This Privacy Policy explains how Xi'an Fuzhongde Information Technology Co., Ltd. handles personal data for Arcamora Tarot, its website, and customer support. Contact: support@arcamora.com.
1. Account and profile information
We use Google sign-in to authenticate you and provide access to your account. We receive and store your profile nickname and profile picture for your account profile. Your Arcamora user ID links your profile and activity to your account.
Your full date of birth and gender are required profile fields. We store them with your user ID and use your birth date to determine your zodiac sign and your zodiac sign and gender to personalize readings. You cannot complete the profile without these fields. Linking information to a user ID does not make it anonymous.
2. Your activity and content
We process the cards you draw, their orientation, your chosen reading focus, questions you submit for a reading, and generated reports to provide the features you use. You can request a reading without adding a question.
Journal entries are optional. Mood labels, including Neutral, are selected by you; a missing entry is not treated as a mood. Weekly letters use your recorded moods, card draws and related statistics, together with your gender and zodiac sign. Journal text and questions are not used to generate weekly letters.
Your account and profile information, questions, card records, reports, journals, and mood records are stored on our servers and synchronized across devices when you sign in to your account.
When you contact support or submit a content report, we process your contact information and the details you provide to respond and investigate. Please do not send passwords, sign-in codes, payment card details, or unnecessary private journal content.
We maintain account-linked eligibility and reward records to provide ad-earned draws and the once-per-account in-depth reading, confirm rewards, track their use and expiry, and prevent duplicate claims. These include claim records linked to your user ID and Android ID. They are deleted when your account is deleted. Android ID is distinct from the resettable Android Advertising ID used for advertising. Google Play subscription information reported by the app is used to check subscription access when you register again.
We store the purchase token from Google Play to verify and support subscription access and restore valid purchases, including after account deletion and re-registration. Google Play handles payment processing. If you contact us about a purchase, we may use the order information you provide to investigate it.
We offer optional rewarded video ads through Google AdMob alongside in-app subscriptions. Eligible non-members can choose to watch an ad for the stated reading reward. Premium members are not shown ads. Reward rules are explained in our Subscription & Billing Terms.
Personalized advertising is enabled, and we use Android Advertising ID where available, subject to applicable requirements and privacy choices. Google's Mobile Ads SDK collects and shares IP addresses (which can indicate approximate location), app and ad interactions such as launches, taps and video views, diagnostic information, and device or account identifiers such as Advertising ID and app set ID. Google uses this information for advertising, analytics and fraud prevention. Actual processing depends on SDK settings, device controls and applicable requirements; choosing not to watch a rewarded ad does not by itself disable SDK data processing. See Google's Mobile Ads data disclosure.
We process IP addresses, device models, and operating system versions to operate and troubleshoot the service; interaction records to understand feature use; crash logs to diagnose errors; and push notification tokens to deliver notifications. You can manage notification permission in your device settings. Turning off notifications does not prevent you from using the app.
Our website does not use cookies, visitor analytics, or submission forms, and we do not retain visitor IP addresses or website access logs. Network information is necessarily processed to deliver webpages. If you email us through a contact link, we receive the message and the contact information you include.
3. AI readings and weekly letters
We use OpenAI to generate AI readings and weekly letters. One-card and three-card requests include the cards and their orientations, your chosen focus, any question you submit, your gender, and your zodiac sign. Weekly requests include your recorded mood labels, card draws and related statistics, your gender, and your zodiac sign. We do not send your full date of birth or journal text to OpenAI, and weekly requests exclude your questions.
We use OpenAI's default API data-retention policies. Under those policies, API data is not used to train OpenAI models unless the API customer opts in. Abuse-monitoring logs may contain prompts and responses and are ordinarily retained for up to 30 days; longer retention may apply for legal or safety reasons. Some API features also retain application data for separate periods depending on the endpoint and settings. Deleting your Arcamora account does not itself remove OpenAI's retained copies. See OpenAI's API data controls for these rules and exceptions.
Sending the information described above is necessary to generate the AI response. You can choose not to request an AI reading or include a question. To ask us to stop future AI processing, including weekly letters, or to withdraw consent where processing relies on consent, contact support@arcamora.com. Stopping that processing prevents the affected AI reports from being generated. It does not undo processing already completed or immediately erase provider logs. Accepting our Terms of Use does not itself authorize general-purpose model training. Where separate consent is required, it must be obtained before the relevant processing.
4. Recipients and purposes
Google processes sign-in, Google Play transactions and AdMob advertising under its Privacy Policy. AdMob receives the advertising data described in section 2. See also How Google uses information from apps that use its services. OpenAI processes the AI request information described above.
We use Alibaba Cloud to host and store app data in its Silicon Valley region in the United States. Service providers supporting hosting, diagnostics, notifications, and email support receive the information needed for those functions, such as technical records, notification tokens, or support correspondence. Data sent to Google and OpenAI is described above. Our use of a United States hosting region does not mean that every provider processes all of its data only in that region.
We may disclose necessary information to comply with a lawful request or protect legal rights. Providers acting on our behalf may use data only for their agreed service purposes. We do not sell personal and sensitive user data. Our Terms do not authorize publication of your private entries.
5. Retention and deletion
We keep personal data for the stated purposes according to these periods or criteria:
| Information | Retention period or criteria |
|---|---|
| Account and profile, including birth date and gender | No fixed expiry while the account exists; deleted when the account is deleted |
| Questions, card records, reports, journals, and moods | No fixed expiry while the account exists; deleted when the account is deleted |
| Account-linked advertising reward, eligibility and claim records | Kept to administer eligibility, reward use and expiry while the account exists; deleted when the account is deleted |
| Purchase tokens, support, other device, usage, and operational records held by us | No fixed expiry while the account exists; deleted when the account is deleted |
Ad-earned rewards expire 30 days after they are granted. That benefit expiry is not a promise that related eligibility or reward records are deleted after 30 days. Google retains advertising data under its own policies; periods depend on the data and purpose, including security, fraud prevention and legal requirements. See Google's retention explanation. Our account deletion does not automatically delete data Google controls independently.
We do not keep account-linked records on our own systems after account deletion is completed. OpenAI processing is described in section 3. Our Account & Data Deletion page explains how to request deletion, completion times, and backup and provider handling. Deleting records on our systems does not itself delete copies controlled by other providers.
6. Security
We use encryption to protect data in transit. No system can guarantee complete security. Protect your device and Google account, and contact support@arcamora.com if you suspect unauthorized access.
7. Your privacy choices
Watching a rewarded ad is optional. Choosing to watch is not, by itself, consent to every use of personal data for personalized advertising. We must obtain consent where required and respect applicable withdrawal or objection rights.
You can manage your Advertising ID using your Android device's advertising privacy settings. Depending on your Android version, these include deleting the advertising ID or opting out of ad personalization. Menu names vary by device; see Google's advertising controls. These controls affect the identifier and personalization; they do not necessarily stop all advertising data processing or delete data already held by Google.
The current app does not include a dedicated in-app advertising consent or privacy-options screen. For questions or requests about advertising-related processing, contact support@arcamora.com. We will address requests within our control and explain any relevant provider controls. Contacting support is not an automatic switch for Google's independently controlled processing.
Contact support@arcamora.com to request access, correction, or deletion, or to exercise other rights that apply where you live. We may ask for proportionate information to verify your authority over the account, never your Google password or sign-in codes.
You may have rights to a copy of your data, portability, restriction, objection, withdrawal of consent, and a complaint to a relevant privacy authority. Withdrawing consent does not affect processing already lawfully carried out. Applicable response deadlines and mandatory rights are respected.
To delete your account in the app, go to Me → Account Management → Delete Account → Confirm Account Deletion. You can also request deletion by email without reopening or reinstalling the app; see Account & Data Deletion. Deleting the app from your device is not an account deletion request.
8. Regional privacy information
Your information is processed in the United States and may be processed in other countries where our service providers operate. Their data-protection laws may differ from those where you live. International processing remains subject to applicable data-protection requirements; accepting these Terms does not waive those protections. Contact support@arcamora.com for information about the arrangements applicable to your data or to exercise your rights.
Where a legal basis is required, we process information needed to deliver the services you request to perform our agreement with you; use consent for processing that requires it; and rely on applicable legal obligations or legitimate interests, such as keeping the service secure and preventing misuse, where permitted and subject to your rights. Consent can be withdrawn, and you may object to processing based on legitimate interests. We do not treat general acceptance of our Terms as permission for every possible use of sensitive information.
If you are in the European Economic Area or the United Kingdom, applicable rights include access, correction, erasure, restriction, portability, objection, and a complaint to your data-protection authority. Other regions may provide similar or additional rights, including an appeal of a privacy-request decision. Contact us to make a request or appeal. We will not discriminate against you for exercising applicable privacy rights. AI readings are for personal reflection, not decisions that determine your legal rights or eligibility for employment, credit, or other essential services.
9. Adults only
Arcamora Tarot is intended for adults aged 18 or older. If you believe a person under 18 has provided personal data, contact support@arcamora.com so we can investigate and take appropriate action.
10. Changes and contact
We will update this policy when our practices change and notify you of material changes as required. We will obtain fresh consent where required before new processing begins. For privacy questions, contact Xi'an Fuzhongde Information Technology Co., Ltd. at support@arcamora.com.