Legal
Privacy Policy
Your privacy matters to us. This policy explains how we collect, use, and protect your personal information.
Last updated: October 22, 2026
1. Information We Collect
Account Information
When you create an account, we collect your name, email address, and authentication credentials. If you sign in with Google or Apple, we receive your name and email from those providers.
Reading Data
We store your tarot readings, journal entries, and questions to provide personalized experiences. This data is encrypted at rest and accessible only to you.
Usage Data
We collect anonymized usage data including pages visited, features used, and reading frequency to improve our platform. This data cannot identify you personally.
Payment Information
Payment processing is handled securely by Stripe. We do not store your credit card numbers, bank account details, or other financial information on our servers.
2. How We Use Your Information
Providing Our Service
Your data is used to deliver personalized tarot readings, daily cards, lunar insights, and streak tracking. Your question context and zodiac sign help our AI create more relevant interpretations.
Communications
We may send transactional emails (reading confirmations, account updates) and, with your consent, marketing emails (daily card reminders, weekly digests). You can unsubscribe from marketing emails at any time.
Platform Improvement
Anonymized, aggregated data helps us improve reading quality, identify popular features, and optimize the user experience. Individual readings are never used to train AI models.
3. Data Sharing
Third-Party Services
We use trusted third-party services: Stripe for payments, Resend for email delivery, and AWS for secure file storage. These providers process data only as necessary to perform their services.
Consultant Readings
If you book a live reading with a consultant, your name and question context are shared with that consultant for the duration of the session. Video recordings are stored securely and accessible only to you and the consultant.
We Never Sell Your Data
We do not sell, rent, or trade your personal information to third parties for marketing or advertising purposes. Your spiritual journey is yours alone.
4. Data Security
Encryption
All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Your readings and journal entries are protected with the same security standards used by financial institutions.
Access Controls
Access to user data is strictly limited to authorized personnel who need it to maintain the service. All access is logged and audited.
Data Retention
Your account data is retained as long as your account is active. If you delete your account, all personal data including readings and journal entries are permanently deleted within 30 days.
5. Your Rights
Access & Portability
You can access all your reading history and journal entries from your dashboard at any time. You may request a complete export of your data by contacting support.
Correction & Deletion
You can update your profile from your dashboard. To request deletion of your account and associated data, contact privacy@mysticveiltarot.app or use our Contact form.
Marketing Opt-Out
You can manage email preferences from Dashboard → Notifications, or use the unsubscribe link in any marketing email. Transactional emails (like reading confirmations) cannot be opted out of.
7. Children's Privacy
Mystic Veil is intended for users aged 18 and older. We do not knowingly collect personal information from children under 18. If we discover we have collected data from a minor, we will delete it immediately.
8. Changes to This Policy
We may update this Privacy Policy from time to time. Significant changes will be communicated via email or an in-app notification. Your continued use of the platform after changes constitutes acceptance of the updated policy.
9. Contact Us
If you have questions about this Privacy Policy or want to exercise your data rights, contact us at privacy@mysticveiltarot.app or visit our Contact page.