Legal
Privacy Policy
This policy explains what data the Mithica tarot app (the “App”) processes, why, and what your rights are under the EU General Data Protection Regulation (GDPR). Mithica is made by Thrive Studio, powered by SignCoders.
In short:
- You don’t need an account. We never ask for your email address or real name.
- Your nickname, avatar and saved readings stay on your device.
- Analytics run only if you agree, and you can turn them off at any time.
- No ads, no advertising ID, and no tracking across other companies’ apps or websites.
1. Who is responsible for your data
The data controller is SignCoders Kft. (Thrive Studio), registered seat: 1072 Budapest, Klauzál utca 30, 1st floor, U/1, Hungary; tax number: 27902307-2-42; email: hello@thrive-studio.io.
2. Data that stays on your device
The following data is stored only on your device. It is not sent to us or to anyone else, and it is deleted when you uninstall the App.
| Data | Purpose |
|---|---|
| Nickname and avatar | Greeting you in the App. A nickname can be anything; it doesn’t have to be your name. |
| Saved readings | Letting you look back at your readings. You can delete them in the App. |
| Reading balance | Counting your daily readings and when the next one is available. |
| Settings | Remembering your choices, such as reminders and analytics. |
- Reminders are scheduled on your device; there is no push notification server. The App asks for permission only when you turn reminders on.
- Motion sensor: while you shuffle the cards, the App reads the accelerometer to detect shaking. This happens on your device and nothing is stored or sent.
- Sharing: if you share a reading, the image goes to the app you choose in your device’s share menu, under that app’s own terms.
3. Data processed by the services we use
| Service | What and why |
|---|---|
| Google Analytics for Firebase Google Ireland Ltd. / Google LLC |
Only if you consent when the App asks, or later in Settings → Analytics.
How you use the App (screens viewed and for how long, app opens, readings used or deleted,
tutorials skipped, reminders turned on or off, subscription changes and purchases), device
information (model, operating system, language, app version), your approximate location
(country or region, estimated from your IP address) and a random app instance identifier. We use
it to understand how the App is used and to improve it. It is not linked to your identity, no
advertising ID is collected, and advertising features are turned off. Legal basis: your consent (GDPR Art. 6(1)(a)). Kept for the period set in Google Analytics, at most 14 months. |
| RevenueCat RevenueCat, Inc., USA |
Checking which subscription you have and unlocking it. RevenueCat receives a random,
anonymous user ID created by the App, your purchase and subscription details from the App Store
or Google Play (product, price, currency, transaction identifiers) and basic technical data
(platform, operating system and app version, and the IP address of the request). Legal basis: performance of the contract (GDPR Art. 6(1)(b)). Kept while it is needed to provide your subscription and to meet legal (e.g. accounting) obligations. |
| Apple App Store / Google Play | Payments, subscription management, refunds and the in-app rating prompt are handled by Apple or Google under their own privacy policies. We never receive your payment details. |
| ConfigCat ConfigCat Kft., Hungary |
The App downloads its settings (for example, how long a reading takes to recharge). No personal
identifiers are sent; ConfigCat’s servers only see the technical IP address of the request. Legal basis: our legitimate interest in running the App (GDPR Art. 6(1)(f)). |
4. What we don’t do
- We don’t create accounts or collect your name, email address or phone number.
- We don’t access your precise location, contacts, photos, camera or microphone.
- We don’t show ads, collect advertising identifiers (IDFA, Android advertising ID) or track you across other companies’ apps and websites.
- We don’t sell your data.
5. Transfers outside the EU
Google and RevenueCat may process data in the United States. These transfers rely on the safeguards provided by the GDPR, such as the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.
6. Your rights
Under the GDPR you have the right to access your data and to request its rectification, erasure or the restriction of its processing, the right to data portability, and the right to object to processing based on legitimate interest. You can withdraw your consent to analytics at any time in Settings → Analytics; this doesn’t affect processing before the withdrawal.
Because the App has no accounts and analytics are not linked to your identity, we usually can’t tell which data belongs to you. If your request concerns a purchase, please include the order number from your App Store or Google Play receipt. Send requests to hello@thrive-studio.io; we answer within one month.
You can also lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, naih.hu) or with the data protection authority of your country.
7. Children
The App is not directed at children under 16, and we don’t knowingly collect their data. If you believe a child has given us data, please contact us and we will delete it.
8. Security
Data sent by the App is encrypted in transit, and we only use providers that apply appropriate technical and organisational safeguards. No system is completely secure, however.
9. This website
This website uses no cookies and no analytics. Our hosting provider may keep standard server logs (such as the IP address and time of a request) for a short period, for security purposes.
10. Changes to this policy
We may update this policy, for example when the App changes. The current version is always available on this page, with the date of the last update at the top.
11. Contact
For any privacy question, write to hello@thrive-studio.io.