Tella Tarot
LanguageEnglish

Privacy Policy

How Tella Tarot handles information in the app and on these support pages.

Effective date: 2 November 2026

Tella is for adults aged 18 and over. Relevant reading information and selected card photos are sent to OpenAI with your permission. Your saved archive stays on your device; temporary server results and optional reports have separate retention periods. We do not sell personal information or use it for cross-app advertising.

1. Who is responsible

The controller and privacy contact is Farnaz Ahmadi, operating as Tella Tarot, Voßstraße 32, 10117 Berlin, Germany. Contact hello@tellatarot.com or +49 157 30401944 about privacy, complaints or your rights.

2. Information and purposes

The app can download fonts from Google and check connectivity through endpoints operated by Cloudflare, Google and Apple. These services receive IP addresses and request information, but Tella does not attach questions or photos to connectivity checks.

These website pages use local styles and no embedded advertising or analytics scripts. The host processes technical request information to deliver and secure the pages. Links to social or messaging platforms open external services with their own privacy practices.

3. AI permission and reports

Before first use of the AI features, Tella asks permission to send relevant questions, cards, reading/follow-up context and, for photo recognition, your selected image to OpenAI. Without permission, those features are unavailable and a blocked request does not use a credit.

You can change this choice under Profile → AI & privacy. A saved withdrawal stops new AI requests; a request already accepted for processing may finish. Withdrawal does not erase earlier records. We keep your permission decision, notice version, language and timing with your account or guest record, and cache the choice locally. Account deletion or a privacy request addresses existing records.

Camera and photo access is optional. You can revoke device permissions in settings and enter cards manually instead.

Do not enter sensitive personal information about yourself or others, such as health, sexual, religious or political information. Avoid identifying details and use photos of tarot cards only. The general AI permission is not explicit consent for special-category data. If unnecessary sensitive content comes to our attention, we remove it rather than use it for personalization. Input is not guaranteed to be free of sensitive information.

You can report AI output in the app. The report includes your selected reason and limited account/session, app, language and source information. An optional checkbox includes the original displayed answer; leave it unchecked if the answer contains sensitive or identifying details. Your question, card photo and full history are not attached. Reports are reviewed by authorized personnel, are not sent to OpenAI, and report text is not included in application analytics or logs.

OpenAI's standard API terms do not use API content for model training by default. Its separate security retention is explained below.

4. Adult access and age information

Tella uses age-range or eligibility information provided by Apple or Google. Where needed to decide which check applies, it also reads the store country. This does not give Tella your date of birth or a copy of an identity document. In supported optional cases, the app instead asks for an explicit declaration that you are at least 18.

The check automatically determines access. An under-18 result, insufficient information or a failed check can prevent entry and new readings, photo requests or purchases. Contact hello@tellatarot.com to ask for an explanation or review of a mistaken decision. Review does not guarantee that legally required store information can be overridden.

Detailed store signals are used temporarily on the device. Protected requests send Tella's server only the eligibility decision, its source, platform, policy version and check time, rather than the raw age range or store country. We use this information for access control and applicable age requirements, not advertising or profiling. An optional self-declaration is saved locally for the account or guest installation until removed with the relevant account data or app data.

Tella does not offer an under-18 or parental-permission route. If you believe someone under 18 has provided personal information, contact us so we can review and take appropriate steps, including deletion where applicable. Support, deletion requests and subscription management remain accessible through this website.

5. Who receives information

We may also disclose limited information where legally required or necessary to establish, exercise or defend legal claims.

6. International processing

Tella is based in Germany, but providers may process information in the United States and other countries where they or their subprocessors operate. Firebase Authentication operates in the United States; Resend stores email data there. Using an EU server for one component does not keep every provider's processing in the EU.

For transfers subject to EEA or UK law, applicable safeguards include recognized adequacy decisions or contractual protections such as the EU Standard Contractual Clauses and, where relevant, the UK Addendum. The appropriate mechanism depends on the provider and transfer. You may request information about the destinations and a copy of the relevant safeguards at our privacy contact, with confidential information redacted where necessary.

7. Storage and retention

Saved archive and local preferences
Remain on your device until deleted with the relevant account data, cleared or uninstalled. We cannot remotely erase other devices or operating-system backups. Store age results and current access decisions are held temporarily in memory; optional age declarations are retained locally as described above.
Account, guest and permission records
Used while needed to operate the account or guest session. Account deletion removes the associated account data through the deletion workflow. Limited security and purchase records may remain as explained below. Contact us about guest data if you cannot use an account-deletion flow.
Temporary AI results
Readings, follow-ups and card-recognition results are available for retry for 24 hours after completion, then scheduled for removal on the next hourly cleanup. The cache does not store the uploaded photo itself. Separate credit-usage records prevent duplicate charges. Deletion also covers results associated with the account and linked guest sessions.
AI reports
Attached answer text is scheduled for removal seven days after submission, normally on the next hourly cleanup. A report submitted under an earlier, shorter notice keeps its original deadline. Limited report metadata and duplicate-prevention records expire after 90 days. Repeating a report does not extend its retention. Account deletion covers associated reports, including linked guest reports.
Purchase and credit records
Limited transaction, allocation, ownership, refund and duplicate-prevention records remain while needed to verify or restore purchases, prevent repeated fulfillment, handle disputes or meet record-keeping obligations. Some markers remain necessary while the associated purchase can be presented again. Following account deletion, affected ledgers use a pseudonymous account reference; this is not full anonymization. These records do not all have automatic deletion dates. Records no longer needed for these purposes are deleted or minimized.
OpenAI
Tella disables optional storage of API completions. This does not disable provider security logs: under standard API controls, logs may contain content and normally remain for up to 30 days, with longer retention possible for legal or safety reasons. See OpenAI's data controls.
Security logs
Reading/photo rate-limit records expire two days after their last update. Other infrastructure logs follow their service-specific retention schedules.
Account emails
Encrypted delivery jobs expire within 24 hours; email/network rate-limit records last approximately 24 hours. Non-identifying monthly quota counters may remain for 35 days. Resend retains email content and delivery records separately under its service terms. Delivered emails cannot be recalled.
Support correspondence
Kept as needed to resolve the request and meet applicable legal or dispute-handling obligations.

Scheduled expiry and physical deletion are not always simultaneous. Cleanup or provider delays can extend physical removal. Necessary records may be retained for applicable legal obligations or active claims; access and use are limited to that purpose. See account deletion for what deletion removes and what may remain.

8. Legal bases

Under the GDPR, our purposes and bases are:

We do not rely on legitimate interests or general AI permission as authorization for deliberate processing of special-category personal data without an applicable Article 9 condition.

9. Choices, rights and complaints

You can request access, correction, deletion, restriction or an electronic copy of your information, and object to processing based on legitimate interests, subject to applicable law. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. You may also ask for an explanation and review of an automated access decision.

Write to hello@tellatarot.com. We may ask for proportionate information to verify ownership; do not send passwords or identity documents unsolicited. Under the GDPR, we respond without undue delay, normally within one month. If a lawful extension is needed, we explain it within that month. Any shorter local deadline applies; Brazilian confirmation/access requests can require an immediate simplified response or a complete response within 15 days.

You can complain to the authority where you live or work, or where an alleged infringement occurred. Our local authority is the Berlin Commissioner for Data Protection and Freedom of Information. You do not need our permission to complain.

You may delete your account in the app or request deletion through our account-deletion page. Manage or cancel a subscription separately through the store. Declining data needed for a requested feature can make that feature unavailable; it does not prevent a privacy or support request.

10. Security and policy changes

We use encrypted connections, access controls, authentication and app-integrity checks. No service can guarantee absolute security. We do not currently include third-party advertising, sell personal information or track users across other companies' services for advertising.

We publish changes here with a revised effective date and provide additional notice for material changes. Where a new purpose requires consent, we obtain it before that processing begins.