Ziyue Tarot · Privacy Policy

Effective Date: July 4, 2026 Last Updated: July 4, 2026

This Privacy Policy explains how the developer (the "we" or "us") of "Ziyue Tarot" (the "App") collects, uses, stores, shares, and protects your information, as well as the rights you have with respect to your personal information.

We take your privacy very seriously. Please read this Policy carefully before using the App. By using the App, you acknowledge that you understand and agree to the information-processing practices described in this Policy. If you do not agree, please stop using the App.

This Policy should be read together with the Terms of Service.

1. Our Core Principles

• Data Minimization: We collect only the information necessary to provide features to you.
• No Advertising Tracking: The App does not use advertising identifiers (IDFA/IDFV), does not integrate any third-party advertising, analytics, or crash-reporting SDK, and does not perform cross-app tracking.
• No Sale of Data: We do not sell your personal information.
• Local-First: Your reading records are stored locally on your device by default.

2. Information We Collect

We collect the following information only when you use the corresponding features:

2.1 Information You Actively Provide

• Reading Questions and Conversation Content: The reading question text you enter and the follow-up conversation content. Used to generate interpretations.
• Voice Audio: When you use voice input, a segment of your recording (audio) is captured and used to transcribe it into text.
• Feedback Information: When you submit feedback, the feedback content you fill in, contact information you may voluntarily provide (such as an email address), and any images you optionally attach.

2.2 Reading and Usage Information

• Card Draw and Interpretation Data: The cards drawn in each reading (position, card name, upright/reversed, etc.), the reading scenario selected, the interpretive text generated, and your thumbs-up/thumbs-down rating of the interpretation.

2.3 Device and Technical Information

• Device Identifier: The App generates a random in-app identifier (UUID) on your device, used for feedback attribution, anti-fraud for invitation rewards, and similar purposes. This identifier is generated by the App itself; it is not an Apple advertising identifier (IDFA/IDFV) and cannot be used for cross-app tracking.
• Basic Device Information: When you submit feedback, participate in invitations, and the like, the following may be attached to the request: device model, operating system version, app version, and language and region settings.

2.4 Transaction Information

• When you make an in-app purchase or subscribe, the transaction is completed through the Apple App Store. We receive the transaction receipt provided by Apple to validate the granting of benefits. We do not collect, and cannot obtain, your complete payment information such as your bank card number—payment is handled by Apple.

2.5 Information We Do Not Collect

We do not collect: your precise geolocation, contacts, photo library images (other than images you actively attach to feedback), calendar, or health data, and we do not obtain advertising identifiers.

3. How We Use Information

We use the information we collect for the following purposes:

1. Providing Core Features: Generating tarot interpretations based on your questions and card draws; performing speech transcription and narration; recommending spreads and assessing question completeness.
2. Saving and Syncing Records: Storing your reading records locally; syncing records through your iCloud when you enable the corresponding feature (see Section 5).
3. Granting and Validating Benefits: Validating in-app purchase transactions, granting membership benefits and reading passes, and processing invitation and redemption rewards while preventing cheating.
4. Handling Feedback and Providing Support: Responding to your feedback and questions.
5. Improving the Service: Analyzing and improving interpretation quality, stability, and experience on a de-identified basis.
6. Security and Compliance: Guarding against abuse and fraud, safeguarding the security of the Service, and fulfilling legal obligations.

Legal Bases for Processing (For Users in the EEA, UK, and Similar Jurisdictions)

• Necessary for Performance of a Contract: To provide the features you request (such as reading interpretations, voice, and in-app purchases).
• Your Consent: For processing such as voice audio and optional contact information; you may withdraw your consent at any time.
• Our Legitimate Interests: Such as preventing cheating, safeguarding security, and improving the Service on a de-identified basis, where these interests are not overridden by your rights.
• Compliance with Legal Obligations: Where required by applicable law.

4. How Information Is Shared and Processed by Third Parties

To deliver the corresponding features, some of your information is transmitted to the following service providers for processing. These service providers process the data only according to our instructions and for the purpose of delivering the corresponding features, and may not use it for their own purposes.

4.1 Our Servers

Requests for readings, voice, feedback, and the like are sent to servers we operate for processing and forwarding. Specifically:

• Generating Interpretations: Your reading questions, card draw data, follow-up conversation, and language settings are sent to our servers, which forward them to the large language model (AI) service provider to generate interpretive text.
• Speech Recognition: Your recorded audio is sent to our servers, which use a speech recognition service to transcribe it into text.
• Speech Synthesis (Narration): The interpretive text to be read aloud is sent to our servers, which use a speech synthesis service to generate audio.
• Feedback and Invitations: The feedback content, optional contact information, device information, and in-app identifier you submit are sent to our servers.

We use a server-side proxy approach for AI-related services: the keys for the relevant third-party models are stored only on our servers. The App does not send your data directly to these third parties, nor does it access their keys within the App.

4.2 Apple

• In-App Purchases and Subscriptions: Transactions are processed and validated by the Apple App Store.
• iCloud: If you enable syncing, the relevant data is stored in your own iCloud (see Section 5).
• Speech Recognition (System Capability): In certain scenarios, the App uses the speech recognition capability provided by the Apple system. On newer system versions, speech recognition may be performed locally on your device; on some older system versions, Apple's speech recognition may need to send the audio to Apple for processing. Such processing is subject to Apple's privacy policy.

4.3 We Will Not

• Sell your personal information to any third party;
• Use your personal information for third-party advertising;
• Share your personal information with any other third party, except as described in this Policy, with your consent, or as required by law.

5. Local Storage and iCloud Sync

• Local Storage: Your reading records, daily fortunes, and app settings are stored locally on your device by default. Asset information such as your reading-pass balance is stored in your device's Keychain.
• iCloud Sync (Membership Feature): When you are a member and actively enable the sync toggle, the App synchronizes your reading records and daily fortunes across your multiple devices through iCloud (key-value storage). Your reading-pass balance is shared across devices signed in to the same Apple account through iCloud Keychain. All such syncing occurs within your own iCloud space; we do not operate a separate cloud account to centrally store this synced content. You may disable syncing within the App at any time.

6. Where Data Is Stored and Cross-Border Transfers

Our servers and the artificial intelligence service providers we use may be located outside your country or region. Accordingly, when you use the relevant features of the App, some of your information may be transferred abroad and processed abroad.

For users from the EEA, UK, and similar regions, when carrying out such cross-border transfers, we will adopt safeguards consistent with applicable law (such as the use of Standard Contractual Clauses) to protect your information. By using the App, you understand and agree to such necessary cross-border transfers.

7. Data Retention

• We retain your information only for as long as necessary to fulfill the purposes described in this Policy.
• Reading requests are used primarily to generate interpretations in real time; the interpretation records themselves are stored primarily on your own device, under your control, and you may delete them at any time.
• Feedback information is retained for a reasonable period after processing is complete, to allow for ongoing follow-up and improvement.
• When information is no longer necessary for the above purposes, or when you exercise your right to deletion, we will delete or anonymize the relevant information within a reasonable period, except where retention is otherwise required by law.

8. Data Security

We adopt reasonable technical and organizational measures to protect your information, including: using HTTPS-encrypted transmission throughout; performing authentication and signature verification on requests that access the server; and storing sensitive asset information (reading-pass balance) in the device's Keychain.

However, please understand that no environment on the internet is absolutely secure, and we cannot guarantee the one-hundred-percent security of information. Please safeguard your device and Apple account properly.

9. Your Rights

To the extent permitted by applicable law, you have the following rights with respect to your personal information:

• Access and Obtain: To learn about and obtain a copy of the personal information we process about you;
• Rectification: To correct inaccurate information;
• Deletion: To request the deletion of your personal information (you may also delete reading records directly within the App);
• Restriction of and Objection to Processing: To restrict or object to our processing of your information in certain circumstances;
• Withdrawal of Consent: For processing based on your consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before the withdrawal;
• Data Portability: Where technically feasible, to obtain the information you have provided in a structured, commonly used format;
• Complaint: To lodge a complaint with the data protection supervisory authority in your jurisdiction.

You may exercise the above rights via the in-app "Profile → Feedback" or through the contact methods set forth in Section 12. We will respond within the period prescribed by applicable law. You may also: delete reading records within the App, disable iCloud sync, and revoke the permissions granted to the App in the system "Settings."

10. System Permissions

The App may request the following system permissions when you use the corresponding features. You may enable or disable them at any time in your device "Settings":

• Microphone: To let you enter the reading question you want to ask by voice;
• Speech Recognition: To transcribe your voice into text questions;
• Photos (Add Only): To save images such as invitation cards to your photo library.

The App does not request permissions such as camera, location, contacts, or photo library reading.

11. Children's Privacy

The App is not designed for children. We do not knowingly collect personal information from children. If you are a parent or guardian and discover that a child in your care has provided us with personal information without consent, please contact us as set forth in Section 12, and we will take measures to delete the relevant information. If you are a minor, please use the App with the consent and guidance of a parent or guardian.

12. Cookies and Tracking Technologies

The App is a native mobile application. It does not use cookies for tracking and does not perform cross-app or cross-website behavioral tracking.

13. Updates to This Policy

We may update this Policy from time to time. The updated Policy will be published by means of an in-app notice and by updating the "Last Updated" date. If the changes are material, we will notify you by a more prominent means. Your continued use of the App after an update takes effect constitutes acceptance of the updated Policy.

14. Contact Us

If you have any questions, requests, or complaints regarding this Policy, your personal information, or your rights, you may contact us via the in-app "Profile → Feedback," and we will respond as soon as possible.

The final interpretation of this Policy, to the extent consistent with applicable law, belongs to the Developer.