Privacy Policy

1. Information We Collect

We collect information in several ways depending on how you use Arcana.

A. Account Information

When you create or maintain an Arcana account, we may collect:

• First and last name
• Email address
• Account identifier
• Login and authentication information
• Information provided through Sign in with Apple, Google Sign-In, or another authentication provider

We use this information to create and secure your account, authenticate you, communicate with you, and associate your readings and other saved information with your account.

B. Optional Profile and Personalization Information

You may choose to provide information to personalize your Arcana experience, such as:

• Date of birth
• Career or occupation
• Relationship status
• Personal profile information
• A personal summary or other information you choose to provide

Providing most personalization information is optional.

If you provide this information, Arcana may use it to personalize future tarot readings, daily card interpretations, Oracle conversations, and other features.

Updating your profile may influence future readings but does not automatically change previously generated readings.

C. Tarot Questions, Readings, and Oracle Conversations

When you use Arcana, we may collect and store information associated with your tarot practice, including:

• Questions or prompts you submit
• Reading focus or category
• Cards drawn or selected
• Whether cards are upright or reversed, where applicable
• Clarifying cards
• Generated tarot interpretations
• Follow-up questions
• Oracle conversations
• Reading dates and related metadata

These materials may be saved to your private Arcana Journal so you can return to previous readings.

Your saved readings and conversations are associated with your account and are not intended to be publicly visible to other Arcana users unless you affirmatively choose to share content using a sharing feature.

D. Journal, Archetype, and Theme Information

Arcana may analyze your saved reading history to identify patterns over time.

This may include generating or storing information such as:

• Recurring cards
• Recurring archetypes
• Common subjects or themes
• Life themes derived from your reading history
• Summaries of past readings
• Patterns across multiple readings
• Conversations with the Oracle regarding your accumulated themes

These features are designed to help you reflect on patterns across your tarot history.

E. Photos of Physical Tarot Cards

Arcana may allow you to upload a photograph of physical tarot cards so that the cards in the image can be recognized and used to create a reading.

Uploaded tarot photographs are intended to be processed for card recognition and are not retained by Arcana after the recognition process is completed.

Information derived from the photograph — such as the identity of the tarot cards recognized in the image — may be retained as part of your reading if you choose to continue and save the reading.

Please avoid including people, private documents, addresses, financial information, or other unrelated sensitive information in photographs submitted for card recognition.

F. Subscription and Purchase Information

Arcana may offer paid subscriptions or other digital purchases.

For purchases made through the Apple App Store or Google Play, payment transactions are generally processed by the applicable platform. Arcana may receive information necessary to determine your subscription status, such as:

• Subscription status
• Product or subscription purchased
• Entitlement status
• Renewal or expiration information
• Transaction identifiers

We use RevenueCat to assist with subscription and entitlement management.

We generally do not receive your complete payment card number for purchases processed by Apple or Google.

G. Physical Product Purchases

If you purchase an Arcana physical tarot deck or another physical product through our website, payments may be processed through Stripe.

Information associated with an order may include:

• Name
• Email address
• Billing information
• Shipping address
• Order information
• Transaction information
• Information necessary to fulfill and support your purchase

Payment card information is processed by Stripe or another designated payment provider rather than stored directly by Arcana, except to the extent permitted or necessary for transaction records.

H. Marketing and Community Signups

If you separately choose to join the Arcana community, newsletter, waitlist, or marketing list, we may collect:

• Name
• Email address
• Marketing preferences
• Information about your interaction with our marketing communications

We currently expect to use GoHighLevel to manage these communications.

Creating an Arcana account does not automatically enroll you in promotional marketing emails.

You may unsubscribe from marketing emails at any time using the unsubscribe link contained in those communications.

We may still send non-promotional communications necessary to operate your account, such as security, transaction, account, or service notices.

I. Technical and Usage Information

When you use Arcana, we and our service providers may automatically collect certain technical information, such as:

• Device type
• Operating system
• App version
• IP address
• Approximate location derived from IP address
• Device or application identifiers
• Login timestamps
• Error and diagnostic information
• Feature usage
• Security and fraud-prevention information

We may use this information to operate, protect, troubleshoot, analyze, and improve Arcana.

2. How We Use Information

We may use information collected through Arcana to:

• Create and manage your account
• Authenticate users
• Provide tarot readings
• Personalize readings based on information you provide
• Generate daily card interpretations
• Generate responses from the Oracle
• Recognize tarot cards in uploaded photographs
• Maintain your private Journal
• Allow you to reopen and continue previous readings
• Identify recurring cards, archetypes, and themes
• Provide subscription benefits
• Process and fulfill physical product orders
• Provide customer support
• Send service-related communications
• Send marketing communications when you have opted in
• Detect fraud, abuse, security incidents, and technical problems
• Improve Arcana's functionality and user experience
• Maintain and protect our systems
• Comply with applicable law
• Enforce our Terms of Use

We do not use tarot readings to make automated decisions concerning employment, credit, insurance, housing, eligibility for government benefits, or similarly significant legal or financial decisions.

3. Artificial Intelligence and OpenAI

Arcana uses artificial intelligence to provide tarot interpretations, Oracle conversations, summaries, theme analysis, and related functionality.

To generate these features, information necessary to respond to your request may be transmitted to OpenAI through Arcana's server-side infrastructure.

Depending on the feature you use, information sent for processing may include:

• Your tarot question or prompt
• Cards included in a reading
• Relevant reading context
• Follow-up questions
• Relevant prior conversation
• Relevant profile information you provided
• Information from prior readings when needed to provide a history- or theme-based feature

We attempt to limit information sent to service providers to what is reasonably necessary to provide the requested feature.

Arcana uses OpenAI's API/business services rather than a consumer ChatGPT account. OpenAI's data-handling practices are governed by its applicable terms and privacy documentation.

We do not represent that information submitted to an artificial intelligence service is completely risk-free. You should not provide Social Security numbers, financial account numbers, passwords, medical records, or other highly sensitive information in your tarot prompts or Oracle conversations.

4. How We Disclose Information

We may disclose information to service providers that help us operate Arcana.

These may include:

Supabase

We use Supabase for backend infrastructure, database services, authentication, and related functionality.

OpenAI

We use OpenAI's API to generate AI-assisted tarot readings, Oracle conversations, summaries, interpretations, and pattern analysis.

RevenueCat

We use RevenueCat to manage subscription entitlements and subscription-related information.

Apple and Google

Apple and Google may provide authentication, distribution, payment, subscription, device, or platform services.

Their processing of your information is also governed by their own terms and privacy policies.

Stripe

Stripe may process payments and associated transaction information for physical products purchased through the Arcana website.

GoHighLevel

If you affirmatively subscribe to Arcana marketing or community communications, information such as your name and email address may be provided to GoHighLevel for customer relationship management and email communications.

Technical Service Providers

We may use hosting, infrastructure, security, analytics, diagnostic, communications, fulfillment, and other vendors that process information on our behalf.

Legal and Safety Disclosures

We may disclose information if we reasonably believe doing so is necessary to:

• Comply with law, regulation, legal process, or governmental request
• Protect the rights or property of Arcana, Waymark LLC, our users, or others
• Investigate fraud, abuse, or security incidents
• Enforce our agreements
• Protect someone from potential harm

Business Transfers

If Waymark LLC is involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction, information associated with Arcana may be transferred as part of that transaction, subject to applicable law.

5. We Do Not Sell Personal Information

Arcana does not sell personal information for money.

We also do not currently use information from your private tarot readings, Journal, Oracle conversations, or profile to sell targeted advertising to third parties.

If our practices materially change, we will update this Privacy Policy and provide any notices or choices required by applicable law.

6. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing Arcana, maintaining your account and Journal, complying with law, resolving disputes, protecting our Services, and enforcing agreements.

Different categories of information may be retained for different periods.

For example:

• Account information may be retained while your account remains active.
• Saved readings and Oracle conversations may remain in your account until you delete them or delete your account.
• Journal and theme information may remain associated with your account while the underlying readings or account remain active.
• Uploaded tarot photographs are intended to be deleted after card-recognition processing is completed.
• Transaction records may be retained where necessary for accounting, tax, fraud prevention, dispute resolution, or legal obligations.
• Backup copies may persist for a limited period before being overwritten or deleted through normal backup processes.

Third-party service providers may maintain information according to their own retention requirements and contractual obligations.

7. Account and Reading Deletion

You may be able to delete individual readings through Arcana.

If you delete a reading, related journal information may also be removed or recalculated where appropriate.

You may also request or initiate deletion of your Arcana account.

Deleting your account is intended to remove the account and personal information associated with it from Arcana's active systems, except information we are required or permitted to retain for legitimate legal, security, accounting, fraud-prevention, or transaction-record purposes.

Arcana will provide an account-deletion option within the application as required by applicable platform rules.

Additional instructions are available at our account deletion page.

If you used Sign in with Apple or another third-party login service, certain authentication credentials or tokens may also need to be revoked as part of the deletion process.

8. Your Privacy Choices

Depending on the features available to you, you may have the ability to:

• Access or update profile information
• Remove optional profile information
• Delete individual readings
• Delete your account
• Unsubscribe from marketing communications
• Control certain device permissions
• Contact us regarding your personal information

You may revoke camera or photo-library permissions through your device settings, although doing so may prevent certain Arcana features from working.

9. U.S. State Privacy Rights

Depending on where you reside and whether applicable legal thresholds are met, you may have rights concerning your personal information under state privacy laws.

These rights may include the ability to request that we:

• Confirm whether we process your personal information
• Provide access to certain personal information
• Correct inaccurate personal information
• Delete certain personal information
• Provide a portable copy of certain information
• Explain categories of information collected and disclosed
• Honor certain rights relating to sale, sharing, or targeted advertising where applicable
• Not discriminate against you for exercising applicable privacy rights

Because Arcana does not currently sell personal information or use private reading information for third-party targeted advertising, certain opt-out rights may not apply to our current practices.

To submit a privacy request, contact readingsbyarcana@gmail.com.

We may need to verify your identity before fulfilling certain requests.

Authorized agents may submit requests where permitted by applicable law, subject to verification requirements.

10. Children's Privacy

Arcana is intended for a general audience age 13 and older.

Arcana is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

If a user provides a date of birth or other information that establishes that the user is under 13, Arcana may restrict or terminate that user's ability to maintain an account or use features that require collection of personal information.

If you believe a child under 13 has provided personal information to Arcana, please contact us at readingsbyarcana@gmail.com.

If we determine that we collected personal information from a child under 13 without legally sufficient authorization, we will take appropriate steps to delete it.

11. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information in our custody.

These measures may include authentication controls, database access restrictions, server-side API handling, encrypted communications, and access policies intended to prevent users from accessing another user's private information.

However, no method of transmitting or storing information electronically is completely secure. We cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your account credentials and for promptly notifying us if you believe your account has been compromised.

12. Third-Party Services

Arcana depends on services provided by third parties.

Your use of certain features may therefore involve processing by companies such as:

• Apple
• Google
• Supabase
• OpenAI
• RevenueCat
• Stripe
• GoHighLevel

Those companies maintain their own privacy policies, terms, security practices, and data-retention practices. We encourage you to review them where relevant.

13. External Links

Our Services may contain links to websites or services operated by third parties.

We are not responsible for the privacy practices, content, or security of third-party websites or services that are not controlled by Waymark LLC.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If we make changes, we will revise the “Last Updated” date above.

If changes materially affect how we use your personal information, we may provide additional notice where required by law, such as through the app, website, or email.

Your continued use of Arcana following the effective date of an updated Privacy Policy is subject to the updated policy.

15. Contact Us

If you have questions about this Privacy Policy, privacy requests, or Arcana's data practices, contact:

Waymark LLC — Arcana
Email: readingsbyarcana@gmail.com

When Arcana obtains a dedicated domain, this policy may be updated with a branded support email and website address.