Privacy Policy for Arcana
Last updated: July 30, 2026
Overview
Arcana: Tarot & Palm Reader ("we", "our", or "the app") is a tarot and palmistry app built around a simple privacy principle: your readings belong on your device, not on our servers. This policy explains exactly what leaves your iPhone, why, and what happens to it.
No Account, No Sign-Up
Arcana does not require — or offer — an account. We never ask for your email, phone number, or any login. The app generates a random installation identifier on first launch, which is used only for abuse prevention (rate limiting) and purchase management. It is not linked to your identity.
What Stays on Your Device
- Your reading journal — every reading, note, and mood entry is stored locally on your iPhone. We have no copy.
- Your palm photos — saved only on your device, never on our servers, and deliberately excluded from the app's sharing features.
- Your streaks and preferences — stored locally.
Deleting the app deletes all of this data permanently.
What Is Sent to Generate a Reading
Personalized readings are written by an AI language model (Anthropic's Claude). To generate one, the app sends the minimum needed through our own server (a Firebase Cloud Function hosted in the EU, region europe-west1):
- Tarot readings: the cards you drew, the spread, your question (if you typed one), and optionally the first name and themes you chose during setup
- Palm readings: a photo of your palm, and optionally your first name and chosen themes
This data is used only to generate your reading and is not stored on our servers. Palm photos are processed in memory and discarded — they are never written to server storage. Per Anthropic's commercial terms, API data is not used to train their models.
Our server keeps a daily request counter per installation identifier (for rate limiting). That counter contains no reading content.
Analytics and Crash Reporting
Firebase Analytics
We use Firebase Analytics to understand which features are used — draws completed, screens visited, purchases started. This data is aggregated and does not include reading content, questions, notes, or palm photos. Arcana does not use the advertising identifier (IDFA) and does not show ads. You can turn analytics off entirely in the app's settings.
Firebase Crashlytics
If the app crashes, a report with the device model, OS version, app version, and stack trace may be sent so we can fix it. Crash reports never contain reading content.
Purchases
All payments are processed by Apple through the App Store. We never see your payment details. We use RevenueCat to manage subscription status; RevenueCat receives your installation identifier and purchase receipts — no personal information. See RevenueCat's privacy policy.
Third-Party Services
- Firebase — backend hosting (EU region), analytics, crash reporting, app integrity (App Check)
- Anthropic — AI reading generation
- RevenueCat — subscription management
Camera Access
The camera is used only when you choose to scan your palm. The permission prompt appears the first time you start a palm reading, and the app works fully without it (you can pick a photo from your library instead, or skip palmistry entirely).
Children's Privacy
Arcana is rated 17+ and is not intended for children. We do not knowingly collect personal information from children.
Your Rights
- Delete the app at any time — your journal, palm photos, and preferences are removed with it
- Disable analytics in the app's settings
- Manage or cancel subscriptions in your device Settings → Apple Account → Subscriptions
- EU/EEA users: because reading generation is transient and tied only to a random installation identifier, there is no server-side profile to access or export; contact us with any GDPR request and we will honor it
Changes to This Policy
We may update this Privacy Policy from time to time. Changes are reflected in the "Last updated" date at the top of this page.
Contact
Questions about this policy? Contact us through the support page or via the App Store listing.