Tarot Privacy Policy

Overview

Tarot is a card-reading app published by Multitude City. We designed it to work without an account and to keep your readings and app preferences on your device. We do not sell personal information or use it for advertising.

Information processed on your device

The app may read device and sensor values—including touch timing, motion and environmental sensors, battery and network state, and available Android hardware readings—to add situational entropy to card draws. These readings are used locally for randomization and are not sent to Multitude City. Reading history, annotations, settings, cached random-number data, and supporter recognition are also stored locally unless you choose to export or share them.

Network services

Android version 1.0.12 and later fetch quantum random numbers through our service hosted by Cloudflare. Requests include random installation and request IDs, the app’s package name and platform, and a Google Play integrity result. We use this information to limit requests and prevent abuse. Our service keeps only hashed IDs, deleted within about an hour of the last accepted request. Your readings, history, annotations, and sensor inputs are not included.

Google Play processes device and connection information to check app and device integrity. Our service does not read or store IP addresses or keep request logs. Cloudflare sees your IP address while handling the connection. Google and Cloudflare handle information under their respective privacy policies.

Older app versions use our previous Supabase service. It keeps hashed IP addresses for rate limiting, deleted about an hour after your last request. Supabase’s request logs include your IP address and approximate location and are kept for about one day. These requests also exclude your readings, history, annotations, and sensor inputs.

Optional tips

If you choose to tip the developer, payment and transaction information is processed by Google Play and RevenueCat. Multitude City receives purchase status and product information needed to complete the transaction, provide supporter recognition, prevent fraud, and understand aggregate revenue. We do not receive your full payment-card details. Their handling of information is governed by their respective privacy policies.

Sharing and disclosure

We disclose information only to service providers needed to operate the app, when required by law, or to protect users and the service. Exports and shares happen only when you initiate them through your device.

Children, retention, and your choices

Tarot is not directed to children under 13. You can remove locally stored app data by clearing the app’s storage or uninstalling it. Service-side security and purchase records are retained only as reasonably necessary for the purposes described above and applicable legal obligations. You may decline optional tips and may use card draws if the quantum-number service is unavailable.

Changes and contact

We may update this policy as the app changes. The latest version will remain at this URL. Questions or privacy requests can be sent to info@multitude.city.