Night TarotJC STUDIO

PRIVACY

Privacy Policy

Effective: October 24, 2026 · Operator: JC Studio

Your readings, questions and notes are stored only on your phone and are not sent to our servers. Usage statistics, ads and payments handle limited technical information separately. We never include your questions, notes or drawn cards in usage statistics, ad requests or payment services.

1. Scope and contact

This policy applies to the Night Tarot app provided by JC Studio and to this information and support website. Questions about privacy and requests to exercise your rights can be sent to whdcjf8172@gmail.com.

2. Information processed on your device

Readings (journal)
The spread, the cards drawn and whether each is upright or reversed, the question and notes you write, and the date and time of the reading are saved on your device. They are used to show your journal and to let you add notes. Up to the 500 most recent readings are kept; beyond that, the oldest are removed first.
Card of the Day and settings
The day's Card of the Day, your settings for reversed cards, vibration, the daily reminder and its time, the date you used the free daily reading, and whether you own Premium (a copy of the result confirmed with the store) are stored.
Daily reminder
If you turn on the daily reminder in Settings, the notification is scheduled on your device for the time you choose. No server or push token is used. On Android 13 and later, the app asks for notification permission when you turn it on, and turning it off removes the scheduled notifications.

You can view what you have saved in the app, and it is not uploaded to our servers automatically. Shuffling and readings are handled on the device. There is no sign-up or login, and the app has no fields asking for your name or contact details. It does not request access to the camera, microphone, contacts or location. If you write a question or note in a support email, it will be included in what you send.

3. Usage statistics

To understand how many people use the app and how often it is opened, the public mobile app sends the following minimal information to our Supabase server. It is used to run the service and analyse usage, not to analyse your readings or your interests for advertising.

The installation identifier is created separately from any account or advertising ID, but because it can link usage records from the same installation, we do not describe it as fully anonymous. Drawn cards, readings, questions, notes, GPS location, advertising ID and purchase information are not included. We do not store IP addresses in the analytics database, but technical information may be processed in Supabase's access and security logs. Our private Telegram admin summary receives only aggregate numbers, never installation identifiers or personal records.

Retention: Raw per-launch records are kept for 7 days, daily per-installation summaries for 180 days, and basic installation information for 365 days after last use. Temporary counters used for rate limiting are kept for 1 day. Data past these periods is cleaned up daily, so it may remain until the next cleanup runs.

Stopping and deleting: Turn off Usage statistics in the app's Settings to stop further collection. Information already sent is not deleted automatically; choose Delete my statistics to delete the server records linked to this installation, after which sending stays off. A separate secret token used to verify deletion requests is stored on your device, and only a hash of it is stored on the server. If deletion fails, the app asks you to try again.

Uninstalling the app, clearing its data or resetting your phone does not immediately delete server records. If the previous installation number or deletion credential can no longer be verified, we may be unable to find and delete those records. The retention periods above still apply.

Blocking late requests after deletion: So that deleted statistics are not recreated by a request that arrives late, only the SHA-256 hash of the deletion token and the time of deletion are kept, separately from installation information, for 7 days. This deletion record contains no installation identifier, readings, questions, notes or launch counts. The installation's basic information and its launch and daily records are deleted, and the separate deletion record is removed by the daily cleanup after 7 days, so it may remain until that cleanup runs.

4. Ads and privacy choices

The app shows a banner ad at the bottom of the tab screens and a rewarded ad that plays only when you choose it (to open one reading after you have used the day's free reading). It does not show interstitial (full-screen) ads. If you own Night Tarot Premium, ads are not requested or shown. The Google Mobile Ads SDK and its consent management tools may collect or share the following information to deliver and measure ads, analyse usage, manage privacy choices and prevent fraud.

Questions, notes and readings you enter in the app are never included in ad requests. Ad requests are limited to content rated PG. In regions where consent is required, the app requests personalised or non-personalised ads according to your choice; elsewhere it may request personalised ads. If your choice cannot be read, it requests non-personalised ads. Even if the advertising ID is removed or you choose non-personalised ads, some processing needed to deliver ads and keep them secure may continue. Retention and deletion of ad information follow Google's policies and your device and account choices.

In regions where it is required, Google's consent message is shown first, and the ads SDK is initialised and ads are requested only when ad requests are allowed. You can reopen the choices from Ad privacy settings in the app's Settings; this item appears only when needed, depending on your region and Google's consent status. You can also reset or delete your advertising ID in Android settings.

5. Premium purchase

Night Tarot Premium is a one-time lifetime purchase sold through Google Play billing; it is not a subscription. To process purchases, restore them and check purchase status, the app uses Google Play billing and RevenueCat. In doing so, a random app user ID created for each installation by the RevenueCat SDK, the identifiers of the product and transaction, and the purchase time and status are processed. Payment details such as card numbers are handled by Google; we never receive them. Your questions, notes and readings are not sent to payment services.

When a purchase is made, RevenueCat may send the purchase event (anonymous app user ID, product, amount and currency, country) to our Supabase server for revenue reporting. Purchase records are kept under Google Play's and RevenueCat's policies to allow restoring purchases and handling refunds, and they are not deleted when you delete records in the app or uninstall it.

6. Support email and website visits

Support email: When you contact us, we handle your email address, what you write and any attachments in order to solve the problem and reply. Please send only what is needed. Once your inquiry has been handled, information we no longer need is deleted; if the law requires us to keep it, it is kept only to the extent and for the period required. Email is handled through Google's Gmail service, whose retention and security policies also apply.

This website: This site uses no ads, analytics scripts, forms, logins or cookies of its own. Cloudflare, which delivers and secures the site, may process your IP address, the requested address and time, browser information and security-related technical information when you visit. Records from the app (readings, questions, notes) are never passed to this website.

7. Service providers and processing abroad

The following providers process information as needed to run the app and support. Related information may be processed outside your country of residence, for example in the United States. Your readings, questions and notes themselves are not passed to these providers automatically.

Supabase
Server, database and access security for usage statistics. The database is located in the Seoul region of the Republic of Korea, but processing abroad may occur through globally routed APIs and service operations. Data is sent by HTTPS requests while you use the app; the items and retention are described in section 3. Technical access logs such as IP addresses may be processed while the service is operated. Supabase Privacy Policy
Google
AdMob ad delivery, measurement, fraud prevention and privacy choices; Google Play billing; and support email through Gmail. Technical information is sent over the network when ads are requested, and emails are sent when you send them. Retention follows each Google service's policies. Google Privacy Policy · How Google uses information from ads
RevenueCat
Confirming and restoring Premium purchases and managing purchase status. The information in section 5 is sent over HTTPS when you buy or restore, or when the app checks purchase status, and is kept under RevenueCat's policy. RevenueCat Privacy Policy
Cloudflare
Delivery and security of this public information website. Technical information is processed automatically over the network when you request a page, and is kept under Cloudflare's service and security policies. Cloudflare Privacy Policy

International transfers of personal information

JC Studio is based in the Republic of Korea. Depending on where you live, the information above may be processed in Korea, the United States or other countries outside your own.

The recipients and items of personal information transferred abroad among the providers above are listed below. In every case, the information is sent over an encrypted connection (HTTPS) each time you use the relevant feature.

If you do not want your information transferred abroad, you can choose not to use the relevant feature or uninstall the app. Turning off Usage statistics in Settings stops usage statistics from being sent, and ad privacy choices work as described in section 4. If you own Premium, ads are not requested.

You can use readings and the on-device journal without contacting us or visiting the website. Questions about transfers and your privacy rights can be sent to the support email above.

8. Retention, deletion and your rights

Records on your device: To delete a reading, long-press it in the Journal tab, or open it and tap Delete. Clearing the app's data in Android settings or uninstalling the app removes all readings and settings stored on the device. Deleting local records does not delete usage statistics already sent to the server. Step-by-step instructions are on the Support page.

Backup and transfer: Your operating system's app data backup or device transfer features may apply. Such copies follow your device, Google account and OS settings, and deleting records in the app does not guarantee that existing OS backup copies are deleted immediately. We cannot view or recover records stored only on your device.

Other information: Usage statistics follow section 3; ad information follows Google's policies and your choices; website security information follows Cloudflare's policies; support emails are kept for as long as needed to handle the inquiry. Deleting your statistics removes that installation's records from the operating database; providers' security logs and disaster-recovery backups may be handled under their own retention and deletion policies. Deleting usage statistics does not also delete Google ad records or support emails.

Under applicable law, you may request access to, correction or deletion of your personal information, or suspension of its processing, or withdraw your consent. We may ask for the minimum information needed to find the records and to confirm that you are the person concerned or their authorised representative. Depending on where you live, you may also have the right to object to certain processing and to lodge a complaint with your local data protection authority. The app has no member accounts, so there is no separate account deletion procedure.

9. Security and children

We use HTTPS/TLS for server communication and for this site, and limit server access to what is necessary. Records stored on your device are not encrypted by the app itself, so please also manage your screen lock and backup settings. No method of storage or transmission is completely secure.

This app is not designed for children. If a parent or guardian finds a problem with how a child's personal information is handled, please contact the support email.

10. Privacy officer and remedies

Privacy officer
Name: Jongcheol Lee (owner)
Email: whdcjf8172@gmail.com

We reply to access, correction, deletion and suspension requests sent to the email above within 10 days.

Remedies
For advice on or reports of privacy infringement, you can also contact these Korean agencies.

11. Changes and contact

We update this policy and its date when features, providers or relevant laws change. If there is an important change in how personal information is handled, we will let you know through the app, the store or this website, and ask for additional consent where required.

Operator and privacy contact: JC Studio
Email: whdcjf8172@gmail.com

Revision history