messages, and push notifications.
• Measure usage, diagnose failures, prevent abuse, and improve performance.
• Display rewarded advertising after applicable privacy choices have been collected.

We do not sell personal information.

Location

Fate may request device location permission to determine an approximate city, country, or distance for matching. Precise coordinates are not displayed to other users. You may deny location access and enter a city or country manually. Analytics and advertising providers may independently derive an approximate region from network information.

Service providers

We use Supabase for authentication, database, storage, and server functions; Google Firebase for analytics and push-notification delivery; Google AdMob for rewarded ads, measurement, and consent signals; Google Play and Apple App Store for purchases and subscriptions; xAI (Grok) for AI-assisted reading and monthly Journal text; and email and OAuth providers for account verification, authentication, and reading invitations. Each provider processes data under its own terms and privacy policy.

Advertising and analytics

Firebase Analytics records app events such as screen visits, reading progression, purchases, and feature completion. We do not intentionally send tarot question text, Fate chat content, social handles, email addresses, or precise GPS coordinates as analytics event parameters.

AdMob may process device identifiers, IP-derived approximate location, ad interactions, and consent signals to provide and measure ads. Where required, the app requests privacy choices before loading ads.

Sharing and visibility

Profile and Fate information is not public outside the app. Fate initially limits or obscures profile details and reveals information according to the matching flow and your choices. Social contact information is shared only when the relevant users choose to unlock it. A reading invitation shares the recipient email and selected reading context with the services needed to deliver and redeem the invitation.

Retention and security

We retain account and feature data while your account is active and as reasonably required to operate the service, resolve disputes, prevent abuse, and meet legal obligations. Standard accounts may retain only the latest Journal entries shown in the product; VIP retention follows the benefits displayed in the app. Data is protected using access controls, encrypted network connections, and provider security controls, but no system can guarantee absolute security.

Your choices and rights

• Edit profile, Fate preferences, and social contact information in the app.
• Disable location and notification permissions in device settings.
• Use the privacy choices presented by Google for advertising where available.
• Request access, correction, or deletion of personal data through our Account & Data Deletion page. Include the email associated with your account and do not send your password.

Children

RoasTarot is not directed to children under 13, or the higher minimum age required in their country. Users must meet the applicable age requirement. If you believe a child has provided personal information, contact support@roastarot.app.

International processing

Service providers may process information in countries other than your own. Where required, they use contractual and legal safeguards for international transfers.

Updates and contact

We may update this policy as the app changes. The effective date above will be revised when material updates are published. Privacy questions and data requests can be sent to support@roastarot.app.