Tarosyn Legal

Privacy Policy

Last updated May 16, 2026

Tarosyn LLC ("Tarosyn," "we," "us," or "our") respects your privacy. This Privacy Policy describes how we collect, use, share, retain, and protect your personal information when you use the Tarosyn web app, mobile app, and related services (the "Service"). It applies to all users worldwide.

1. information we collect

Account & Identity: username, email address, password hash, phone number (if provided), profile picture, biography, pronouns, language preferences, and authentication identifiers from sign-in providers (email + password, Google, Sign in with Apple).

Birth & Astrological Data: birth date, birth time, birth city/country, computed natal chart positions, zodiac sign, life path number, and Chinese zodiac data. This data is the heart of personalized readings.

Location: if you opt in, approximate location for proximity-based friend discovery and pathway features. Birth-place coordinates are used for chart calculation only. You can disable location at any time.

User-Generated Content (UGC): tarot readings, journal entries, gratitude entries, dream descriptions, photo submissions for in-person readings, profile photos, custom spreads, Chant feed posts, comments, and circle messages.

Messages & Social Graph: direct messages, circle chat messages, friendships, witnesses, blocks, gifts, callings, and other social connections.

Contacts (Optional): if you grant contacts access, hashed contact identifiers are sent solely to find friends already on Tarosyn. Raw contact lists are not stored.

Photos & Uploads: images you upload (profile pictures, in-person photo readings, Chant posts, evidence on bug reports) are stored in object storage with access controls.

Payments & Entitlements: Stripe customer/subscription identifiers, Apple/Google in-app purchase receipts, Luna credit balance, and gift/order history. We do not see or store full card numbers.

Device & Usage: device type, operating system, app version, push notification subscriptions, IP address, device step counts (if you opt into pathway leveling), and basic interaction analytics used for reliability and feature improvements.

Cookies & Tokens: session cookies, guest tokens, and (for native apps) secure local credential storage used to keep you signed in.

2. how we use your information

We use your information to:

Provide personalized tarot readings, horoscopes, dream interpretations, mystic messages, numerology, and pathway content Render your natal chart and synastry comparisons Maintain your reading journal, vault, gemstones, and collected cards Enable social features such as friendships, witnessing, circles, callings, gifts, and messaging Process subscription payments, in-app purchases, and Luna credit transactions Send service-related communications (verification codes, security notices, purchase receipts) and, if you opt in, push notifications Detect and prevent fraud, abuse, harassment, and security incidents Comply with legal obligations and enforce our Terms Improve and develop new features (using aggregate or de-identified data where possible)

3. ai-generated content & processing

Tarosyn uses third-party AI services (currently OpenAI) to generate interpretive content including tarot readings, horoscopes, dream interpretations, mystic-persona messages, image-based readings, and pathway insights.

To personalize responses, we send relevant context to the AI provider, which may include: your zodiac sign, birth chart positions, life path, selected mystic persona, "truth state" tone setting, your prompt or question, dream text or photo you submitted, and the cards drawn for the reading. We do not send your password, payment details, full friend list, or unrelated private messages.

AI providers act as data processors and are bound by their own commitments not to use submitted content to train their general models for enterprise/API usage. AI-generated content is symbolic and reflective; it is not professional medical, legal, financial, or psychological advice.

For a deeper explanation of what data is shared with AI providers, how it is used, and our position on model training, see our AI Training Data Policy.

4. data security

We implement administrative, technical, and physical safeguards including TLS in transit, encryption at rest for sensitive fields, hashed passwords, scoped session tokens, server-side authorization on every request, rate limiting, and access controls on object storage.

No system is perfectly secure. If we discover a breach affecting your personal information, we will notify you and applicable authorities as required by law.

5. third parties we share data with

We do not sell your personal information. We share specific data with vetted service providers strictly to operate the Service:

OpenAI — AI text and image generation for readings, horoscopes, dreams, and personas Stripe — payment processing, subscription billing, and fraud prevention Apple App Store / Google Play — in-app purchases, subscription management, and receipt validation SendGrid — transactional and verification emails Printful — fulfilment of physical merchandise from the Reliquary store (name, shipping address) Replit / Cloud Hosting — application hosting, object storage, and managed PostgreSQL Push providers (APNs, FCM) — delivery of opt-in notifications Other Users — only data you choose to share (public profile fields, shared readings, Chant posts, circle messages, gifts, witnesses) Legal & Safety — when required by law, regulation, valid legal process, or to protect the rights, property, or safety of Tarosyn, our users, or the public Business Transfers — in the event of a merger, acquisition, or asset sale, your information may transfer to the successor entity, subject to this Policy

6. user-generated content & community safety

Content you publish to public surfaces (public profile, Chant feed, gallery, shared readings, public circles) is visible to other users and may appear in search engines.

We provide tools to block users, leave circles, hide content, and report abuse. We may remove content or suspend accounts that violate our Terms or community standards.

7. your privacy controls

You have control over your data through Settings:

Set reading visibility (private, friends only, or public) Control online status and last-seen visibility Manage friend connection visibility levels Enable or disable location sharing Choose what birth chart information appears on your public profile Mute or block other users Manage push notification preferences Choose your AI "truth state" tone (Veiled, Aligned, Unveiled)

8. data retention & account deletion

We retain your data while your account is active. You can request account deletion in-app (Settings → Account) or by emailing [email protected]. Upon deletion we remove or irreversibly anonymize personal data, typically within 30 days, except where retention is required for legal, tax, fraud-prevention, or dispute-resolution purposes.

You may request a copy of your personal data, correct inaccurate information, or restrict certain processing by emailing [email protected].

Backups containing your data may persist for up to 90 days after deletion before they are overwritten.

9. ugc moderation & safety

Tarosyn hosts user-generated content (Chant posts, comments, messages, Circles, profile bios). To keep the community safe, every piece of user content includes a Report control, and any seeker may block another user from their profile.

Reports are reviewed by Tarosyn moderators within 24 hours, and offending content or abusive accounts are removed or banned as warranted. Reports include the reporter's account ID and are retained for safety, audit, and legal-compliance purposes. Reporters' identities are not shared with the reported party.

Blocked-user relationships are stored to ensure your blocks are honored across the feed, search, direct messages, and Circles.

10. children's privacy

Tarosyn is intended for users 13 years of age and older. We do not knowingly collect personal information from children below this age. If you believe a child has provided personal information without proper consent, please contact us at [email protected] and we will delete it.

11. your rights (gdpr, ccpa, and similar laws)

Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your personal information; to object to certain processing; and to withdraw consent. California residents have the right to know what personal information we collect and to request deletion. We do not sell personal information as defined under the CCPA.

To exercise these rights, email [email protected]. We will verify your identity before responding and will not discriminate against you for exercising your rights.

12. international transfers

Tarosyn is operated by Tarosyn LLC from the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States and other countries that may not have the same data-protection laws as your jurisdiction. Where required, we use appropriate safeguards such as Standard Contractual Clauses for cross-border transfers.

13. changes & contact

We may update this Privacy Policy from time to time. We will notify you of material changes through the Service or by email and update the "Last Updated" date above.

For privacy-related questions or requests, contact us at: [email protected]

Tarosyn LLC, United States.