Reflections Tarot · tarot.insightyou.app

Privacy Policy

Last updated: August 4, 2026

This Privacy Policy explains how Reflections Tarot handles information when you visit tarot.insightyou.app, use its public Tarot pages, or use the Reflections Tarot mobile application.

Short version: The public landing page, 78-card Wiki and Quick Draw page can be used without an account. Account-based features in the app use Firebase Authentication and our backend to save your profile, readings and journey data. We do not sell personal information.

1. Public website and Quick Draw

You can browse the landing page, Wiki and SEO content without signing in. The public Quick Draw experience prepares the deck and selected cards in your browser. We do not require an account to use those public pages and do not use the Quick Draw selection to identify you.

2. Information we collect

Account and profile information

If you create an account or sign in, we may process your email address, authentication provider identifier, display name, profile photo, birthday, gender, phone number, job and personality information when you choose to provide it.

Content and app activity

Depending on the features you use, we process your mood check-ins, thoughts, questions, selected Tarot cards, reading results, feedback, blocked-author preferences, journey progress and reading history. Some features also store language, theme, notification and other preferences locally on your device.

Technical, security and notification data

We may receive device and browser information, app version, language, time zone, diagnostic events, authentication tokens and push-notification tokens. Firebase Analytics and Crashlytics may be used for analytics and reliability on supported platforms. We use this information to operate, secure and improve the service.

Advertising information

When advertising is enabled in a supported mobile version, Google Mobile Ads (AdMob) may process advertising identifiers, device information and ad interaction data. Advertising features are controlled by the app configuration and are not required to browse the public website.

3. How we use information

to authenticate accounts and provide the requested app features;
to save and synchronize profile, journey, thought and Tarot reading data;
to generate requested Tarot interpretations and personalized guidance;
to send notifications when you enable them;
to protect the service, prevent abuse, troubleshoot failures and improve performance; and
to show optional rewarded advertising where enabled.

4. AI processing

When you request an AI-assisted interpretation, your question, selected cards, language, mood context and optional thought may be sent through our backend to configured AI providers, including Google Gemini or OpenAI models. API credentials are kept on the server and are not exposed to the client. We use the returned output to provide the requested feature and do not present it as medical, psychological, legal or financial advice.

We minimize the profile context sent to AI providers. The standard Tarot prompt does not intentionally include your email address, phone number, photo, Firebase user ID, display name, exact birthday, gender or occupation. Where available, the backend uses derived context such as a zodiac sign and life-path number. To improve continuity, it may also send limited, redacted excerpts from up to three recent readings, including their questions, summaries, topics, mood labels and card patterns. Exact dates and older free-form thoughts are excluded. Common emails, phone numbers, links, dates and secret-like tokens in free-text inputs are redacted before an AI request, but you should still avoid entering confidential or highly sensitive information.

Provider data handling depends on the configured provider and account tier. In particular, Google may use prompts and responses from Gemini API or Google AI Studio no-cost services to improve and develop its products, and authorized reviewers may process that content. Do not use a Google no-cost tier for confidential data. Paid provider terms may offer different data handling, but each provider's terms and privacy policy apply.

If you choose to share a thought publicly in The Void, that thought is stored as public user-generated content and may be sent to an AI provider for safety moderation before publication. Do not include personal or confidential information in a thought you share publicly.

5. Service providers and sharing

We use infrastructure and service providers such as Firebase, Google sign-in, Apple sign-in, Google Mobile Ads where enabled, and AI providers configured by our backend. They process information only as needed to provide their services, subject to their own terms and privacy policies. We may disclose information when required by law, to protect users or the service, or during a business transfer. We do not sell personal information.

6. Retention and deletion

We retain information for as long as needed to provide the service, maintain security, resolve disputes and comply with legal obligations. You can request deletion of your account from the app's Settings → Delete Account action, or contact us. Deletion may not remove information that must be retained by law or information held in securely managed backups until their normal expiration.

7. Your choices

You may browse public pages without signing in.
You may update optional profile fields in the app.
You may change notification and language preferences in Settings.
You may control advertising identifiers and notification permissions through your device settings.
You may request access, correction or deletion by contacting us.

8. Children

Reflections Tarot is not directed to children under the minimum age required in their country. We do not knowingly collect personal information from children. If you believe a child has provided information, please contact us so we can investigate and delete it where appropriate.

9. Security and changes

We use reasonable administrative and technical safeguards, including authenticated API access and managed cloud infrastructure. No online service can guarantee absolute security. We may update this policy when the service changes; the “Last updated” date will show the latest version.

10. Contact

For privacy questions or requests, email ntv.vincent@gmail.com.