Privacy Policy

Divinica ("Divinica," "we," "our," or "us") is built around a simple idea: a daily moment of reflection should not come at the cost of your privacy. This Privacy Policy explains what information the Divinica mobile application (the "App") and this website (the "Site") collect, how that information is used, and the choices you have over it.

1. Summary in one paragraph

We collect the minimum information needed to give you an account, sync your readings to your device, and process your subscription. We do not run analytics SDKs, advertising networks, or third-party trackers. We do not sell, rent, or trade your information. Reading inputs that require AI interpretation are sent to Anthropic for processing and are not used to train models.

2. Information we collect

To provide Divinica, we collect a small, defined set of information:

• Account email address. Required so you can sign in across devices, recover access, and receive transactional messages (for example, a password reset or a notice about a change to these terms).
• Anonymous usage token. A randomly generated identifier issued when you first launch the App. It is not linked to your name or device advertising identifier and is used to associate readings with your account.
• Reading history. The cards you have drawn, your saved notes, and timestamps. This history exists so that you can return to it. It is stored on your device and, if you have enabled sync, on our servers tied to your account.
• Subscription state. Whether you have an active premium subscription, the platform it was purchased on, and its renewal status. This state is provided to us by RevenueCat and is used solely to grant or revoke access to paid features.
• Authentication identifiers. If you sign in with Apple or Google, the platform returns an opaque user identifier and (where you consent) an email address. We do not receive your password.

3. Information we do NOT collect

• No analytics SDKs (no Google Analytics, no Firebase Analytics, no Amplitude, no Mixpanel, no PostHog, no Segment).
• No advertising networks, no advertising identifier (IDFA), no ad personalization signals.
• No third-party trackers, pixels, or session-replay tools.
• No location data — the App does not request location permissions.
• No contacts, calendar, microphone, or camera access.
• No cookies on this Site beyond the session storage required for routing.

4. How we use information

We use the information described above only to:

• Create, secure, and operate your account.
• Sync your readings between your devices when you choose to.
• Generate AI interpretations of your tarot readings, in the voice you select.
• Process and verify your subscription.
• Send transactional emails (account, security, billing).
• Detect, prevent, and respond to abuse, fraud, or security issues.
• Comply with legal obligations.

5. Third-party processors

We rely on a small number of vendors to operate Divinica. Each is bound by a data processing agreement and uses your information only to perform the service described:

• Apple, Inc. — Sign in with Apple. If you choose to sign in with Apple, Apple authenticates you and returns an opaque identifier and (with your consent) an email address.
• Google LLC — Google Sign-In. Same as above, for Google accounts.
• Anthropic, PBC — AI interpretation. When you request a written interpretation of a reading, the relevant card data and your selected tone preference are sent to Anthropic's API to generate the response. Per Anthropic's published policy, API inputs are not used to train its models. We do not send your email address or account identifier with these requests.
• RevenueCat, Inc. — Subscription management. RevenueCat processes your in-app purchase receipts from Apple and Google and tells us whether your subscription is active. RevenueCat receives your anonymous user token but not your email address.
• Hosting and email infrastructure. Standard cloud hosting and transactional email providers used to run the service.

6. Data retention

Your account, reading history, and any synced data are retained until you delete your account. You can delete your account at any time from inside the App (Settings → Delete account). Deletion is permanent and cascades to all readings, notes, and synced state on our servers within 30 days. Backups containing your data are purged within 90 days.

7. Your rights

Subject to applicable law (including the GDPR, the UK GDPR, and the CCPA), you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and associated data.
• Request a portable export of your readings.
• Object to or restrict certain processing.
• Withdraw any consent you have previously given.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email support@divinica.app. We will respond within the timelines set by applicable law.

8. Children

Divinica is not intended for and should not be used by children under 13 (or under 16 in the European Union, where applicable). We do not knowingly collect personal information from children. If you believe a child has created an account, contact us at support@divinica.app and we will delete it.

9. International transfers

Divinica is operated from the European Union. If you access Divinica from outside the EU, your information may be transferred to, stored, and processed in jurisdictions whose data protection laws differ from those in your country. Where required, we rely on Standard Contractual Clauses or other approved transfer mechanisms.

10. Security

We use industry-standard safeguards including encryption in transit (TLS), encryption at rest, scoped access controls, and routine security review. No system is perfectly secure, but we treat your information with the care you would expect from a tool that lives next to your morning coffee.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be announced inside the App and, where you have provided an email address, by email.

12. Contact

Questions about this Privacy Policy or your data should go to support@divinica.app.