Last updated: March 2026
This policy explains what personal data Amesya collects, why we collect it, how it is used, and the rights you have over it — including full deletion. It applies to all users worldwide and meets the requirements of the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
Amesya is a spiritual guidance and tarot reading application operated as an entertainment service. For privacy-related enquiries, contact us at support@amesya.app. If you are in the European Economic Area (EEA), Amesya acts as the data controller for your personal data.
We collect the following categories of data: (a) Personal info — your email address and a user ID when you create an account; (b) App activity — in-app interactions such as readings performed, reshuffles used, daily draw history, and card library searches; (c) Financial info — purchase history (type and date of credits bought) processed via Stripe; (d) App info & performance — crash logs and error reports used to improve stability. We do not collect precise or approximate location data, health data, messages, photos, audio, contacts, or calendar data.
Your data is used to: manage your account and authenticate you; enforce daily usage limits; personalise your reading experience based on saved preferences; send transactional emails (e.g. password reset). We never sell, rent, or share your data with third parties for marketing or advertising purposes.
For users in the EEA, we process your data on the following legal bases: (a) Contract — processing necessary to provide the service you signed up for; (b) Legitimate Interests — usage analytics to keep the service fair; (c) Consent — for optional features such as saving readings and personalised preferences. You may withdraw consent at any time without affecting the lawfulness of prior processing.
Payment information is handled entirely by Stripe, Inc. Amesya never stores your credit card details. Stripe processes your payment data under their own Privacy Policy (stripe.com/privacy). We receive only a confirmation of transaction status and a transaction reference.
Amesya uses third-party AI technology to generate reading interpretations. Only the names and meanings of drawn cards — no personally identifiable information — are sent to the AI provider. All readings are for entertainment purposes only and do not constitute professional advice of any kind.
We share data only with: (a) Stripe — for secure payment processing; (b) AI service providers — card names/meanings only, no personal data. No data is sold to any third party. Sub-processors are contractually bound to process data only as instructed and to maintain appropriate security.
Amesya uses browser localStorage to store your daily usage count, reading preferences, and daily draw history on your device. This data is not transmitted to our servers unless you are signed in. No third-party advertising or tracking cookies are used.
Account data and saved readings are retained for as long as your account is active. You may request deletion at any time (see Your Rights below). Anonymised, aggregated usage statistics may be retained indefinitely for service improvement.
Depending on your jurisdiction, you have the right to: access the personal data we hold about you; correct inaccurate data; request erasure ('right to be forgotten'); restrict or object to certain processing; receive your data in a portable format; lodge a complaint with your national data protection authority. To exercise any of these rights, contact us through the in-app support channel. We will respond within 30 days. Verified deletion requests are fulfilled within 30 days.
You can delete your account and all associated data directly from the app: go to Profile → My Setup → scroll to the bottom and tap 'Delete Account'. All your saved readings, preferences, and usage records will be permanently removed. You can also request deletion of specific data without deleting your account (partial deletion): go to Profile → My Setup → 'Request Partial Data Deletion', or email support@amesya.app. Saved readings and journal entries are deleted immediately; usage stats and preferences within 7 days; purchase records are retained for a minimum of 90 days for legal and tax purposes.
In accordance with Google Play's Data Safety requirements, here is a summary of data collected by Amesya: Email address (required, for account management) — collected and stored. User ID (required, for app functionality) — collected and stored. Purchase history (optional, for app functionality and fraud prevention) — collected, stored, and shared with Stripe for payment processing. App interactions such as reading history and searches (required/optional, for app functionality and personalisation) — collected and stored on-device and server. Crash logs (required, for analytics) — collected ephemerally. No data is sold to third parties. All data is transmitted via encrypted HTTPS connections.
We use industry-standard security measures including encrypted connections (HTTPS/TLS), access controls, and secure third-party infrastructure. No system is 100% secure; in the event of a data breach affecting your rights, we will notify you as required by applicable law.
Your data may be processed outside your country of residence, including in the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission to protect your data.
Amesya is intended for users aged 13 and older. Users under 18 should use the app with parental guidance. We do not knowingly collect personal data from children under 13. If we become aware that a child under 13 has provided personal data, we will delete it promptly.
We may update this Privacy Policy periodically. Material changes will be communicated via in-app notice at least 14 days before taking effect. Continued use after the effective date constitutes acceptance of the updated policy.
For privacy-related questions, data requests, or complaints, contact us through the app's in-app support channel. EEA users also have the right to lodge a complaint with their local Data Protection Authority (e.g. the Swedish IMY for Sweden-based users).
✦ YOUR DATA RIGHTS AT A GLANCE
Access
See what we hold
Correct
Fix inaccurate data
Delete
Erase your data
Export
Portable copy
Restrict
Limit processing
Complain
Contact your DPA
To exercise any right, email us at support@amesya.app
We use cookies & local storage
Amesya stores your daily usage and preferences on your device. We also use AI services to generate readings. Privacy Policy