Privacy Policy
Last updated: April 5, 2026
What we collect
When you create an account, we store your email address and display name. When you do a reading, we store the cards drawn, your intention, and the interpretation. This is what builds your world.
If you use the camera feature, images are processed in real-time to identify cards and are not stored on our servers.
How we use it
Your data exists to give you a better experience. We use your reading history to build your world visualization and to provide more personalized interpretations over time. We don't sell your data. We don't share it with advertisers.
Social features
When you add friends, they can see readings you've marked as visible to friends. You control the visibility of every reading: private, friends, or public. Readings default to private.
Data storage
Your data is stored securely on Supabase infrastructure. Passwords are hashed. All connections are encrypted via TLS. We use row-level security policies to ensure you can only access your own data (and data explicitly shared with you).
Deleting your data
You can delete your account and all associated data at any time from the app settings. When you delete your account, all readings, world data, friendships, and personal information are permanently removed. This cannot be undone.
Analytics
We collect basic, anonymous usage analytics (screen views, feature usage) to improve the app. No personal reading content is included in analytics. You can opt out in settings.
Contact
Questions? Reach us at privacy@reflectatarot.com.