Privacy Policy
Last updated: 2026-07-10
This translation is provided for your convenience. The English version is the legally authoritative one.
1. Who we are
Mysticay ("we", "us") provides AI-assisted spiritual guidance — numerology, astrology, coffee-cup reading, home-energy and evil-eye readings — for entertainment and reflection. This policy explains what personal data we collect and how we use it.
2. Data we collect
We collect your email address (used for passwordless sign-in codes); the details you enter for a reading — name, birth date/time/place, questions, and any photos of a cup or space you upload; if you subscribe, a subscription status and a Stripe customer reference (billing is handled by Stripe — we never see or store your full card number); and usage counts (readings per day, to enforce free-tier limits, and daily-streak progress). If you use the community, we also store the messages you post in group channels and the private direct messages you send, along with basic presence (whether you are currently online) and, at sign-in, an approximate country derived from your IP address (the IP is not stored). Where enabled, we also collect basic behavioural analytics — which pages and features you interact with — to understand and improve the app; this is first-party only and never sold.
3. How we use your data
We use your data to create your readings, authenticate you, enforce free limits, process subscriptions, and improve the service. Reading inputs (including photos) are sent to our AI provider (Anthropic) solely to generate your reading. To personalise your experience, we may build an evolving, private profile of your preferences from your readings, activity, and your own community and direct messages; it is used internally only, to tailor your guidance, and is never shared or sold.
4. Legal basis (GDPR / KVKK)
We process your data to perform our service (contract), on your consent (for optional inputs like photos and birth data), and for our legitimate interest in running and securing the platform.
5. Sharing
We share data only with the processors that run the service: Anthropic (AI readings), Stripe (payments), and Resend (sign-in emails). We do not sell your personal data.
6. Retention
We keep your account and subscription data while your account is active. Sign-in codes expire within minutes. You can request deletion of your account and associated data at any time.
7. Your rights
Subject to GDPR/KVKK, you may access, correct, export, or delete your data, and withdraw consent. To exercise these rights, contact us at the email below.
8. Security
Access is protected by short-lived sign-in codes and signed tokens, with rate limiting and encrypted transport. No system is perfectly secure, but we take reasonable measures to protect your data.
9. Children
Mysticay is not intended for anyone under 16. We do not knowingly collect data from children.
10. Contact
Questions or requests: contact@mysticay.com