Privacy Policy
Tarot Diary ("the App") treats your personal information with care and processes only the minimum data needed for each feature.
Overview
Diaries and saved readings are kept on your device by default. When you use optional features — login, Stardust, payments, support inquiries, or reading generation — the data required for that feature is processed on our servers. This policy explains what is processed and how it is retained or deleted.
1. Information we collect or process
Account information
Login provider (Google · Apple · Kakao), provider user ID, basic profile such as email or name passed by the provider, a customer UID, and a payment-only UID.
Age verification
Whether you confirmed being 14 or older, and the time of confirmation.
Local records
Diary title, body, and date; cards, upright/reversed orientation, card pack, mood, emotion tags, and saved readings. This information is stored on your device by default.
Reading requests
Your question and selected card information are processed to generate a reading result, but the question text, card list, and reading body are not stored in our server database. Only the request status, Stardust used, and cost metadata needed for operations and billing may be retained. The generated reading is saved on your device.
Payments & Stardust
Product ID, transaction ID, purchase/refund events, Stardust balance, ledger, idempotency keys, and payment status.
Card packs
Unlock status, download status, card pack ID, and download verification metadata.
Customer support
Inquiry title and content, replies, attached images and their metadata, customer UID, app version, and device info. Photo library permission is used only to pick attachment images for support.
Operational & security logs
Errors, request IDs, status codes, and limited logs needed to prevent abuse.
2. Why we process it
- Login and user identification
- Granting, deducting, and refunding Stardust, and preventing misuse
- Delivering tarot reading results
- Unlocking and delivering premium card packs
- Handling and answering support inquiries
- Service stability, security, and error handling
- Meeting legal obligations and handling disputes
3. Third parties & processors
The App works with the following providers to process certain information, each only within its stated purpose.
| Provider | Purpose | Data |
|---|---|---|
| Supabase | Auth, profile, Stardust ledger, support, Edge Functions | Account IDs, customer UID, payment UID, ledger, inquiry data |
| Apple | Apple login, App Store payments/refunds | Login ID, payment/refund info |
| Google login, Google Play payments/refunds | Login ID, payment/refund info | |
| Kakao | Kakao login | Login ID |
| RevenueCat | Relaying in-app purchase events | Payment UID, product ID, transaction/refund events |
| File storage (e.g. Cloudflare R2) | Card pack & support attachment handling | Card pack files, attachment images & metadata |
| Tarot interpretation service provider | Generating reading results | Question, selected cards, orientation, count — data needed to process the request |
4. Retention & deletion
- Local records are removed when you delete them in the app or uninstall the app.
- On account deletion, auth, profile, customer UID, and Stardust status are deleted or anonymized.
- Payment, refund, and ledger records may be retained for a period for legal, accounting, and dispute purposes.
- Security/abuse-prevention logs and support records may be retained for a set period.
- Local records that are not stored on our servers cannot be deleted remotely by us.
You can request account and data deletion via Settings › Login info/Account › Delete account in the app, or through the Account & Data Deletion page on the web.
5. Age requirement
Server-protected features are available after confirming you are 14 or older. The App verifies this through an age-confirmation step.
6. Your rights
You may request access, correction, deletion, or restriction of processing of your information. Submit requests through in-app support or the email below; after identity verification we will respond within the period required by applicable law.
7. Changes to this policy
If this policy changes, we will notify you in the app or on this page. Material changes will be announced before they take effect.
Contact
For privacy questions, contact support@hkun.dev or use in-app support.
