Privacy Policy

This privacy policy is applicable to the AI Tarot 3D app for mobile devices, together with any related services operated by Carlos Colado Molina (WebAppDev) (collectively, the «Application»). Carlos Colado Molina (WebAppDev) is hereinafter referred to as the «Service Provider».

Data Controller Information

Carlos Colado Molina (WebAppDev) acts as the Data Controller responsible for the processing of your personal data.

Name: Carlos Colado Molina (WebAppDev)

Email: mejortarots@gmail.com

For data protection inquiries and to exercise your GDPR rights, please contact the Data Controller using the contact information above.

What information does the Application obtain and how is it used?

The Application and related services acquire the information you supply when you download, access, or register for the service. Registration with the Service Provider is not mandatory. However, you might not be able to use some of the features offered by the service unless you register.

The Service Provider may also use the information you provide to send important information, required notices, and, where permitted by law, marketing communications.

Legal basis for processing your personal data

Where the GDPR applies, the Service Provider relies on one or more lawful bases to process your personal data, including:

  • Contract performance: processing necessary to provide the Application or fulfil a contract with you.
  • Consent: where you have given explicit consent to processing, including for marketing, analytics, or optional features. You may withdraw consent at any time without affecting processing that occurred before withdrawal.
  • Legitimate interests: where processing is necessary for the Service Provider’s specific legitimate interests, such as maintaining network and information security, preventing fraud and abuse, or improving the Application’s core functionality through analytics, provided those interests are not overridden by your data protection rights or fundamental freedoms.
  • Legal obligation: to comply with laws or government requests.

Cookies and similar technologies

The Application or its third-party SDKs may use cookies, SDKs, pixels, and similar technologies to support functionality, analytics, and service delivery. Where required by law, the Service Provider will obtain your consent before using non-essential tracking technologies.

Automated decision-making and profiling

If the Application uses automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you, you have the right to request human review, express your point of view, and contest the decision. Information about the logic involved and the likely consequences of that processing will be provided where required by law.

What information does the Application collect automatically?

In addition, the Application may collect certain information automatically, including, but not limited to, the type of mobile device you use, your mobile device’s unique device ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browsers you use, and information about the way you use the Application.

Use of AI Technologies

Our application utilizes the ChatGPT API, developed by OpenAI, to provide artificial intelligence-based chat functionalities. When you interact with the chat features in our application, the data you input (such as your questions and responses) may be sent to OpenAI for processing. For quality assurance and to ensure the proper functioning of our service, we may temporarily store these questions and responses on our servers. However, we ensure that this data is kept only as long as necessary for these purposes and is protected with strong security measures.

OpenAI does not use the data for any purpose beyond providing the service and does not share these data with other services or third parties.

We are committed to ensuring the security and confidentiality of your data. We have implemented appropriate technical and organizational measures to protect your data against unauthorized access and unlawful processing.

For more information on how OpenAI handles data, please read their privacy policy https://openai.com/en/policies/privacy-policy.

User-Provided Information

To personalize and improve the quality of tarot readings provided by our AI-powered Application, we may temporarily collect and store certain user-provided information. This includes personal context voluntarily shared by users such as their name or nickname, gender, and zodiac sign, as well as any questions users ask the AI. These details are specifically used to enhance the accuracy and personalization of the AI-generated tarot readings and to evaluate and improve the quality and effectiveness of our responses.

All collected information is securely stored, used solely for analytical and improvement purposes, and retained only for the necessary period required for assessment. The Service Provider ensures that this data is not shared with third parties except as explicitly outlined in this Privacy Policy.

Device ID Collection for Abuse Prevention

To prevent abuse and ensure fair usage, our application collects and stores device IDs. This is essential for managing the use of the paid ChatGPT API and maintaining service quality. Device IDs are used exclusively to monitor for potential misuse and are stored securely. They are kept only as long as needed to protect our service.

Shared Readings Feature & Data Flow (Privacy by Design)

The Application offers a «Shared Reading» feature that allows two users (the Room Creator and the Invited Guest) to connect their sessions and perform a tarot reading together. This feature has been designed with strict privacy limitations to ensure a secure environment:

  • Room Creation and Private Sharing: A user creates a virtual reading room and shares a unique 4-character access code with a person they know through private, external communication channels (such as instant messaging or email). The Application does not feature any public matchmaking, open lobbies, or public directories; therefore, sessions are strictly intended to take place between individuals who already share a real-world connection.
  • AI Content Moderation: Before the shared room is fully accessible, any custom question or consultation text entered by the room creator is automatically scanned and processed by an automated AI content filter (OpenAI Text Moderation API) to detect, block, and prevent inappropriate, offensive, or dangerous content.
  • Shared Context Visibility: Once the invited guest enters the correct room code, they will be able to see limited contextual information provided by the creator: their name or nickname, gender, zodiac sign, and the custom question submitted to the AI (if any). Users are not required to provide their real names and are fully permitted to use pseudonyms or nicknames. Private device IDs are never disclosed to the other user.
  • Cooperative Interaction: Both participants take turns selecting cards within the app. The AI then interprets the combined information (names, zodiacs, question, and the collective cards drawn). Finally, both users are shown the exact same AI-generated response simultaneously.
  • No Direct Interaction or Chat Tools: To prevent any form of abuse or harassment, the Application does not include any chat, private messaging, or direct user-to-user communication features. The only text shared between users is the initial, auto-moderated consultation question.
  • No User Accounts: The Application does not allow users to create, register, or maintain user accounts or profiles, either inside the app or through external platforms. All session data is linked strictly to temporary session tokens.
  • Strictly Private Readings: Shared readings are completely confidential and are never made publicly visible to third parties, neither during the live session nor at any point afterward.
  • Purpose and Temporary Retention: The combined data, cards drawn, and the final AI response may be stored temporarily in our secure database solely for contract performance (to deliver the multiplayer feature), technical troubleshooting, and quality control analysis to ensure rooms function correctly. This data is retained only for the minimum period necessary and is automatically closed and restricted upon room expiration or inactivity (e.g., after 5 minutes of no activity).

Text-to-Speech Functionality

To offer an immersive user experience, the Application includes a feature that converts the written tarot readings and AI responses into spoken audio. For this purpose, the text generated by the AI (which may dynamically include contextual user data such as nicknames, signs, or questions) is sent to the Google Cloud Text-to-Speech API for real-time voice synthesis. This data is transmitted securely, processed transiently by Google solely to generate the audio stream (LINEAR16 format), and is not retained or used by Google for any other purposes.

Do third parties see and/or have access to information obtained by the Application?

Only aggregated, anonymized data is periodically transmitted to external services to aid the Service Provider in improving the Application and their service. The Service Provider may share your information with third parties in the ways that are described in this privacy statement.

International Data Transfers

The Service Provider or its third-party service providers may transfer personal data outside the European Economic Area (EEA). Where such transfers occur, the Service Provider will use an appropriate transfer mechanism required by GDPR Chapter V.

  • Adequacy decisions by the European Commission
  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Other safeguards or derogations recognized under GDPR Chapter V, including consent where legally permitted

Countries outside the EEA may not provide the same level of data protection as the EEA. Where required by law, the Service Provider will apply appropriate safeguards and obtain any consent required for the transfer.

 

Please note that the Application utilizes third-party services that have their own Privacy Policy about handling data. Below are the links to the Privacy Policy of the third-party service providers used by the Application:

The Service Provider may disclose User Provided and Automatically Collected Information:

  • as required by law, such as to comply with a subpoena, or similar legal process;
  • when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
  • with their trusted services providers who work on their behalf, do not have an independent use of the information the Service Provider discloses to them, and have agreed to adhere to the rules set forth in this privacy statement.

Where the GDPR applies, the Service Provider enters into Data Processing Agreements (DPAs) with third-party service providers that process personal data on its behalf, as required by Article 28 of the GDPR. These DPAs impose the same data protection obligations on those service providers as described in this Privacy Policy.

What are my opt-out rights?

You can stop further collection of information from your mobile device by uninstalling the Application. Uninstalling will stop the Application from collecting data from your device, but it does not automatically delete information that has already been transmitted to the Service Provider or to third parties.

 

To request deletion of your personal data, withdraw consent, or exercise any of your rights, contact the Service Provider at mejortarots@gmail.com.

What is the data retention policy and how can you manage your information?

The Service Provider retains personal data based on its necessity for the stated purposes:

  • User Provided Data: Retained for the duration of your use of the Application plus 12 months thereafter, unless longer retention is required by law
  • Automatically Collected Data: Retained for up to 24 months from collection, unless longer retention is required for legal compliance or security purposes
  • Aggregated and Anonymized Data: Retained indefinitely as it no longer identifies you
  • Data required for legal compliance: Retained as long as required by applicable law

You have the right to request deletion of your personal data at any time, except where retention is required by law. If you’d like the Service Provider to delete User Provided Data that you have provided via the Application, please contact them at mejortarots@gmail.com and they will respond within the time required by applicable law. Please note that some User Provided Data may be required in order for the Application to function properly.

How does the Application address children’s privacy?

The Application is not intended for children under 16 years of age, or where a higher age of digital consent is established under applicable law. The Service Provider does not knowingly solicit data from children or market the Application to them.

 

Where parental or guardian consent is required under applicable law, the Application is not intended for use without that consent. The Service Provider does not knowingly collect personally identifiable information from children under 16 years of age, or where a higher age of digital consent is established by applicable law, in violation of applicable law. In the event the Service Provider discovers that a child has provided personal information, the Service Provider will immediately delete this from their servers. If you are a parent or guardian and you are aware that your child has provided the Service Provider with personal information, please contact the Service Provider (mejortarots@gmail.com) so that they will be able to take the necessary actions.

How is your information kept secure?

The Service Provider is committed to safeguarding the confidentiality of your information. The Service Provider implements physical, electronic, and procedural safeguards to protect information it processes and maintains. For example, access is limited to authorized employees and contractors who need to know that information to operate, develop, or improve the Application. However, no security system can prevent all potential security breaches.

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, the Service Provider will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by applicable law. Where the breach is likely to result in a high risk to your rights and freedoms, the Service Provider will also notify you without undue delay, providing information about the nature of the breach, the categories of data affected, and the measures taken or proposed to address the breach.

How will you be informed of changes to this Privacy Policy?

The Service Provider may update this Privacy Policy from time to time. The Service Provider will notify you of material changes by posting the updated Privacy Policy with an effective date. Where required by law, the Service Provider will seek your consent to material changes before they take effect.

 

Previous versions of this Privacy Policy will be maintained and made available upon request by contacting the Service Provider at mejortarots@gmail.com.

 

This privacy policy is effective as of 2026-05-26

What are your GDPR data protection rights?

Under the GDPR, you have the following rights:

  • Right of Access: You can request access to your personal data.
  • Right to Rectification: You can request correction of inaccurate data.
  • Right to Erasure: You can request deletion of your personal data (the «right to be forgotten»).
  • Right to Restrict Processing: You can request that the Data Controller limits how they use your data.
  • Right to Data Portability: You can request a copy of your data in a structured, commonly used, machine-readable format.
  • Right to Object: You can object to processing based on legitimate interests. You have an absolute right to object to processing for direct marketing purposes at any time.
  • Right to Withdraw Consent: Where processing is based on your consent, you can withdraw it at any time. Withdrawal is as simple as toggling preferences in the Application’s settings or contacting the Data Controller.
  • Rights Regarding Automated Decision-Making: You have rights related to automated decisions that affect you.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local Data Protection Authority. Contact details for each country’s Data Protection Authority can be found at: https://edpb.ec.europa.eu/about-edpb/members_en

If you are located in the United Kingdom, you may contact the Information Commissioner’s Office at https://ico.org.uk

What are your California privacy rights (CCPA/CPRA)?

If you are a resident of California, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with additional rights regarding your personal information:

  • Right to Know: You can request disclosure of the categories and specific pieces of personal information the Service Provider has collected about you.
  • Right to Delete: You can request deletion of personal information the Service Provider has collected from you, subject to certain exceptions.
  • Right to Correct: You can request correction of inaccurate personal information.
  • Right to Opt-Out: You can opt out of the sale or sharing of your personal information for cross-context behavioral advertising.
  • Right to Limit Use of Sensitive Personal Information: You can limit the use of your sensitive personal information to essential purposes.
  • Right to Non-Discrimination: The Service Provider will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise any of these rights, please contact the Service Provider at mejortarots@gmail.com. The Service Provider will verify your request using the information you provide and respond within the timeframes required by law. You may designate an authorized agent to make a request on your behalf.

How do you give your consent?

Where processing is based on consent, you provide that consent by affirmatively opting in to the relevant feature or action. You may withdraw consent at any time without affecting processing carried out before withdrawal. Processing based on other lawful bases, including contract performance, legitimate interests, or legal obligations, is carried out as described above.

How can you contact the Data Controller?

If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at mejortarots@gmail.com.

To request deletion of your personal data or to exercise any of your rights, contact the Service Provider using the details provided above. The Service Provider will respond within one month of receiving your request, extendable by up to two months where necessary due to the complexity or volume of requests, as permitted by applicable law.

Terms of Use

Effective Date: May 26, 2026

Welcome to AI Tarot 3D (the «Application»). These Terms of Use («Terms») constitute a legally binding agreement between you («User» or «you») and Carlos Colado Molina (WebAppDev) («Service Provider», «we», «us», or «our») concerning your access to and use of the Application.

By downloading, installing, or using the Application, you agree that you have read, understood, and agree to be bound by all of these Terms. If you do not agree with all of these Terms, you are expressly prohibited from using the Application and must discontinue use immediately.

1. Description of Service & Eligibility

AI Tarot 3D is an artificial intelligence-powered entertainment mobile application that provides personalized tarot card readings using OpenAI API technologies.

  • Age Requirement: You must be at least 13 years of age to use this Application. If you are under the age of majority in your country (minor), you represent that you have reviewed these Terms with your parent or legal guardian and that they consent to your use of the Application.

  • No Registration: The Application does not require, nor does it allow, the creation of user profiles, logins, or registered accounts.

2. Shared Readings Feature & Code of Conduct

The Application features a cooperative multiplayer tool («Shared Readings») allowing two separate devices to participate in a synchronized tarot layout. By using this feature, you understand and agree to the following mechanics and restrictions:

  • Private Room Sharing among Acquaintances: Rooms are strictly private and can only be accessed via a unique 4-character alphanumeric code. This code must be shared manually by the Room Creator through external, private communication channels (such as instant messaging or email). The Application does not feature any public matchmaking, public lobbies, or discovery directories. Consequently, sessions are designed and assumed to take place exclusively between mutually known individuals.

  • Pseudonyms Allowed: Users are not required to input their real names or identities to participate. You are fully permitted and encouraged to use nicknames or pseudonyms.

  • Shared Context Visibility: Upon entering a valid room code, the Invited Guest will be able to view limited contextual information supplied by the Room Creator, including their nickname, gender, zodiac sign, and the submitted consultation question.

  • AI Content Moderation: To maintain a safe and respectful environment, any custom text or question submitted to the AI is automatically filtered through an automated content moderation system (OpenAI Text Moderation API). The insertion of offensive, abusive, defamatory, hateful, or inappropriate text will cause the system to reject the creation of the room. Repeated attempts to bypass this filter constitute a breach of these Terms.

  • No Direct User-to-User Interaction: To eliminate any possibility of harassment or abuse, the Application does not include any direct chat, voice chat, or messaging features. Users cannot communicate with each other through the app beyond reading the initial, auto-moderated consultation question and drawing cards.

  • Confidentiality: Shared readings are confidential and are never published, broadcasted, or made visible to the public or to other unauthorized users, either during the live layout or afterward.

3. Entertainment Disclaimer

The Application and the readings generated by the AI are provided strictly for entertainment and novelty purposes only. Tarot readings do not constitute, and should never replace, professional medical, legal, financial, or psychological advice. The Service Provider makes no guarantees regarding the accuracy, predictive value, or relevance of the AI-generated interpretations. You assume full responsibility for any choices or actions you take based on the interpretations provided by the Application.

4. Prohibited Uses

You agree not to use the Application to:

  • Input text that promotes violence, discrimination, illegal activities, or severe profanity.

  • Attempt to bypass or reverse-engineer the automated AI moderation system.

  • Use any automated scripts, bots, or scrapers to extract data or spam the paid API endpoints.

  • Interfere with or disrupt the real-time server synchronization of active reading rooms.

5. Intellectual Property

The Application, including its source code, artwork, graphics, UI design, card layouts, and trademarks, is the exclusive property of Carlos Colado Molina (WebAppDev). You are granted a limited, non-exclusive, non-transferable, and revocable license to use the app on your personal device for non-commercial entertainment purposes.

6. Limitation of Liability & Room Expiration

To ensure optimal server performance and technical stability, active reading rooms are subject to automatic expiration and termination after periods of inactivity (e.g., 5 minutes of no player input).

The Service Provider shall not be held liable for any data loss, disconnected sessions, interrupted readings, server downtime, or API failures. The Application is provided on an «AS IS» and «AS AVAILABLE» basis without warranties of any kind.

7. Changes to the Terms

We reserve the right, in our sole discretion, to make changes or modifications to these Terms of Use at any time. We will alert you about any changes by updating the «Effective Date» of these Terms. Your continued use of the Application after the date such revised Terms are posted constitutes your acceptance of the changes.

8. Governing Law

These Terms and your use of the Application are governed by and construed in accordance with the laws of Spain, without regard to its conflict of law principles.

9. Contact Us

If you have any questions, complaints, or feedback regarding these Terms, please contact the Service Provider at:

Email: mejortarots@gmail.com