Privacy Policy
Last updated: October 26, 2026
The short version. Tarotly has no sign-up, no ads and no tracking. Your readings, journal and birth details stay on your device. If you choose AI readings with Muse, we send only what Muse needs to answer, never your name, email, birth date or birthplace. You can delete everything from Settings at any time.
Who we are
Tarotly (the "app") is published by Tarotly LLC ("we", "us"). We are responsible for the personal data described in this policy. You can reach us at support@tarotly.app.
What stays on your device
The following is stored only on your phone and is never sent to us:
- Your readings, journal entries and reading history.
- Your profile: display name, short bio, and the portrait image you create.
- Your birth date, birth time and birthplace. Your birth chart is computed on your device.
- Your preferences, such as language, theme and lesson progress.
- Photos of your cards when the cards are recognized on your device.
If you delete the app or use Delete all my data in Settings, this information is erased from your device.
What is sent when you choose AI readings
Muse, the reading guide in the app, can write readings with an AI model. Before anything is sent, the app asks for your consent. If you decline, Muse writes readings with a built-in engine on your device and nothing is sent. You can change your choice at any time in Settings.
If you agree, each time you ask Muse for a reading or reply, the app sends:
- The cards you drew and the spread you used.
- Your question and your messages to Muse.
- The app language.
- Your birth chart placements (signs and houses only).
- When you scan a spread and the cards cannot be recognized on your device, the photo of your cards.
We never send your name, email, birth date, birth time or birthplace. This content is used only to write the answer you asked for. It is not used for advertising, and it is not used to train AI models.
Anonymous identifier
To protect the service from abuse, the app creates a random anonymous identifier the first time you use AI readings. It is not linked to your name, email or Apple ID. With this identifier, we keep a usage log: the type of request (reading, reply or card scan), its date and time, its size, and whether a safety filter was triggered. We use this log to apply a fair daily limit and to keep the service safe. We do not store your questions, your messages or Muse's answers on our servers.
Reports
If you report an answer from Muse, we receive the excerpt you reported and the reason you chose, so we can review it and improve safety.
Service providers
We use a small number of providers to run the app. They process data only on our instructions.
| Provider | Purpose | Data |
|---|---|---|
| Supabase | Hosting of our server functions and database | Anonymous identifier, usage log, reports, technical data such as IP address |
| Anthropic | AI model (Claude) that writes Muse's readings and recognizes cards in photos | The content listed above, only if you agreed to AI readings |
| Apple | App distribution, payments and subscriptions | Handled by Apple under its own privacy policy. We never see your payment details. |
Anthropic does not use this content to train its models. It may keep it for a limited period for safety and abuse monitoring, as described in its own policies. Our providers may process data in the United States and other countries. When data leaves the European Economic Area or the United Kingdom, it is protected by safeguards such as the European Commission's Standard Contractual Clauses.
What we do not do
- No account or email address is required to use Tarotly.
- No advertising, and no advertising or analytics SDKs.
- No tracking across other companies' apps or websites.
- We do not sell or share your personal data.
- We do not access your contacts or your location. The camera and photo library are only used when you choose to scan your cards.
Purchases
Subscriptions and in-app purchases are processed by Apple. We receive confirmation of your purchase status from Apple so we can unlock features. We do not receive your name, email or payment details. You can manage or cancel a subscription in your Apple ID settings.
How long we keep data
- Data on your device: until you delete it in Settings or delete the app.
- Usage log and reports on our servers: until you use Delete all my data, or until you ask us to delete them.
- Technical server logs: kept for a short period by our hosting provider for security.
Deleting your data
In the app, open Settings, then Delete all my data. This erases your readings, profile and conversations on your device, and deletes your anonymous identifier, usage log and reports from our servers. You can also email support@tarotly.app and we will help you. Deleting your data does not cancel a subscription, which is managed by Apple.
Legal bases
If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on:
- Your consent to send content to the AI model. You can withdraw it at any time in Settings.
- The performance of our contract with you to provide the app and the features you purchased.
- Our legitimate interests in keeping the service secure and preventing abuse, through the usage log and daily limits.
Your rights
Depending on where you live, including under the GDPR and the California Consumer Privacy Act, you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict its processing, and to withdraw consent. We do not sell or share personal data, and we will not treat you differently for exercising your rights. To make a request, email support@tarotly.app. Because we do not know who you are, the fastest way to delete your server data is Delete all my data in Settings. You also have the right to lodge a complaint with your local data protection authority.
Children
Tarotly is not intended for children under 13, or under the minimum age set by the law of your country. We do not knowingly collect personal data from children. If you believe a child has used AI readings, contact us and we will delete the related data.
Security
Data sent to our servers is encrypted in transit. Access to our servers is restricted, and the tables that hold your usage log and reports can only be reached by our own server functions.
Changes to this policy
If we change this policy, we will update the date at the top of this page. If the changes are significant, we will let you know in the app.
Contact
Tarotly LLC
support@tarotly.app