Privacy Policy

Spelly is operated by Alina Khomyn, a sole proprietor registered in Ukraine, who is responsible for processing your personal data.

For privacy questions or requests, contact spellyapka@gmail.com.

Account and profile

When you create an account, we store your email address, sign-in method, internal account identifier, and display name.

We also store the information you provide during onboarding: your date, time, and city of birth, gender, and preferred language. We use this information to personalize your astrology and energy profile.

If you complete the Animal Guide quiz, we store your resulting totem animal. We do not store your individual quiz answers.

Your birth city is entered manually. Spelly does not access your device’s GPS location.

Questions and readings

We store your questions, card names and orientations, and AI-generated readings so you can revisit them in your private history.

Readings are automatically deleted after 30 days unless you mark them with a star. Starred readings remain saved until you remove the star, delete the reading, or delete your account.

Card scanning

When you scan physical cards, images are processed on your device. Small card crops are sent through our server to Google Cloud Vision for text recognition.

We process these images in memory for the duration of the request and do not store them.

You can also scan a photo from your device’s gallery. Spelly accesses only the images you choose to open and does not browse or upload your photo library.

Affirmations and preferences

Your Spellbook affirmations are stored only on your device and are not uploaded to our servers.

Usage and crash data

We maintain daily reading and scan counters to apply fair-use limits.

We use Firebase Crashlytics to receive technical crash reports, such as stack traces, device model, and operating system version. We do not link these reports to your account identity or use them for advertising or tracking.

Subscriptions

We receive purchase confirmations and store only your subscription status on your account.

Apple processes payments. We do not receive your payment card details.

Contact and support requests

When you submit a contact or support form, we process the information you enter, such as your email address, name if provided, message, and any other information you choose to include.

We use Web3Forms to process form submissions and deliver them to our support email inbox. Web3Forms may also process technical information, including your IP address, for service operation, security, and spam prevention.

Please do not include passwords, payment card details, or sensitive personal information that is not necessary to resolve your request.

We use your information to:

• Create and manage your account.
• Personalize your profile and app experience.
• Generate and save readings.
• Recognize scanned cards.
• Manage subscriptions and usage limits.
• Identify crashes and improve app reliability.
• Receive and respond to privacy and support requests.
• Protect contact forms against spam and abuse.

We do not sell personal data, share it with advertisers, or track you across other companies’ apps and websites.

Spelly does not use advertising SDKs or third-party analytics. We do not access your contacts or microphone.

Google Firebase and Google Cloud

We use Google services for authentication, database storage, server functions, card text recognition, and crash reporting.

OpenAI

To generate a reading, our server sends OpenAI your question, card names and orientations, optional topic tags, and app language.

We do not send your name, email address, account identifier, or photos to OpenAI. Personal information you include in your question will, however, be included in that request.

OpenAI does not use API data to train its models by default. Abuse-monitoring logs may be retained for up to 30 days, with exceptions where longer retention is legally required or necessary to protect its services or others.

Apple

Apple processes in-app payments and manages your subscription. We store only your subscription status on your account.

Web3Forms

We use Web3Forms, operated by Web3Creative, to process contact and support form submissions and deliver them to our email inbox.

Web3Forms acts as a data processor on our behalf for information submitted through these forms. It uses infrastructure and spam-prevention providers to operate and secure its service. Its privacy policy states that submitters’ IP addresses and email addresses may be processed by spam-prevention services.

This processing relates to information submitted through contact and support forms. It does not, by itself, give Web3Forms access to your Spelly account, saved readings, or photos.

For further information, see web3forms.com/privacy.

Account and reading data is stored in Google Cloud Firestore in the United States. Our server functions run in Belgium. OpenAI also processes reading requests in the United States.

Web3Forms operates from India and uses infrastructure providers that may process form submissions in multiple regions. Support messages are also processed and stored by our email provider when delivered to our support inbox.

For transfers from the European Economic Area, the United Kingdom, or Switzerland, Web3Forms states that it uses appropriate safeguards, including Standard Contractual Clauses, as described in its Data Processing Agreement.

Data is encrypted in transit and at rest. No method of storage or transmission is completely secure.

Where EU or UK data protection law applies, we process information as necessary to provide the services you request, including your account, readings, and subscriptions.

We rely on our legitimate interests to maintain app security, enforce fair-use limits, diagnose technical problems, respond to general enquiries, and prevent spam and abuse, subject to your rights and interests.

Where a support request is necessary to provide our services or handle a request to enter into a contract, we process the relevant information for that purpose.

Where consent is required, we ask for it. You may withdraw that consent at any time without affecting the lawfulness of earlier processing.

We may also process information to meet applicable legal obligations.

We retain your account and profile information while your account is active.

Unstarred readings are automatically deleted after 30 days. Starred readings remain saved until you unstar or delete them, or delete your account.

You can delete your account in Settings → Delete Account. This permanently deletes your Firebase account, profile, stored readings, and server-side usage counters. Local affirmations and preferences are also cleared.

You may also request deletion by emailing spellyapka@gmail.com. We respond to privacy requests within 30 days, subject to any extensions permitted by applicable law.

Contact and support messages

We retain support correspondence for as long as reasonably necessary to handle your request, resolve related issues, and meet applicable legal obligations.

Web3Forms states that form submission data is retained for a maximum of three years from submission, unless a shorter period applies to the plan or the data is deleted earlier.

Deleting your Spelly account does not automatically delete messages previously submitted through contact forms or stored in our support inbox. To request deletion of this correspondence and related form submissions, contact spellyapka@gmail.com. We will handle the request subject to applicable legal obligations.

Deleting your Spelly account does not automatically delete records held by service providers under their own legal or retention obligations. OpenAI’s retention period described above may continue to apply.

Deleting your account does not cancel an Apple subscription. Manage or cancel subscriptions through your Apple account settings.

Depending on your location, you may have the right to:

• Access and receive a copy of your personal data.
• Correct inaccurate information.
• Request deletion.
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent where processing relies on consent.
• Lodge a complaint with your local data protection authority.

To exercise your rights, contact spellyapka@gmail.com.

Spelly is intended for people aged 16 and over and is not directed at children under 16.

If you believe a child under 16 has provided personal data, contact us so we can investigate and delete it where appropriate.

Spelly readings are generated by artificial intelligence and may be inaccurate.

They are intended for entertainment and personal reflection. They do not replace professional medical, psychological, legal, or financial advice.

We may update this policy when our services or data practices change. The latest version will be available in the app and on our privacy policy webpage with an updated date.

Alina Khomyn

Ukraine

spellyapka@gmail.com