The Salty Privacy Policy

---

The Salty Tarot App — Global Privacy & Data Protection Policy

Effective Date: 10/5/2025 Last Updated: 10/5/2025

1 Purpose and Scope

This Privacy & Data Protection Policy (“Policy”) explains how The Merc Centers LLC D.B.A The Salty Tarot. (“we,” “our,” “us”) collects, uses, shares, and protects information relating to individuals (“users,” “you”) who access or use The Salty Tarot App and related digital properties including our website, Discord community, and connected social-media accounts (collectively, the “Services”).

The Salty Tarot App is intended for adults 17 years and older.
We operate internationally and strive to comply with major privacy frameworks including the GDPR, CCPA/CPRA, UK DPA 2018, LGPD, and comparable regulations, as well as Apple App Store Guideline 5.1.1, Google Play User Data Policy, and the AWS Shared Responsibility Model.

2 Information We Collect

 User-Provided Information

• Account Data: Verified email, encrypted password, username or display name.
• Verification Data: Date of birth (for astrology and age eligibility purposes).
• Profile Data: Optional avatar, bio, and interests.
• Transactional Data: Subscription and purchase records processed securely through Apple or Google billing systems (we do not store card numbers).
• User Content: Messages, posts, and media shared within our Discord server or social features.
• Support Data: Information you submit in emails or help requests.

 Automatically Collected Information

Device identifiers (IDFA/AAID), IP address, device model, OS version, time zone, usage statistics (screens viewed, session length), and crash logs.

C Location Data

With your consent, we may collect precise or approximate location data to generate planetary alignments and localized readings. You may revoke permission any time in device settings.

D Cookies and SDKs

We and our partners use cookies, pixels, and software development kits to authenticate sessions, analyze performance, detect fraud, and serve ads in accordance with platform policies.

3 Legal Bases for Processing (EU/UK)

We process personal data only when lawfully permitted under GDPR and similar laws:

• Consent (analytics, ads, location)
• Contractual necessity (provision of Services)
• Legal obligation (record-keeping)
• Legitimate interest (security, fraud prevention, service improvement)

4 How We Use Your Information

• Provide and personalize all services related to the app function.
• Verify identity and age eligibility (18+).
• Enable login, sync, and cross-device functionality.
• Analyze usage to improve stability and performance.
• Serve contextual and consented personalized advertising.
• Communicate about account activity and support requests.
• Detect fraud, prevent abuse, and comply with legal requirements.

We do not sell personal information for monetary gain.

5 Advertising and Analytics Partners

Authorized processors include (but are not limited to) Google Firebase Analytics & Crashlytics, Google AdMob, Meta Ads Manager, TikTok for Business, Apple Search Ads, and Discord Inc.
Each partner operates under a data-processing agreement with privacy standards equivalent to GDPR.
You may opt out of ad personalization through device settings:

• iOS: Settings → Privacy → Tracking →      Allow Apps to Request to Track
• Android: Settings → Privacy → Ads → opt      Out of Ads Personalization

6 Information Sharing and Disclosure

We share data only as necessary to operate our Services:

• Service Providers: hosting, analytics, customer support, payment processing.
• Legal Compliance: in response to lawful requests or court orders.
• Business Transfers: during merger or acquisition under equivalent protections.
• Community Interactions: posts and messages you make publicly visible on Discord or social media.

7 International Transfers

Personal data may be stored or processed in the United States and other jurisdictions. We use Standard Contractual Clauses and appropriate technical safeguards to protect transferred information.

8 Data Retention and User Deletion Requests

We retain personal data only as long as it is reasonably necessary for the purposes described in this Policy or as required by law. When data is no longer needed, it is securely deleted or anonymized.

8.1 Standard Retention Periods

Category                                                                                   Retention                                                                                                             Legal Basis

Account Records                                    Active account + 12 months after closure                                                   Contractual / Legitimate Interest

Payment Records                                             7 years or statutory requirement                                                                        Legal Obligation

Analytics and Diagnostics                   ≤ 24 months then aggregated or anonymized                                                       Legitimate Interest

Community Posts                                 Until deleted by user or removed for policy violation                                                       Consent

8.2 User-Initiated Account Deletion

You may delete you’re The Salty Tarot account and associated data at any time by using the “Delete My Account” option located in the App → Settings → Privacy → Manage My Data.
If you are unable to access the App, you may also submit a verified deletion request by emailing helpdesk@thesaltytarot.net with the subject line “Delete My Account.”

Upon receiving your verified request, we will:

1. Immediately deactivate the account and begin secure erasure of personal information from active systems.
2. Complete deletion from backups and logs within 30 days (unless a longer retention period is required by law, such as for financial records).
3. Send a confirmation email once  deletion is finalized.

Deletion removes personal identifiers, readings, saved preferences, and stored content.
Certain minimal information (e.g., anonymized transaction totals or compliance records) may be retained only to meet legal or auditing obligations.

8.3 Reactivation and Re-registration

If you choose to return to The Salty Tarot, you may create a new account at any time. Previously deleted data cannot be restored.

9 Security Safeguards

We maintain commercially reasonable administrative, technical, and physical measures to protect your data from unauthorized access or loss, including TLS encryption in transit, AES-256 encryption at rest, access controls, and routine security audits. No system is entirely secure, and we cannot guarantee absolute protection.

10 Your Rights and Choices

Depending on jurisdiction, you may have the right to access, correct, delete, restrict, or export your data and to withdraw consent or object to certain processing.
Submit requests to legal@thesaltytarot.net with subject line “Data Rights Request.” We normally respond within 30 days after verification.

11 Age Restriction

The Salty Tarot App is intended users 17 and older. We do not knowingly collect information from minors. Accounts identified as underage will be terminated and data deleted within 72 hours of confirmation.

12 Community Behavior and Social Content

Participation in Discord or social features is voluntary. Information shared there may be viewed by others. Users must not post personal data of themselves or others or engage in harassment of any kind. We may moderate or remove content violating our guidelines. We reserve the right to remove, Ban, or delete all profiles or content that violate any part of this privacy agreement.

13 California Privacy Notice (CCPA/CPRA)

We collect the categories of personal information listed in Sections 2 and 5. We do not sell or share personal information for monetary consideration. California residents may exercise the rights outlined in Section 10 without discrimination.

14 GDPR/UK Representative and Contact

 The Merc Centers LLC is currently designating an interim data protection contact for the EU and UK. For GDPR inquiries, please contact, Info@thesaltytarot.net and your message will be forwarded to our authorized EU representative once appointed.” 

15 Automated Processing and Profiling

Astrological interpretations and recommendations are automatically generated using your DOB and location. These outputs have no legal or financial effect and are intended solely for entertainment and self-reflection purposes only.

16 Data Incident Response

If a data breach occurs, we will investigate promptly and notify affected users and regulators within 72 hours where required by law, including details and remediation steps.

17 Future Use and Evolving Technologies

We may build/enhance The Salty Tarot App with new features such as AI-assisted readings, augmented reality experiences, or expanded community tools. Any future data processing will continue to follow principles of lawful basis, user consent, and transparency. If a new feature changes how your data is used, we will provide notice and obtain additional consent when required. Nothing in this Policy should be interpreted as a promise to develop or release specific functionality.

18 Policy Updates

We may revise this Policy periodically to reflect changes in law or our operations. The updated version will be posted within the App and on our website with a new effective date. Your continued use after such updates constitutes acceptance of the revised Policy.

19 Contact Information

The Salty Tarot Privacy Office
Email: info@thesaltytarot.net
Website: www.thesaltytarot.net
Mailing Address: The Merc Centers LLC,DBA The Salty Tarot 1500 Beville Rd. Suite 606244 Daytona Beach Florida, 32114

20 App Store and Play Store Data Safety Summary

Data Category          Collected          Linked Tracked                    Purpose

Email Address                ✅                      ✅             ❌                Account Management

Device ID / IP                ✅                       ✅             ✅                Analytics & Security

Date of Birth                ✅                      ✅             ❌                Personalization

Location                        ✅                      ✅             ✅                Planetary Readings & Ads

Purchase History        ✅                      ✅          ❌                Subscriptions

Usage Data                  ✅                      ✅             ✅                Performance Analysis

Diagnostics                ✅                      ❌             ❌                Crash Reports

Community Content ✅                      ✅             ❌                Engagement

21 Statement of Commitment

The Salty Tarot aims to handle personal information responsibly, transparently, and in good faith. While no system is immune from risk, we will continue to apply reasonable safeguards and industry best practices to protect our users and support global compliance standards.

22 Artificial Intelligence and Automated Systems

22.1 Overview
The Salty Tarot App may use limited forms of Artificial Intelligence (“AI”) and machine-learning technologies to enhance readings, provide personalized insights, moderate community content, or improve product performance. These systems operate within controlled environments and follow strict data-protection principles.

22.2 Data Used for AI Functions

• Input Data: Date of Birth, general location, and in-app activity may be processed by algorithms to produce as follows (listed but not limited to) horoscope, tarot, oracle, planetary, birth chart and all other interpretations needed for the functionality of the app.
• User Content: Messages or posts may be analyzed by automated moderation tools for spam or abuse detection.
• Anonymized Analytics: Aggregated, non-identifiable data may be used to train or refine internal models.

22.3 Human Oversight
AI outputs are reviewed or monitored by authorized staff to ensure they remain appropriate and consistent with intended use. No AI output creates legal, financial, or binding consequences for the user. All readings are for entertainment and self-reflection purposes only.

22.4 Data Protection and Transparency

• AI processing occurs under the same legal bases described in Section 3 (Consent, Contractual Necessity, Legitimate Interest).
• Personal identifiers are removed or pseudonymized before training or testing any internal model.
• We do not sell or license AI training data to third parties.
• When future features involve new or expanded AI capabilities, users will receive clear notice and may opt in or decline participation.

22.5 User Rights Related to AI
Where applicable law (e.g., GDPR Articles 13-15 or forthcoming EU AI Act) grants rights regarding automated decision-making, you may:

• Request an explanation of how automated systems influence results.
• Object to automated processing.
• Request human review of any AI-driven decision affecting you.
      Requests may be submitted to info@thesaltytarot.net.

23 Final Acknowledgment and Acceptance

· By creating an account, accessing, or using The Salty Tarot App, you acknowledge that you have read and understood this Privacy & Data Protection Policy. Your continued use of the App and related Services constitutes your acceptance of its terms and any updates that may be published from time to time.

· We encourage you to review this Policy periodically to stay informed about how we protect your information. If you have any questions or concerns about this Policy or our data practices, please contact us at info@thesaltytarot.net

· We strive to maintain transparency, integrity, and respect in all aspects of our digital and spiritual operations.