• Your readings, questions, journal, notes and settings stay on your device. We never receive them.
• There is no account and no sign-in.
• We do not run our own servers for the App and keep no data about you on any server of ours. The services listed below are operated by Google and RevenueCat, which store the data they collect on their own servers; we see it only as reports in their dashboards.
• The app uses Google Firebase for usage statistics and crash reports, Google AdMob for ads shown to free users, and RevenueCat to manage Pro subscriptions. These services receive device and usage data, never your readings.
• Ads may be personalised, and on iPhone your advertising identifier is used, only if you agree in the consent form and, on iPhone, in Apple's tracking prompt. You can change your choice at any time.
• We do not sell your personal information.

This policy covers the Tattva Tarot app for iPhone, iPad and Android (“the App”) and the website tarot.mytattva.com. “We” and “us” means the developer of Tattva Tarot. You can reach us at contact@mytattva.com.

The App stores the following only on your device. It is never sent to us or to any third party:

• Readings, the questions you ask, and the cards drawn
• Journal entries, personal card meanings, notes, favourites and reflections
• Tattva Mirror insights and Guided Paths progress, which are calculated on the device
• Your settings, such as language, theme, deck, card back and reminder time

The home screen widget and daily reminders read this data on the device. Reminders are scheduled locally; no push notification service is used.

Your operating system may include the App's data in your own device backups (iCloud Backup on iPhone or Google backup on Android), under your account with Apple or Google. Backups you export from the App are files you control; if you set a password, the file is encrypted with AES-256.

Usage statistics (Google Firebase Analytics)

We record which features are used so we can improve the App. Events include the type of spread and number of cards in a reading, whether a reading was shared, daily card views, paywall views and settings changes. We also record app settings such as language, theme, deck and whether you have Pro. Firebase adds an app instance identifier, device model, operating system version, app version and approximate location (country or region) derived from your IP address. Your questions and the content of your readings are never included.

Crash reports (Google Firebase Crashlytics)

If the App crashes, a report with the device model, operating system version, app version and technical details of the error is sent so we can fix it. Reports do not contain your readings.

Advertising (Google AdMob)

Free users may see ads served by Google AdMob. To serve ads and measure them, Google receives device information, your IP address, ad interactions and, where you allow it, an advertising identifier (the IDFA on iPhone or the Advertising ID on Android). Ads are not shown to Pro subscribers.

On first launch, Google's consent form asks whether ads may be personalised where the law requires it. On iPhone, Apple's App Tracking Transparency prompt then asks whether the App may use your advertising identifier to track you across apps and websites owned by other companies. This happens only if you allowed it in the consent form. If you decline either prompt, you see non-personalised ads and the IDFA is not used.

Purchases (Apple, Google and RevenueCat)

Pro subscriptions are bought and billed through the Apple App Store or Google Play. We never see your payment details. RevenueCat receives the purchase receipt and an anonymous app user identifier so it can confirm whether you have Pro and restore purchases. It does not receive your name or email address.

Deck downloads (Cloudflare)

Premium decks are downloaded from our storage on Cloudflare R2. As with any web request, Cloudflare processes your IP address to deliver the files. Nothing else about you is sent.

Tracking

Under Apple's definition, the advertising identifier and advertising data described above may be used for tracking, and only after you allow it. We do not link any of this data to your identity, and we do not sell or rent personal information.

• Ad personalisation: in the App, open Settings → Privacy Options to show the consent form again and change your answer.
• Tracking on iPhone:Settings → Privacy & Security → Tracking, then turn Tattva Tarot off, or turn off “Allow Apps to Request to Track” for all apps.
• Advertising ID on Android: Settings → Google → Ads, where you can reset or delete your Advertising ID.
• Remove ads entirely: subscribe to Tattva Tarot Pro.
• Offline use: drawing cards, reading meanings and using your journal work without an internet connection. Statistics, crash reports and ad requests are sent only while you are online.

We keep none of your readings or journal, because we never receive them. Google keeps Firebase Analytics data according to the retention setting of our Firebase project and Crashlytics reports for up to 90 days. AdMob and RevenueCat keep data according to their own policies, linked below. On your device, data remains until you delete it or remove the App.

Delete the App to remove everything stored on your device, including the identifiers used by Firebase and RevenueCat. Step-by-step instructions for iPhone and Android are on our Data Deletion page. Because the data held by our service providers is not linked to your name or email, we usually cannot find it from a request, but you can write to us at contact@mytattva.com and we will help where we can.

Depending on where you live, including the European Economic Area, the United Kingdom, California and India, you may have the right to access, correct or delete personal data, to object to or restrict its use, to withdraw consent at any time, and to complain to your local data protection authority. Where the GDPR applies, we rely on your consent for personalised ads and tracking, and on our legitimate interest in keeping the App working and improving it for statistics and crash reports. To exercise any of these rights, contact contact@mytattva.com.

Tattva Tarot is not directed at children under 13 (or the minimum age in your country), and we do not knowingly collect personal information from them. If you believe a child has provided data through the App, contact us and we will help remove it.

tarot.mytattva.com uses Cloudflare Web Analytics to count page visits. It does not use cookies and does not identify individual visitors. The free Yes or No and card of the day tools run entirely in your browser; any question you type is never sent to us. The site is hosted by Cloudflare, which processes IP addresses to deliver pages.

• Google (Firebase and AdMob): policies.google.com/privacy and policies.google.com/technologies/partner-sites
• RevenueCat: revenuecat.com/privacy
• Apple: apple.com/legal/privacy
• Cloudflare: cloudflare.com/privacypolicy

These providers may process data in countries other than your own, under their own safeguards for international transfers.

If we change how the App handles data, we will update this page and the date at the top. Significant changes will also be noted in the App's release notes.

Questions about this policy or your data: contact@mytattva.com.