Privacy Policy
Last updated: October 22, 2026
Data controller
The controller of your personal data is the entity listed below.
- Company
- Recode Software Przemysław Szejna
- Address
- ul. Popiełuszki 11/2094-052 ŁódźPoland
Introduction
Zorynthia ("we", "us", "our") respects your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights when using our AI tarot reading application at zorynthia.eu.
Data We Collect
We collect the following data: • Account data: name, email address, encrypted password • Birth data (optional, used only for astrology): date of birth, country, gender • Reading data: questions, drawn cards, AI interpretations, astrological data • Technical data: IP address, browser type, device type • Analytics data (only with your consent to analytics cookies): in-app events (such as account creation, reading start, token spend, purchase), a pseudonymous browser identifier from the _ga cookie, your account identifier (without your name or email address), time on page and referral source. It goes to Google Analytics 4, which does not store IP addresses. We never send the content of your questions, readings or birth data. • Marketing data (only with your consent to marketing cookies): the fact that, after clicking a Google, Meta or TikTok ad, you visited the site, created an account, started a checkout, bought a package (with the amount) or signed up for the newsletter, together with the identifiers from those platforms' cookies. • Payment data: transaction amount and status, partial card details (last 4 digits, card type), and billing country, all handled by Stripe; we do not store your full card number. We also keep the billing country on our side to determine the correct VAT rate. • Newsletter data: email address, chosen language and the date consent was given, used solely to send the weekly horoscope. You can withdraw consent from the link in every issue or in your account settings; we pass the address to nobody.
How We Use Your Data
We use your data to: • Provide AI tarot and astrology reading services • Personalize astrology readings based on birth data • Store reading history • Send essential service notifications • Improve our service and user experience (with your consent to analytics cookies) • Measure how well our ads work (with your consent to marketing cookies) • Process payments and manage subscriptions
Cookies
We use cookies for authentication (auth_token), CSRF protection (csrf_token), language preferences and remembering your cookie choices, and, with your consent, analytics cookies (Google Analytics) and marketing cookies (Google Ads, Meta, TikTok). See our Cookie Policy for details and settings.
Third-Party Services
We use the following third-party services: • OpenAI: Your questions and birth data are sent to the OpenAI API to generate interpretations. Data is anonymized (we do not send your name or email address). • Google OAuth: authentication with your Google account (name, email). • Google reCAPTCHA v3: bot protection (behavioral data). • Google Analytics 4 (only with your consent to analytics cookies): traffic and in-app behavior analytics, collected pseudonymously (identifier from the _ga cookie and your account identifier) and used solely for aggregate statistics and service improvements. Without your consent the Google Analytics script does not load, and our server sends Google no sign-up, purchase or refund events. • Google Ads (only with your consent to marketing cookies): measuring the performance of Google ads. Google also processes ad click and conversion data as an independent controller, under the Google Privacy Policy (policies.google.com/privacy). • Meta Platforms (Facebook, Instagram) and TikTok (only with your consent to marketing cookies): ad pixels measuring how our ads perform on those services. We pass on the page visited, sign-up, checkout start, purchase (amount and package) and newsletter sign-up. We are joint controllers with Meta for the collection of this data by the pixel; beyond that, Meta and TikTok process it as independent controllers under their own privacy policies. The data may be transferred outside the European Economic Area on the basis of a European Commission adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses. • Stripe: payment processing. Your card details are sent directly to Stripe (PCI DSS certified); we do not store them. Stripe passes us the billing country you provide at checkout, we use it solely to determine the correct VAT rate. If you consented to analytics cookies, once a payment is confirmed our server sends Google Analytics 4 a purchase event (amount, currency, package and transaction ID). • Sentry: application error monitoring. When something breaks we send the error message along with your account identifier, email address, IP address and which feature you were using. The data is held on servers in the European Union and is used solely to diagnose and fix the fault. The legal basis for analytics and ad measurement is your consent (Art. 6(1)(a) GDPR). Withdrawing it does not affect the lawfulness of processing carried out before the withdrawal.
AI Data Processing
Questions, birth data, and astrological context are sent to the OpenAI API to generate interpretations. We do not send identifying data (email address, name). OpenAI processes data according to its own privacy policy. Generated interpretations are stored on our servers as reading history.
reCAPTCHA
We use Google reCAPTCHA v3 to protect against automated access and bots. reCAPTCHA may collect data about your device and behavior. It is subject to Google's Privacy Policy (policies.google.com/privacy).
Data Retention
We retain account data as long as your account is active. Reading history is stored according to your plan. You can delete individual readings at any time. Upon account deletion, all data is permanently removed within 30 days.
Your Rights
Under GDPR you have the right to: • Access your personal data • Rectify inaccurate data • Erase your data ("right to be forgotten") • Data portability • Withdraw consent at any time; consent to analytics and marketing cookies is withdrawn in "Cookie settings" in the page footer or in your profile • Lodge a complaint with a supervisory authority (in Poland, the President of the Personal Data Protection Office) To exercise these rights, contact us at support@zorynthia.eu.
Children
Zorynthia is not intended for anyone under 16 years of age. We do not knowingly collect data from children.
Changes to This Policy
We may update this Privacy Policy. We will notify you of significant changes via email or in-app notification.
Contact
For privacy-related questions, contact us: Email: support@zorynthia.eu