Privacy Policy

Last updated: 27 October 2026

Falyora is a mobile app (Android and iPhone) that writes tarot, Lenormand, birth-chart compatibility, question chart (horary) and coffee cup readings with AI. This policy explains what data is collected when you use the app, where it goes and how long it is kept. Sections 2–5 cover the app; section 6 covers this website, falyora.app.

1. Who is responsible

The app is developed and published by an individual developer. Contact: privacy@falyora.app

2. Data collected

Identity

When the app opens, an anonymous account is created with Firebase Authentication. It is nothing more than a random identifier. Your name, email, phone number or social media accounts are not asked for.

Optional account link. From the Profile screen you can link this account to Google or (on iPhone) Apple. If you do, Firebase Authentication keeps that account's email address and the account identifier Google or Apple provides; if you choose to hide your email with Apple, only Apple's relay address is received. These are used only to bring your account back on another phone and to find you when you ask for support; never for advertising or marketing, and they are not shared. Linking is optional, and you can sign out from the Profile screen at any time.

What you give for a reading

• Coffee reading: the photos of your cup and saucer that you take or pick from your gallery.
• Tarot and Lenormand: the spread you choose and the cards drawn.
• Compatibility (synastry): your birth date and that of the person you compare with, the birth time if you know it, the birth city, and a nickname for the other person if you write one.
• Question chart: your question, the topic you choose, the city you were in when the question came to you (the city's name, latitude and longitude; only a city you pick from the list, never your phone's location) and, if the question came to you earlier, the date and time you pick. Unless you pick one, the chart is cast for the moment you send the question.
• An optional question and the focus you choose.
• Your rating of a reading (1–5 stars), if you give one.
• If you report a reading, the reason you pick (upsetting, makes no sense, or something else). No free text is taken; the report is kept with the reading's type and language, without your question or photos.

What you write about health

The Balance, Calm and Health focus in the coffee reading does not ask for health information: it reads the cup for rest, the weight you are carrying and inner balance, never comments on an illness, a treatment or an outcome, and is not a medical assessment. If you still write something about your own health or a loved one's in the question box, that is special category personal data under the GDPR and Turkey's KVKK. By writing it you explicitly allow it to be processed only to write that reading: it is not used for ads or statistics, not shared with anyone, kept with the reading and deleted when you delete your account. The reading will not say anything medical, so there is no need to write details; we suggest you don't.

Technical

• Your device's Firebase Cloud Messaging token, so the app can tell you when a reading is ready.
• Your reading-credit balance and a record of credits earned and spent.
• Crash reports. If the app closes unexpectedly: the technical trace of the error, the device model, operating system version and app version. What you wrote, which photo you uploaded and your birth details are never part of these reports.
• Usage statistics. Which screens are opened, how many readings are asked for and of which kind (tarot, compatibility, coffee), whether a reading was shared, whether a rewarded ad completed; together with the device model, operating system version, app version, approximate country and advertising ID. Used to see how the app is used and to improve it. Your question, photos, birth details and the reading itself are never part of these statistics. You can turn them off at any time with Usage statistics on the Profile screen.

Consent in Europe

If you are in the European Economic Area, the United Kingdom or Switzerland, the app shows Google's certified consent screen when it first opens. No ad is loaded and statistics store nothing on your device until you have answered. You can change your answer at any time under Ad and consent choices on the Profile screen.

Consent to sending to the AI service

Before your first reading you are asked once whether what you give for a reading (photos, questions, birth details) may be sent to the AI service that writes it. If you say no, nothing is sent. You can withdraw it any time in the Privacy section of the Profile screen; you are asked again before your next reading.

Tracking permission on iPhone

On iPhone the advertising identifier (IDFA) is used only if you allow it in Apple's App Tracking Transparency prompt. If you don't, rewarded ads still work but the identifier is not read. You can change this in Settings → Privacy & Security → Tracking.

Consent in Türkiye

If your phone is set to Türkiye, the app asks for your explicit consent to two things separately when it first opens: usage statistics and personalised ads. Both start off; unless you turn them on, nothing is measured and ads are shown without personalisation. Nothing is measured before you answer, either. You can change both at any time in the Privacy section of the Profile screen.

Permissions

• Camera. Requested only so you can photograph your cup inside the app. The image is not processed live, not recorded, and no frame is taken until you press the shutter. If you prefer not to grant it, you can pick photos from your gallery; the app works either way.
• Notifications. So the app can tell you when a reading is ready. Asked once, the first time you wait for a reading; without it your reading is still written and appears in your history.
• Adding to Photos (iPhone). Asked only if you choose to save a reading card to Photos. The app never reads your photo library.

3. Data not collected

• Name, surname, phone number; and email, unless you link a Google or Apple account.
• Device location. The app does not ask for location permission and never reads your phone's location. The only places it receives are the cities you pick from the list for a compatibility reading or a question chart. EXIF/GPS data in photos is removed on your device before upload — the photo is re-encoded before it is sent.
• Your whole gallery. Picking from the gallery uses the Android or iOS system picker; the app sees only the file you choose, has no access to the rest of your library, and asks for no permission to do so.
• Contacts, call history, other apps on your device.

4. Where data goes

These services are used to produce your reading:

Your data is not sold, rented or shared with third parties for targeted advertising. Falyora does not "sell" or "share" personal information as those terms are used in California and other US state privacy laws.

5. How long data is kept

• Original photos: 7 days. After that they are permanently deleted from the server. The reading text stays; the photo does not.
• The copy on your phone: so the result can mark the symbols on your own photo, a copy of the cup photos you take or pick is kept on your phone only, in the app’s own folder. It is not sent anywhere; it is deleted from the phone when you delete the app, switch to a guest account or ask for deletion. Your symbol collection, badges and “find them first” results are also kept on your phone only.
• Readings and credit records: until you delete your account.
• Usage statistics: up to 14 months in Google Analytics, then deleted automatically.
• Deletion requests: when you ask from the Profile screen, a 7-day waiting period applies in case it was a mistake. After that your photos, readings, credit records and account (including any Google or Apple link and its email address) are permanently deleted. If you linked Apple, the Sign in with Apple grant is revoked when you ask. This cannot be undone.

6. The website (falyora.app)

The sections above describe the app. This one covers the website you are reading. No account is created on the site, no form is filled in, and no link is made between the site and your data in the app.

Cookies

Opening the site writes no cookies to your browser. If you choose Accept in the box at the bottom, Google Analytics (GA4) is loaded to count which pages are read, and its cookies are written. If you choose Decline, the analytics code is never downloaded and your browser does not connect to Google.

Your choice is kept in your browser and never sent to a server. To change your mind, use the Cookies link at the bottom of any page. If your browser sends a Global Privacy Control signal, it counts as a refusal and you are not asked.

What is measured if you accept

• The page addresses viewed, and where you came from (search engine, link, direct).
• Approximate location at country/city level, device and browser type, screen size.
• Interactions such as scrolling, clicking an outbound link or downloading a file.

No name, email or identifier of yours is sent. Your IP address is not stored in Google Analytics 4; it is used only to work out an approximate location and then discarded. Ad personalisation and ad measurement are off.

Search results

How the site appears in Google Search is monitored with Google Search Console. This relies on Google's own search records; it is not code running on the site, collects no data about visitors and does not depend on your consent.

Hosting

The site is served by Firebase Hosting. Like any web server, it keeps access logs as a technical necessity. Fonts and images are served from this domain, not loaded from elsewhere.

7. Your rights

Under the GDPR, the UK GDPR, Türkiye's KVKK and US state privacy laws, you have the right to access your data, to ask for it to be corrected or deleted, and to object to its processing. You can start deletion inside the app with Profile → Delete my account and data. For anything else, write to the email address above. If you are in the EEA or UK you may also complain to your local data protection authority.

8. Children

Falyora is not designed for children under 13 and does not knowingly collect data from anyone under that age. If you are 13 to 17, use the app with your parent's or guardian's knowledge. Where the age of digital consent is higher (up to 16 in Europe), the ads and statistics consents are for a parent to give; the app works without them.

The app asks for your birth year the first time it opens. It is kept on your phone only and never sent to us. Anyone who may be under 16 is shown only child-appropriate, non-personalised ads; no usage statistics are collected and no ad consent is asked. Anyone who is under 13 cannot use the app.

9. What the readings are

Readings are written by an AI model. There is no fortune teller behind the curtain. Readings are for entertainment; please don't base health, legal, financial or personal decisions on them.

10. Changes

If this policy changes, the date at the top changes. You will be told inside the app about significant changes.

This is an English version of the Turkish policy at falyora.app/gizlilik. Both say the same thing.