Privacy Policy

EFFECTIVE 11 OCTOBER 2026 · UNIVERSAL ENGLISH POLICY

Tarovia is provided by SECOND WIND LIMITED. This policy covers the Tarovia mobile app and this website. Contact support@secondwindltd.xyz for privacy questions.

What stays on your device

Your personal journal notes, saved readings, daily card and preferences are stored on your device. Tarovia does not offer cloud journal backup in this release. Uninstalling the app or deleting its data can permanently remove these records. Device backups may be controlled by your operating system settings.

When you request an AI reading

AI is optional. When you choose it, we send your question, selected card IDs and orientations, spread, language, a random request identifier and Firebase user identifier to our backend on Google Cloud. The question and card context are processed by Alibaba Cloud’s DashScope language model to produce your interpretation. Avoid entering names, addresses or other information you do not wish to share with those processors.

Successful AI responses and their card context are retained for up to 30 days so retries can recover the same result without using another allowance. Quota records are retained for up to 31 days. Expired records are scheduled for automated deletion; processing may take additional time. We do not intentionally log question or journal contents. Providers may retain operational or security data under their own policies.

Identity and purchases

Firebase creates an anonymous user identifier to authenticate API requests; you do not need to provide an email address to start. RevenueCat and Google Play process subscription identifiers, purchase receipts, transaction and entitlement status associated with that identifier. We do not receive your payment card details. Store records may be retained as required by law and the store’s policies.

Website and diagnostics

This website stores only your chosen language in your browser. Its card preview runs locally and does not send questions or reading results to our server. Cloudflare serves the website and may process IP addresses and normal request metadata for security and delivery. Tarovia does not include ads or advertising identifiers, sell personal data, or use third-party behavioral advertising analytics.

Your choices and deletion

Use Settings → Delete my data in the app to remove your local journal and request deletion of your anonymous server account and retained readings. This does not cancel a store subscription. Manage or cancel it separately in Google Play. See Delete your data for instructions and support if the app is unavailable.

You may request access, correction or deletion of personal data we can identify by contacting support. We will verify that you control the relevant account before disclosing or deleting its data. We may retain limited records where legally required or necessary to address fraud, disputes or security incidents.

International processing and children

Google Cloud, Firebase, RevenueCat, Cloudflare and Alibaba Cloud may process data outside your country. Tarovia is intended for adults aged 18 and over and is not designed for children. We do not knowingly collect children’s personal data.

Changes

We will update the effective date when this policy changes materially and provide notice within the app where appropriate.