Privacy Policy

Last updated: October 20, 2026

1. Data controller

Molarstar Enterprise LDA, NIPC 516438441, with its registered office at Portugal. For any questions about your data: suporte@tarotcruz.com.

2. What data we collect

• Account: name, email, password (stored encrypted) and, if you choose, a profile photo.
• Readings: the questions, situations and names you type, and the readings you receive.
• Life Line: photos of your hands, if you use this feature.
• Time Capsule: texts, photos, video and audio you choose to save.
• Payments: a record of your credit purchases. Card details stay with PayPal, never with us.
• Purchases in the Google Play app: payment is handled by Google. We only receive the purchase confirmation (order number and package), never your card details or your Google account details.
• Technical: IP address and basic device data, for security and to prevent abuse.
• Reports: if you use “Report this answer”, we store the reason, your comment and the reported text (without your IP address).
• On your phone: we store your first name, sign, card of the day and recent history locally, to personalize your experience. These are not advertising cookies.

3. What we use your data for

• Providing the service: generating your readings and saving them in My Account.
• Managing your account, credits and payments.
• Personalizing your readings (for example, connecting today's card to the ones from previous days).
• Security and abuse prevention.
• Reviewing answer reports and improving the quality and safety of readings.
• Improving the app with usage counts (for example, how many people reach each step of the reading or the credits page). We don't use advertising cookies or third-party tools for this; the records are deleted after 400 days.
• Sending notifications, only if you turn them on.

The legal basis is the performance of the contract (providing the service), your consent (photos, notifications) and our legitimate interest in keeping the service secure.

4. Artificial intelligence

To generate the readings, the text of your question (and, for Life Line, the photos of your hands) is sent to our artificial intelligence provider, Anthropic, which acts on our behalf. This may involve transferring data outside the European Union, carried out with the safeguards provided for in the GDPR. Don't include sensitive information in your questions that you don't want to share (ID numbers, health data, addresses).

If an answer seems offensive or inappropriate to you, tap “⚑ Report this answer” below the text. We review every report.

5. Who we share it with

Only with those we need to provide the service: hosting (Hostinger), payments (PayPal) and artificial intelligence (Anthropic). If you install the app from Google Play, Google processes the installation data under its own privacy policy. We also use the Google Ads tag (Google), which may use cookies to measure whether our ads bring visits and purchases. We don't sell your data.

In the app installed from Google Play, credit purchases are processed by Google (Google Play) and the Google Ads tag is not loaded.

Change my cookie choice

6. How long we keep it

• Account, readings and journal: for as long as the account exists.
• Hand photos: deleted automatically after 30 days, or sooner if you ask.
• Time Capsules: until the opening date and then for as long as the account exists, unless you delete them.
• Payment records: up to 10 years, as required by tax law (even after you delete your account, linked to an anonymous account).
• Answer reports: for as long as they're useful for moderation; when you delete your account, they're no longer linked to you.
• Server backups: deleted data also disappears from the backups within 30 days at most.

7. Your rights

You have the right to access, correct, delete, restrict or object to the processing of your data, to request data portability and to withdraw your consent at any time. Just write to suporte@tarotcruz.com. To delete your account and your data, see the Delete account page (you can do it in the app, on the website or by email, even without logging in). You also have the right to file a complaint with the Comissão Nacional de Proteção de Dados (CNPD), Portugal's data protection authority.

8. Security

We use an encrypted connection (HTTPS), encrypted passwords and files stored outside the server's public area. No system is 100% foolproof, but we do our best to protect your data.

9. Minors

The service is for adults 18 and over only. If we learn that an account belongs to a minor, it will be deleted.

10. Changes

We may update this policy. The date of the last update appears at the top.