Privacy Policy
Last updated: 18 August 2026
Arcana Desk is a tarot, astrology and numerology app made by Tiny Objects. This policy explains what the app stores, where it goes, and what we do and do not do with it. It describes the app as it actually works.
The short version
Your readings, notes, birth details and the people in your Circle are stored in your account on our servers, so that you have a backup and so that a second phone shows the same library. Nothing you write is shown to another person unless you choose to share it. We do not sell anything to anyone, and we do not track you across other apps or websites.
What we store, and why
Your account. When you sign in with Apple or with an email address, we receive your email address. It identifies your account and nothing else.
Your username. The @handle you choose is stored in a directory that other signed-in users can search, because that is how a friend finds you. Your name, avatar and sun sign are shown alongside it in search results.
Your profile. Your name, your full birth name if you give one, and your birth date, birth time and birth city. These are what the astrology and numerology are calculated from. The birth time is optional.
Your readings. The question, any context you add, the cards drawn, the interpretation, any follow-up questions you ask, and your notes. All of it, in full.
Your journal, your daily cards and any spreads you create.
The people in your Circle and your family tree. Their names, the birth details you enter for them, the relationship, and any private note you keep about them. These are people who did not install anything. We store this because you asked the app to, and we treat it as yours.
Photographs. The avatar you choose. A photograph of a physical spread is sent for reading when you ask for that, and is not kept on our servers afterwards.
All of the above is stored in your account and is linked to it. That is what makes it a backup.
Your private notes
A reading has two note fields, and they behave differently on purpose.
Private notes are never shared. They are never shown to another user of the app, never sent to the AI provider, and never included in anything you share out of the app, in any format.
Shared notes are the ones you write for the person a reading is about. They travel with the reading when you share it, and only then.
Both are stored on our servers as part of your backup, like everything else in your account. "Never shared" means never shown to anyone else. It does not mean the data never leaves your phone, because a backup that never leaves your phone is not a backup.
Who can see what
Other users see only what you choose to give them. Anyone signed in can search your @handle and see your name, avatar and sun sign. Someone whose friend request you accepted also sees your birth chart and the card you turned today. A reading reaches another person only when you mark it Shared and it is about them, or when you send it yourself.
The AI provider. When you ask for an AI reading, we send the question, the cards, the relevant chart positions, the first names involved, and, for a photographed spread, that photograph. We do not send your account id or your email with it, so the provider receives words with no identity attached. We do not send your private notes. The provider processes the request and does not use it to train models.
Us. As the operator of the service, we can access data stored on our servers, for support, for security and to keep the service working. We do not read it for any other reason and we do not share it with anyone.
What we do not do
We do not sell or rent your data. We do not use it for advertising. We do not track you across other apps or websites. There is no analytics SDK and no advertising SDK in the app.
How long we keep it
For as long as your account exists. Delete a reading and it is deleted from our servers too. Delete your account and everything goes with it. A photograph you removed sits in a recovery folder on your own phone for thirty days and is then deleted.
We keep a random installation number and a daily request count for ninety days, so that one caller cannot drain the AI service for everyone. That number is created on your device, belongs to no account, and disappears when you delete the app.
Your rights
If you are in the European Union or the United Kingdom you have the right to access your data, to correct it, to have it deleted, to receive a copy of it in a portable format, and to object to how it is handled.
You can delete your account from inside the app, under Settings, Account, and everything goes with it. For a copy of your data, or for anything else, write to hello@tinyobjects.studio and we will answer within thirty days.
The legal basis for handling your data is the performance of our contract with you: you asked for an app that keeps your readings, and this is what keeping them requires.
Data is stored in the European Union (Frankfurt). The AI provider may process a request outside the European Union under standard contractual clauses.
Children
Arcana is not intended for children under 13, and we do not knowingly collect anything from them.
Changes
If this policy changes in a way that matters, the app will say so before the change takes effect. The date at the top is always the date of the version you are reading.