Privacy Policy

Last updated: 29 October 2026 · Data controller: Jessica Sanyoto, Singapore · jsnytyzy@gmail.com

Vedika ("the app", "we", "us") is a tarot and spiritual-reflection app. This policy explains what we collect, why, and what rights you have. We collect as little as possible.

1. What we collect

1.1 A random device identifier

On first launch the app generates a random identifier and stores it on your device. It is not your name, email, phone number, Advertising Identifier (IDFA), or anything that identifies you personally. We use it for exactly two things: counting your one free reading per day, and matching your subscription to your device. If you delete the app, that identifier is regenerated and the link to past usage is lost.

1.2 The card you draw and your Oracle questions

When you request a reading, the app sends the name of the tarot card to our server, which asks Google's Gemini API to write the reading. When you use the Oracle, the text you type and the recent messages in that conversation are sent so the Oracle can answer.

Please do not type sensitive personal information (health details, financial details, other people's names) into the Oracle. It is a reflective tool, not a confidential channel.

1.3 Purchase information

Subscriptions are sold and processed by Apple. We never see or store your card details. We use RevenueCat to check whether a subscription is active. RevenueCat receives the random device identifier and the purchase receipt status from Apple.

1.4 What we do NOT collect

2. Third parties who process data for us

ProviderPurposeWhat they receive
Google (Gemini API)Generates the card reading and Oracle replies The card name; the text you type into the Oracle
RevenueCatVerifies subscription status The random device identifier; purchase receipt state
AppleProcesses payment; distributes the app Your Apple Account purchase record (governed by Apple's policy)
CloudflareHosts our API server Request contents in transit; standard server logs

Each is bound by its own data-processing terms. Google's Gemini API terms apply to the reading generation; we use the paid API tier, under which Google does not use your content to improve its products.

3. Legal basis (GDPR)

4. How long we keep it

5. Your rights

Under the GDPR you may ask to access, correct, delete, or port your data, or object to processing. Write to jsnytyzy@gmail.com. You also have the right to complain to a supervisory authority in the EU member state where you live or work.

Because we hold no account and no identifying details, in most cases the only data we can locate is usage tied to a random device identifier. If you delete the app, we can no longer link it to you at all.

6. Children

Vedika is not directed at children under 13, and we do not knowingly collect data from them. The app is rated accordingly on the App Store.

7. Security

All traffic between the app and our servers uses HTTPS. The Gemini and RevenueCat credentials live on our server and are never included in the app itself.

8. Changes

If we change this policy we will update the date at the top. For material changes we will tell you in the app.

9. Not medical, psychological, or financial advice

Vedika offers spiritual reflection for entertainment. It is not medical, psychological, or financial advice, it does not diagnose or treat any condition, and it is not a substitute for professional help. If you are in distress, please contact a qualified professional or your local emergency services.