Privacy Policy

Effective as of 2026-10-23

This privacy policy applies to the Mystery app (the "Application") and the website mysteryspiritualworld.com. The Application was developed by Mystery-dev831 (the "Service Provider", "we", "us"). This service is provided "AS IS".

What information do you provide?

To use most features you sign in with Google or Apple. We then receive your email address and a user identifier from the sign-in provider. We also store your account data: coin balance, Premium status, purchase records, loyalty streak and app settings.

When you ask for a reading, you may type a question, a dream description or a description of how you feel. This text is sent to our servers only to create your reading (see "How is AI used?" below).

We may use your email address to contact you with important information about your account or required notices.

What information is collected automatically?

The Application may automatically collect technical information such as your device type, operating system, a device or advertising identifier, your IP address and information about how you use the Application. We use it to run the service, prevent fraud, show ads and improve the Application.

The Application does not collect the precise location of your device.

How is AI used?

Readings (tarot, Gypsy cards, dream interpretation and the crystal guide) are generated by AI on our own servers. Your text and the cards you drew are sent there securely for this purpose only. We do not use your inputs, readings or journal entries to train public AI models.

• Reading rescue: to protect your coins if your connection drops, a finished reading is held on our servers until your device receives it. After that, this backup is deleted automatically.
• Ask about your reading (Premium): so you can ask follow-up questions, the text of a finished reading and your follow-up questions are kept on our servers for up to 24 hours, then deleted automatically.
• Mystic Academy: in the Master's trial, the answer you write is sent to our AI to be scored. We store your learning progress (learned cards, XP, ranks and badges) with your account.

Your journal

Your Mystic Journal (saved readings, dream interpretations and conversations) is stored on your device, not on our servers. Uninstalling the Application removes it.

Mystic Academy leaderboard

The Academy has a weekly league visible to other users. On it you appear only under a generated mystic nickname and an avatar chosen from the cards you have learned, never under your real name or email address. Weekly league entries are deleted automatically after about 10 weeks.

One-time bonuses and abuse prevention

Some rewards are given only once per person: the welcome coins, the free first reading and coin rewards for Academy badges. To make sure of this, we keep a record of your normalized email address and which of these rewards it has already received. This record is kept even after you delete your account, so that the same rewards cannot be claimed again by re-registering. It contains no readings or other personal content. We keep it on the basis of our legitimate interest in preventing abuse.

Payments

On Android, coins and the Premium subscription are purchased through Google Play Billing. Google processes your payment; we receive only a confirmation of the purchase and never see your card or bank details. If a web version of the Application offers purchases, those payments are processed by Stripe under the same principle.

Advertising

The Application shows ads through Google AdMob, including optional rewarded ads that give you coins. AdMob may use your device's advertising identifier. On Android you can reset or delete this identifier in your device settings. On iOS, the Application asks for your permission before tracking.

Third-party services

We use trusted service providers who process data on our behalf. Each has its own privacy policy:

• Google Play Services and Google Play Billing
• Google Firebase (sign-in, database, server functions, app integrity checks)
• Google AdMob
• Sign in with Apple
• TikTok for Business (measuring the effectiveness of our ad campaigns)
• Stripe (payments in a web version, if offered)
• Google Analytics (visitor statistics on this website)

We may also disclose information:

• when required by law, such as to comply with a subpoena or similar legal process;
• when we believe in good faith that disclosure is necessary to protect our rights, your safety or the safety of others, investigate fraud, or respond to a government request.

Data retention and deletion

We keep your account data for as long as you use the Application. Technical usage data is kept for up to 24 months and may afterwards be stored in aggregated form. The retention times of temporary data are described in the sections above.

In-app account deletion: you can permanently delete your account at any time. Open the side menu, select Settings, and tap Delete Account. This removes your profile, sign-in data, coins and Academy progress from our active servers. It cannot be undone. The only data kept afterwards is the bonus record described under "One-time bonuses and abuse prevention".

Your rights

Depending on where you live (for example under the EU GDPR), you may have the right to access, correct, delete or export your personal data, to object to or restrict its processing, and to lodge a complaint with your data protection authority. To exercise these rights, write to [email protected].

Children

The Application is not intended for anyone under the age of 13, and we do not knowingly collect personal data from children under 13. If we learn that a child under 13 has provided personal data, we will delete it. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at [email protected].

Security

We use physical, electronic and procedural safeguards to protect your information. Data is transmitted over encrypted connections, and access is limited to those who need it to operate the service. No security system can prevent every possible breach.

Changes to this policy

We may update this privacy policy from time to time. Changes are published on this page with a new effective date. Please check it regularly; continued use of the Application means you accept the updated policy.

Contact

If you have any questions about privacy, please contact us at [email protected].