Privacy Policy

1. Introduction

Welcome to Zodya ("Company," "we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience when using our tarot reading, coffee cup reading, palm reading, and horoscope mobile application ("App" or "Service").

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application available on the Apple App Store and Google Play Store. Please read this policy carefully. By downloading, installing, or using Zodya, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

If you do not agree with the terms of this Privacy Policy, please do not access or use the App.

2. Information We Collect

We may collect information about you in a variety of ways. The information we may collect via the App includes:

2.1 Personal Data You Provide

Account Information: When you create an account, we collect your email address, username, password, and date of birth (used for horoscope personalization and age verification).
Profile Information: Zodiac sign, gender, and preferences you choose to provide for personalized readings.
User Content: Photos you voluntarily upload for coffee cup readings or palm readings.
Communications: Information you provide when you contact us for support or feedback.

2.2 Automatically Collected Information

Device Information: Device type, model, operating system and version, unique device identifiers (such as IDFV on iOS or Android Advertising ID on Android), language settings, and mobile network information.
Usage Data: Information about how you interact with the App, including features accessed, reading history, session duration, buttons clicked, and pages viewed.
Log Data: IP address, access times, app crashes, and system activity.
Purchase Information: Records of in-app purchases and subscriptions processed through Apple's App Store or Google Play Store (Apple and Google handle all payment information directly).

2.3 Information We Do NOT Collect

We do NOT collect precise geolocation data.
We do NOT access your contacts, calendar, or other personal files.
We do NOT track you across other apps or websites (we do not participate in cross-app tracking).
We do NOT collect payment card information (all payments are processed by Apple or Google).

3. Google Play Data Safety Summary

The following summary is provided to support the Google Play Data Safety section and gives a clear overview of data types collected, their purposes, and whether they are shared.

3.1 Data Types Collected

Personal Information (name, email, date of birth) — Purpose: App functionality, account management — Shared: No
Photos (coffee cup, palm images) — Purpose: App functionality (generating readings) — Shared: No — Deleted within 24 hours
App Activity (reading history, in-app actions) — Purpose: Analytics, personalization — Shared: With analytics providers (Firebase)
Device or Other IDs (device ID, advertising ID) — Purpose: Analytics, diagnostics — Shared: With analytics providers (Firebase)
App Info and Performance (crash logs, performance data) — Purpose: Diagnostics — Shared: With Firebase Crashlytics
Purchase History (subscription and purchase records) — Purpose: Subscription management — Shared: With RevenueCat

3.2 Data Handling Practices

All data in transit is encrypted using TLS/SSL.
All data at rest is encrypted using AES-256 encryption.
Users can request data deletion via in-app account deletion or by contacting appskiesltd@gmail.com.
Data is not sold to third parties.

4. Android Permissions

When you use Zodya on an Android device, the App may request the following permissions:

Camera: Required for coffee cup reading and palm reading photo capture. Photos are processed and deleted within 24 hours.
Storage / Photos: Required to select existing photos from your device for coffee cup or palm readings.
Internet: Required for app functionality, fetching readings, analytics, and delivering content.
Notifications: Required to send you daily horoscope alerts, reading reminders, and app updates. You can disable this in your device settings at any time.

We only use these permissions for the specific purposes described above. We do not access your camera or photo library in the background or for any purpose other than providing readings you explicitly request.

5. How We Use Your Information

We use the information we collect for the following purposes:

Service Delivery: To provide, operate, and maintain our App and its features, including delivering tarot readings, coffee cup readings, palm readings, and horoscopes.
Personalization: To personalize your experience and provide content and readings tailored to your preferences and zodiac sign.
Account Management: To create and manage your account, authenticate users, and provide customer support.
Transaction Processing: To process your subscriptions and in-app purchases and send related information.
Communication: To send you technical notices, updates, security alerts, and support messages.
Analytics: To monitor and analyze usage patterns, trends, and activities to improve our App and user experience.
Advertising: If advertisements are introduced in the future, we may use non-personally identifiable information and, where consent has been provided, advertising identifiers to deliver and measure the effectiveness of ads through third-party advertising networks.
Safety and Security: To detect, prevent, and address technical issues, fraud, and illegal activities.
Legal Compliance: To comply with applicable laws, regulations, and legal processes.

6. Legal Basis for Processing (EEA/UK Users)

If you are located in the European Economic Area (EEA) or the United Kingdom (UK), we process your personal data based on the following legal grounds:

Contract Performance: Processing necessary to provide you with the App and its services.
Legitimate Interests: Processing for our legitimate business interests, such as improving our services, provided these interests are not overridden by your rights.
Consent: Where you have given explicit consent for specific processing activities.
Legal Obligation: Processing necessary to comply with our legal obligations.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

Account Data: Retained while your account is active and for up to 3 years after account deletion for legal and business purposes.
User-Uploaded Photos: Coffee cup and palm reading photos are processed in real-time and are automatically deleted from our servers within 24 hours after the reading is generated.
Usage Data: Retained for up to 2 years for analytics purposes in anonymized form.
Transaction Records: Retained for up to 7 years to comply with financial and tax regulations.

You may request deletion of your data at any time by contacting us or using the account deletion feature within the App.

8. Data Storage and Security

We implement industry-standard technical and organizational security measures to protect your personal information:

All data transmissions are encrypted using TLS/SSL (Transport Layer Security).
Data at rest is encrypted using AES-256 encryption.
Access to personal data is restricted to authorized personnel only.
Regular security assessments and vulnerability testing.
Secure cloud infrastructure with SOC 2 compliance.

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to maintaining appropriate safeguards.

9. Sharing and Disclosure of Information

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

Service Providers: With trusted third-party service providers who assist us in operating our App, subject to confidentiality obligations (e.g., cloud hosting, analytics).
Legal Requirements: When required by law, regulation, legal process, or governmental request.
Protection of Rights: To protect and defend our rights, property, or safety, or that of our users or others.
Business Transfers: In connection with a merger, acquisition, or sale of assets, in which case you will be notified of any changes.
With Your Consent: In any other circumstances where you have provided explicit consent.

10. Third-Party Services

Our App may integrate with or use the following third-party services:

Apple App Store: For app distribution, in-app purchases, and subscription management on iOS devices. Apple's privacy policy applies to payment processing.
Google Play Store: For app distribution, in-app purchases, and subscription management on Android devices. Google's privacy policy applies to payment processing.
Google Play Services: For core Android functionality, authentication, and app updates on Android devices.
Firebase (Google): For crash reporting (Crashlytics), analytics (Google Analytics for Firebase), performance monitoring, and cloud messaging for push notifications.
RevenueCat: For subscription management and analytics.
Cloud Infrastructure: For secure data storage and processing.

These third parties have their own privacy policies governing their collection and use of information. We encourage you to review their policies.

11. Advertising

Zodya does not currently display advertisements within the App. However, we may introduce advertisements in the future through third-party advertising networks such as Google AdMob.

If advertisements are introduced:

We will update this Privacy Policy to reflect the specific data collection and sharing practices associated with the advertising network(s) used.
On iOS devices, we will request your consent through Apple's App Tracking Transparency (ATT) framework before any ad-related tracking occurs.
On Android devices, you will be able to opt out of personalized advertisements through your device's Google Settings (Settings > Google > Ads > Opt out of Ads Personalization).
You will always have the option to receive non-personalized ads based on contextual information only.
Premium subscription plans may offer an ad-free or reduced-ad experience.

We will notify you of any changes related to advertising through an App update and a revision of this Privacy Policy.

12. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal data:

12.1 General Rights (All Users)

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate or incomplete personal data.
Deletion: Request deletion of your personal data.
Opt-out: Opt out of marketing communications at any time.
Account Deletion: Delete your account through the App settings or by contacting us.

12.2 European Economic Area (EEA) and UK Residents (GDPR)

Under the General Data Protection Regulation (GDPR), you have additional rights:

Data Portability: Receive your data in a structured, commonly used, machine-readable format.
Restriction: Request restriction of processing in certain circumstances.
Object: Object to processing based on legitimate interests.
Withdraw Consent: Withdraw consent at any time where processing is based on consent.
Lodge Complaint: Lodge a complaint with a supervisory authority.

12.3 California Residents (CCPA/CPRA)

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have additional rights:

Right to Know: Request disclosure of what personal information we collect, use, disclose, and sell.
Right to Delete: Request deletion of personal information we have collected.
Right to Opt-Out: Opt out of the sale or sharing of personal information (Note: We do NOT sell your personal information).
Right to Non-Discrimination: Not receive discriminatory treatment for exercising your privacy rights.
Right to Correct: Request correction of inaccurate personal information.
Right to Limit: Limit the use and disclosure of sensitive personal information.

To exercise these rights, contact us at appskiesltd@gmail.com. We will respond within 45 days as required by law.

13. Account and Data Deletion

In accordance with Apple App Store and Google Play Store requirements, we provide the ability to delete your account and all associated data.

13.1 How to Delete Your Account

In-App: Go to Settings > Account > Delete Account within the App.
By Email: Send a request to appskiesltd@gmail.com with the subject line "Account Deletion Request" from the email address associated with your account.
Via Contact Form: Submit a deletion request through our contact page at https://zodyatarot.app/contact.html.

13.2 What Happens When You Delete Your Account

Your profile information, reading history, and preferences are permanently deleted within 30 days.
User-uploaded photos (if any remain) are deleted immediately.
Transaction records may be retained for up to 7 years as required by tax and financial regulations.
Anonymized, aggregated usage data that cannot identify you may be retained for analytics purposes.

13.3 Important Notice Regarding Subscriptions

Deleting your account does NOT automatically cancel any active subscriptions. You must cancel your subscription separately through the Apple App Store or Google Play Store before or after deleting your account to avoid further charges.

13.4 Data Deletion Without Account Deletion

You may request deletion of specific data (such as reading history) without deleting your entire account by contacting us at appskiesltd@gmail.com.

14. Tracking, Advertising, and Ad Personalization

14.1 Apple App Tracking Transparency (iOS)

In compliance with Apple's App Tracking Transparency (ATT) framework:

We do NOT currently track you across apps and websites owned by other companies.
We do NOT currently use your data for targeted advertising purposes.
We do NOT share your data with data brokers.
If we implement tracking or advertising features in the future, we will request your permission through Apple's ATT prompt before any tracking occurs.

14.2 Google Play and Android (Android)

On Android devices:

We currently do not serve personalized advertisements.
If personalized ads are introduced in the future, you can opt out by going to Settings > Google > Ads > Opt out of Ads Personalization on your Android device.
Non-personalized ads (if introduced) may still be shown based on contextual information such as the content you are viewing.
We collect the Android Advertising ID solely for analytics purposes. This identifier is not currently used for ad targeting.

14.3 Ad Data Sharing

We do not currently share any data with advertising networks.
We do not sell your personal information to advertisers.
If advertising is introduced, any ad-related data collection will be clearly disclosed in an updated version of this Privacy Policy.

15. Children's Privacy

Zodya is not directed to children under the age of 13 (or 16 in the EEA/UK). We do not knowingly collect personal information from children under these ages.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at appskiesltd@gmail.com. If we become aware that we have collected personal information from a child without verification of parental consent, we will take immediate steps to delete that information from our servers.

In compliance with the Children's Online Privacy Protection Act (COPPA) and Google Play Families Policy, we do not knowingly serve personalized advertisements to children under 13. If the App is used by a user under the applicable age threshold, any future advertisements will be configured to comply with COPPA by serving only limited, non-personalized content.

We use age-gating mechanisms at registration to prevent children under the applicable age threshold from creating accounts.

16. International Data Transfers

Your information may be transferred to, stored, and processed in countries other than your country of residence, including the United States and other countries where our service providers operate.

If you are located in the EEA, UK, or Switzerland, we ensure that any transfer of personal data to countries outside these regions is protected by:

Standard Contractual Clauses approved by the European Commission.
Other legally recognized transfer mechanisms.
Adequacy decisions where applicable.

17. Do Not Track Signals

Some browsers have a "Do Not Track" (DNT) feature that sends a signal to websites you visit indicating you do not want to be tracked. Our App does not respond to DNT signals because we do not track users across third-party websites. However, we honor your privacy choices as described in this Privacy Policy.

18. Push Notifications

We may send you push notifications regarding your readings, horoscopes, and App updates. On iOS devices, push notifications are delivered through Apple Push Notification Service (APNs). On Android devices, push notifications are delivered through Firebase Cloud Messaging (FCM).

You can opt out of receiving push notifications at any time by adjusting your notification settings in your device's settings menu.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make material changes:

We will update the "Last updated" date at the top of this policy.
We will notify you through the App or via email for significant changes.
Your continued use of the App after the changes take effect constitutes your acceptance of the revised policy.

We encourage you to review this Privacy Policy periodically.

20. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: appskiesltd@gmail.com

We will respond to your inquiry within 30 days, or within the timeframe required by applicable law.

If you are located in the EEA and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.