Privacy Policy
Last updated 3 October 2026
TARO is an app for iPhone and Android that deals tarot cards between two people. This page explains what leaves your phone, how it is used, and how to ask us to delete it. No account or sign-in is required.
What leaves the phone
- Names. Your first name and whatever you called the other person. They travel with a Thread so the person opening your link knows who sent it. With them, one letter each saying whether you and the other person are a he or a she, so the app and the page can conjugate a verb about you in languages that need it. The person opening your link can correct their own.
- The question, if you type one. It is part of the Thread and part of what a reading is written about.
- A device identifier. Minted on your phone, kept in the iOS Keychain or in the app's private storage on Android. It identifies an installation rather than requiring your email address, and it is how a Thread knows which side you are.
- A push token, if you allow notifications, so we can tell you when someone opens your link.
- A purchase identifier, if you buy anything, which our server checks with Apple. We never see your payment details — Apple does not give them to us. The Android app currently has no purchases or subscriptions.
- App interactions. Our server records events such as opening the app, creating or opening a Thread, and requesting a reading, together with the installation identifier, language and platform. We use these to understand app use, maintain the service and apply reading limits.
- Content reports. If you choose to report content in the Android app, the confirmation screen asks before sending the reported text, its language, app version and installation identifier to our server. We use reports to investigate offensive or inappropriate content and improve content safeguards. Reporting is optional.
What stays on the phone
The deck, the card meanings, your birth cards, your journal and your daily card.
Your reading — the long text written to you, in the second person — is not made on the phone, but the text that comes back is kept only there. Nobody else on the Thread can read it. If you report that text, a copy is sent to us for review as described above.
Two smaller pieces of that answer are not private to you, because they are meant to be seen by both of you: the one-line verdict on the spread, and the short paragraph under each card. Those are stored on our server with the Thread so the other phone and the shared page show the same words instead of paying for a second reading. They are written about the spread, not about you. They are deleted with the Thread.
Where it goes
- Our server (
tarot.callmar.online), which holds Threads so both sides can see the same six cards. - A language model, for the written readings and the
birth-date portrait. What is sent, through our own server, to OpenRouter:
the cards and their positions, how the two of you know each other, one
letter each for he or she, the tone you chose, the language, the grid the
birth dates are turned into — and the question, in the words you typed it
in.
Names are not sent. Before anything leaves the phone, your name and the other person's are replaced with
name1andname2. The model writes its answer aboutname1andname2, and your phone puts the real names back before you see the text. The model is never told who you are.The one thing we cannot anonymise is the question, because the question is what is being answered. If you type a name, a place or anything else about your life into it, that goes with it. Our server keeps a count per phone to cap daily use; OpenRouter handles the request under its own policy. OpenRouter passes the request to the company that runs the model; we allow only companies that do not store it or train on it.
- Apple, for iPhone push notifications and purchases, and Google Firebase Cloud Messaging, for Android push notifications. A notification token identifies the installation to the relevant delivery service.
What we do not do
No advertising. No tracking across apps or websites. No data brokers. No third-party analytics SDK. We do not sell personal data. We use the service providers described above to operate the app, and share a Thread's visible content with the person you invite.
Children
TARO is rated for older teenagers and adults and is not directed at children.
Deleting your data
Deleting a Thread you sent removes it from your phone and asks the server to drop it. Deleting a Thread you received removes it from your phone and unlinks your phone from it; the person who sent it keeps their copy. Deleting the app removes everything held on the device. To have everything associated with your installation erased from the server, email gameworkapp@gmail.com with the subject “TARO data deletion”. No account is needed. If you still have a Thread link from the app, include it so we can identify the relevant installation; otherwise we will help you identify it. Do not send payment details. Once we can identify your installation, we remove its identifier, push token, Threads you created, and associated app events and content reports. Threads created by someone else remain with their creator, with your installation unlinked. We do not impose an additional retention period on the data covered by your deletion request.
Contact
TARO is entertainment and self-reflection. The cards do not predict the future, diagnose you, or speak for anyone else.