Privacy Policy

At sign-up: your email address, a nickname, and optionally a date of birth. If you use Google or Kakao we receive the email and profile name they pass to us.

While you use it: the question you type, the cards drawn and their orientation, the reader voice you chose, your language, when the reading happened, and the text of the reading and of any follow-up questions.

Automatically: sign-in times and your browser's time zone, which is what lets the free reading reset at your midnight rather than ours.

If you use the service without signing in, none of this reaches our servers. It stays in your browser.

Questions can be personal. We suggest you avoid putting real names, contact details, account numbers or health specifics into them.

The question, the cards drawn, the reading that was written for you and the answers to any follow-up questions are all stored in our database, so that you can read them again under Past readings. They are deleted when you close your account.

To verify your account and keep you signed in

To generate readings and answer follow-up questions

To track the daily free allowance and your credit balance

To show your card collection, your visit streak and your past readings

To find and fix faults in the service

Account data and reading history are kept until you close your account, and deleted promptly when you do.

Payment and transaction records that law requires us to retain are kept for the period the law specifies, then destroyed.

Anything from a signed-out session disappears when you clear your browser storage. We never held it.

Supabase — authentication and database. Your data is stored on servers Supabase operates.

Vercel — hosting, and routing requests to the model.

A third-party AI provider (OpenAI), reached via Vercel AI Gateway — generating your reading. Your question and cards are sent there, used only to produce the reading and not to train the provider's models.

Google and Kakao — sign-in, if you choose one of those.

These providers may hold data outside your country and process it only as far as running the service requires.

You can ask to see, correct or delete your personal data, or to stop us processing it, at any time.

You can change your nickname yourself inside the service.

For account deletion or anything else, write to the address below and we will handle it.

Row-level security isolates each account's data in the database, so one account cannot read another's.

We never hold your password; the authentication provider stores it one-way hashed.

All traffic is encrypted over HTTPS.

Privacy enquiries: support@sncbears.com

We will announce any change to this policy in the service at least seven days before it takes effect.