AI Tarot Chat Privacy Policy
DAMOA Studio ("we") processes the personal information of AI Tarot Chat (the "App") users only as needed, in accordance with the Personal Information Protection Act of Korea and other applicable laws.
Effective date: November 11, 2026 (previous version: November 6, 2026)
The Korean version of this policy is the original. If the two versions differ, the Korean version prevails.
1. Information we process and why
You can use the App without signing up. We do not ask for your name or phone number. We process only the following.
| Information | When | Purpose |
|---|---|---|
| User identifiers created automatically by the App (Firebase anonymous user ID, server user ID) | First launch | Telling users apart, daily limits, confirming ad views, preventing abuse |
| Your question, the cards you picked, the reading, follow-up questions and answers | When you do a reading | Creating the AI reading and follow-up answers |
| Google account identifier and email address | Only when you sign in with Google for the membership | Linking the membership to your account and restoring it on a new device |
| Google Play purchase information (purchase token, product, subscription status) | When you buy the membership | Verifying payment, providing, renewing and cancelling the membership (we never receive card numbers or other payment details) |
| Advertising ID, ad view and reward records | When you watch an ad as a free user | Showing ads and confirming rewarded ad views |
| Version and time of your consent to the terms and this policy | When you start | Record of consent |
| Access logs (IP address, request time, error logs), device and app version | Automatically when the server is used | Stable operation, troubleshooting, security |
Please do not include personal details such as names or contact information, or sensitive information such as health, in your questions. What you write is processed as-is for the periods below.
2. Retention and deletion
| Information | Retention |
|---|---|
| Questions, cards, readings, follow-ups (server copy) | 7 days after the reading, then deleted automatically. If you delete a record in the App earlier, the server copy is deleted too. |
| Reading history (your device) | Until you delete it or uninstall the App. It is not sent to our server. |
| User identifiers, Google account link, consent records | Until you use "Delete my data" |
| AI usage statistics (token counts and cost, no question text) | While the service runs (statistics that cannot identify you) |
| Payment and withdrawal records | 5 years (Korean Act on Consumer Protection in Electronic Commerce) |
| Consumer complaint and dispute records | 3 years (same Act) |
| Access logs | 3 months (Korean Protection of Communications Secrets Act) |
When the retention period ends or the purpose is met, we delete the information without delay in a way that cannot be restored.
3. Processors and international transfers
We use the following companies to provide the service. Personal information is transferred over the network to, and stored in, other countries when you use the App. If you do not want this, stop using the App and use "Delete my data" (내 데이터 삭제); in that case you cannot use the service.
| Recipient (country) | Task | Information | Retention |
|---|---|---|---|
| OpenAI, L.L.C. (USA) | Generating AI readings and follow-up answers | Question, cards, previous reading and conversation (no user identifiers) | Kept up to 30 days for abuse monitoring under OpenAI's policy, then deleted; not used for training |
| Google LLC (USA and others) | Sign-in (Firebase Authentication), server hosting (Google Cloud, Seoul region), ads (AdMob), payments (Google Play) | User identifiers, Google account information, advertising ID, purchase information, access logs | Until the contract ends or the retention periods in this policy |
| Neon Inc. (US company, data stored in Singapore) | Server database | User identifiers, server copies of questions and readings (7 days), consent, ad and payment records | The retention periods in this policy |
4. Sharing with third parties
We do not share your personal information with third parties, except when required by law through proper procedures (for example, a request from investigative authorities).
5. Your rights
- You may ask to access, correct, delete or stop the processing of your personal information at any time.
- App Settings (설정) → Delete my data (내 데이터 삭제): immediately deletes your user information and reading copies on the server, and the reading history on your device.
- Settings → Delete all records (기록 전체 삭제), or delete a single record in History (기록): deletes the device record and the server copy (within 7 days).
- You can unlink your Google account in Settings → Account → Sign out.
- If you cannot use the App (for example, you uninstalled it or lost your device), contact us below and we will handle it without delay. See How to delete your account and data.
6. Advertising ID and ad consent
Free users see Google AdMob rewarded ads, which use the advertising ID. You can reset or delete it in your device's Settings → Google → Ads (or Privacy → Ads).
Users in the European Economic Area, the UK and Switzerland are first asked for consent to personalized ads and related purposes through Google's consent management tool (UMP), and users in certain US states are asked whether to opt out of the sale or sharing of personal information. You can use the App without consenting (you may see non-personalized ads), and you can change your choice at any time in the App's ad privacy settings (shown only in those regions).
7. Children
The App is intended for users aged 14 and over. We do not knowingly process personal information of children under 14, and we delete it without delay if we find out.
8. Security
- All communication is encrypted (HTTPS), server access is kept to a minimum, and secret keys are stored separately (Secret Manager).
- Question text stays on the server for only 7 days, and AI usage statistics do not contain question text.
- Sign-in tokens are verified, and ad rewards are confirmed with Google's signature.
9. Privacy officer
Name: Kim Kyehyun (김계현), Representative
Email: damoa7804@gmail.com
10. Remedies (Korea)
- Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
- Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
11. Changes to this policy
We will announce changes in the App and on this page 7 days before they take effect (30 days for changes unfavorable to you).