Privacy Policy

Effective date: April 16, 2026

Welcome to Arcana Destiny Matrix. This Privacy Policy describes how PUUR Business / Arcana Destiny Matrix ("we," "us," "our") collects, uses, and discloses information when you use our mobile application and related services (the "Service"). By using the Service, you agree to this Privacy Policy.

1. Information we collect

1.1 Information you provide

Depending on how you use the Service, we may collect:

• Account and profile information — such as name, email address, birth date, gender, and onboarding responses you choose to provide (for example goals, preferences, or reflective notes). Some of this information may be sensitive depending on what you enter.
• Destiny matrix and related content — numbers and interpretations you generate or save in the app, daily insights, goals, tags, journal-style reflections, and similar entries.
• Chat messages — text you send when using AI chat features about your matrix.
• Media you choose to upload — for example a profile photo, or audio you record for goal reflections, as supported by the app.
• Preferences — language, notification-related choices if offered, and in-app settings.

1.2 Information collected automatically

• Device and app data — basic technical information needed to run the Service (for example app version, device type, and diagnostic logs in limited cases).
• Authentication data — session tokens managed through our authentication provider to keep you signed in securely on your device.
• Subscription status — information from Apple App Store, Google Play, and/or our subscription partner to verify purchases and entitlements.

We do not integrate the analytics or advertising SDKs named in some older drafts (for example Mixpanel, Meta, or TikTok) in the current application codebase we ship; if we add them later, we will update this Policy.

2. How we use your information

We use your information to:

• Provide, maintain, and improve the Service;
• Generate AI-powered matrix analyses, chat responses, daily insights, goals, tarot-related text, and similar features;
• Authenticate your account and sync your data across devices when you sign in;
• Process subscriptions and manage premium access;
• Communicate with you about the Service when needed;
• Inform you about new features and marketing offers. You can opt out of marketing communications at any time by emailing hello@arcanadestiny.app;
• Protect the security and integrity of the Service, and comply with legal obligations.

3. Legal bases (EEA users)

If you are in the European Economic Area, we process personal data where we have a valid legal basis, such as: performance of a contract (providing the Service), legitimate interests (operating and improving the Service, security), or your consent where we ask for it (for example before enabling certain AI features, where the app presents a consent step).

4. Sharing and third parties

We may share information with the following categories of recipients:

• AI providers — we send prompts and related context to OpenAI (OpenAI, L.L.C.) to power chat, analyses, goals, insights, and similar features. OpenAI processes data under its own policies; API usage is typically transmitted over TLS. Refer to OpenAI's Privacy Policy and API terms for details on how they handle API data.
• Cloud infrastructure — we use Supabase for authentication, database storage, and file storage (for example profile assets and optional audio uploads tied to your account).
• Subscriptions — we use RevenueCat and the relevant app store (Apple and/or Google) to process subscription purchases and entitlements.
• Public content APIs — the app may fetch publicly available descriptions or images (for example from Wikidata or Wikimedia Commons) to display reference content; those requests do not necessarily include your personal account details.
• Legal and safety — we may disclose information if required by law, regulation, legal process, or to protect rights, safety, and security.
• Business transfers — information may be transferred in connection with a merger, acquisition, financing, or sale of assets.

We do not sell your personal information to third parties in the conventional sense of selling data for money.

5. Artificial intelligence

AI features send your inputs (such as chat messages, matrix-related text, and profile context you have saved) to OpenAI to generate responses. Signed-in users: chat messages and certain app content may also be stored in our database so you can see history across sessions. Guest or offline behavior may differ; some data may exist only on your device until you sign in.

Third-party AI providers may retain or log data according to their own policies and technical configuration. We configure the Service to use industry-standard encrypted connections (HTTPS/TLS) when calling external APIs.

6. Storage and retention

• On your device — the app uses local storage (for example via AsyncStorage) for session convenience, cached matrix data, and guest-mode content until it is synced or cleared.
• In the cloud (signed-in users) — when you use an account, we store associated content in Supabase (including tables such as profiles, chat messages, daily goals, check-ins, tarot draws, analysis cache, and compare history, as applicable to your usage).
• Files — optional uploads may be stored in Supabase Storage (for example profile images or goal reflection audio).
• Retention — we keep information as long as your account is active and as needed to provide the Service, unless a longer period is required by law or we delete it sooner upon your request where applicable.

You may remove local data from your device by clearing app data or uninstalling the app. Deleting your account (where available) or contacting us may be required to remove certain cloud-held data.

7. Security

We implement reasonable technical and organizational measures to protect your information. No method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

8. Children's privacy

The Service is not directed to children under 13 (or 16 where a higher age applies in your region). We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us and we will take steps to delete it.

9. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing.

EEA: You may have rights under the GDPR, including lodging a complaint with a supervisory authority.

California: California residents may have rights under the CCPA/CPRA, including knowing what we collect, requesting deletion, and opting out of certain sharing. We do not sell personal information as "sale" is commonly defined under those laws.

To exercise your rights, contact us at the email below.

10. International transfers

Your information may be processed in countries other than your own, including the United States, where our service providers operate. Those countries may have different data protection laws. By using the Service, you understand that your information may be transferred as described in this Policy.

11. U.S. state privacy rights

If your U.S. state provides additional privacy rights, you may contact us to make a request. We will respond in accordance with applicable law.

12. Changes to this Privacy Policy

We may update this Policy from time to time. We will post the updated version in the app or on our website with a new effective date. Your continued use of the Service after changes constitutes acceptance of the updated Policy where permitted by law.

13. Contact us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at hello@arcanadestiny.app.