Privacy Policy
Arcane Logic Inc
Effective September 1, 2026
Last updated September 1, 2026
────────────────────────────────────────────────────────────
SUMMARY
This Privacy Policy describes how Arcane Logic Inc collects, uses, discloses and retains personal information in connection with the Arcane Logic mobile application.
In brief: readings are generated by a third-party artificial intelligence service, to which we transmit your reading selections and, for subscribers with the memory feature enabled, a profile derived from your readings and journal entries. Readings and journal entries are retained until you delete them. Account deletion is available within the application.
WE DO NOT SELL PERSONAL INFORMATION AND WILL NOT DO SO. See Section 8.
Questions regarding this Policy may be directed to privacy@arcanelogic.io.
────────────────────────────────────────────────────────────
SECTION 1 — CONTROLLER
Arcane Logic Inc is a Delaware corporation with a principal place of business in Brooklyn, New York. We operate the Arcane Logic mobile application.
Arcane Logic Inc is the controller of the personal information described in this Policy.
Contact: info@arcanelogic.io
────────────────────────────────────────────────────────────
SECTION 2 — INFORMATION WE COLLECT
Account and identity
• Phone number or email address, used to create and recover your account. Verification is handled by Google Firebase.
• Display name, if you set one. Optional.
What you create in the app
• Readings — the topic and spread you chose, the cards drawn, their orientations, and the interpretation returned. Reading setup is a menu selection; there is no free-text prompt.
• Journal entries — the full text of anything you write.
• Support messages you send us.
How you use the app
• Screens viewed, how far you scroll, how long you stay, and where you came from.
• Navigation — menu opens, taps, movement between screens.
• Sessions — when the app opens and closes, session length, readings per session.
• Reading setup behaviour — which theme and spread you choose, and where you abandon setup.
• The draw — how long it takes, how many gestures you make, how many cards come up reversed.
• Feature usage — whether you open Patterns, Past Readings, the journal, or the share sheet.
• Journal metadata — whether you wrote an entry and how long it ran. We record the length, not the content.
• Paywall behaviour — when it appears, whether you dismiss it, and how many times before you subscribe.
Device and diagnostics
• Device model, OS version, app version and build, language, time zone.
• Approximate location derived from IP address, for fraud prevention and regional configuration. We do not collect precise or GPS location.
• Crash and error reports.
From third parties
• Subscription status, purchase and renewal events, from Apple, Google and RevenueCat.
• Referral or promotional code used at signup, from our affiliate partners.
Aggregate statistics. We derive statistics across the user population, including card frequency and spread usage. These are aggregate and do not identify individual users.
Information we do not collect. We do not collect precise or GPS location, contacts, photographs, microphone or camera data, health data, or biometric information. We do not receive payment card details; Apple and Google process all payments and report only subscription status.
────────────────────────────────────────────────────────────
SECTION 3 — GENERATION OF READINGS
Readings are generated using the GOOGLE GEMINI API. When you request a reading, the following information is transmitted to Google:
• the cards drawn and their orientations
• the topic and spread you selected
• for subscribers, your MEMORY PROFILE — a summary drawn from your past readings and your journal entries. Section 5 explains exactly what this is.
Google processes this information to produce an interpretation, which is returned to us and displayed to you. Under Google's terms applicable to paid API access, customer content is not used to train Google's models.
The only features permitting free-text entry are the journal and support correspondence. Journal entries are transmitted to Google only by way of the memory profile, and only for subscribers with the memory feature enabled (Section 5). Support correspondence is not transmitted to Google.
JOURNAL ENTRIES INFORM THE MEMORY PROFILE. For subscribers with the memory feature enabled, journal content contributes to the memory profile, which is transmitted to Google as context for your readings. Section 5 describes this in detail, including how to disable it.
────────────────────────────────────────────────────────────
SECTION 4 — JOURNAL ENTRIES
The journal is the only feature permitting unrestricted text entry. Entries frequently concern personal matters, and we apply the following practices to them.
• Journal entries are private to your account and are not visible to any other user.
• NO EMPLOYEE OR OFFICER OF ARCANE LOGIC READS JOURNAL ENTRIES, except where you request that we do so in connection with a support enquiry, or where disclosure is legally compelled.
• They are ENCRYPTED IN TRANSIT AND ENCRYPTED AT REST on our infrastructure, and access is restricted to the small number of systems that need it.
• They are never sold, and never shared with partners.
• They are not used to target advertising, now or if we ever introduce it.
• Deleting your account deletes them.
• THEY DO INFORM YOUR MEMORY PROFILE, AND THAT PROFILE IS PROCESSED BY GOOGLE'S AI TO GENERATE YOUR READINGS. That is the one place your journal leaves our servers, it happens only for subscribers with memory enabled, and Section 5 explains it in full.
Scope of the foregoing
Journal entries are processed by automated systems. Generation of the memory profile requires a system to read and summarise entry content. This process involves no human review, and no person other than you receives its output.
Arcane Logic holds administrative access to its production database, as is necessary to operate the service. The commitment above is that such access is not used to read journal content.
Arcane Logic does not employ end-to-end encryption for journal entries, under which we would be technically incapable of decrypting them, because the memory feature requires access to entry content.
We are not a healthcare provider, and this information is not protected health information under HIPAA. It is still information we take seriously.
────────────────────────────────────────────────────────────
SECTION 5 — THE MEMORY PROFILE
The memory feature enables readings to reflect your prior activity. This section describes how the associated profile is constructed, used and retained.
What it is
Rather than transmitting your complete history with each request, we maintain a COMPOSITE PROFILE: a condensed written summary derived from your activity over time. The profile is regenerated periodically as readings accumulate, rather than on each request. This approach limits the volume of your content transmitted to third parties.
What goes into it
• Your readings — the topics you bring, the spreads you choose, the cards that recur, the interpretations you received
• Your journal entries — what you wrote after a reading, and what that suggests about what you are working through
• Patterns across both — themes that repeat, situations that resolve or persist
What it looks like
The profile is a synthesis rather than a transcript. It records themes and continuity across your activity rather than storing your text verbatim.
The profile constitutes an interpretation of your activity, generated by the same class of model that produces your readings. It may be inaccurate. It does not constitute a record of fact or any form of assessment or diagnosis.
Where it goes
The profile is transmitted to the GOOGLE GEMINI API as context when a reading is generated. It is not transmitted to any other recipient. Under Google's terms applicable to paid API access, it is not used to train Google's models.
What it is never used for
YOUR MEMORY PROFILE IS NEVER SOLD. IT IS NEVER SHARED. IT IS NEVER SHOWN TO ANOTHER USER, AND IT IS NEVER USED TO TARGET ADVERTISING — NOT NOW, AND NOT IF WE EVER INTRODUCE ADVERTISING.
The profile exists solely to inform your own readings. It is isolated to your account and is not compared against, pooled with, or aggregated alongside other users' profiles. Deletion of your account deletes the profile.
Your control
• Memory is a subscriber feature. Free accounts do not have a profile built.
• You can turn it off in Preferences → Memory. Readings will still work; they will not draw on your history.
• Turning it off deletes the existing profile. It is not retained in case you change your mind.
• You can exclude an individual journal entry from memory when you write it, if there is something you want to keep to yourself. (CONFIRM THIS EXISTS)
• Deleting your account deletes the profile, along with everything else.
────────────────────────────────────────────────────────────
SECTION 6 — ANONYMOUS USE AND ACCOUNT LINKING
You can begin using the app before creating an account. When you do, we generate an anonymous identifier and store your activity against it.
WHEN YOU LATER CREATE AN ACCOUNT, WE LINK THAT EARLIER ACTIVITY TO IT — so your readings and journal entries carry over rather than being lost.
Activity recorded prior to account creation therefore becomes associated with your identity upon creation of an account. To avoid this, delete the application before creating an account.
────────────────────────────────────────────────────────────
SECTION 7 — PURPOSES OF PROCESSING
• To generate readings and run the app
• To keep you signed in and recover your account
• To provide the memory feature — for subscribers, readings are informed by a summary of previous ones
• To process subscriptions and honour purchases
• To understand usage in aggregate and improve the product
• To detect fraud and abuse
• To respond to support requests
• To comply with law
────────────────────────────────────────────────────────────
SECTION 8 — PRACTICES WE DO NOT ENGAGE IN
WE DO NOT SELL PERSONAL INFORMATION AND WILL NOT DO SO. This applies without exception, including to data brokers and advertisers. No provision elsewhere in this Policy qualifies it. This is a standing commitment and not a description of present practice only.
WE DO NOT USE YOUR CONTENT TO TRAIN AI MODELS. Not ours, not anyone else's.
WE DO NOT PROFILE USERS FOR THE BENEFIT OF THIRD PARTIES. The memory feature constructs a profile of your activity solely to inform your own readings. It is not disclosed to any party other than the AI provider described in Section 5, and it is deleted with your account.
WE DO NOT PRESENTLY DISPLAY ADVERTISING. Revenue is derived from subscriptions. Should advertising be introduced, notice will be given within the application before it takes effect. Any such advertising would not involve the sale of personal information, and would not draw on journal entries or memory profiles.
We do not make automated decisions producing legal or similarly significant effects. A reading does not constitute a decision concerning you; see Section 14.
────────────────────────────────────────────────────────────
SECTION 9 — DISCLOSURE TO THIRD PARTIES
We disclose personal information to service providers only to the extent required for them to perform services on our behalf, and only for that purpose.
Google Cloud and Firebase. Receives account data, readings and journal entries. Provides hosting, database and authentication.
Google BigQuery. Receives usage events, keyed to an account identifier. Our analytics warehouse; access is limited to the founders.
Google Gemini API. Receives reading context as described in Section 3. Generates interpretations.
RevenueCat. Receives a pseudonymous user identifier and subscription events. Provides subscription management.
Apple and Google Play. Receive purchase information. Provide payment processing and subscription billing.
Email provider (TBC). Receives your email address. Sends transactional and, if you opt in, marketing email.
We may also disclose personal information where required by law, to enforce our Terms of Service, to protect the safety of any person, or in connection with a merger, acquisition or sale of assets. In the last case, notice will be given before your information becomes subject to a different privacy policy.
────────────────────────────────────────────────────────────
SECTION 10 — PUBLICLY SHARED READINGS
Where you elect to share a reading, that reading is published to a publicly accessible web page at a link which may be opened by any person holding it.
A shared reading contains the cards drawn, the interpretation, and your display name if one is set. It does not contain journal entries, other readings, contact details or account information.
Deleting a shared reading from your history removes the corresponding public page. Copies made by recipients prior to deletion cannot be recalled.
────────────────────────────────────────────────────────────
SECTION 11 — RETENTION
Account data. Until you delete your account.
Readings and journal entries, subscribers. Until you delete them, or your account.
Readings, free accounts. Your most recent 100 (TBC). Older ones are removed as new ones arrive. Subscribe and the full history is kept from that point forward.
Usage and analytics events. 26 months, then aggregated or deleted.
Support correspondence. 3 years.
Records required for tax and accounting. 7 years, as law requires.
Backup copies persist for up to 90 days following deletion, after which they are overwritten.
────────────────────────────────────────────────────────────
SECTION 12 — YOUR RIGHTS AND CHOICES
Deletion. Account deletion is available at Preferences → Account → Delete Account, without contacting us. Deletion removes your profile, readings, journal entries, memory profile and subscription linkage. DELETION IS IRREVERSIBLE.
Deleting the application does not delete your account, and cancelling a subscription does not delete your account. Account deletion must be performed within the application.
Access and portability. On written request we will provide a machine-readable copy of your personal information within 30 days.
Correction. Most information may be amended within Preferences. For other corrections, contact us.
Analytics. Usage analytics may be disabled at Preferences → Privacy. Crash reporting and essential operational logging continue.
Marketing communications. You may unsubscribe using the link in any marketing email or within Preferences. Transactional messages, including receipts and security notices, will continue.
If you live in California
Under the CCPA as amended, you may request to know what we collect and disclose, request deletion, request correction, and opt out of sale or sharing.
WE DO NOT SELL OR SHARE PERSONAL INFORMATION as those terms are defined under the CCPA (see Section 8). Accordingly, there is no such activity from which to opt out. We will nonetheless acknowledge and respond to any request made.
We will not discriminate against any user for exercising these rights.
Requests may be submitted to privacy@arcanelogic.io. We will verify your identity, ordinarily by requesting confirmation from the email address or telephone number associated with the account, and will respond within 45 days.
────────────────────────────────────────────────────────────
SECTION 13 — AGE RESTRICTION
THE ARCANE LOGIC APPLICATION IS INTENDED FOR USERS AGED 18 AND OVER.
We do not knowingly collect personal information from any person under 18. Where we become aware that we have done so, the information is deleted. Reports may be directed to privacy@arcanelogic.io.
────────────────────────────────────────────────────────────
SECTION 14 — NATURE OF THE SERVICE
THE ARCANE LOGIC APPLICATION IS PROVIDED FOR ENTERTAINMENT AND PERSONAL REFLECTION ONLY. IT HAS NO PREDICTIVE CAPABILITY AND DOES NOT CONSTITUTE ADVICE.
Cards are selected by a random number generator, which operates without reference to you, your circumstances, or any external condition. The selected cards and your chosen topic and spread are transmitted to an artificial intelligence language model, which generates an interpretation. That interpretation is machine-generated text. It is not authored by any person and is not reviewed before display. No part of this process forecasts or predicts any outcome.
Specifically, a reading is not:
• a prediction of future events or a statement as to what will or may occur
• medical, psychological or mental health advice, or any form of diagnosis
• legal advice
• financial or investment advice
• professional advice of any other kind
• a statement of fact concerning you, any other person, or any event
READINGS MUST NOT BE RELIED UPON IN MAKING DECISIONS, including decisions concerning health, finances, relationships, employment or personal safety. A reading that appears to bear on a significant matter reflects meaning drawn by the reader from a random selection of cards. It does not constitute information about the world.
Users requiring assistance should consult a qualified professional. In the United States, the Suicide and Crisis Lifeline is available at 988, by call or text, 24 hours a day.
────────────────────────────────────────────────────────────
SECTION 15 — SECURITY
Data is encrypted in transit and encrypted at rest on Google Cloud infrastructure. Authentication runs through Google Firebase, so we never store a password of yours.
Access to production data is restricted to the founders and is used solely for operating and diagnosing the service. See Section 4 in respect of journal entries.
No system is perfectly secure. If a breach affects you, we will notify you promptly and directly, as the law requires.
────────────────────────────────────────────────────────────
SECTION 16 — INTERNATIONAL TRANSFERS
We operate from the United States and store personal information on Google Cloud infrastructure located in the United States. Use of the application from outside the United States results in the transfer of your information to the United States, where data protection law may differ from that of your jurisdiction.
THE APPLICATION IS OFFERED SOLELY IN THE UNITED STATES. It is not directed to persons outside the United States, and we do not offer it in the European Economic Area, the United Kingdom, or any other jurisdiction. Personal information is collected, stored and processed in the United States under United States law. If you access the application from outside the United States, you do so on your own initiative, and the protections of your local data protection law may not apply.
────────────────────────────────────────────────────────────
SECTION 17 — CHANGES TO THIS POLICY
Where we make a material change to this Policy, notice will be given within the application before the change takes effect, and the date above will be updated. Continued use of the application following the effective date constitutes acceptance of the revised Policy.
────────────────────────────────────────────────────────────
SECTION 18 — CONTACT
Arcane Logic Inc
46 Wilson Ave, Apt 1
Brooklyn, NY 11237