TarotAstroPrivacy policy
Last updated: 12 October 2026. Version française
This policy explains which data the TarotAstro app (iOS) and this website process, why, who receives it, and what rights you have under the General Data Protection Regulation (GDPR).
1. Data controller
The controller is the publisher of TarotAstro, brand by-cyberdev: [À COMPLÉTER : legal name of the publisher], [À COMPLÉTER : postal address].
General contact and data-protection requests: contact@tarotastro.by-cyberdev.com.
2. Summary
- Your profile (first name, last name, mother's name, date of birth) is stored on your device only.
- We keep no user account on our servers.
- To generate an artificial intelligence (AI) reading, the app sends a minimum of data (first name, date of birth, sign, drawn cards) to our servers, only after you agree. Without your agreement, the app works with its built-in texts.
- Ads (iOS) appear only after your choice in the consent form. Subscriptions are handled by Apple.
- This website uses no cookies, no analytics and no external resources: no cookie banner is needed.
3. Data, purposes and legal bases
| Data | Where and how | Purpose | Legal basis |
|---|---|---|---|
| Profile: first name, last name, mother's name, date of birth (zodiac sign and numerological Abjad value are derived on the device) | Entered in the app and stored on the device (app settings). The last name and mother's name are never sent to our servers. | Personalise readings, compute the sign and Abjad value | Performance of a contract (running the app) |
| Sign-in data: Apple or Google identifier, display name, possible e-mail, Google profile photo and Google ID token; or a random "guest" identifier | Received from Apple ("Sign in with Apple") or Google ("Sign in with Google") and stored on the device. Used only to open the local session; not sent to our servers. | Open and restore your session, show your name | Performance of a contract; consent given to Apple or Google at sign-in |
| Reading data sent to the AI: first name, date of birth (YYYY-MM-DD), zodiac sign, Abjad value, drawn cards (identifier, name, orientation), spread type, card deck, language, request text | Sent by the app to the hubis server (hubis.by-cyberdev.com), which forwards the request to OpenRouter and then to a language model (DeepSeek). The reply returns to the app. | Generate the reading, the spread analysis and planetary messages | Consent, requested in the app before the first transmission; withdrawable at any time in the app |
| Cached readings | AI replies are kept on the device (app settings) to avoid requesting them again; they expire after 24 hours. | Speed, data saving | Legitimate interest |
| Reading text for the "natural voice" | Sent to the voice server (voiceclone.by-cyberdev.com) with the language and the chosen voice; the received audio is kept in the device cache. The device voice sends nothing. | Read the reading aloud | Performance of a contract (feature you request) |
| Purchases and subscriptions | Handled by Apple (StoreKit). We receive neither your card nor your Apple identity; the app reads your entitlements on the device. | Unlock Premium or "Ad-free", restore purchases | Performance of a contract |
| Local counters: daily readings left, rewarded videos, ad caps, language, chosen voice, weekly natural-voice trial | Stored on the device only | Run quotas and preferences | Performance of a contract |
| Advertising (iOS, except "Ad-free" subscribers): advertising identifier (IDFA) if you allow tracking, IP address, technical device information, ad interactions; consent choices | Collected by the Mintegral advertising SDK. Your choice is gathered through the Google UMP form (IAB TCF standard), then Apple's tracking prompt (ATT). | Show ads and fund the app | Consent (changeable in the ad privacy menu or in iOS settings) |
| Server technical logs (IP address, date, request) | Produced by our servers and their providers on each call | Security, abuse prevention, operation | Legitimate interest |
| Messages you e-mail us | Received at contact@tarotastro.by-cyberdev.com, service@tarotastro.by-cyberdev.com, info@tarotastro.by-cyberdev.com | Answer your request | Legitimate interest; performance of a contract |
We do not sell your data. We make no automated decision with legal effects on you: readings are entertainment content.
4. Artificial intelligence: your agreement
Before the first data transmission to the AI, the app asks whether you agree that your first name, date of birth, sign and drawn cards be sent to our servers and their providers to generate readings. If you decline, nothing is sent and the app shows its built-in texts (card meanings and astrology texts shipped with the app). You can change your mind at any time in the app; withdrawing consent does not affect processing already carried out. Your first name is sent only after this agreement.
Readings are generated by AI: they may contain errors and are provided for entertainment.
5. Recipients
- hubis server (hubis.by-cyberdev.com, operated by the publisher): receives and relays reading requests.
- OpenRouter (language-model gateway) and DeepSeek (language model): process the request text to produce the reply.
- Voice server (voiceclone.by-cyberdev.com, operated by the publisher): speech synthesis.
- Mintegral (advertising) and Google (UMP consent form): on iOS, for ads and consent collection.
- Apple (App Store, purchases, "Sign in with Apple") and Google ("Sign in with Google"): depending on the features you use.
- Hosting provider of this website and servers: [À COMPLÉTER : hosting provider name].
Each of these third parties processes data under its own privacy policy; Apple, Google and Mintegral are controllers for their own purposes.
6. Transfers outside the European Union
Some recipients are located or may process data outside the EU, notably in the United States (OpenRouter, Google, Apple) and, depending on the inference provider used, in other countries (DeepSeek, Mintegral). Country hosting our own servers: [À COMPLÉTER : country]. These transfers rely, as applicable, on a European Commission adequacy decision, standard contractual clauses or your consent, under GDPR conditions.
7. Retention
- On your device: until you sign out, delete your account in the app or uninstall the app (see account deletion). Cached readings expire after 24 hours.
- Server side (hubis, voice, logs): [À COMPLÉTER : retention period].
- Advertising: per Mintegral's and Google's retention periods.
- E-mails: as long as needed to handle your request, then [À COMPLÉTER : archiving period].
8. Your rights
You have the rights of access, rectification, erasure, restriction, objection, portability, and the right to withdraw consent at any time, as well as to set directives on your data after death. To exercise them: contact@tarotastro.by-cyberdev.com. We reply within one month. Since we keep no account on our servers, we may ask for details to find logs about you, and most of your data can be managed directly in the app (profile, sign-out, account deletion, ad consent form).
You may lodge a complaint with the CNIL (French data protection authority), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr, or with the authority of your country of residence.
9. Cookies and trackers on this website
This website uses no cookies, no trackers, no audience measurement, and no external fonts or scripts. No consent banner is therefore needed. Our host may record technical connection logs (IP address, date, requested page) for security.
10. Children
TarotAstro is not aimed at children under 15 (or the digital age of consent in your country). We do not knowingly collect children's data; if you believe a child has sent us data, write to contact@tarotastro.by-cyberdev.com and it will be deleted.
11. Security
Exchanges with our servers are encrypted (HTTPS). The app contains no AI service key: they are held server side. Profile data is kept in the app's storage on your device.
12. Changes
We may update this policy, for example when the app evolves. The last-update date is shown at the top; in case of a significant change, you will be informed in the app.