Privacy Policy

ASK TAROT

How Ask Tarot handles your journal, AI requests, and purchases

Effective Date: July 18, 2026

1. Introduction

Ask Tarot (the "App") is provided by Digital Sprout ("we," "us," or "our"). This policy explains what information is handled when you use the App, why it is handled, which service providers are involved, and the choices available to you.

Ask Tarot is a private reflection journal. It does not require an account and is designed to keep your journal content on your device unless you choose to use an online feature described below.

2. Information handled by the App

Journal data stays on your device

Questions, card draws, interpretations, notes, moods, favourites, daily-card reflections, reminder preferences, and an optional birth date are stored locally on your device. We do not operate an account database containing this journal.

Information may be processed online only when you use the following features:

  • •AI-enhanced readings and follow-ups: the current question, selected cards, spread, reading style, and follow-up text are sent to our secure processing endpoint. A follow-up may include up to the last eight messages from that reading. If Reading Memory is enabled, up to four relevant saved entries may also be included. You can disable AI enhancement or Reading Memory in Settings.
  • •AI response reports: if you flag a response, we receive a limited report containing the response, the associated reading context needed to investigate it, a reason you select, and technical timestamps. Private notes are excluded.
  • •Subscriptions: Google Play, Apple, and RevenueCat process purchase status, store transaction identifiers, country/store information, and an anonymous app user identifier. We do not receive your full payment-card details.
  • •Technical request data: our hosting provider may process IP address, device/network metadata, request time, and error information for security, abuse prevention, and service reliability.

3. AI processing and OpenAI

AI-enhanced text is processed through the OpenAI API. We instruct the service to frame tarot as reflection rather than prediction and set API responses not to be stored as application state. OpenAI states that API data is not used to train its models unless the API customer explicitly opts in. OpenAI may retain abuse-monitoring logs containing prompts and responses for up to 30 days, unless a longer period is legally required or different approved data controls apply.

Learn more in OpenAI's API data controls documentation. Please do not enter payment details, government identifiers, passwords, or other information you would not want processed by an AI service.

4. Service providers

We use the following providers only for the purposes described in this policy:

  • •OpenAI: generates optional AI-enhanced interpretations and follow-ups.
  • •Expo Application Services: hosts the secure processing endpoint and supports app delivery.
  • •RevenueCat: manages subscription status and entitlement verification.
  • •Google Play and Apple App Store: distribute the App and process purchases.

These providers may process data in countries other than your own under their respective privacy and security terms.

5. Retention, security, and deletion

  • •On-device data: remains until you delete individual entries, use Erase Journal in Settings, or uninstall the App. Device backups may retain copies according to your device provider's settings.
  • •AI requests: are not intentionally stored by Digital Sprout after processing. OpenAI's abuse-monitoring retention is described above.
  • •Response reports: are retained only as long as reasonably necessary to investigate safety or quality concerns, normally no longer than 90 days unless law or an active investigation requires longer.
  • •Purchase records: are retained by the applicable store and RevenueCat according to their legal, accounting, fraud-prevention, and service requirements.

Data is transmitted using encrypted HTTPS connections. No method of electronic storage or transmission is completely secure, but we minimise the data sent and keep the journal local by default.

Because no Ask Tarot account is required, the quickest way to delete your journal is Settings > Erase journal. For a privacy request concerning a submitted response report, email us using the address below with the approximate submission date.

6. Children and sensitive use

Ask Tarot is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Tarot content is offered for entertainment and personal reflection and is not medical, legal, financial, or mental-health advice.

7. Your choices and policy updates

You can turn off AI-enhanced wording, disable Reading Memory, decline notifications, delete readings, or erase the local journal at any time. Depending on where you live, you may also have rights to ask about, correct, or delete personal data we control.

We may update this policy when the App or legal requirements change. The current version will remain published at this URL with a revised effective date.

8. Contact us

Digital Sprout
Email: info@digitalsprout.org
Website: digitalsprout.org