Privacy Policy

Who controls your data

The data controller is [ADD LEGAL NAME / OPERATOR], contact email: privacy@YOUR-DOMAIN.example.

Information we may process

• Account: email, display name, internal user ID, and sign-in method.
• Learning: completed lessons, cards, XP, streak, level, achievements, and settings.
• Content you create: journal entries, reflections, and Grimoire notes.
• Premium: entitlement status, offer type, and transaction identifiers. Full payment details are handled by Apple or Google, not Arcana.
• Technical data needed for security and troubleshooting, such as app version, operating system, and diagnostics.

Why we use information

We use information to create and secure your account, synchronize progress, provide the Journal and Grimoire, manage Premium, provide support, prevent abuse, and improve service stability.

Depending on the context, our legal basis is performance of a contract, our legitimate interest in secure operation, consent, or compliance with a legal obligation.

Private reflections

We do not use journal content or personal notes for targeted advertising, and we do not sell them. Do not enter third-party information without permission or content intended for emergency, medical, or legal assistance.

Service providers

We may use Firebase and Google Cloud for authentication, database, and backend services; Apple or Google for sign-in and payments; and RevenueCat for subscription management. These providers process data under their own terms and our instructions as needed to deliver the service.

Transfers and retention

Providers may process data outside the European Economic Area using appropriate legal safeguards. We retain data while your account is active and afterward only as needed for legal obligations, security, dispute resolution, and recoverable backups.

Your rights

Depending on applicable law, you may request access, correction, export, restriction, objection, or deletion and withdraw consent. You may also complain to the relevant supervisory authority.

Account deletion instructions

Security, children, and changes

We use reasonable technical and organizational safeguards, but no internet service is completely secure. Arcana is not designed for children under 16. We will update this policy before introducing a feature that materially changes data handling.

Contact

Send privacy questions and requests to privacy@YOUR-DOMAIN.example.