1. Who We Are
The Lumara Tarot Android service is operated by 上海咕唧呀设计策划有限公司 (Shanghai Guqiya Design And Planning Co., Ltd; "Lumara Tarot," "we," "us," or "our"). The public brand name is Lumara Tarot. For privacy questions or data-rights requests, contact support@lumaratarot.com.
2. Information We Collect
App identifiers and device information
We use a pseudonymous, device-based account model. The app generates a random identifier that does not contain your name or email address. We process it with app version, platform, locale, timezone, subscription plan, and authentication tokens needed to operate the service.
To prevent abuse of the free credit allowance, the Android app also reads the app-scoped Android ID that the system provides. Lumara stores only a keyed hash of it, never the Android ID itself, and does not use it for advertising or link it to an advertising ID.
Cloudflare may transiently process IP address, request timing, and security signals to route and protect requests. To limit how many new free identities one network can create, the backend keeps a keyed hash of the IP address for up to one day; it never stores the raw IP address. Lumara does not add the client IP address to the application-level payload its backend creates for the AI provider.
Reading inputs, cards, and results
The launch app does not provide a free-text AI prompt. We process the selected category, card identifiers and orientations, spread positions, response language, and the prewritten question supplied by the app. One-way question/card hashes and reading metadata may be stored for caching, credits, abuse prevention, and reliability.
AI-generated results may be cached on the backend for approximately 24 hours for reconnection or replay. Reading history may also be stored locally on your device.
AI content reports
If you report an AI-generated reading, we process the reason, an optional comment, a limited excerpt, language, and report status. The report is linked to your pseudonymous Lumara account for review, abuse prevention, and in-app status updates.
Subscriptions and purchases
Google Play and RevenueCat process Android purchases. We receive product identifiers, subscription and entitlement status, expiration dates, credit balance and refresh state, and transaction metadata needed to provide paid features. We do not receive your full payment card number.
Diagnostics and support
We may process errors, crash or performance diagnostics when enabled for a release, and support messages to operate, secure, and improve the service. The planned public launch configuration does not send product-interaction analytics to PostHog and does not use this information to track you across other companies' apps or websites.
3. How We Use Information
- Provide readings, account state, subscriptions, and credit balances.
- Generate and stream AI-assisted reading text.
- Operate authentication, caching, rate limits, security, and reliability controls.
- Review AI content reports, prevent abuse, and show report status.
- Provide support and comply with legal and Google Play requirements.
4. AI Processing
The app sends reading requests to Lumara's Cloudflare backend. The backend sends the app-supplied question/category, card identifiers and orientations, spread positions, response language, and necessary prompt context to OpenAI's API, or to Google's Gemini API when OpenAI is unavailable. OpenAI and Google process this data as our service providers under their API terms and data-usage policies.
The application-level AI payload does not include the Lumara account or device identifier, purchase identifier, reading-history identifier, authentication token, or client IP address. Network infrastructure may still process routing and security metadata. The app does not store AI-provider API keys on the device.
AI output may be inaccurate, incomplete, or unexpected. Treat readings as reflective entertainment, not factual predictions or professional advice.
5. Service Providers
- Cloudflare for backend, cache, database, hosting, and security.
- OpenAI for AI reading generation (primary model).
- Google, through the Gemini API, for AI reading generation when the primary model is unavailable.
- Google Play and RevenueCat for purchases, receipts, and entitlements.
- Sentry, only when enabled for a release, for diagnostics.
6. Retention
- Question/card hashes and reading metadata: up to 30 days.
- Backend cached reading results: approximately 24 hours.
- AI content reports and review status: up to 365 days.
- Hashed Android ID on your pseudonymous account: up to 30 days after you last use the app.
- Free-grant record keyed by the hashed Android ID: up to 7 days after the most recent free grant.
- Hashed IP address for the new-identity limit: up to 1 day.
- Security audit records and completed deletion tombstones: up to 365 days.
- Subscription records: as needed for service, disputes, accounting, and platform rules.
- Local history: until you delete it, clear app data, or uninstall the app.
7. Choices, Rights, and Account Deletion
Depending on where you live, you may have rights to access, delete, correct, export, or object to certain processing. Contact support@lumaratarot.com for assistance.
The app includes account deletion. While deletion is processing, the old pseudonymous account remains locked. When complete, Lumara deletes linked server-side account data, including AI content reports, and rejects still-valid Lumara tokens. A new guest identity is created only after you choose to continue. Security tombstones, Google Play purchase records, or provider-side records may remain when required for the stated purposes or by law/platform rules.
To delete in the app or request deletion without it, see Delete Your Account and Data.
8. Children
Lumara Tarot is not intended for children under 13, and we do not knowingly collect personal information from children under 13.
9. Security and International Processing
We use HTTPS, server-side secret storage, limited logging, rate limiting, and data minimization. No system can guarantee absolute security. Service providers may process information outside your country; OpenAI and Google may process the reading fields described above in the United States and other countries where they operate.
10. Changes and Contact
We may update this policy as the Android app, legal requirements, or providers change. We will update the effective date above when we do. Contact support@lumaratarot.com with questions.
Operator: 上海咕唧呀设计策划有限公司 (Shanghai Guqiya Design And Planning Co., Ltd)
Registered address: 1-2/F, Building 4, No. 1628 Lizheng Road, Lingang New Area, China (Shanghai) Pilot Free Trade Zone, Shanghai 200000, China
Phone: +86 185 0167 2802 · Email:
support@lumaratarot.com