Privacy Policy
Effective 6 September 2026
Astraya is a tarot app. This policy explains what it collects, why, how long we keep it, and how to have it deleted. It is written to be read, not to be survived.
Who we are
Astraya is published by Tam Duc Studio, an individual developer in Vietnam, who is the controller of the data described here.
For any privacy question, or to ask us to delete your data, write to [email protected]. We answer within 30 days.
Who may use Astraya
You must be 16 or older. We do not knowingly collect data from anyone younger. If you believe a child has used the app, write to us and we will delete what we hold.
What we collect
A device identifier we create. The first time you open the app, our server issues a random identifier and a device secret. This is not your Google Advertising ID, and it is not linked to your name. It exists so that daily limits and your server-side readings belong to *this* installation. Reinstalling the app creates a new one.
The questions you type. When you draw a card or message an AI reader, the text you wrote is sent to our server and on to our language-model provider so that a reading can be written. We do not use it for advertising and we do not sell it.
Your Google account, only if you sign in. Signing in is optional. If you do, we store the Google account identifier, and — when Google provides them — your email address and the web address of your Google profile picture. The identifier does one thing: it lets us recognise you as the same person on a different phone, so a subscription you paid for and trial messages you already used are not lost or reset. The email address and picture are shown back to you on the Profile screen so you can tell which account you are signed in with. We store only the *address* of the picture, never a copy of the image, and your phone loads it directly from Google. We never receive your Google password.
Purchases, if you buy Premium. Google Play gives the app a purchase token. We send it to Google to verify it is genuine, and we store the result — which plan you hold and when it expires — so the app knows your benefits. We never see your card number, and we do not receive your billing address.
Advertising data, if you consent. The app shows advertisements from Google AdMob. What AdMob collects, and whether it may personalise ads, is governed by the consent choice you make in the dialog on first launch. You can change that choice at any time in Settings → Ad privacy options.
Basic diagnostics. Crash reports and anonymous usage events, such as which screens are opened and whether a draw succeeded, through Google Firebase. The text of your questions is never sent to analytics.
What stays on your phone
Your reading history — the cards, the reading text, and any notes you write — is stored in a database on your device. The app keeps the 20 most recent readings and deletes older ones automatically. We do not back this up. If you lose or wipe the phone, that history is gone, and signing in does not change this.
Where your questions go
Readings and the replies of AI readers are written by a large language model operated by DeepSeek, on servers outside Vietnam and outside the European Economic Area. Your question and the drawn cards are sent there so that a reading can be written. We do not send your name, your email address, your Google account identifier, or any advertising identifier with it.
If you are in the EEA or the UK, this is a transfer of personal data to a third country. It happens because it is necessary to provide the reading you asked for.
How long we keep things
| Data | Kept |
|---|---|
| The question and reply text held by our language-model gateway | 7 days, then deleted automatically |
| Metering records for those calls — model, token counts, cost, no content | Kept for cost accounting |
| Daily usage counters | 90 days |
| Rewarded-advertisement grants | 30 days |
| Device identifier | Until you ask us to delete it |
| Google account link — identifier, email address, profile picture address | Until you ask us to delete it |
| Readings stored on our server, including the question you typed | Until you ask us to delete them. There is no automatic expiry: these are your readings, and the app offers them back to you |
| Subscription records | While the subscription is active, and afterwards for as long as tax and accounting law requires |
The deletion job records every run, so that we can show it actually ran rather than promise that it does.
Who we share it with
- DeepSeek, the language-model provider that writes the readings. It receives your question and the drawn cards.
- Google Play Billing, to verify a purchase and to run your subscription.
- Google AdMob, for advertising, subject to the consent choice you made.
- Google Firebase, for crash reporting and anonymous analytics.
We do not sell personal data, and we do not share it with anyone else.
Your rights
You can ask us to give you a copy of what we hold about you, to correct it, or to delete it. You can withdraw your advertising consent at any time in Settings, and you can object to our processing. Write to [email protected]; we answer within 30 days, and using these rights costs nothing.
If you are in the EEA or the UK, we rely on these legal bases: performance of a contract to run the app and write the readings you ask for, consent for advertising and analytics, and legitimate interest to enforce usage limits and prevent abuse. You may complain to your national data protection authority.
If you are in California, we do not sell your personal information, and we do not share it for cross-context behavioural advertising beyond the advertising consent choice described above.
Deleting your account and your data
Write to [email protected] and ask us to delete your data.
- If you signed in with Google, write from that email address, or tell us which one you used. We delete the account link, the email address, the profile picture address, every reading tied to it, and the device identifiers attached to it.
- If you never signed in, your data on our server is tied only to the random identifier your phone holds. Tell us in your message that you used the app as a guest and we will explain how to read that identifier off your device so we can find and delete the records.
- Uninstalling the app deletes the reading history stored on the phone immediately, and makes the device identifier unreachable — but it does not by itself delete the records on our server. Ask us for that.
We complete deletion requests within 30 days. Records we must keep by law, such as proof of a purchase, are the one exception, and we will tell you if that applies.
Security
Traffic between the app and our server is encrypted with TLS. The language-model key exists only on the server and is never shipped inside the app. The device secret is held in your phone's secure keystore. No system is perfect; if we ever discover a breach affecting your data, we will tell you.
AI-generated content
Readings, and the replies from the AI readers, are written by a language model. The AI readers are fictional characters, not real fortune tellers, and nothing they say is medical, financial, or legal advice.
Changes to this policy
If this policy changes in a way that matters, the app will show you the new version before you carry on using it. The date at the top always says which version you are reading.
Language
This policy is published in several languages. If a translation and the English version disagree, the English version prevails.