This Privacy Policy (“Policy”) describes what data the iZZi Tarot mobile application (the “App”) collects, how it is used, with whom it is shared, and what rights you have as a user.
Data controller: iZZi Ride Inc. — a company incorporated in the Commonwealth of Pennsylvania, USA (Pennsylvania S corporation). Address: 807 Durham Place, Bensalem, PA 19020, USA. Privacy contact: support@izziride.app.
By using the App, you confirm that you have read this Policy.
On the App’s first request to the server, an anonymous identifier is created (for example, usr_…) and stored on the device and sent with requests so we can associate your data (progress, diary, subscription) with this device. There is no separate account with a login/password.
Level and experience (XP), day streak, task/quest completion, learning progress (lessons/cards completed), and the number and dates of readings.
Subscription status (active or not, plan type, expiry) — determined through the subscription-management service and the app stores. We do not receive card numbers or payment details.
Your question text may, at your discretion, contain personal information. We process it only to generate the interpretation and to save the reading (if you save it to your diary). Please do not include sensitive data.
The interpretation is not created on the device. The App sends to our server: the chosen deck, spread type, your question, and the list of drawn cards. Our server builds the prompt and passes it to a third-party artificial intelligence provider (Anthropic, the Claude model), which generates the text of the interpretation. This is not direct access to the model: our system constructs the server-side request.
We engage the following service providers, which may process part of the data on our behalf or as independent controllers:
| Service | Purpose | Data |
|---|---|---|
| Anthropic (Claude) | Generating AI interpretations | Question, deck, spread type, cards |
| Google Firebase — Analytics, Crashlytics, Cloud Messaging (FCM) | Analytics, crash diagnostics, push notifications | Usage events, device data, crash logs, push token |
| RevenueCat | Subscription management and verification | User identifier, subscription status/events |
| Apple App Store / Google Play | Payments, subscriptions | Processed by the store under its rules |
| Timeweb | Server hosting | All API requests, logs |
The current policies of these services are available on their websites. This list may be updated — see §10.
We process data in order to: provide the App’s features (readings, interpretations, diary, learning); run gamification (levels, streak, tasks); send push notifications; verify and grant access to the Premium subscription; improve the App (analytics) and fix crashes (diagnostics); and ensure security and prevent fraud and abuse (including rate limiting).
Legal bases (for EEA/GDPR users): performance of a contract (providing the App), legitimate interests (security, product improvement, analytics), and consent (for example, for push notifications and optional analytics where required). For users in Russia, processing is carried out in accordance with Law No. 152-FZ on the basis of your consent and/or the contract. If you are a California resident, you have rights under the CCPA/CPRA; we do not sell or “share” your personal information for cross-context behavioral advertising.
Some providers (in particular the AI provider and cloud services) may process data outside your country. In such cases we seek to ensure an appropriate level of protection in accordance with applicable law. By sending a request for an interpretation, you understand that the transmitted data may be processed in other jurisdictions.
We keep data no longer than necessary for the stated purposes.
We apply reasonable organizational and technical measures to protect data: access control, isolating the database from the external network, request validation and rate limiting, and storing secrets and keys outside the source code. We are working to protect the data-transmission channel between the App and the server. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Depending on your jurisdiction, you may have the right to: access your data, correct it, delete it, restrict or object to processing, withdraw consent, and receive a copy of your data (portability).
Because the account is anonymous, we will need your user identifier to locate your data (you can find it in the Profile/Settings section of the App) — please include it when contacting us.
Send requests to support@izziride.app. We will respond within the periods established by applicable law.
The App is not intended for persons under 16 years of age and does not knowingly collect their data. If you believe we have received a child’s data without proper consent, contact us so we can delete it.
Interpretations, the card of the day, and learning materials are provided for informational and entertainment purposes, reflect the user’s own interpretation, and are not medical, psychological, legal, or financial advice. You are responsible for any decisions made based on them.
We may update this Policy from time to time. For material changes we will notify you in the App and/or update the date at the top of this document. Continued use of the App after changes constitutes acceptance of the updated Policy.
For any privacy and data-processing questions: iZZi Ride Inc., email: support@izziride.app, address: 807 Durham Place, Bensalem, PA 19020, USA.