Privacy Policy
XTV LLC ("we" or "the Company") provides the Tarot reading application "Mystic" (package name: com.xtv.fortunebrazil; "the Service") with a design philosophy of minimal data collection and the highest priority on user privacy. This Privacy Policy describes how user information is handled in connection with the Service, in accordance with Brazil's Lei Geral de Proteção de Dados Pessoais (LGPD, Law No. 13,709/2018).
We don't know who you are.
The Service has no sign-up and no user accounts. We do not collect names, email addresses, phone numbers, physical addresses, or passwords. At most, an anonymous app-generated identifier may be created for the technical operation of the Service — it does not reveal your identity. This is a deliberate design choice to protect your privacy at the most fundamental level.
Most of your data never leaves your device.
Your credit balance, reading history, daily bonus, and preferences are stored only on your device and are never uploaded to our servers. You can delete everything at any time from the in-app Settings, or simply by uninstalling the app.
Article 1 — Information We Do Not Collect
The Service does not collect or request access to:
- Name, email address, phone number, or physical address
- User accounts or passwords (there is no registration)
- GPS location data
- Contact lists, photos, camera, or microphone
- SMS content or usage history of other apps
Article 2 — Data Stored Only on Your Device
- The following data is stored only in your device's local storage and is never sent to our servers:
- Your consent status for this Policy
- Your credit balance
- Your questions and reading history
- Your last daily-bonus date and today's free-question count
- Your pronoun preference (he/she) for readings
- You can delete all of the above at any time via "Settings → Delete my data" in the app, or by uninstalling the app.
- Daily reminders are local notifications scheduled on the device itself — nothing leaves your device for this.
- Share images are generated on your device and are only handed to other apps (such as WhatsApp or Instagram) when you choose to share.
Article 3 — Data Sent to Our Server to Generate Readings
- When you request a reading, we send to our server only what is needed to generate it: your question text, the drawn cards, the app language, and your chosen pronoun (he/she).
- This data is processed via the OpenAI API to generate the reading text. Under OpenAI's API policy, data sent through the API is not used to train AI models.
- Our server is stateless: we do not store your questions or readings on our servers (temporary technical error logs, which do not contain question content, may be kept briefly). The generated reading is stored only on your device.
- Please do not type personally identifiable information (such as real names or ID numbers) into the question field.
Article 4 — In-App Purchases
- All payments are processed by Google Play (including Pix and card). We never see or store your card numbers or payment details.
- We use RevenueCat to validate purchases. Only an anonymous app-generated user ID and the Google Play purchase receipt are transmitted.
Article 5 — Ads and Analytics in the App
The current version of the app contains no advertising and no analytics or tracking SDKs. If this changes in the future, this Policy will be updated first.
Article 6 — Sub-processors
- The Service relies on the following third-party providers: Google Play (payments), RevenueCat (purchase validation; US), OpenAI (reading generation; US), and Supabase (server hosting; São Paulo, Brazil region).
- These sub-processors implement appropriate data protection measures, including encryption and compliance with applicable data protection laws.
Article 7 — Your Rights under the LGPD
- Under Article 18 of the LGPD, you have the right to confirmation of processing, access, correction, anonymization, portability, and deletion of your data, as well as revocation of consent.
- Because almost all data lives on your device, you can exercise these rights yourself immediately via "Settings → Delete my data" or by uninstalling the app.
- For any other request, please contact us via the details in Article 10.
Article 8 — Audience and Nature of Content
The Service is intended for adults aged 18 and over and is not directed at children; we do not knowingly collect data from children. All readings are provided for entertainment and self-reflection only, and do not constitute medical, legal, or financial advice.
Article 9 — Changes to This Policy
We may revise this Policy as necessary. Material changes will be announced on this page. The date of the latest update is shown at the top of this document.
Article 10 — Contact
| Data controller | XTV LLC (Japan) |
|---|---|
| Contact email | info@no-dial.com |