tarotme

Privacy Policy

```html

Privacy Policy

Effective Date: September 7, 2026

Last Updated: September 7, 2026

tarotme ("we," "our," "us," or the "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application tarotme (the "App"), available on iOS and Android platforms. Please read this Privacy Policy carefully. By accessing or using the App, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the App.

1. Information We Collect

We collect information that you provide directly to us and information that is automatically collected when you use our App.

1.1 Personal Information You Provide

When you register for, access, or use our App, we may collect the following personal information:

  • Name: We collect your name when you create an account or interact with features within the App that require user identification.

You may choose not to provide certain information, but this may limit your ability to access certain features of the App.

1.2 Automatically Collected Information

When you access and use the App, we and our third-party service providers may automatically collect certain information about your device and usage of the App, including:

  • Device Information: Information about your mobile device, including device type, operating system and version, unique device identifiers, mobile network information, and device settings.
  • Usage Data: Information about how you use the App, including access times, pages viewed, app features used, crashes and other system activity, and the third-party sites or services you were using before interacting with our App.
  • Location Information: We may collect general location information (such as IP address or general geographic area) derived from your device's connectivity and settings. We do not collect precise geolocation data unless you explicitly grant us permission to do so.
  • Analytics Data: Information collected through analytics services to help us understand app performance and user behavior patterns.

1.3 Information Collected Through Cookies and Similar Technologies

We and our third-party service providers may use cookies, web beacons, and other tracking technologies to collect information about your use of the App. This may include:

  • Session identifiers
  • Application performance metrics
  • User preferences and settings
  • Interaction data with app features

1.4 Information from Third-Party Services

We use Firebase, a platform provided by Google LLC, to support various functionalities in our App. Firebase may collect and process information on our behalf, including device information, usage statistics, crash reports, and analytics data. The information collected by Firebase is subject to Google's Privacy Policy, available at https://policies.google.com/privacy.

2. How We Use Your Information

We use the information we collect for various purposes, including:

2.1 To Provide and Maintain the App

  • To create and manage your account
  • To personalize your experience within the App
  • To provide you with the features and functionality of the App
  • To process and complete transactions
  • To authenticate users and prevent fraudulent activities

2.2 To Improve and Optimize the App

  • To understand how users interact with the App
  • To diagnose technical problems and improve app performance
  • To develop new features, products, and services
  • To conduct data analysis, testing, and research
  • To monitor usage patterns and trends

2.3 To Communicate With You

  • To send you technical notices, updates, security alerts, and support messages
  • To respond to your comments, questions, and requests
  • To provide customer service and support
  • To send you information about new features or services (where you have consented to receive such communications)

2.4 For Safety and Security

  • To protect the security and integrity of the App
  • To detect, prevent, and address technical issues, fraud, or illegal activities
  • To enforce our terms and policies
  • To protect the rights, property, and safety of tarotme, our users, and the public

2.5 For Legal and Compliance Purposes

  • To comply with applicable laws, regulations, and legal processes
  • To respond to lawful requests from public authorities
  • To establish, exercise, or defend legal claims

2.6 With Your Consent

  • For any other purpose with your explicit consent

3. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

3.1 With Service Providers

We share information with third-party service providers who perform services on our behalf, including:

  • Firebase (Google LLC): We use Firebase for analytics, crash reporting, authentication, cloud storage, and other backend services. Firebase may collect and process information according to its own privacy practices. You can learn more about how Google uses data at https://policies.google.com/technologies/partner-sites.
  • Hosting and infrastructure providers
  • Data analytics providers
  • Customer support service providers

These service providers are contractually obligated to use your information only as necessary to provide services to us and are required to protect your information consistent with this Privacy Policy.

3.2 For Legal Reasons

We may disclose your information if required to do so by law or in response to valid requests by public authorities, including to meet national security or law enforcement requirements. We may also disclose information when we believe in good faith that disclosure is necessary to:

  • Comply with a legal obligation or legal process
  • Protect and defend our rights or property
  • Prevent or investigate possible wrongdoing in connection with the App
  • Protect the personal safety of users of the App or the public
  • Protect against legal liability

3.3 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another provider, your information may be transferred as part of such a transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

3.4 With Your Consent

We may share your information with third parties when we have your explicit consent to do so.

3.5 Aggregated or De-Identified Information

We may share aggregated or de-identified information that cannot reasonably be used to identify you. This information may be shared with third parties for research, marketing, analytics, or other purposes.

4. International Data Transfers

tarotme operates globally, and your information may be transferred to, stored, and processed in countries other than your country of residence. These countries may have data protection laws that differ from the laws of your country.

When we transfer your personal information internationally, we take appropriate safeguards to ensure that your information remains protected in accordance with this Privacy Policy and applicable data protection laws. These safeguards may include:

  • Implementing standard contractual clauses approved by relevant authorities
  • Ensuring that service providers are certified under relevant privacy frameworks
  • Obtaining your explicit consent for the transfer where required
  • Relying on adequacy decisions by competent authorities

By using the App, you acknowledge and consent to the transfer of your information to countries outside of your country of residence, which may have different data protection rules than your country.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria we use to determine retention periods include:

  • The duration of your relationship with us and your use of the App
  • Whether you have deleted your account
  • Whether we have a legal obligation to retain the information
  • Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation, or regulatory investigations)

When we no longer need your personal information, we will securely delete or anonymize it. If deletion is not possible (for example, because information has been stored in backup archives), we will securely store your information and isolate it from further processing until deletion is possible.

Even after you delete your account or request deletion of your information, we may retain certain information as necessary to comply with our legal obligations, resolve disputes, maintain security, prevent fraud and abuse, and enforce our agreements.

6. Your Privacy Rights

Depending on your location and applicable laws, you may have certain rights regarding your personal information. These rights may include:

6.1 Access and Portability

  • Right to Access: You have the right to request confirmation of whether we process your personal information and to access such information.
  • Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that information to another controller.

6.2 Correction and Deletion

  • Right to Rectification: You have the right to request correction of inaccurate personal information and to have incomplete information completed.
  • Right to Deletion: You have the right to request deletion of your personal information under certain circumstances, including when the information is no longer necessary for the purposes for which it was collected.

6.3 Restriction and Objection

  • Right to Restriction: You have the right to request restriction of processing of your personal information under certain circumstances.
  • Right to Object: You have the right to object to processing of your personal information based on legitimate interests or for direct marketing purposes.

6.4 Consent Withdrawal

  • Right to Withdraw Consent: Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

6.5 Automated Decision-Making

  • Right to Object to Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you.

6.6 Complaint to Supervisory Authority

  • Right to Lodge a Complaint: You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal information.

6.7 How to Exercise Your Rights

To exercise any of these rights, please contact us using the contact information provided in Section 13 of this Privacy Policy. We will respond to your request within the timeframe required by applicable law, typically within 30 days. We may need to verify your identity before processing your request. In some cases, we may decline your request if permitted by law, and we will explain the reason for our decision.

You will not have to pay a fee to access your personal information or to exercise any of your other rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

7. Children's Privacy

The App is not intended for children under the age of 13 (or the applicable age of digital consent in your jurisdiction, which may be higher). We do not knowingly collect personal information from children under 13. If you are under 13, please do not use the App or provide any information to us.

If we learn that we have collected personal information from a child under 13 without verification of parental consent, we will take steps to delete that information as quickly as possible. If you believe we might have information from or about a child under 13, please contact us immediately at tarot.me.mn@gmail.com.

Parents and legal guardians have the right to review, request deletion of, and refuse to permit further collection or use of their child's personal information. To exercise these rights, please contact us using the information provided in Section 13.

8. Security of Your Information

We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect your information against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:

  • Encryption of data in transit and at rest
  • Regular security assessments and audits
  • Access controls and authentication mechanisms
  • Secure development practices
  • Employee training on data protection and security
  • Incident response procedures
  • Use of secure third-party services, including Firebase's security infrastructure

However, please be aware that no method of transmission over the Internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials and for any activities that occur under your account.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and any applicable supervisory authority in accordance with applicable legal requirements.

9. Third-Party Links and Services

The App may contain links to third-party websites, applications, or services that are not owned or controlled by tarotme. This Privacy Policy applies only to information collected by our App. We are not responsible for the privacy practices or content of third-party websites or services.

When you click on a third-party link or access a third-party service, you are subject to that third party's privacy policy and terms of service. We encourage you to read the privacy policies of any third-party websites or services that you visit or use.

Specifically, our App uses Firebase, a service provided by Google LLC. Information collected by Firebase is subject to Google's Privacy Policy, which you can review at https://policies.google.com/privacy. We recommend that you familiarize yourself with how Google collects and processes data through Firebase.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last Updated" date at the top of this Privacy Policy.

If we make material changes to this Privacy Policy, we will provide notice through the App or by other means, such as email, as appropriate under the circumstances. Material changes may include changes that:

  • Significantly expand the types of personal information we collect
  • Materially change how we use or share personal information
  • Reduce your privacy rights or protections

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information. Your continued use of the App after we post changes to this Privacy Policy constitutes your acceptance of those changes. If you do not agree with the revised Privacy Policy, you should discontinue your use of the App.

11. Region-Specific Disclosures

Depending on your location, you may have additional rights or we may have additional obligations under applicable data protection laws. The following sections provide region-specific information:

11.1 European Economic Area (EEA), United Kingdom, and Switzerland

If you are located in the EEA, UK, or Switzerland, the following additional information applies:

11.1.1 Legal Basis for Processing

We process your personal information on the following legal bases:

  • Consent: Where you have given explicit consent for specific processing activities.
  • Contract Performance: Processing is necessary to perform our contract with you or to take steps at your request before entering into a contract.
  • Legal Obligation: Processing is necessary to comply with our legal obligations.
  • Legitimate Interests: Processing is necessary for our legitimate interests or those of a third party, except where such interests are overridden by your interests or fundamental rights and freedoms. Our legitimate interests include operating and improving the App, ensuring security, and communicating with users.

11.1.2 Data Controller

tarotme is the data controller responsible for your personal information under this Privacy Policy.

11.1.3 International Transfers

Your information may be transferred to countries outside the EEA, UK, or Switzerland that do not provide an equivalent level of data protection. We ensure such transfers are protected by appropriate safeguards, including Standard Contractual Clauses approved by the European Commission.

11.1.4 Your Rights

You have the rights described in Section 6 of this Privacy Policy, including the right to lodge a complaint with your local data protection authority.

11.2 California Residents (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

11.2.1 Personal Information We Collect

We collect the following categories of personal information:

  • Identifiers (such as name and device identifiers)
  • Usage data and analytics information
  • Device and technical information

11.2.2 Use and Sharing of Personal Information

We use and share personal information as described in Sections 2 and 3 of this Privacy Policy. We do not sell your personal information and have not sold personal information in the preceding 12 months. We do not share personal information for cross-context behavioral advertising.

11.2.3 Your California Privacy Rights

California residents have the right to:

  • Know: Request disclosure of the personal information we have collected, including categories of information, sources, purposes, and third parties with whom we share information.
  • Access: Request a copy of the specific pieces of personal information we have collected about you.
  • Delete: Request deletion of your personal information, subject to certain exceptions.
  • Correct: Request correction of inaccurate personal information.
  • Opt-Out: Opt out of the sale or sharing of personal information (we do not sell or share personal information).
  • Limit Use of Sensitive Personal Information: Request limitation on the use of sensitive personal information (if applicable).
  • Non-Discrimination: Not be discriminated against for exercising your privacy rights.

To exercise these rights, contact us at tarot.me.mn@gmail.com. We will verify your identity before processing your request and will respond within 45 days.

11.2.4 Authorized Agent

You may designate an authorized agent to make requests on your behalf. We will require written proof of the agent's authority and may require you to verify your identity directly with us.

11.2.5 Shine the Light Law

California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.

11.3 Nevada Residents

Nevada residents have the right to opt out of the sale of certain personal information to third parties. We do not sell your personal information as defined under Nevada law. If you are a Nevada resident and have questions, please contact us at tarot.me.mn@gmail.com.

11.4 Brazil (LGPD)

If you are located in Brazil, the following applies under the Lei Geral de Proteção de Dados (LGPD):

  • You have the rights described in Section 6 of this Privacy Policy.
  • You have the right to obtain information about the possibility of denying consent and the consequences of such denial.
  • You have the right to request review of automated decisions.
  • You may contact the Brazilian Data Protection Authority (ANPD) to file a complaint.

11.5 Australia

If you are located in Australia, the following applies under the Privacy Act 1988:

  • You have the right to access and correct your personal information.
  • You have the right to make a complaint to the Office of the Australian Information Commissioner.
  • We take reasonable steps to ensure that overseas recipients of your information comply with Australian Privacy Principles.

11.6 Canada

If you are located in Canada, the following applies:

  • You have the rights described in Section 6 of this Privacy Policy.
  • You have the right to file a complaint with the Office of the Privacy Commissioner of Canada.
  • We obtain meaningful consent for the collection, use, and disclosure of personal information.

11.7 Other Jurisdictions

If you are located in a jurisdiction not specifically mentioned above, you may have rights under your local data protection laws. We will comply with applicable legal requirements in your jurisdiction. Please contact us to exercise your rights or for information about our practices in your region.

12. Do Not Track Signals

Some web browsers and devices permit you to broadcast a preference that you not be "tracked" online. At this time, we do not modify your experience based on whether such a signal is broadcast or received by us, as there is no industry consensus concerning what, if anything, to do when such signals are received. You may have options to control tracking through your device settings or browser settings.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

tarotme
Email: tarot.me.mn@gmail.com

We will respond to your inquiry within a reasonable timeframe, typically within 30 days. If you are not satisfied with our response, you may have the right to file a complaint with your local data protection authority.

14. Consent

By using the App, you consent to the collection, use, and sharing of your information as described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the App.

For certain processing activities, we may ask for your explicit consent. In such cases, we will clearly explain the purpose of the processing and how you can withdraw your consent. You have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

15. Data Protection Officer

Depending on the nature and scale of our processing activities and applicable legal requirements, we may appoint a Data Protection Officer (DPO). If applicable, you may contact our DPO regarding data protection matters at tarot.me.mn@gmail.com.

16. Analytics and Performance

We use Firebase Analytics and other analytics services to understand how users interact with our App. These services collect information about your usage patterns, app performance, and user behavior. This information helps us:

  • Understand which features are most popular
  • Identify and fix technical issues
  • Improve app performance and user experience
  • Make informed decisions about new features and improvements

Analytics data is typically aggregated and does not directly identify you. However, it may be associated with your device identifier or other information that could indirectly identify you. You may be able to opt out of certain analytics tracking through your device settings or by contacting us.

17. Crash Reporting

We use Firebase Crashlytics and similar services to collect crash reports and diagnostic information when the App experiences technical problems. This helps us identify and fix bugs, improve stability, and enhance overall app quality. Crash reports may include:

  • Device information and operating system details
  • App version and configuration
  • Stack traces and error logs
  • Timestamps and usage context

This information is used solely for technical troubleshooting and app improvement purposes.

18. Updates and Notifications

We may send you notifications through the App or via other communication channels to provide important information about:

  • Service updates and new features
  • Security alerts and important notices
  • Changes to our policies
  • Account-related information

You may be able to control certain notification preferences through your device settings or app settings. However, we may still need to send you critical service-related communications even if you opt out of optional notifications.

19. Account Deletion

You have the right to delete your account at any time. When you delete your account:

  • We will delete or anonymize your personal information within a reasonable timeframe, except where we are required or permitted to retain it by law.
  • Some information may remain in backup copies for a limited period but will be isolated from further processing.
  • Aggregated or anonymized data that cannot identify you may be retained for analytical purposes.
  • We may retain certain information as necessary to comply with legal obligations, resolve disputes, enforce agreements, or for other legitimate purposes.

To delete your account, please contact us at tarot.me.mn@gmail.com. We will process your request in accordance with applicable law.

20. Data Accuracy

We take reasonable steps to ensure that the personal information we collect and maintain is accurate, complete, and up to date. However, you are responsible for ensuring that the information you provide to us is accurate. Please contact us if you need to update or correct your information.

21. Business Purposes

We collect and process personal information for the business purposes described in this Privacy Policy, including:

  • Providing, maintaining, and improving the App
  • Processing transactions and fulfilling requests
  • Customer service and support
  • Research and development
  • Security and fraud prevention
  • Legal compliance and dispute resolution
  • Marketing and communications (with consent where required)
  • Analytics and business intelligence

22. Storage and Security Measures

Your information is stored on secure servers maintained by us and our service providers, including Firebase infrastructure. We implement industry-standard security measures, including:

  • Encryption of data in transit using TLS/SSL protocols
  • Encryption of data at rest
  • Firewalls and intrusion detection systems
  • Regular security assessments and vulnerability testing
  • Access controls and authentication requirements
  • Monitoring and logging of system activities
  • Incident response and disaster recovery procedures
  • Employee confidentiality agreements and security training

23. User Responsibilities

You are responsible for:

  • Maintaining the confidentiality of your account credentials
  • Ensuring the accuracy of information you provide
  • Using the App in compliance with applicable laws and our terms of service
  • Configuring your device and app settings according to your privacy preferences
  • Notifying us promptly of any unauthorized access to your account

24. Limitations

While we implement reasonable security measures, please be aware that:

  • No system is completely secure, and we cannot guarantee absolute security
  • You use the App at your own risk
  • We are not responsible for the privacy practices of third parties
  • We cannot control information you choose to share within the App or with other users

25. Governing Law and Dispute Resolution

This Privacy Policy and any disputes arising out of or related to it shall be governed by the laws applicable in your jurisdiction, without regard to conflict of law principles. Where applicable, you agree that any disputes will be resolved through:

  • Good faith negotiations between the parties
  • Mediation or arbitration as required by applicable law
  • Competent courts in the appropriate jurisdiction

You may also have the right to file a complaint with your local data protection authority.

26. Accessibility

We are committed to ensuring that our Privacy Policy is accessible to all users. If you have difficulty accessing this Privacy Policy or need it in an alternative format, please contact us at tarot.me.mn@gmail.com, and we will work to accommodate your needs.

27. Language

This Privacy Policy is provided in English. If we provide translated versions, the English version will prevail in case of any inconsistencies or disputes regarding interpretation.

28. Severability

If any provision of this Privacy Policy is found to be invalid, illegal, or unenforceable, the remaining provisions shall continue in full force and effect. The invalid, illegal, or unenforceable provision shall be modified to the minimum extent necessary to make it valid, legal, and enforceable while preserving its intent.

29. Entire Agreement

This Privacy Policy, together with our Terms of Service and any other legal notices published by us in the App, constitutes the entire agreement between you and tarotme regarding the privacy aspects of your use of the App.

30. Contact Information for Privacy Requests

For all privacy-related requests, inquiries, or concerns, including requests to exercise your privacy rights, please contact us at:

Email: tarot.me.mn@gmail.com
Subject Line: Privacy Request - tarotme

Please include sufficient information to allow us to identify you and process your request. We will respond to verified requests within the timeframe required by applicable law.

Thank you for taking the time to read our Privacy Policy. We are committed to protecting your privacy and handling your personal information responsibly.

```