Privacy Policy
Effective 10 July 2026 · Version 2026-07-10
Controller status
The verified controller identity, legal address, and country must be published before accounts and personal inquiries open. Contact: supportsouliat@gmail.com.
Data, purposes, and lawful basis
Guest tarot uses the calendar date and device state to provide a stable daily card and does not need a server account. Accounts use email, authentication identifiers, and security metadata to perform the requested account service. Optional name, birth date/time/place, region, language, spiritual preferences, questions, messages, and manual replies are used to personalise and fulfil requests; explicit consent is requested where content may reveal beliefs or highly personal circumstances. Limited identifiers and safety evidence may be processed under legitimate interests to prevent abuse. Records required by law use the applicable legal-obligation or legal-claims basis.
Recipients and international transfers
Supabase may process authentication and message data. Cloudflare Pages hosts static application files. FormSubmit and the configured email provider may deliver support notifications. These providers may process data outside your country. Before personal services open, SOULIAT will verify the providers' current data-processing terms and applicable transfer safeguards and publish the controller's relevant transfer information.
Retention
Active account data is kept while the account is active. Inquiries, replies, and closed support correspondence are retained for up to 24 months after the last interaction, then deleted or anonymised unless earlier erasure or legal retention applies. Abuse-prevention records are normally kept for 12 months. Consent evidence is kept for the account lifetime plus the applicable legal-claims period. Automatic deletion will not be promised until the process is operationally verified.
Your rights
Subject to applicable law, you may request access, rectification, erasure, restriction, portability, or object to processing. You may withdraw consent without affecting earlier lawful processing. Email supportsouliat@gmail.com; identity verification may be required. You may complain to the supervisory authority in the controller's country or, where applicable, your habitual residence or workplace.
Automation, security, and required information
Daily-card selection and safety moderation do not make automated decisions with legal or similarly significant effects. Email/password details are required for an account; a meaningful question is required for a manual inquiry; birth data is optional. SOULIAT uses access controls and data minimisation, but no online system is perfectly secure. Palm images are not collected in this release.
Children and updates
Accounts and personal inquiries are for adults aged 18 or older. SOULIAT does not knowingly collect children's personal data. Material policy changes will update the version and request renewed acceptance where required.