Tarot Lens is built local-first: your readings belong to you and stay on your device. This policy describes the small set of data that ever leaves your phone, and why. Tarot Lens is published by FEEG Systems LLC (United States).
What we collect and where it goes
Photos of your cards
When you photograph a spread, the photo is sent over an encrypted connection to our backend, which forwards it to Google's Gemini API solely to recognize which cards are visible. The photo is processed in memory and is not stored by our backend. Google's handling of API data is governed by the Gemini API terms. Photos are never used to identify people; we recommend photographing only your cards.
Your readings
Completed readings (cards, positions, question, interpretation) are stored only on your device, in the app's local database. We have no copy. Deleting the app deletes them.
Your question
If you type a question for a reading, it is sent with the card list to generate the interpretation, then kept only in your on-device history. It is not stored by the backend.
Birthdate (optional)
If you enter a birthdate, it never leaves your device. The app derives a sun sign and tarot birth cards locally, and only those derived values are sent to ground the reading. Your own birthdate (the "Me" option) is stored in your device's secure storage; a birthdate entered for "Someone else" is used once and never stored.
Device identifier
On first use the app generates a random identifier (a UUID) that is not linked to your name, email, or any account. It is sent with reading requests so we can enforce fair-use limits (free readings, daily and monthly rate limits) and protect the service from abuse. The server stores only this random ID with its usage counters. Standard connection metadata (such as IP address) is used transiently for abuse prevention (registration rate limiting) and appears in short-lived operational logs.
App and device integrity (Android)
On Android, when the app first registers with our backend, it asks Google Play services for a Play Integrity token and sends it with the registration request. Our backend passes the token to Google's Play Integrity API to check that the request comes from a genuine, unmodified copy of Tarot Lens on a genuine Android device. We use the result only to protect the free tier from abuse. The token is processed in memory and is not stored by our backend; the check's outcome appears briefly in short-lived operational logs. If the check cannot run, the app still works. Google's handling of this data is described in the Play Integrity API terms; per Google, the data is encrypted in transit, is not shared with third parties, and is deleted after a fixed retention period.
What we do not collect
- No account, name, email, or phone number.
- No advertising identifiers; no ads; no third-party analytics or trackers.
- No location data.
- No photo library access beyond the images you explicitly choose.
- The backend never logs photo contents or reading texts.
Payments
Purchases (when available) are processed by the app store (Google Play or Apple); we never see your payment details. Our billing provider, RevenueCat, validates purchases and associates the subscription with the same random device identifier described above. The server records only that your device's random ID is entitled to Tarot Lens Pro.
Data deletion
- Uninstalling the app removes all local data (readings, preferences, and on iOS any keychain items are removed per platform behavior).
- The server keeps only the random device ID and its usage counters; contact us to have that row deleted.
For entertainment and reflection
Readings are generated for entertainment and personal reflection. They are not medical, legal, or financial advice.
Age
Tarot Lens is intended for adults and is not directed to children under 18.
Contact
Questions or deletion requests: support@feeg.ai
Changes
We will update this policy if data practices change and note the date above.