Ellie Tarot ("we," "us," or the "Service") provides tarot learning, card-drawing records, editorial content, and ways to contact Ellie. This Privacy Policy explains how information is handled across the ellietarot.com website, the Ellie Tarot app, and related support channels.

Scope

This Policy applies to the Ellie Tarot website, app, and support channels that we operate directly. App stores, social platforms, external websites, and other third-party services are governed by their own privacy policies.

Information we handle

Depending on the features you use, we may handle the following information:

• Account information: If you choose to register or sign in, Clerk may process an account identifier, email address or other sign-in identifier, authentication status, and session information. A nickname or profile image that you choose is also processed as account information.
• Local readings and learning records: Drawn cards, spreads, timestamps, focus text, notes, interpretation-request drafts, daily cards, reminder preferences, and onboarding status are currently stored mainly in a local database on your device. Uninstalling the app, clearing its data, or changing devices may cause these records to be lost.
• Photos and sharing: The app requests photo-library access only when you choose a profile image or save a share poster. A selected profile image is uploaded to the account service. A share poster is saved to your library or passed to the system share sheet at your direction.
• Notifications: If you enable daily-card, weekly-review, or note reminders, the app requests notification permission and stores reminder preferences and local notification schedules on your device.
• Website and technical information: The website and infrastructure providers may process IP address, device and browser type, page visits, referrer, interaction events, session recordings, diagnostics, and error information. The website uses Vercel Analytics.
• App usage and diagnostics: Expo Insights, EAS Observe, and Apple or Google platform services may process limited installation, launch, performance, crash, device, and route-usage information to help us understand reliability and troubleshoot. We do not intentionally send free-form questions or notes as analytics event attributes.
• Contact and support information: If you contact us by email or through a third-party social platform, we handle the account details, contact information, questions, attachments, and correspondence that you choose to provide.
• Purchase information: When paid features become available, Apple, Google, or another applicable payment channel will process payment credentials and transactions. We may receive product, transaction, subscription-status, region, and refund information needed to verify entitlements, but we do not receive complete payment-card details.

Please do not include unnecessary identity documents, financial account details, medical records, or another person's sensitive information in focus text, notes, contact messages, or other content.

How we use information

We use information as needed to:

• provide account access, profile management, card drawing, the card library, learning, records, reminders, and sharing;
• associate information you choose to sync with your account when account sync becomes available;
• display, verify, and restore applicable purchase entitlements;
• maintain security, troubleshoot, measure basic usage, and improve reliability;
• respond to contact or support requests and comply with applicable legal obligations.

We do not sell personal information or use the contents of your tarot questions or notes for targeted advertising.

AI features

The current version does not yet offer a production service that sends questions and spreads to a third-party generative-AI provider for interpretation. Before such a feature launches, we will update this Policy and explain the named AI provider, categories of data sent, and purposes before transmission, with any applicable choice or consent. AI output must not be treated as medical, mental-health, legal, financial, or other professional advice.

Local data, account data, and sync

Local records remain on your device, and we generally cannot access, recover, or delete them from a server. Clerk handles account authentication data, nickname, and profile image. Cross-device sync is not yet formally available. If it is enabled, we will explain in the product which records are uploaded, synchronized, and deleted, and we will update this Policy accordingly.

Service providers and disclosures

We may use the following categories of service providers as necessary to operate the Service:

• Clerk for account authentication, sessions, nickname, and profile image;
• Expo and EAS for app distribution, updates, usage measurement, performance, and diagnostics;
• Vercel for website hosting and basic website analytics;
• Apple and Google for app distribution, operating-system permissions, notifications, purchases, and platform diagnostics;
• Email and social platforms to process communications that you initiate.

We may also disclose information when required by law, to protect users or the Service, to prevent fraud, or as reasonably necessary in connection with a reorganization, financing, sale, or transfer of business assets.

Retention

Device-local data remains until you delete it in the app, clear app data, or uninstall the app. Account information is generally retained while the account remains active. Transaction records may be retained for purchase verification, tax, dispute, and legal obligations. Website analytics, diagnostic logs, and support records are retained for a reasonable period based on security, operational needs, provider settings, and legal requirements.

Your choices and rights

You can:

• update your nickname, profile image, reminder preferences, and editable records in the app;
• withdraw photo or notification permissions in device settings;
• delete individual reading records or remove device-local data by deleting the app;
• use the in-app account-deletion function or contact ellie@ellietarot.com about an account or privacy request.

Depending on applicable law where you live, you may have rights to access, correct, delete, restrict or object to processing, obtain portability, or complain to a regulator. We may need to verify your identity, and lawful retention obligations or exceptions may limit some requests.

International processing

Our service providers may process information outside your country or region. Where required, we use contractual, access-control, or other reasonable measures intended to protect that information.

Children

The Service is not directed to children under 13. Users below the age of legal majority where they live should use the Service with a parent or guardian's consent and guidance. Purchases or human-reading services may need to be completed by an adult. Contact us if you believe a child provided personal information without appropriate authorization.

Security

We use technical and organizational measures appropriate to the nature of the Service. No transmission or storage method can be guaranteed completely secure, so please protect your device, account, and sign-in credentials.

Updates to this Policy

We may update this Policy when the Service, data handling, or applicable rules change. A new version will be published here with its effective date, and historical versions will remain available. We will provide additional notice of material changes where reasonably practicable.

Contact us

For privacy questions, requests, or complaints, email ellie@ellietarot.com.