Privacy Policy

1. Introduction

Spatom ("we", "us", or "our") operates Tarotlit mobile application (the "App"). This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our App.

This Privacy Policy applies to the App and all products and services offered by Spatom in connection with the App.

2. Information We Collect

We collect minimal information necessary to provide and improve our App services. Most of your data stays on your device.

Locally Stored Data (On Your Device Only)

• Saved readings and journal entries - Stored in a local SQLite database on your device
• Personal notes and photos - Any notes or photos you add to journal entries are stored locally
• App preferences - Settings such as language, theme, notification schedule, and favorites
• Google Sign-In token - If you connect Google Drive backup, your OAuth token and basic profile (name, email, photo) are stored securely in the device's secure storage (Keychain / Keystore) for backup purposes only

Analytics Data (Anonymous / Pseudonymous)

• Firebase Analytics - We collect anonymous usage statistics (screen views, card draws, spread completions) via Firebase Analytics to understand how users interact with the App and improve features. This data is not linked to your personal identity.
• PostHog - Product analytics and event tracking to understand user journeys, feature adoption, and app stability. Some sessions may be recorded in a privacy-safe form to help us identify usability issues and bugs. Text input and sensitive content are masked. Collected data is pseudonymous and helps us improve the overall product experience.
• Microsoft Clarity - Behavioral analytics and interaction metrics (such as taps, scrolls, and screen flows) to understand how the App is used and identify UX issues. Some sessions may be recorded in a privacy-safe form to help us improve the App. Text input and sensitive content are masked by default.
• Crash reports - Technical information about app crashes to help us fix bugs

In-App Purchase Data

• RevenueCat - Subscription and purchase status is processed by RevenueCat to validate Premium access. RevenueCat may collect transaction identifiers and receipt data in accordance with their privacy policy.

Refund Requests

If you request a refund for an in-app purchase from Apple or Google, we (through RevenueCat) may share information about your purchase and your usage of the purchased content with Apple or Google so they can review your request. This information may include whether the purchased content was delivered and how you accessed and interacted with it. We share this information only as needed to help Apple or Google make an informed refund decision, in accordance with their policies. The final refund decision is always made by Apple or Google.

Consent to share consumption data with Apple: By using our App and making in-app purchases, you consent to our sharing information about your usage and consumption of purchased content with Apple when resolving refund requests.

Device Information

• Device type - Device model and OS version
• App version - Version of App you are using
• Device identifiers - Firebase Analytics may collect an app-instance ID and, on Android, the Advertising ID where permitted by your device settings. The App does not request App Tracking Transparency permission on iOS and does not collect the IDFA.

3. How We Use Your Information

We use collected information for various purposes:

• To provide and maintain our App - Core functionality and service delivery
• To improve user experience - Analyzing usage patterns to enhance features
• To improve usability - Some app sessions may be recorded via PostHog and Microsoft Clarity, with text input and sensitive content masked, to help us find bugs and improve the App's design.
• To communicate with you - Important updates and support responses
• To ensure security - Protecting against fraud and unauthorized access

3.5 Legal Basis and Retention (GDPR)

We process your data on the following legal bases:

• Local app functionality — Necessary for the performance of our contract with you (Terms of Service). Retained locally until you delete the App or clear its data.
• Analytics & crash reports — Based on our legitimate interest in maintaining, securing, and improving the App. You have the right to object to this processing at any time by contacting us at [email protected]. Analytics data (Firebase, PostHog, Microsoft Clarity) is retained only as long as necessary for product optimization, diagnostics, and usage measurement (up to 26 months for Firebase).
• Purchase validation — Necessary for the performance of our contract. RevenueCat retains transaction identifiers for as long as required by tax and accounting law.
• Refund request handling — Based on your consent given by accepting this Privacy Policy and our Terms of Service when making in-app purchases. Only purchase and usage information relevant to the refund request is shared, at the time Apple or Google reviews the request.

If you are in the EEA, you have the right to lodge a complaint with your local Data Protection Authority.

4. Data Storage and Security

We prioritize the security and privacy of your data through various measures:

• Local storage - Personal readings, journal entries, notes, and photos are stored locally on your device in a SQLite database. We do not upload them to our servers.
• Optional cloud backup - If you enable backup, your data is saved as a file to your personal Google Drive (Android) or iCloud (iOS). The app does not create an online account; backup is manual and stores files only in your own cloud storage account, not on our servers.
• Encryption - Data transmission is encrypted using industry-standard protocols (TLS/SSL)
• Secure token storage - OAuth tokens for Google Drive are stored in the device's secure key storage (iOS Keychain / Android Keystore)
• Regular updates - Security patches and updates to protect against vulnerabilities

International Data Transfers

Your information may be transferred to and processed in countries outside your country of residence (including the United States) by our third-party service providers (such as Google, Apple, PostHog, Microsoft, and RevenueCat). Where required by applicable law, we rely on recognized data transfer mechanisms, including the EU-U.S. Data Privacy Framework adequacy decision and Standard Contractual Clauses (SCCs), to ensure your data receives an adequate level of protection.

5. Third-Party Services

Our App may use third-party services that have their own privacy policies:

• Apple App Store - For app distribution and in-app purchases on iOS. When you request a refund, Apple may receive information about your purchase and usage of purchased content from us, as described in "Refund Requests" above. Apple processes data according to its Privacy Policy.
• Google Play Services - For app distribution, Google Sign-In / Google Drive API access (scope: drive.appdata), and in-app purchases on Android, including information shared when reviewing refund requests. Google processes data according to their Privacy Policy.
• Firebase Analytics - Anonymous usage analytics (screen views, card draws, spread completions, feature usage). Firebase may collect an app-instance ID and, on Android, the Advertising ID depending on your device settings. On iOS, the App does not request tracking permission, so the IDFA is not collected. See Google's Privacy Policy for details.
• PostHog - Product analytics, session diagnostics, feature usage analysis, and, for some sessions, session recordings. PostHog, Inc. processes pseudonymous analytics data in accordance with the PostHog Privacy Policy.
• Microsoft Clarity - User behavior analytics, heatmaps, and, for some sessions, session recordings to improve user experience. Microsoft processes data in accordance with the Microsoft Privacy Statement. Sensitive content and input fields are masked by default to protect your privacy.
• RevenueCat - In-app purchase and subscription management. RevenueCat, Inc. may collect your device identifier, purchase history, app user ID, and receipt data to validate Premium access and manage subscriptions. See the RevenueCat Privacy Policy.
• Crash reporting - Automatic crash reports to improve app stability

6. Your Rights and Data Deletion

You have the following rights regarding your data:

• Access - Request access to your personal data
• Correction - Request correction of inaccurate data
• Deletion - Request deletion of your personal data
• Portability - Request transfer of your data to another service
• Objection - Object to processing of your personal data

How to delete your data or revoke access

• Local data - Android: clear its data in Settings (Settings → Apps → Tarotlit → Storage → Clear Data) or uninstall the App. iOS: delete the App from your device (long-press the app icon → Remove App → Delete App). This removes all local readings, journal entries, and settings.
• Google Drive backup - Revoke the App's access to your Google Account at any time via Google Account → Security → Third-party apps. Backup files in your Google Drive can be deleted manually from your Drive if needed.
• iCloud backup - Disable iCloud backup for the App in iOS Settings, or delete the backup file from your iCloud Drive.
• Analytics opt-out - Analytics data (collected via Firebase Analytics, PostHog, and Microsoft Clarity), including session recordings, is anonymous or pseudonymous and not linked to your personal identity. Device-level ad and analytics settings do not fully disable all analytics collection. The only way to completely stop analytics collection is to uninstall the app. You may also contact us at [email protected] to object to analytics processing or request deletion of analytics data associated with your device.

Because the App does not create an online account on our servers, there is no server-side account to delete. All personal tarot data is stored locally on your device. For detailed step-by-step instructions on removing local data, clearing cloud backups, and requesting third-party data deletion, please visit our dedicated Delete Data page.

7. Consent and GDPR / CCPA Compliance

The App does not currently display a consent prompt or offer in-app analytics settings. Analytics is processed based on our legitimate interest as described in section 3.5. To object to this processing or request deletion of analytics data associated with your device, contact us at [email protected], or uninstall the App to stop all further collection.

California Residents (CCPA/CPRA). We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. Categories of personal information we collect are: (1) Identifiers (device type, app version, device ID); (2) Internet or electronic network activity (anonymous analytics); (3) Commercial information (subscription status, purchase history). You have the right to know, delete, and correct your personal information. To exercise these rights, email us at [email protected] or visit our Delete Data page.

8. Children's Privacy

Our App is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected]. If we learn that we have collected personal information from a child under 16, we will delete that information promptly.

9. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the bottom of this policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.