Privacy Policy

Effective date: February 7, 2021

1. What information do we collect?

Personal information you disclose to us

The application collects voluntary personal details including names, email addresses, and similar information when users register or contact support.

Payment data. Transaction information is processed through Apple Inc. or Google Play, with payment details stored by these platforms rather than the developer.

Third-party sign-in data. Users may authenticate using Apple or Google accounts, which share profile information including name and email address.

Information automatically collected

The app automatically gathers technical data including IP addresses, browser characteristics, device information, operating system details, and language preferences when accessed.

Log and usage data. The servers record service-related diagnostic information, usage patterns, timestamps, pages viewed, searches performed, and error reports.

Device data. Information collected includes device identification numbers, location data, browser type, hardware model, internet service provider details, and system configuration information.

Information collected through the app

Mobile device access. The app may request permission to access device features such as notifications, adjustable through device settings.

Mobile device data. Automatic collection includes mobile device ID, manufacturer, operating system version, device identifiers, and network information.

Push notifications. Users can disable push notification requests through device settings.

2. How do we use your information?

The developer processes personal information based on legitimate business interests, contract fulfillment, legal obligations, and user consent.

• Account management. Information facilitates account creation, login processes, and account maintenance.
• Customer support. The app uses data to respond to inquiries and address potential service issues.
• Feedback requests. Users may be contacted regarding their experience with the application.
• Order fulfillment. Payment information is used to manage purchases, returns, and exchanges.
• Service delivery. Personal information enables delivery of requested services.
• Marketing communications. The developer may send promotional emails based on user marketing preferences, with opt-out options available.
• Personalized advertising. The application develops targeted content and advertising based on user interests and location.

2A. How is personalized AI content generated?

When users request tarot readings, personal details including name, birthday, and relationship information are sent to OpenAI's API along with the user's question and drawn cards. OpenAI generates personalized reading text without using this data for model training. Reading information is saved as part of user history.

3. Will your information be shared with anyone?

The developer shares information only with user consent, for legal compliance, service provision, rights protection, or business obligations.

Legal bases for processing:

• User consent for specific purposes
• Legitimate business interests
• Contract performance
• Legal obligations and law enforcement compliance
• Vital interests involving safety or illegal activity investigation

Business transfers. Information may be shared during mergers, asset sales, financing, or business acquisitions.

Service providers. Third parties operate the application with shared information.

Personal data sales. The developer does not sell personal information to third parties.

4. How do we handle third-party sign-ins?

Users may sign in using Apple or Google accounts, which provide name and email address information. The developer uses this information only as described in this notice and does not control how sign-in providers handle personal data.

5. What is our stance on third-party websites?

The application is not responsible for safety or privacy practices of third-party advertisers or linked websites. Users should review third-party privacy policies directly.

6. How long do we keep your information?

Personal information is retained only as long as necessary for stated purposes or as required by law. When no legitimate business need exists, information is deleted, anonymized, or securely isolated from further processing.

7. How do we keep your information safe?

The developer implements technical and organizational security measures to protect personal information. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, and users access the app at their own risk.

8. What are your privacy rights?

Regional rights

Residents of the European Economic Area and United Kingdom possess rights including access to personal information, rectification, erasure, processing restrictions, and data portability. Users may withdraw consent at any time. EEA and UK residents may complain to their data protection supervisory authority.

Swiss residents can contact data protection authorities through the Federal Data Protection and Information Commissioner.

Account information

Users may review, change, or terminate accounts through in-app settings or by contacting support. Account deletion requests result in removal from active databases within 30 days, though legal requirements may necessitate retention.

Marketing communications

Users may unsubscribe from marketing emails through unsubscribe links or account preferences while remaining eligible for service-related communications.

9. Controls for do-not-track features

iOS provides App Tracking Transparency settings for ad tracking limitations. Android users may reset or opt out of their Advertising ID through privacy settings. The developer respects these preferences.

10. Do California residents have specific privacy rights?

Shine the Light law

California residents may request information annually regarding personal information categories disclosed to third parties for marketing purposes and third-party names and addresses.

Minor data removal

Residents under 18 with registered accounts may request removal of publicly posted unwanted data.

CCPA privacy notice

Resident definition. California residents include individuals in the state for non-temporary purposes or domiciled in California outside the state temporarily.

Collected personal information categories:

• Identifiers
• Personal information (name, email)
• Advertisement information
• Usage data
• Diagnostics data

Data usage and sharing. Information collection and sharing practices are detailed throughout this privacy notice.

Service provider disclosures. The developer may disclose information to service providers through written contracts for processing on behalf of the business.

Personal data sales. The developer has not disclosed or sold personal information in the preceding 12 months and will not sell future information.

Consumer rights

• Right to deletion. Users may request personal information deletion subject to legal exceptions.
• Right to know. Users may request information regarding collection practices, categories collected, usage purposes, third-party sharing, and business purposes.
• Right to non-discrimination. The developer will not discriminate against users exercising privacy rights.
• Verification process. Identity verification is required through previously provided information or communication methods. Additional information may be requested for security purposes.
• Additional rights. Users may object to processing, request data correction or processing restrictions, designate authorized agents, or opt out from future personal information sales within 15 days of request submission.

11. Do we make updates to this notice?

The privacy notice may be updated periodically to maintain legal compliance. Material changes are communicated through prominent notices or direct notification.

12. How can you contact us about this notice?

Email: contact@marcana.app

13. How can you review, update, or delete the data we collect from you?

Users may request access, modification, or deletion of personal information through in-app settings or by emailing contact@marcana.app.