Privacy Policy
This privacy policy applies to the Lustrum app (hereinafter referred to as "Application") for mobile devices, which was developed by Petopoly Dev (hereinafter referred to as "Service Provider") as a Freemium service. This service is provided "AS IS".
1. Information We Collect
1.1 Information You Provide
When you register and use the Application, we collect the following information:
- Email Address: Used for account authentication and important notifications
- Display Name: Used for personalization within the app
- Password: Encrypted and stored securely for account access
- Tarot Readings: Your saved card readings and spreads
- Journal Entries: Personal notes and interpretations you create
- User Preferences: App settings, favorite AI personas, notification preferences
- Purchase History: Records of in-app purchases and subscriptions
1.2 Automatically Collected Information
The Application may collect certain information automatically, including:
- Device Information: Device type, operating system, unique device identifier
- Usage Data: App interactions, features used, session duration
- Advertising ID: Used by Google AdMob for personalized advertising
- Analytics Data: Crash reports, performance metrics via Firebase Analytics
1.3 Location Information
This Application does NOT collect precise real-time location information from your mobile device.
2. How We Use Your Information
We use the collected information for the following purposes:
- Account Management: Create and manage your account, authenticate users
- Service Provision: Provide tarot readings, journal functionality, and AI interpretations
- Personalization: Customize your experience based on preferences
- Payment Processing: Handle in-app purchases and premium subscriptions
- Communication: Send important notifications, updates, and promotional content (with your consent)
- Analytics: Improve app performance, understand usage patterns, fix bugs
- Advertising: Display relevant ads through Google AdMob
- Legal Compliance: Comply with legal obligations and enforce our terms
3. Data Sharing and Third-Party Services
We use the following third-party services that may collect and process your data:
Important: We only share anonymized, aggregated data with these services. Your personal readings and journal entries are never shared with third parties for marketing purposes.
We may disclose your information when:
- Required by law (e.g., court orders, subpoenas)
- Necessary to protect our rights or your safety
- To investigate fraud or respond to government requests
- With service providers who work on our behalf under strict confidentiality agreements
4. Data Security
We take data security seriously and implement multiple safeguards:
- Encryption in Transit: All data transmitted between your device and our servers uses HTTPS/TLS encryption
- Encryption at Rest: Your data is encrypted in Firebase Cloud Firestore
- Secure Authentication: Passwords are hashed using industry-standard algorithms
- Access Controls: Limited access to personal data by authorized personnel only
- Regular Security Audits: We monitor and update security measures regularly
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
5. Data Retention
- User Account Data: Retained as long as your account is active
- Analytics Data: Retained for up to 24 months, then stored in aggregate form
- Purchase Records: Retained for 7 years as required by tax and financial regulations
- Deleted Account Data: Permanently deleted within 30 days of account deletion (except legally required records)
6. Your Rights and Choices
6.1 Account Deletion
You have the right to delete your account and all associated data. You can do this by:
What gets deleted:
- Your account credentials and profile information
- All tarot readings and spreads
- Journal entries and personal notes
- User preferences and settings
- All personal data (except legally required purchase records)
6.2 Data Access and Portability
You can request a copy of your data by contacting us at lustrum.dev@gmail.com. We will provide your data in a structured, commonly used format within 30 days.
6.3 Opt-Out of Marketing
You can opt out of promotional emails by adjusting your notification preferences in the app or clicking "unsubscribe" in any promotional email.
6.4 Opt-Out of Personalized Ads
You can limit ad personalization through:
- Device settings (Android: Settings → Google → Ads → Opt out of Ads Personalization)
- The "Privacy Options" button in the app
6.5 Uninstall the App
You can stop all data collection by uninstalling the Application through your device's standard uninstall process.
7. Children's Privacy
The Application is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
If we discover that a child under 13 has provided personal information, we will immediately delete it from our servers. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at lustrum.dev@gmail.com.
8. International Data Transfers
Your data may be transferred to and stored on servers located outside your country of residence. By using the Application, you consent to such transfers. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
9. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights:
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to opt-out of the sale of personal information (we do not sell your data)
- Right to deletion of personal information
- Right to non-discrimination for exercising your rights
To exercise these rights, contact us at lustrum.dev@gmail.com.
10. European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA), you have rights under GDPR:
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
To exercise these rights, contact us at lustrum.dev@gmail.com.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will:
- Update the "Last Updated" date at the bottom of this page
- Notify you through the Application or via email for significant changes
- Post the new policy on this page
Your continued use of the Application after changes indicates your acceptance of the updated Privacy Policy.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
We will respond to all requests within 30 days.
Last Updated: October 26, 2025
Effective Date: October 26, 2025