Privacy Policy

Last updated: [PUBLISH_DATE]

Who we are

Lumina Tarot is operated by [DATA_CONTROLLER_NAME]. If you have questions about this policy or your data, contact us at privacy@luminatarot.ai.

Account and profile data

You sign in with Google (Google SSO). We store your account identity, profile information, and reading history in Firebase Authentication and Firestore, operated by Google. If you provide your birthday, we use it to calculate your zodiac sign and Day Master (BaZi) for personalization — we do not use it for any other purpose.

AI-generated readings

Tarot readings are generated by large language models accessed through OpenRouter, which routes requests to the underlying model providers our app is configured to use. The card drawn, your optional written intent, and reading follow-up messages are sent to these providers to generate your reading.

Voice

If you use voice features, your speech is processed in real time for transcription (speech-to-text) and read aloud to you (text-to-speech) using LiveKit Cloud as the audio transport and our AI providers for processing. We do not save or allow playback of your raw voice recordings.

Purchases and credits

In-app purchases and subscriptions are processed through RevenueCat, which integrates with Google Play Billing (and Apple's in-app purchase system, if applicable). RevenueCat receives your purchase records to manage your credit balance and subscription status.

Data retention

We retain your account and reading data for [RETENTION_PERIOD]. Contact us if you'd like your data deleted sooner.

Your rights

You can request access to, export of, or deletion of your account data at any time by contacting privacy@luminatarot.ai. Account deletion permanently removes your profile, reading history, and credit balance.

Third parties we work with

Firebase Authentication & Firestore (Google), Google Sign-In, OpenRouter (AI model routing), RevenueCat (purchases), LiveKit Cloud (voice transport). Each handles data only as needed to provide the service it's used for.

This website

This website loads fonts from Google Fonts (fonts.googleapis.com, fonts.gstatic.com), which receives your IP address when your browser fetches them. Our web server also keeps standard access logs (IP address, page requested, timestamp) for security and troubleshooting. We don't use any analytics or tracking scripts on this site.