Privacy Policy

1. Who We Are

This Privacy Policy explains how 617SW, LLC("617SW," "we," "us," or "our") handles information in connection with Lenora: Daily Tarot (the "App").

2. Information We Process

• Questions you submit for an AI-assisted tarot reading;
• Selected cards, generated guidance, and follow-up messages;
• A pseudonymous account identifier used to protect your readings and allowances;
• Subscription status, product identifiers, and transaction status;
• Security signals used to verify that requests come from a genuine App installation;
• Limited diagnostics and support information you choose to send us.

Journal entries and preferences are stored on your device unless a feature clearly tells you otherwise. Please do not place highly sensitive personal information in a tarot question or support message.

3. How We Use Information

We use this information to generate and display readings, preserve your reading history, maintain daily allowances and purchased reading credits, verify subscription access, prevent abuse, secure the service, answer support requests, and improve reliability.

4. Service Providers

When you request an AI reading or follow-up, 617SW sends OpenAI the cards and their spread positions, your question or follow-up message, relevant prior reading guidance, and your requested language. OpenAI processes that information through its API to generate the reading text. Do not include confidential or highly sensitive personal information in a question. We do not send OpenAI your Apple ID, payment-card details, or on-device journal entries unless you place that information in the text you submit.

OpenAI states that API inputs and outputs are not used to train its models by default unless the API customer opts in. Lenora sends requests with response storage disabled, but OpenAI may retain API inputs, outputs, and associated metadata for up to 30 days for abuse monitoring unless different approved data controls apply, or longer when legally required or necessary to prevent harm. See the OpenAI Privacy Policy and OpenAI's API data-control documentation for current details.

RevenueCat processes subscription and purchase status. Apple processes App Store transactions, Sign in with Apple, and App Attest security data. Our hosting providers process encrypted network traffic and stored application data as needed to operate the service. These providers handle data under their own terms and privacy commitments.

5. Attribution

The App may use Apple AdServices attribution through RevenueCat to understand whether an App Store download resulted from an Apple Search Ads campaign. This may include campaign, ad group, and keyword attribution supplied by Apple. The App does not add an App Tracking Transparency prompt for this Apple-provided attribution flow.

6. Retention and Deletion

Server-stored questions, readings, and follow-up content are retained for up to 365 days unless you delete them sooner. Use the App's delete-data control to remove server-stored reading content associated with your account. Deleting App data does not cancel an App Store subscription or erase transaction records that Apple or RevenueCat must retain. Security, transaction, backup, and legal records may remain for a limited period where reasonably necessary.

7. Security

We use encrypted transport, Apple App Attest, account binding, access controls, request limits, and restricted server credentials. No service can guarantee absolute security, but we design Lenora to prevent a person who only knows an account identifier from accessing or consuming that account's readings.

8. Children's Privacy

Lenora is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

9. Your Choices and Contact

You can delete reading content in the App, manage your subscription through Apple, and contact us about a privacy request through our contact form.

10. Changes

We may update this policy as the App changes. We will revise the effective date above when we publish an update.