MysTarPrivacy Policy
This policy explains what data the MysTar app (“the app”, “we”) collects, what we use it for, who we share it with, and what rights you have over your data. By using the app, you agree to the terms below. This is a translation of the Vietnamese version; if the two differ, the Vietnamese version prevails.
Summary
- No sign-up or login: your profile is tied to your device.
- The name and date of birth you enter for Numerology are stored only on your device.
- Questions for Tarot AI are sent to OpenAI to generate the reading, without anything that identifies you.
- Posts and comments in the Community are public.
- The app shows ads from Google AdMob.
- We do not sell your personal data.
1. Anonymous profile, no account needed
The app has no sign-up or login. The first time you open it, the system creates a profile tied to your device identifier (Android ID on Android, identifierForVendor on iPhone) and gives you a random name such as “User_1234”. This profile holds your Energy balance, the plans you have bought, your profile details and the content you post. We do not know your real identity unless you enter it yourself.
2. Data we collect
| Data | When | Purpose |
|---|---|---|
| Device identifier, push notification token, operating system, app version, time you last opened the app | Automatically when you open the app | Recognising your profile, sending notifications, technical support, fraud prevention |
| Display name, profile picture, bio, gender, date of birth | When you edit your profile | Completing your profile; your name, picture and bio are shown to other users (see section 5) |
| Phone number, MoMo account name and number | Only if you are a Tarot Reader and enter them yourself | Contacting you and paying prizes from the Positive Reader Ranking. This information is not displayed in the app. |
| Posts, comments and likes in the Community | When you post or interact | Shown publicly in the Community; notifying the people involved when there is a new comment |
| The question you enter for Tarot AI | When you use Tarot AI | Generating the reading (see section 3) |
| Subject and content of feedback | When you send it from the Help Center | Replying, supporting you and improving the app |
| Energy history (earned, spent, on which feature), referral and promo codes entered, purchases and subscriptions (product ID, transaction ID, expiry) | When a transaction occurs | Calculating your balance, granting what you bought, handling complaints, reconciliation and fraud prevention |
| Your device’s advertising ID and ad interaction data | Automatically when the app shows ads | Showing and measuring ads, fraud prevention, confirming rewards when you watch a rewarded ad (see section 4) |
| Usage events (screens viewed, features used, how you paid), device information (model, operating system, language, approximate country) and performance data (app start time, data loading speed) | Automatically | Understanding how the app is used, detecting errors and improving the app. This data is linked to your anonymous profile ID, never to your name or your questions. |
Data stored only on your device
The full name, date of birth and phone number you enter for Numerology, and your partner’s name and date of birth when you check Love Compatibility, are calculated on your device and kept in the app’s storage. We do not send them to our servers. Settings such as language are also stored only on your device.
What the app does not collect
GPS location, contacts, calendar, messages, call logs, audio recordings, browsing history, health data, or payment card details. All purchases are handled by Google Play (or the App Store on iPhone); we only receive the result of verifying the purchase and never see your card number. The app accesses your camera or photo library only when you choose a profile picture, and uploads only the photo you pick.
3. Tarot AI and OpenAI
When you use Tarot AI, the question you enter and the names of the cards you drew are sent through our server to OpenAI to generate the reading. We do not send your name, device identifier or profile ID to OpenAI. OpenAI processes this data under OpenAI’s privacy policy.
We store the reading together with the Energy transaction, so that if your connection drops and the app resends the request, you get the same reading back without being charged Energy twice. Your question is not stored on our servers.
Please do not put sensitive information (full name, phone number, address, health conditions…) in your question.
4. Advertising
The app uses Google AdMob to show ads. AdMob receives your device’s advertising ID along with technical information about each ad view, and may use them to personalise ads. See how Google uses information from apps that use its services.
- You can reset or delete your advertising ID in Android Settings → Google → Ads.
- If you are in the European Economic Area, the United Kingdom or Switzerland, the app asks for your consent before your data is used for ads. You can change your choice at any time under the Information tab → Ad privacy options.
- For rewarded ads (watching an ad to earn Energy), your anonymous profile ID is sent along so that our server can confirm the view and credit the right reward.
5. Public content in the Community
Your posts (title, content, cards), comments, display name, profile picture, bio, Tarot Reader role and experience points are visible to every user of the app. Think twice before sharing personal information in a post.
- You can delete your own posts and comments in the app.
- We may remove content, or temporarily suspend commenting for accounts that break the community rules or the law.
- If you see content that breaks the rules, tell us from the Help Center or by the email in section 12.
6. Sharing data with third parties
We do not sell your personal data. Data is shared only with the service providers needed to run the app:
- Google Firebase (Firestore, Storage, Cloud Functions, Analytics, Performance Monitoring, Cloud Messaging, Remote Config, App Check): storing data, running our servers, analytics, sending notifications and confirming that requests come from the genuine app (via Google Play Integrity or Apple App Attest). Analytics data is exported to Google BigQuery for our own analysis. Privacy and security in Firebase.
- Google AdMob: showing ads (see section 4).
- Google Play Billing / Apple App Store: processing payments.
- OpenAI: generating Tarot AI readings (see section 3).
We may also disclose data when required by law or to protect the legitimate rights of our users and ourselves.
7. Where and how long data is stored
Our main data (database, servers) is located in Google Cloud’s Singapore region. Some of the providers in section 6 may process data in other countries, including the United States.
- Profile, profile picture, posts, comments: kept until you delete them yourself (posts and comments) or request deletion of your data. Previous profile pictures may remain on our servers after you change your picture, until you request deletion of your data.
- Feedback: kept for as long as needed to support you.
- Energy history, purchases, subscriptions: kept longer because they are needed for reconciliation, complaints, refunds and fraud prevention, including after you request deletion of your profile. These records are linked only to your anonymous profile ID.
- Analytics data: linked to your anonymous profile ID and kept for the retention period set in Google Analytics and in our analytics data warehouse.
- Data on your device: removed when you clear the app’s data or uninstall the app.
8. Your rights and data deletion requests
Under applicable data protection law, you have the right to be informed about, access, correct and delete your data, and to withdraw your consent. In practice:
- Correct: edit your name, picture, bio and other profile details directly in the app.
- Delete content: delete your own posts and comments in the Community.
- Withdraw consent: turn off notifications in your device settings; reset or delete your advertising ID; change your ad choices (where applicable, see section 4).
- Access or delete all your data: email amido.corp@gmail.com with the subject “MysTar data deletion request” (or “MysTar data access request”), including your referral code (Information tab → Invite Friends) so we can find your profile without asking for more personal information. We respond within 30 days.
When we delete your data, we delete your profile, profile pictures, posts, comments, feedback and push notification token; transaction records are kept as described in section 7. Please note:
- Uninstalling the app does not delete data on our servers.
- After deletion, your Energy balance and purchased benefits cannot be restored; opening the app again on the same device creates a new profile.
- Deleting your data does not cancel a subscription. Cancel it in Google Play → Payments & subscriptions (or Settings → Apple ID → Subscriptions on iPhone).
9. Children
The app is not intended for children under 13 and we do not knowingly collect data from children. If you believe your child has given us data, contact us and we will delete it.
10. Security
Data is transmitted over encrypted HTTPS connections. Adding and deducting Energy and verifying purchases are done only by our server, and requests to our server and database are checked by Firebase App Check so that only the genuine app is accepted. Even so, no system is completely secure, and we cannot guarantee that data will never be accessed without authorisation.
11. Changes to this policy
When there are significant changes, we will update this page and the effective date at the top. Continuing to use the app after a change means you accept the new version.
12. Contact
Dobynt
Email: amido.corp@gmail.com