Privacy Policy

Last updated: October 17, 2026

This policy explains what personal data the Artemisa Tarot Android app processes, what it is used for, where it is processed and how you can exercise your rights.

Data controller

Martin Quinta is the controller of your data. Contact: martin@nomada.dev.

The app does not ask you to sign up or log in to use it. Signing in with Google is optional and only serves to back up your progress (see “Save with Google”). To tell your installation apart, the app uses an installation identifier that does not contain your name, email or phone number. That identifier is backed up to your Google account through Google Play services (Block Store), so it can be recovered if you change phones.

Save with Google

It is optional. If you choose “Save with Google”, the app connects to your Google account and:

Our server stores an irreversible fingerprint of your account, together with your installation identifier, only to give you back your coins if you reinstall the app or change phones. The fingerprint does not contain your email, name or photo, and it cannot be used to tell which account it belongs to.
Your Google Drive, if you turn on the copy, keeps a copy of the app data (name, reading history, cards, silver coins and settings; without audio) in a private folder of your own Drive that only the app can read and that takes up space in your Drive. The copy is updated at most once a day. Our server does not receive it.

You can remove the app’s access from your Google account (Security → Third-party apps & services) and delete the copy from Google Drive (Settings → Manage apps).

Data we process

Installation identifier, time zone and language.
Name you enter in the app.
Questions you ask the tarot and, in follow-up conversations, the previous questions and reading summaries of that conversation.
Birth data for the natal chart: name, date, time and coordinates of the place of birth. The place name is converted to coordinates on your phone and is not sent.
Another person’s birth data, if you use the compatibility feature. Only enter another person’s data if you have their permission.
Coin balance and a record of rewards for watching ads.
Fingerprint of your Google account, if you choose “Save with Google”.
Advertising data collected by Google AdMob, such as the device advertising ID, IP address and ad interactions.
Crash logs and diagnostics: when the app closes because of an error, Firebase Crashlytics (Google) receives a technical report —information about the device and operating system, and the point in the code where it failed— linked to a Crashlytics installation identifier. The app does not add your questions, readings or birth data to these reports.
Usage data: Google Analytics for Firebase receives events about how you use the app —for example, that you started or finished a reading and how many cards it had, or that you watched an ad—, device information and an app instance identifier. The app does not send it your questions, readings or birth data.

We do not ask for sensitive data. However, your questions are free text: avoid including information about your health, religion, sex life or anything else you do not want to transmit.

What we use it for

Generating tarot readings, the card of the day, the natal chart and compatibility.
Keeping your coin balance and crediting rewards for watching ads.
Giving you back your coins when you reinstall or change phones, if you saved with Google.
Limiting the number of requests per installation to prevent abuse.
Showing ads in the free version.
Detecting and fixing errors in the app.
Measuring how the app is used, to improve it.
Protecting the server against abuse and against requests that do not come from the app.

Where it is processed

On your phone. Your profile, reading history, natal and compatibility charts, card of the day and collected cards are stored in the app’s storage. Artemisa’s voice is generated on the phone and the reading audio never leaves it.

On our server. Requests are sent encrypted (HTTPS) to our server on Google Cloud, in the United States. The server does not store your questions, readings or birth data: it uses them to generate the response and discards them. It only stores your coin balance, the ad reward record and, if you saved with Google, the fingerprint of your account, linked to your installation identifier.

At artificial intelligence providers. To generate readings, the server sends your question, the cards, your name and, when applicable, birth data to one of these providers: MiniMax, OpenAI, Google (Gemini), Groq or DeepSeek. Each provider processes the data under its own privacy policy, and their servers may be located outside Mexico, including the United States and China. OpenAI may use the data it receives to improve its models.

At Google. If you dictate your question with the microphone, speech recognition is performed by the Google speech service on your phone, not by our server. Ads are served by Google AdMob, which processes data under the Google Privacy Policy and how Google uses information from partner apps. Crash reports are sent to Firebase Crashlytics and usage data to Google Analytics for Firebase, which process them under Firebase privacy and security information. To check that requests come from the genuine app installed from Google Play, the app uses Firebase App Check with Play Integrity: Google receives technical information about the device and the app to verify it. App Check does not retain that information and, once it is sent to Google Play, it is subject to Google’s terms; the token it issues lasts at most 7 days.

The free version shows Google AdMob ads. Where applicable law requires it, the app will ask for your consent before showing personalized ads. That same consent decides what Google Analytics keeps: if you do not give it, it keeps no usage data linked to your device. You can reset or delete your advertising ID in Android settings.

Phone permissions

Microphone: only to dictate your question. It is requested the first time you use it.
Notifications: for the daily card of the day reminder. It is a local reminder; we do not send notifications from the server.

The app does not request access to your location, contacts or camera.

Retention

On the phone: history readings without a star are deleted automatically after one month. Starred readings are kept.
Android backup: if Android automatic backup is enabled, the app data (without audio) is copied to your Google account and may be restored when you reinstall. You can turn it off in Android settings.
On the server: the coin balance, the reward record and the fingerprint of your Google account are kept while you use the app or until you request their deletion.
In your Google Drive: the copy is kept until you delete it from Google Drive.
Crash reports: Firebase Crashlytics keeps them for 90 days.
Usage data: Google Analytics keeps events for 2 months and the data linked to your device for 14 months.

Uninstalling the app deletes the data stored on the phone, except what the Android backup keeps and the identifier stored in Block Store.

Your rights

You can request access to, rectification, cancellation of, or object to the processing of your personal data (ARCO rights), and withdraw your consent. Write to martin@nomada.dev describing your request. Since we do not store your name or email, we may ask you for information to locate the data linked to your installation. We will reply within 20 business days.

Minors

The app is intended for people aged 13 or older. If you are between 13 and 17, you need the consent of a parent or guardian to use it. If we learn that we process data from a child under 13, we will delete it.

Changes to this policy

We will publish any change on this page and update the date at the top.