Privacy policy
This policy covers the MYSTIC TAROT service offered on the App Store in the following places, and this policy website: Taiwan; Japan; South Korea. All five language versions describe the same policy. If they differ, the Traditional Chinese version prevails, without limiting mandatory rights under the law where you live.
Operator and contact
Operator: LU CHI LIN. Brand: CHI J / Soul Tarot (MYSTIC TAROT). Support, privacy and account-deletion help: mystictarotservice@gmail.com. CHI J is a brand pseudonym.
Operating contact address: No. 165, Jingxian Rd., Beitun Dist., Taichung City 406, Taiwan.
Account, sync and reading content
When you use Sign in with Apple, the App uses the stable account identifier provided by Apple to separate accounts, sync records and manage readings, subscriptions and entitlements. A name supplied on first Apple authorization can become your app nickname. You can edit your name and choose a profile photo; these sync with your account and are removed when you delete it. The App does not request email or receive your Apple password, Apple profile photo or full payment-card details.
Questions, cards, positions, orientations, favourites, reading records and results originate on the device. After sign-in, account records and only the guest records you choose to import are synced through Supabase. Do not enter names, phone numbers, addresses, identity documents, credentials, health data or another person’s sensitive information.
AI readings
AI data sharing is off by default and is separate from the general terms. Only after you enable it and deliberately start an AI reading or follow-up are the relevant question, cards, positions, orientations, language and necessary conversation sent to OpenAI through Supabase. Enabling permission alone sends no content and uses no readings; turning it off stops new requests.
AI output may be inaccurate. It is for entertainment and self-reflection, does not replace medical, mental-health, legal, financial or other professional help, and does not reveal another person’s actual thoughts or guarantee future events.
Purchases, subscriptions and transaction data
Apple processes release purchases and subscriptions at the product, price and currency shown on its confirmation screen. We process product and transaction identifiers, signed transactions, account binding, subscription periods, readings, theme or badge entitlements, and refund or revocation status to deliver purchases, prevent duplicate delivery, reconcile refunds and resolve disputes. We do not receive full payment-card details. TestFlight uses Sandbox; test and production subscriptions and readings are separate.
An AI reading holds one reading first and uses it after completion and saving. Failed or timed-out jobs return the held reading. Checking the same job or retrieving a saved result uses no additional reading.
Retention and deletion
Reading records, favourites, AI results and follow-ups are kept for 12 calendar months from the original reading date unless deleted sooner. Favouriting does not extend this period. Cloud cleanup runs periodically; offline devices clean up when the app next opens. Account identifiers, nicknames and profile photos are kept while needed for the account service and removed upon account deletion.
Confirm Settings → My Account → Delete Account and verify with the same Apple Account to request deletion of the account, nickname, photo, cloud readings and AI records, and account records on this device. The app reports completion or offers a retry. Guest records remain. Clearing device data, uninstalling or signing out does not delete the cloud account.
Deletion is irreversible and does not automatically request a refund. Unused extra readings and entitlements belonging to the account become unusable; deleting the account does not cancel a subscription. Necessary transaction records and a financial identifier without the Apple sign-in identity may remain for refund reconciliation, duplicate-transaction prevention and applicable duties. These records are pseudonymised, not claimed to be fully anonymous. Basis, duration and deletion of transaction records: Apple keeps App Store purchase records under its own policies. Our transaction records (Apple transaction identifiers, product, time, reading changes, subscription periods and the pseudonymised financial identifier) are used to restore purchases, reconcile refunds and prevent duplicate transactions. They are kept for at least three years from the transaction date and for as long as the service operates; if the service ends, they are deleted once three years have passed since the transaction and necessary reconciliation is complete.
Retention limits, responsible operator and deletion procedures for backups, security logs, deletion-completion receipts and support email: each kept for at most three years, under the responsibility of the operator, LU CHI LIN. Deletion-completion receipts, operator audit records and Apple reconciliation exception records are checked daily and removed automatically once older than three years; support email and manual backups are reviewed periodically by the operator and deleted after three years. Provider backup rotation means deletion from current systems does not imply immediate removal from every backup.
Providers, recipients and processing regions
Supabase provides accounts, sync, subscription and reading verification and AI job delivery; the primary database is in India. OpenAI receives the question, cards and necessary conversation for AI readings. Apple handles sign-in and App Store payments. Cloudflare hosts and delivers the policy website; Google Gmail processes support emails you choose to send.
Electronic processing is limited to service delivery, security, support, refund reconciliation and applicable duties. Provider transmission, security and AI services may operate in the United States and across global networks; processing is not guaranteed to remain in Taiwan or the primary database region. Confirmed recipients, actual scope and provider retention settings: Supabase (primary database in Mumbai, India); OpenAI (United States; API data is not used for model training, the service calls it with "store: false" so responses are not kept as application state, and OpenAI may retain requests and responses for up to 30 days for abuse monitoring); Apple (sign-in and App Store payments); Cloudflare (policy website); Google Gmail (support email).
We do not sell personal data, conduct advertising tracking or disclose reading content to unrelated parties. Disclosure to competent authorities, to protect lawful interests, or to a sharing destination you select is limited to what is necessary.
Your choices and the effects of withholding data
Using the service requires Sign in with Apple, which provides your account, readings, subscription, purchase entitlements and record sync; you can change your nickname and photo. Refusing AI sharing affects AI features only, not card draws, meanings or records. Support may be unable to fulfil a request without the information needed to handle it.
Turn off AI sharing in Settings → Help & Privacy → Privacy & Terms to stop new requests. This does not immediately recall submitted jobs or necessary provider security records; you may separately request deletion. Do not enter identity documents, credentials, health data or another person’s sensitive information.
Your data rights
Under Taiwan’s Personal Data Protection Act, you may request access, inspection, copies, supplementation or correction, cessation of collection, processing or use, and deletion. These rights are not waived by this policy. Email mystictarotservice@gmail.com with “Privacy request”, describing the scope and request. We ask only for reasonably necessary identity verification.
Access, inspection and copy requests are generally decided within 15 days, with a legally permitted extension of up to 15 days where necessary. Correction, cessation and deletion requests are generally decided within 30 days, with an extension of up to 30 days and written reasons where permitted. We explain the basis and scope of any legally retained data or refusal. You may complain to the competent authority.
Additional information by region
This section adds rights and information for users in the places below. All other sections also apply. Where this policy conflicts with mandatory local law, local law prevails.
Japan: We handle personal information under the Act on the Protection of Personal Information. You may request notice of the purpose of use, disclosure (including records of provision to third parties), correction, addition or deletion, suspension of use or erasure, and suspension of provision to third parties, in the way described in “Your data rights”. We currently charge no fee.
We entrust providers in the United States and India with personal data (see “Providers, recipients and processing regions”). Information on those countries’ data protection systems is published by Japan’s Personal Information Protection Commission. Under the providers’ data processing terms we ensure they take measures equivalent to those required by Japanese law and we periodically check how they are carried out; you may ask us for information about these measures. Our security measures include access restrictions, account separation, encryption in transit, retention controls and monitoring of the legal environment in each processing country. Send questions or complaints about our handling of personal data to mystictarotservice@gmail.com.
South Korea: Under the Personal Information Protection Act, you may at any time request access to, correction, deletion or suspension of processing of your personal information, or withdraw consent, in the way described in “Your data rights”. We generally answer access requests within 10 days. Chief privacy officer: LU CHI LIN (mystictarotservice@gmail.com). The service is not directed to children under 14 and we do not knowingly collect their personal information; if we find any, we delete it promptly.
When the retention period ends or the purpose is achieved, electronic data is deleted so that it cannot be restored. We apply security measures such as access control, encryption in transit, account separation and access logging. The app and this website use no cookies or other behavioural tracking tools. We announce changes that affect your rights on this website at least 7 days before they take effect. For remedies, you may contact the Personal Information Dispute Mediation Committee (1833-6972), the Personal Information Infringement Report Center (118), the Supreme Prosecutors’ Office (1301) or the Korean National Police Agency (182).
To perform our service contract with you, personal information is transferred abroad as follows:
- Supabase, Inc. (United States; database in Mumbai, India; privacy@supabase.com): account identifier, nickname, profile photo, reading and AI records, transaction and reading-balance data. Sent over the network while you use the app, for accounts, sync, subscription verification and AI job delivery; kept as described in “Retention and deletion”.
- OpenAI, L.L.C. (United States; privacy@openai.com): your question, the cards drawn and necessary conversation. Sent over the network when you request an AI reading, to generate it; may be kept for up to 30 days for abuse monitoring.
- Apple Inc. (United States; https://www.apple.com/legal/privacy/contact/): data needed for Sign in with Apple and App Store purchases. Sent when you sign in or buy, for identity verification and payment; kept under Apple’s policies.
- Cloudflare, Inc. (United States; privacyquestions@cloudflare.com): IP address, connection time and requested URL when you visit this website. Sent when you browse, for hosting and security; kept under Cloudflare’s policies.
- Google LLC (United States; https://policies.google.com/privacy): support emails you send. Sent when you email us, to answer you; kept as described for support email.
You can refuse the transfer to OpenAI by turning off AI sharing permission in the app. If you refuse the transfer to Supabase or Apple, you cannot use the services that require sign-in.
Website, support and device permissions
This website has no sign-in or forms and no advertising trackers, analytics scripts or marketing cookies. Hosting may process IP addresses, connection times, requested URLs, browser and security information. Once you send an email, support processes your sender address, message and chosen attachments. Email links and in-app feedback drafts do not send automatically.
The system photo picker provides only your chosen profile photo. Photo-add permission is requested when saving a share image; notification permission when enabling reminders. Adjust permissions in iOS Settings. You choose sharing recipients. Daily reminders and the widget use local data.
Security, minors and policy updates
We use access controls, account separation and transport protection. Ordinary support does not require passwords, verification codes or full payment details. The service is not primarily directed at children. Follow store age restrictions and obtain legally required guardian consent for use or purchases. Contact support about a minor’s data.
We date and explain material changes in the app or on this site and request fresh consent where required. We handle legally required data-incident notifications and reports under applicable rules.