Last Updated: October 19, 2026
1. INTRODUCTION AND SCOPE
This Privacy Policy ("Policy") is issued by Kienmaly Mobi ("we," "us," or "our"). It governs the data practices for our mobile application, horoscope.tarot.ai (the "App"), and all related services (the "Services").
About horoscope.tarot.ai: horoscope.tarot.ai is an astrology, palm reading and tarot entertainment application that allows users to create their birth chart, check relationship compatibility and explore palm, face and tarot readings for self-reflection. The application provides features including but not limited to Birth Chart and Personalized Birth Chart, Compatibility, Synastry and Composite charts, Moon Phase, Current Planets, Monthly Return and Solar Return, Tarot Reader, Today's Message, Destiny Book, Love Advice, Tarot Library, Palm Reading and Face Reading. The following Privacy Policy sets out how your data is handled in connection with this service.
This Policy is a legally binding agreement. By downloading, installing, or using our Services, you acknowledge that you have read, understood, and agree to the data practices described herein. If you do not agree with this Policy, you must not use the Services. For the purposes of applicable data protection laws, such as the EU General Data Protection Regulation (GDPR), we are the Data Controller of your Personal Data.
1. OUR PRIVACY COMMITMENT
Our approach to privacy is founded on the following core principles:
2.1. Transparency: We are committed to being open and clear about how we handle your data.
2.2. Purpose Limitation: We will only collect and process your data for the specified, explicit, and legitimate purposes articulated in this Policy.
2.3. Data Minimization: We adhere to the principle of collecting only the data that is strictly necessary to provide and improve our services. The App asks for personal information including your name, gender, date, time and place of birth, the details of a partner you choose to add, or camera access.
2.4. Security by Design: We integrate robust security measures to protect the confidentiality, integrity, and availability of your Personal Data.
2.5. Local-First Processing: We process information only as necessary to provide the features you choose to use. Astrology charts, Moon Phase, tarot readings and other content are generated on your device. Palm images, face images and compatibility details are transmitted to our service providers only when you use the features that need them. Further details are provided in the sections below.
1. DATA WE COLLECT AND PROCESS
3.1. Profile and Birth Data (Stored On-Device): When you set up the App, you provide your name, gender, date of birth, time of birth and birth place. This profile is stored on your device and reused by the App's features. You can edit it at any time in Setting > Edit Profile. When you search for your birth place, the text you type is sent to Open-Meteo's geocoding service to return matching locations and their coordinates.
3.2. Palm Images and Hand Analysis Data: When you use the Palm Reading feature, you may take a photo of your palm using your device camera or select an image from your device gallery through the Android Photo Picker. The selected palm image is sent to our AI service provider's server, which detects your palm lines and returns the palm reading displayed in the App. The image is processed only to generate your reading. It is not stored after processing and is not shared with any third party. Camera access is requested only when you choose to use a feature that requires it.
3.3. Face Images and Face Reading Data: When you use the Face Reading feature, you may take a photo of your face or select an image from your gallery, and provide your name, gender and date of birth. The face image is sent to our AI service provider's server to generate your face shape, personality, career and wealth, and fortune and health results. The image is processed only to generate your reading. It is not stored after processing and is not shared with any third party.
3.4. Tarot Reading Data: When you use the Tarot feature, the App processes the question category you select or the question you type, and the cards you draw, in order to display the relevant interpretation. Tarot readings, Today's Message, Destiny Book and Love Advice content are generated on your device.
3.5. Astrology and Birth Chart Data: When you use astrology-related features, the App may process information such as your name, date and time of birth, birth place, and generated astrology profile or chart information. This information is used to generate features such as Birth Chart, Synastry, Composite, Current Planets, Monthly Return, Solar Return and Moon Phase. Charts are calculated on your device. If you export a chart as a PDF, the file is created on your device and shared only where you choose to send it.
3.6. Compatibility Data: When you use the Compatibility, Synastry or Composite feature, you provide your partner's name, gender, date, time and place of birth. The charts and compatibility score are calculated on your device. To generate the written Overall Compatibility summary, the compatibility details needed for that summary are sent to our AI service provider.
3.7. Technical & Usage Data (Collected Automatically for Service Operation and Advertising): To ensure our App functions correctly, to resolve technical issues, and to support our advertising-based model, we automatically collect certain technical data.
3.8. Device and Network Information: Your IP address, device manufacturer and model, operating system version, screen dimensions, time zone, network state (e.g., Wi-Fi), and system language.
3.9. Application and Advertising Identifiers: Your device's advertising identifier (e.g., Google Advertising ID on Android), the App's version, unique device identifiers, and install attribution data provided by the application marketplace from which you installed the App, such as the install referrer string, which we and our attribution partners use to determine which campaign led to your installation.
3.10. Usage and Interaction Data: Information about your interactions with the Services, such as app launches, features used, readings completed, time spent on screens, and clicks. This also includes information about your interaction with advertisements shown to you.
3.11. Crash and Diagnostic Data: If the App crashes or encounters an error, crash logs and related diagnostic information (such as stack traces and device state at the time of the crash) are collected to help us fix the issue.
3.12. Communications Data (Voluntarily Provided): When you voluntarily contact us for customer support by email, we collect your email address and the content of your communications. When you submit a rating comment or feedback inside the App, the text you write is sent to our feedback form hosted on Google Apps Script. This data is used exclusively to respond to your inquiries and improve the App.
3.13. Push Notification Data: If you allow notifications, Firebase Cloud Messaging assigns your installation a registration token so that we can deliver notifications to your device, including the daily Today's Message reminder at 08:00. This token is not linked to your name or email address, and you can stop its use at any time by turning off notifications for the App in your device settings.
1. PURPOSES AND LEGAL BASES FOR DATA PROCESSING
We only process your Personal Data when we have a valid legal basis for doing so under applicable data protection laws like the GDPR.
4.1. To Provide Core App Features: Performance of a Contract: We process the information you provide or generate through the App as necessary to provide the features you request, including birth charts, compatibility, Synastry and Composite charts, Moon Phase, Current Planets, Monthly and Solar Return, tarot readings, palm readings and face readings.
4.2. To Personalize Your Experience: Performance of a Contract. Where you provide information such as your name, date of birth, birth time, birth place, gender, or other information requested by a feature, we process that information as necessary to generate and personalize the readings, insights, and other content you request.
4.3. To Maintain and Improve the Services: Legitimate Interests. We may process usage, performance, crash, and diagnostic data where necessary for our legitimate interests in maintaining the reliability and security of the App, resolving technical issues, fixing bugs, measuring performance, and improving existing or developing new features.
4.4. To Provide and Measure Advertising: Consent and/or Legitimate Interests. Where required by applicable law, we rely on your consent to access or use information for personalized advertising and related measurement purposes. Where permitted by applicable law, we may process limited information for non-personalized or contextual advertising and related service operations based on our legitimate interests in supporting and funding the Services.
4.5. To Measure Marketing Campaigns and Attribution: Consent and/or Legitimate Interests. We may process installation, advertising, and attribution information to understand how users discover the App, measure the effectiveness of advertising campaigns, prevent attribution fraud, and optimize our marketing activities. Where required by applicable law, such processing is based on your consent.
4.6. To Send Notifications: Consent and/or as Permitted by Applicable Law. If you enable notifications, we may use notification-related information to deliver reminders, updates, or other notifications through the App. You can disable notifications at any time through your device settings.
4.7. To Ensure Security and Prevent Fraud: Legitimate Interests. We have a legitimate interest in processing information where necessary to detect, investigate, and prevent fraudulent, abusive, unauthorized, or malicious activity and to protect the security and integrity of the App and our Services.
4.8. To Comply with Legal Obligations: Legal Obligation. We may process your Personal Data where necessary to comply with applicable laws, regulations, legal processes, or lawful requests from courts, regulators, law enforcement agencies, or other competent authorities.
1. THIRD PARTY SERVICES AND PARTNERS SDKS
We integrate third-party Software Development Kits (SDKs) to provide and maintain the full functionality of our Services, including analytics, advertising, attribution, place search and AI processing. These partners may collect data directly from your device and typically act as independent "Data Controllers." We strongly encourage you to review their privacy policies to understand their data practices. Our primary partners include:
- Google (AI service including but not limited to Gemini models, AdMob, User Messaging Platform, Firebase Analytics, Crashlytics, Cloud Messaging, Remote Config, ML Kit and Apps Script): https://policies.google.com/privacy
- Meta (Facebook SDK, Facebook Audience Network & Analytics): https://www.facebook.com/about/privacy/
- AppsFlyer: https://www.appsflyer.com/legal/privacy-policy/
- Open-Meteo (birth place search): https://open-meteo.com/en/terms
We may add or replace advertising mediation partners over time; the current list is maintained in this Policy and updated when it changes.
1. APPLICATION PERMISSIONS AND THEIR PURPOSES
Our App requests only the minimum permissions necessary to provide its features. You are in complete control of these permissions and can manage them at any time through your device's settings menu. This section explains exactly which permissions the App may request and why we need them.
- android.permission.INTERNET: To connect to the internet to analyze palm and face images, generate the compatibility summary, search for your birth place, send feedback, display advertisements, and communicate with supporting services.
- android.permission.POST_NOTIFICATIONS: To send optional notifications, such as the daily Today's Message reminder and relevant app updates. Users can disable notifications at any time.
- android.permission.CAMERA: To take a photo of your palm for Palm Reading or of your face for Face Reading. The permission is requested only when you open the camera screen. Choosing an existing photo uses the Android Photo Picker and does not require access to your photo library.
- android.permission.ACCESS_NETWORK_STATE: To check network connectivity before accessing online features and services.
- android.permission.RECEIVE_BOOT_COMPLETED: Used to restore scheduled notifications or reminders after the device restarts, so previously scheduled reminders can continue to work.
- android.permission.WAKE_LOCK: Allows the app and its supporting services to temporarily keep the device awake while certain background operations are being completed. It does not keep your screen on.
- android.permission.FOREGROUND_SERVICE: Declared by a background task library used by the App. The App does not run its own foreground service.
- android.permission.ACCESS_ADSERVICES_AD_ID: For Advertising, to access the advertising-specific ID on supported Android versions.
- android.permission.ACCESS_ADSERVICES_ATTRIBUTION: For Advertising, to help measure the effectiveness of advertising campaigns.
- android.permission.ACCESS_ADSERVICES_TOPICS: For Advertising, allows interest-based advertising while preserving privacy.
- android.permission.ACCESS_ADSERVICES_CUSTOM_AUDIENCE: Allows supported advertising services to use Android Privacy Sandbox custom audience functionality where available.
- com.google.android.gms.permission.AD_ID: Used to access your device's unique, user-resettable advertising identifier. This helps our partners show you ads that are more relevant to you.
- com.google.android.c2dm.permission.RECEIVE: Default permission in Android applications used for push notifications.
- com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE: Default app permission used to securely attribute app installs for analytics.
- com.samsung.android.mapsagent.permission.READ_APP_INFO: Allows the app to identify which marketing campaign led to the install on Samsung devices, for advertising measurement and attribution purposes only. No personal information is collected.
- com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA: Allows our install-attribution partner (AppsFlyer, via Huawei's install referrer service) to identify which marketing campaign led to the app installation on Huawei devices, for advertising measurement and attribution purposes only. No personal user data is collected through this permission.
- horoscope.tarot.ai.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION: Default app permission to ensure secure communication between the app's components.
1. INTERNATIONAL DATA TRANSFERS
We operate globally, and your Personal Data may be transferred to, stored in, and processed in jurisdictions outside your country of residence, where our third-party partners operate. We ensure that all such transfers comply with applicable data protection laws by using legally-recognized transfer mechanisms like Standard Contractual Clauses (SCCs) or other safeguards required by the law of your country of residence.
1. YOUR PRIVACY RIGHTS AND CHOICES
You have rights concerning your Personal Data, subject to limitations provided by law.
8.1. Opt-Out of Personalized Advertising: You can limit ad tracking by resetting or deleting your device's advertising identifier through your device settings (e.g., On Android: Settings > Privacy > Ads). Where our consent management platform is shown to you, you can also change your advertising consent choices from within the App. This will limit, but not eliminate, the ads you see.
8.2. Notifications: You can turn off notifications at any time in your device settings.
8.3. Formal Rights Requests: Depending on your jurisdiction, you may have the right to Access, Rectify, or Erase the Personal Data we hold about you, or to withdraw consent you have given. Because your profile and birth data are stored only on your device, you can edit them in Setting > Edit Profile or delete them by clearing the App's data or uninstalling the App. Palm and face images are not stored after processing, so we hold no copies of them. Erasure requests to us will primarily apply to feedback you sent from the App, Technical Data and Communications Data associated with you. To exercise any of your rights, please submit a formal request to the email address provided in Section 14.
1. DATA RETENTION
9.1. Technical and Usage Data is collected and stored by our analytics and advertising partners acting on our behalf or as independent controllers. Where we control the retention period, that data is retained for up to 24 months from the date of collection, or until it is no longer necessary for the purposes described in Section 4, whichever is earlier. Retention by independent controllers is governed by their own privacy policies, linked in Section 5.
9.2. Palm and face images sent to our AI service provider's server are used only to generate your reading and are not stored after the result is returned.
9.3. We retain Communications Data (the content of your support inquiries and correspondence with us, and feedback sent from the App) for up to 24 months following the resolution of your inquiry, to allow us to handle any follow-up questions or complaints.
9.4. Advertising identifiers are controlled directly through your device's operating system settings; we do not separately retain them beyond your active use of the Services.
9.5. Notwithstanding the periods above, we may retain data for a longer period where required to comply with a legal obligation, to resolve disputes, or to enforce our agreements, and we will securely delete or anonymize data once it is no longer needed for these purposes.
1. JURISDICTION-SPECIFIC PROVISIONS
We apply the data protection law of the country or state in which you reside.
10.1. For Residents of the European Economic Area (EEA), UK, and Switzerland (under GDPR): You have the rights detailed in Section 8, as well as the right to data portability, the right to object to processing based on legitimate interest, and the right to lodge a complaint with a supervisory authority. The legal bases we rely on are detailed in Section 4.
10.2. For Residents of California and Other U.S. States with Consumer Privacy Laws (including CCPA/CPRA): You have the right to know what personal information is collected, to delete it, to correct it, and to opt-out of the "sharing" of your personal information for cross-context behavioral advertising. Our use of third-party advertising SDKs may be considered "sharing" or "targeted advertising." You can exercise your right to opt-out at any time by contacting us at the address in Section 14. You may additionally reset or delete your device advertising identifier as described in Section 8.1. We do not "sell" your data for monetary consideration.
10.3. For Residents of India (under the Digital Personal Data Protection Act, 2023): You have the right to access information about your personal data, to request correction and erasure, to withdraw consent, to nominate another person to exercise your rights, and to have your grievances addressed. You may contact us using the details in Section 14 for any such request or grievance.
10.4. For Users in Other Jurisdictions: Depending on the data protection laws that apply to you (including, among others, the personal data protection laws of Saudi Arabia, the United Arab Emirates, Qatar, Bahrain, Brazil's LGPD, Canada's PIPEDA, South Korea's PIPA, Australia's Privacy Act, and other applicable national or regional data protection laws), you may have similar rights to access, correct, delete, restrict, or object to the processing of your Personal Data, and to lodge a complaint with your local data protection authority. To exercise any of these rights, please contact us using the details in Section 14, and we will respond in accordance with the law that applies to you.
1. STRICT COMPLIANCE WITH COPPA & CHILDREN'S PRIVACY
11.1. Not Directed at Children: The horoscope.tarot.ai App and all related Services are strictly intended for a general audience and are not directed to children under the age of 13 (or 16 in certain jurisdictions such as the EEA/UK, or such other minimum age as required by the law of your country of residence).
11.2. No Collection from Minors: We rigorously comply with the Children's Online Privacy Protection Act (COPPA) and equivalent global regulations. We do not knowingly solicit, collect, or maintain personally identifiable information from anyone under the age of 13.
11.3. Enforcement and Deletion: If we become aware that a child has provided us with Personal Data, we will take steps to delete such information immediately. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us immediately.
1. DATA SECURITY
We apply technical and organisational measures appropriate to the risk, including encryption of data in transit, restricted access to systems, and periodic review of our third-party processors. No method of transmission or storage is completely secure. If a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority and, where required, affected users, in accordance with applicable law.
1. CHANGES TO THIS POLICY
We may update this Policy from time to time. If we make material changes, we will provide notice through the App or by other means to allow you to review the changes before they become effective. Your continued use of the Services after a revision becomes effective constitutes your acceptance of the updated terms.
1. CONTACT INFORMATION
For any questions, concerns, or requests relating to this Privacy Policy, please contact us:
- Developer: Kienmaly Mobi
- Support Email: mobi.store99@outlook.com