Privacy Policy

1. Who we are

ATThink Tarot ("we", "us") operates the AI tarot reading service at athink.app. This policy explains what personal data we collect, why, and the choices you have. For any privacy question, contact alenbee@gmail.com.

2. Data we collect

• Account data — email address and a password (stored as a one-way hash) when you register, so you can save and sync your readings.
• Reading data — your questions, drawn cards, and generated interpretations, stored so you can revisit them and so the Service can function.
• Device identifier — an anonymous device fingerprint used only to count free readings per device.
• Payment data — handled entirely by our payment processor, Paddle (see Section 5). We receive only confirmation of payment and your email as given at checkout. We never see or store card numbers.
• Usage and analytics data — basic, privacy-respecting usage statistics (for example via Google Analytics 4) to understand how the Service is used.

3. How we use your data

• To provide the Service: generate readings, save your history, and unlock paid access after purchase.
• To manage your account and respond to support requests.
• To improve the Service through aggregated, anonymized analytics.
• To prevent fraud and abuse of the free-reading limits.

We do not sell your personal data, and we do not use your readings for advertising.

4. Legal bases (EEA/UK)

Where the GDPR applies, we process your data on the following bases: performance of a contract (providing the Service you requested), legitimate interests (analytics, fraud prevention, security), and consent (where required, such as analytics cookies).

5. Third-party services

• Paddle — payment processing and tax handling. Paddle acts as merchant of record for your purchase. Their privacy policy applies to data you provide at checkout: paddle.com/legal/privacy.
• AI model provider — your question and cards are sent to a third-party AI service to generate your reading. Data is transmitted over encrypted connections and is not used by that provider to train models.
• Hosting and analytics — our servers and analytics tooling, located in secured data centers.

6. Data retention

Account and reading data is kept for as long as your account is active, so your history remains available. Payment records are kept as required for tax and accounting purposes. You may request deletion at any time (see Section 7).

7. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, email alenbee@gmail.com and we will respond within 30 days.

8. Children

The Service is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has provided us personal data, contact us and we will delete it.

9. Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with a new effective date.