Privacy Policy

1. Who We Are

Cards with Carla is a digital tarot reading and personal growth platform created by Carla Gubb, based in South Africa. This policy explains how we collect, use, and protect your personal information in line with the Protection of Personal Information Act (POPIA) and other applicable laws.

2. Information We Collect

When you use Cards with Carla, we collect:

• Account information: Your name, email address, and password (encrypted) when you sign up.
• Profile information: Optional details you choose to provide, such as a profile photo.
• Usage data: Your card pulls, spread readings, journal entries, lesson progress, and other in-app activity to provide and personalise the service.
• Payment information: When you subscribe to Carla's Circle, payment is handled securely by Paystack. We do not store your card number or banking details. We receive confirmation of your subscription status from Paystack.
• Communications: Feedback you submit through the app, and your email reminder preferences.

3. How We Use Your Information

We use your information to:

• Provide and personalise the Cards with Carla service
• Process and manage your subscription
• Send you daily card reminders (if you opt in)
• Track your reading history, streaks, and journey progress
• Generate personalised readings and insights based on your tarot activity
• Improve the app experience based on usage patterns and feedback

4. Who We Share Your Information With

We do not sell your personal information. We share data only with:

• Paystack: Our payment processor, to handle subscription billing securely.
• Hosting and infrastructure providers: To run the app reliably and securely.
• Language model providers: To generate personalised readings, interpretations, and chat responses. When you submit a question, pull a card, or request a reading, relevant input (such as your question, selected cards, and recent reading context) is sent to third-party language model services for processing. These providers process data according to their own privacy policies and do not receive your name, email, or account details.

We will never share your reading history, journal entries, or personal tarot data with third parties for marketing or advertising purposes.

5. Automated Content Generation

Cards with Carla uses automated technology, including large language models (a form of artificial intelligence), to generate tarot readings, personalised card interpretations, chat responses, and other content. Your input (such as questions, card selections, and reading context) is processed by these systems to produce responses styled after Carla's personal approach to tarot.

Journal entries you write are stored on our servers and are not sent to any third-party service unless you actively request a reading or insight that references them. You can delete your journal entries at any time.

6. Data Security

We take reasonable steps to protect your personal information. Passwords are encrypted, payment processing is handled by PCI-compliant providers, and access to user data is restricted to authorised personnel only.

7. Your Rights (POPIA)

Under the Protection of Personal Information Act, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Object to the processing of your information
• Withdraw consent for optional communications (e.g. daily reminders)

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

8. Cookies and Local Storage

Cards with Carla uses essential cookies for authentication (keeping you logged in) and local storage for app preferences (e.g. streak celebration tracking). We do not use advertising or tracking cookies.

9. Data Retention

We keep your account and reading data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where we are legally required to retain it.

10. Children

Cards with Carla is not intended for children under 18. We do not knowingly collect personal information from anyone under 18 without parental consent.

11. Changes to This Policy

We may update this privacy policy from time to time. When we do, we will update the date at the top. Continued use of the app means you accept the updated policy.

12. Contact

For any privacy-related questions or requests, reach out to [email protected].