Night TarotJC STUDIO

PRIVACY

Privacy Policy

Effective: October 24, 2026 · Revised: November 14, 2026 (question readings and question subscription added, banner ads removed, ad views and subscriptions checked directly by our server) · Operator: JC Studio

Your readings, questions and notes are stored only on your phone. However, when you use Ask the cards (question readings), that question and the cards drawn are sent through our server to Anthropic, an artificial intelligence (AI) service provider, in order to write the reading. Our server does not store your questions or readings. The text of a question reading is written by AI. Usage statistics, ads and payments handle limited technical information separately, and we never include your questions, notes or drawn cards in usage statistics, ad requests or payment services.

1. Scope and contact

This policy applies to the Night Tarot app provided by JC Studio and to this information and support website. Questions about privacy and requests to exercise your rights can be sent to whdcjf8172@gmail.com.

2. Information processed on your device

Readings (journal)
The spread, the cards drawn and whether each is upright or reversed, the question and notes you write, and the date and time of the reading are saved on your device. They are used to show your journal and to let you add notes. Up to the 500 most recent readings are kept; beyond that, the oldest are removed first.
Card of the Day and settings
The day's Card of the Day, your settings for reversed cards, vibration, the daily reminder and its time, whether you have the question subscription or own Premium (a copy of the result confirmed with the store), whether you have seen the question reading notice, and the number of questions you have left are stored.
Text received from question readings
The reading text you receive through Ask the cards, and what you asked further, are saved on your device together with that reading.
Daily reminder
If you turn on the daily reminder in Settings, the notification is scheduled on your device for the time you choose. No server or push token is used. On Android 13 and later, the app asks for notification permission when you turn it on, and turning it off removes the scheduled notifications.

You can view what you have saved in the app, and it is not uploaded to our servers automatically. Shuffling, and the spreads, Card of the Day and card guide that use readings written in advance, are handled on the device. Question readings follow section 2-1 below. There is no sign-up or login, and the app has no fields asking for your name or contact details. It does not request access to the camera, microphone, contacts or location. If you write a question or note in a support email, it will be included in what you send.

2-1. Question readings (written by AI)

Ask the cards on the home screen and Ask more after a reading use generative AI. The reading text is written by Anthropic's AI model Claude based on your question and the cards drawn; it is not written or reviewed by a person. The app tells you this once before your first question.

We recommend that you do not write anything in a question that can identify a person, such as your own or someone else's name, contact details, national identification number, bank account information or specific health information. Even if you do not use question readings, you can still use the Card of the Day, the spreads with readings written in advance, the card guide and the journal as before.

3. Usage statistics

To understand how many people use the app and how often it is opened, the public mobile app sends the following minimal information to our Supabase server. It is used to run the service and analyse usage, not to analyse your readings or your interests for advertising.

The installation identifier is created separately from any account or advertising ID, but because it can link usage records from the same installation, we do not describe it as fully anonymous. Drawn cards, readings, questions, notes, GPS location, advertising ID and purchase information are not included. We do not store IP addresses in the analytics database, but technical information may be processed in Supabase's access and security logs. Our private Telegram admin summary receives only aggregate numbers, never installation identifiers or personal records.

Retention: Raw per-launch records are kept for 7 days, daily per-installation summaries for 180 days, and basic installation information for 365 days after last use. Temporary counters used for rate limiting are kept for 1 day. Data past these periods is cleaned up daily, so it may remain until the next cleanup runs.

Stopping and deleting: Turn off Usage statistics in the app's Settings to stop further collection. Information already sent is not deleted automatically; choose Delete my statistics to delete the server records linked to this installation, after which sending stays off. A separate secret token used to verify deletion requests is stored on your device, and only a hash of it is stored on the server. If deletion fails, the app asks you to try again.

Uninstalling the app, clearing its data or resetting your phone does not immediately delete server records. If the previous installation number or deletion credential can no longer be verified, we may be unable to find and delete those records. The retention periods above still apply.

Blocking late requests after deletion: So that deleted statistics are not recreated by a request that arrives late, only the SHA-256 hash of the deletion token and the time of deletion are kept, separately from installation information, for 7 days. This deletion record contains no installation identifier, readings, questions, notes or launch counts. The installation's basic information and its launch and daily records are deleted, and the separate deletion record is removed by the daily cleanup after 7 days, so it may remain until that cleanup runs.

4. Ads and privacy choices

The app shows a rewarded ad that plays only when you choose it (when you tap Watch ad and ask before opening a question reading). It does not show banner ads or interstitial (full-screen) ads. If you are using the question subscription or bought Night Tarot Premium in the past, ads are not requested or shown. The Google Mobile Ads SDK and its consent management tools may collect or share the following information to deliver and measure ads, analyse usage, manage privacy choices and prevent fraud.

Questions, notes and readings you enter in the app are never included in ad requests. Ad requests are limited to content rated PG. In regions where consent is required, the app requests personalised or non-personalised ads according to your choice; elsewhere it may request personalised ads. If your choice cannot be read, it requests non-personalised ads. Even if the advertising ID is removed or you choose non-personalised ads, some processing needed to deliver ads and keep them secure may continue. Retention and deletion of ad information follow Google's policies and your device and account choices.

In regions where it is required, Google's consent message is shown first, and the ads SDK is initialised and ads are requested only when ad requests are allowed. You can reopen the choices from Ad privacy settings in the app's Settings; this item appears only when needed, depending on your region and Google's consent status. You can also reset or delete your advertising ID in Android settings.

5. Payments (question subscription and Premium)

100 questions is a monthly subscription sold through Google Play billing. Night Tarot Premium (a one-time lifetime purchase) is no longer sold from November 2026, and the benefits of users who already bought it are kept. To process purchases, restore them and check purchase status, the app uses Google Play billing and RevenueCat. In doing so, a random app user ID created for each installation by the RevenueCat SDK, the identifiers of the product and transaction, and the purchase time and status are processed. Payment details such as card numbers are handled by Google; we never receive them. Your questions, notes and readings are not sent to payment services.

When a purchase is made, RevenueCat may send the purchase event (anonymous app user ID, product, amount and currency, country) to our Supabase server for revenue reporting. Purchase records are kept under Google Play's and RevenueCat's policies to allow restoring purchases and handling refunds, and they are not deleted when you delete records in the app or uninstall it.

6. Support email and website visits

Support email: When you contact us, we handle your email address, what you write and any attachments in order to solve the problem and reply. Please send only what is needed. Once your inquiry has been handled, information we no longer need is deleted; if the law requires us to keep it, it is kept only to the extent and for the period required. Email is handled through Google's Gmail service, whose retention and security policies also apply.

This website: This site uses no ads, analytics scripts, forms, logins or cookies of its own. Cloudflare, which delivers and secures the site, may process your IP address, the requested address and time, browser information and security-related technical information when you visit. Records from the app (readings, questions, notes) are never passed to this website.

7. Service providers and processing abroad

The following providers process information as needed to run the app and support. Related information may be processed outside your country of residence, for example in the United States. Your readings, questions and notes themselves are not passed to these providers automatically. Only when you request a question reading are that question and the cards sent through Supabase to Anthropic (section 2-1).

Anthropic
Provides the AI model (Claude) that writes question readings. The information in section 2-1 is sent over HTTPS when you request a question reading or ask more, and is kept under Anthropic's policies. Anthropic Privacy Policy
Supabase
Server, database and access security for usage statistics and for relaying question reading requests and enforcing their usage limits. The database is located in the Seoul region of the Republic of Korea, but processing abroad may occur through globally routed APIs and service operations. Data is sent by HTTPS requests while you use the app; the items and retention are described in section 3. Technical access logs such as IP addresses may be processed while the service is operated. Supabase Privacy Policy
Google
AdMob ad delivery, measurement, fraud prevention and privacy choices; Google Play billing; and support email through Gmail. Technical information is sent over the network when ads are requested, and emails are sent when you send them. Retention follows each Google service's policies. Google Privacy Policy · How Google uses information from ads
RevenueCat
Confirming and restoring question subscription and Premium purchases, managing purchase status, and checking access rights for question readings. The information in section 5 is sent over HTTPS when you buy or restore, when the app checks purchase status, or when our server reads access rights for a question reading (section 2-1), and is kept under RevenueCat's policy. RevenueCat Privacy Policy
Cloudflare
Delivery and security of this public information website. Technical information is processed automatically over the network when you request a page, and is kept under Cloudflare's service and security policies. Cloudflare Privacy Policy

International transfers of personal information

JC Studio is based in the Republic of Korea. Depending on where you live, the information above may be processed in Korea, the United States or other countries outside your own.

The recipients and items of personal information transferred abroad among the providers above are listed below. In every case, the information is sent over an encrypted connection (HTTPS) each time you use the relevant feature.

If you do not want your information transferred abroad, you can choose not to use the relevant feature or uninstall the app. Turning off Usage statistics in Settings stops usage statistics from being sent, and ad privacy choices work as described in section 4. While you are using the question subscription, ads are not requested. If you do not use question readings, your questions and cards are not sent to Anthropic.

You can use readings and the on-device journal without contacting us or visiting the website. Questions about transfers and your privacy rights can be sent to the support email above.

8. Retention, deletion and your rights

Records on your device: To delete a reading, long-press it in the Journal, or open it and tap Delete. Clearing the app's data in Android settings or uninstalling the app removes all readings and settings stored on the device. Deleting local records does not delete usage statistics already sent to the server. Step-by-step instructions are on the Support page.

Backup and transfer: Your operating system's app data backup or device transfer features may apply. Such copies follow your device, Google account and OS settings, and deleting records in the app does not guarantee that existing OS backup copies are deleted immediately. We cannot view or recover records stored only on your device.

Other information: Usage statistics follow section 3; ad information follows Google's policies and your choices; website security information follows Cloudflare's policies; support emails are kept for as long as needed to handle the inquiry. Deleting your statistics removes that installation's records from the operating database; providers' security logs and disaster-recovery backups may be handled under their own retention and deletion policies. Deleting usage statistics does not also delete Google ad records or support emails.

Under applicable law, you may request access to, correction or deletion of your personal information, or suspension of its processing, or withdraw your consent. We may ask for the minimum information needed to find the records and to confirm that you are the person concerned or their authorised representative. Depending on where you live, you may also have the right to object to certain processing and to lodge a complaint with your local data protection authority. The app has no member accounts, so there is no separate account deletion procedure.

9. Security and children

We use HTTPS/TLS for server communication and for this site, and limit server access to what is necessary. Records stored on your device are not encrypted by the app itself, so please also manage your screen lock and backup settings. No method of storage or transmission is completely secure.

This app is not designed for children. If a parent or guardian finds a problem with how a child's personal information is handled, please contact the support email.

10. Privacy officer and remedies

Privacy officer
Name: Jongcheol Lee (owner)
Email: whdcjf8172@gmail.com

We reply to access, correction, deletion and suspension requests sent to the email above within 10 days.

Remedies
For advice on or reports of privacy infringement, you can also contact these Korean agencies.

11. Changes and contact

We update this policy and its date when features, providers or relevant laws change. If there is an important change in how personal information is handled, we will let you know through the app, the store or this website, and ask for additional consent where required.

Operator and privacy contact: JC Studio
Email: whdcjf8172@gmail.com

Revision history