Privacy Policy

Effective Date: September 25, 2026

Ascendra (formerly VibeCheck) ("the App", "we", "us", or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, which provides tarot readings, AI-powered dream interpretation, and daily horoscopes. Please read this Privacy Policy carefully. By using the App, you consent to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide

• Google Account Information: When you sign in with Google, we receive your name, email address, and profile photo from your Google account.
• Apple Account Information: When you sign in with Apple, we receive your name and email address. Apple provides these only at your first sign-in, and never provides a profile photo. If you choose Hide My Email, we receive and store an Apple private-relay address instead of your real one.
• Custom Profile Data: Display name and avatar preferences you set within the App.
• Date of Birth (optional): You may optionally provide your date of birth. It is used solely to determine your zodiac sign for more accurate Card of the Day, tarot, and horoscope personalization. Your date of birth is stored in your account (Firestore) and is never required to use the App — you can skip it, and you can change it at any time in your profile. The App does not currently have a button to clear a date of birth once it is saved; to remove it, email us (see Section 14) and we will delete it, or delete your account. Only the derived zodiac sign (not your full date of birth) is sent to our AI service when generating readings.
• Questions and Readings: The questions you ask during tarot readings are sent to our AI service for interpretation.
• Dream Descriptions: The dream descriptions you submit for interpretation are sent to our AI service for analysis. We store the dream text and AI-generated interpretation in your account.
• Horoscope Requests: Your zodiac sign selection and horoscope type (daily, monthly, or yearly) are used to generate personalized horoscope content. Generated horoscopes are stored in your account.
• Language Preference: Your selected language for the App interface and reading interpretations (English, Russian, Spanish, Portuguese, Hindi, Indonesian, German, or French).
• Referral Code: If you apply a referral code from another user, we store the referral relationship to grant bonus credits to both parties.
• Advertising Consent: Your consent preferences for personalized or non-personalized advertising, collected via the Google User Messaging Platform (UMP).

1.2 Information Collected Automatically

• Device Information: Device type, operating system version, and unique device identifiers.
• Usage Data: How you interact with the App, including tarot readings performed, dream interpretations requested, horoscopes generated, features used, session duration, daily action counts, and achievement progress.
• Subscription and Purchase Data: Your current access tier (Trial, Free Limited, Free Expired, or Plus), credit balance, readings consumed per day, and account creation date used to determine your access tier.
• Streak Data: Your daily Card of the Day streak count, last activity date, and streak protection usage, used to track consecutive usage.
• Rewarded Ad Data: The number of rewarded video ads you have watched per day, tracked server-side in Firestore to enforce the daily limit (maximum 2 per day). This includes the date and timestamp of each ad view session.
• Referral Data: Your unique referral code, whether you have applied another user's referral code, and the referral relationship (referrer ↔ referred user).
• Advertising Identifiers: If you consent to ads, Google AdMob may collect your device's advertising identifier (GAID/AAID on Android; IDFA on iOS, and only if you grant App Tracking Transparency permission) and other ad-related data as described in Google's privacy policy.
• Analytics Data: Usage events (for example, which screens and features are used, sign-in method, and whether a date of birth is set) collected via Firebase Analytics to understand how the App is used and to improve it. These events are linked to an app-instance identifier and to your account ID. On Android, Firebase Analytics also collects the device advertising identifier (AAID) where available; this does not depend on your ad-consent choice or subscription. On iOS, the advertising identifier (IDFA) is collected only if you grant App Tracking Transparency permission. You can reset or delete your advertising ID at any time in your device settings.
• Crash and Diagnostic Data: If the App crashes, stops responding (on Android), or runs into an internal error — including errors that do not close the App — Firebase Crashlytics (Google) receives a technical report so that we can find and fix the problem. Depending on the device platform, a report may include: the stack traces of the App's threads (the program functions that were running at that moment) and other technical details of the App's state; the type of the error and its technical description; the time of the event; the App version; the device model and manufacturer, processor type, operating system version, and language and region setting; total and free memory and disk space; screen orientation and whether the App was in the foreground; on Android, the battery level and charging state, whether the proximity sensor was active, and whether the device is rooted; a random Crashlytics installation identifier (used to count how many installations an error affects), the Firebase installation ID, and a random session ID; and the analytics events recorded shortly before the error (see Analytics Data above). Before the App reports an internal error it has detected itself, it removes email addresses, account and document identifiers, and other long identifiers from the error text and shortens it. We do not attach your account ID, email address, or name to crash reports, and they do not include your questions, dream descriptions, or AI interpretations. Crash reports are sent by the versions of the App distributed through Google Play and the App Store, including their beta-test builds; development builds on developers' own devices do not send them unless a developer explicitly turns this on for a test.
• Crash-Free Statistics: To measure how many sessions pass without a crash, the Crashlytics SDK also sends a short record each time a new App session starts (for example, when you open the App): a random session ID, the Firebase installation ID, the time, and technical details such as the App version, device model, and operating system version. When the App crashes, Crashlytics also adds a crash event (the time only, without crash details) to Firebase Analytics, where, like other analytics events, it is linked to your account ID.

1.3 Information Stored Locally on Your Device

• Offline Cache: Your Card of the Day and up to your 20 most recent tarot readings — including the question you asked and the AI-generated interpretation — are cached on your device so the App works without an internet connection. Your profile and subscription state are also kept on disk by the Firebase SDK's own offline persistence. None of this is transmitted anywhere beyond what is already stored in your account, and all of it is removed when you uninstall the App or clear its data.
• Widget Data (SharedPreferences): If you use the home screen widget, a copy of your current daily card name and message preview is stored locally on your device to power the widget display.
• Sound Preferences: Your settings for sound effects (enabled/disabled) and ambient music (enabled/disabled) are stored locally via SharedPreferences.
• Notification Preferences: Your settings for daily card reminders, streak reminders, achievement notifications, astrological event alerts, re-engagement reminders, win-back messages, horoscope reminders, and dream reminders are stored locally.
• Pending Crash Reports: A crash or error report (see Section 1.2) is first saved on your device and is usually sent the next time the App is opened with an internet connection. It is removed from the device once sent; unsent reports are removed when you uninstall the App or clear its data.

1.4 Information from Third-Party Services

• Google Sign-In: Authentication data provided by Google.
• Google Play Billing: Subscription status, purchase history, and credit package transactions (we do not have access to your payment method details such as credit card numbers).
• Firebase: Analytics, authentication, Firestore database, and crash reporting (Firebase Crashlytics) services.
• Google AdMob: When you choose to watch rewarded video ads, Google AdMob may collect device identifiers, IP address, and ad interaction data. The data collected depends on your consent preferences set via the Google User Messaging Platform (UMP). You may choose personalized or non-personalized ads. For details, see Google's Privacy Policy.
• Google User Messaging Platform (UMP): Used to collect and manage your advertising consent preferences in compliance with applicable data protection regulations (including GDPR and similar frameworks).

2. How We Use Your Information

We use the collected information for the following purposes:

• To provide and maintain the App's functionality, including tarot readings, dream interpretation, horoscopes, daily cards, and the journal.
• To personalize your experience, including AI-generated tarot interpretations, dream analyses, horoscope forecasts, and localized greetings.
• To manage your access tier and enforce daily reading limits based on your subscription status and account age.
• To process subscriptions and credit package purchases, and to track your credit balance.
• To serve rewarded video advertisements (for non-subscriber users who opt in) and to grant free credits upon completed ad views.
• To enforce daily rewarded ad limits (maximum 2 per day) through server-side tracking.
• To manage the referral program, including generating unique referral codes, tracking referral relationships, and granting bonus credits.
• To track and display your achievements and usage milestones.
• To maintain your daily Card of the Day streak and process streak protection (credit deduction).
• To send you push notifications (with your permission), including daily card reminders, streak reminders, achievement notifications, astrological event alerts, re-engagement reminders, win-back messages, horoscope reminders, and dream reminders.
• To provide offline functionality through local data caching.
• To power the home screen widget with your current daily card.
• To improve the App through analytics and crash reporting.
• To respond to your inquiries and provide customer support.
• To comply with legal obligations.

3. Data Sharing and Disclosure

We do not sell your personal information to third parties. We may share your information with:

• Service Providers: Third-party services that help us operate the App, including:
  • Google Firebase (authentication, Firestore database, analytics, crash reporting via Firebase Crashlytics)
  • OpenAI API (AI-generated tarot interpretations, dream analyses, and horoscope forecasts — we send only the reading question, the dream description and the emotion tags you select for it, the selected card data, your zodiac sign (if you provided a date of birth), the horoscope period (daily, monthly or yearly), and your language preference; no personal identifiers are included)
  • Google Play Billing (subscription and credit package transaction management)
  • Google AdMob (rewarded video ad serving for non-subscriber users — may collect device identifiers, IP address, and ad interaction data based on your consent preferences)
  • Google User Messaging Platform (advertising consent management)
• Advertising Partners: If you consent to personalized ads, Google AdMob may share data with third-party ad networks to serve relevant advertisements. You may opt for non-personalized ads via the consent dialog. Subscribers are not shown ads; however, see Section 9 for how the advertising SDK may still contact Google from a subscriber's device.
• Legal Requirements: When required by law, subpoena, or other legal process.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

4. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the App's services. Specifically:

• Service History: All your past tarot readings, dream interpretations, and horoscope forecasts are stored in your Firestore account and are fully accessible in the journal regardless of your subscription tier.
• Credits: Your credit balance (including credits earned via purchases, rewarded ads, and referrals) is retained indefinitely until used or until your account is deleted.
• Achievement Data: Achievement progress is stored as long as your account exists.
• Ad View Records: Daily rewarded ad view counts are stored in Firestore for limit enforcement. Historical ad view data is retained for abuse prevention.
• Referral Data: Referral codes and referral relationships are retained as long as your account exists.
• Locally Cached Data: DataStore and SharedPreferences data persists on your device until the App is uninstalled or its data is cleared.
• Purchase and Fraud-Prevention Records: Kept after account deletion for as long as needed for refunds, chargebacks, abuse prevention and accounting, as described in Section 7.1.
• Crash Reports: Kept by Firebase Crashlytics for 90 days after they are collected, after which Google begins removing them from its live and backup systems. The crash event added to Firebase Analytics follows the analytics retention described in Section 7.1.

You may permanently delete your account and associated data at any time, except for the limited records listed in Section 7.1. See Section 7.1 — Account Deletion below for the in-app self-service option and the email fallback.

5. Data Security

We implement appropriate technical and organizational security measures to protect your data, including:

• Encrypted data transmission (HTTPS/TLS).
• Secure authentication via Google Sign-In.
• Firebase security rules to protect database access.
• Atomic database operations for financial data (credits) to prevent data corruption.

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

6. Children's Privacy

The App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete such information promptly. If you believe that a child under 13 has provided us with personal information, please contact us.

7. Your Rights

Depending on your jurisdiction (including, without limitation, the EU/EEA under GDPR, the United Kingdom under UK GDPR, California under CCPA/CPRA, and other US state privacy laws such as CPA, CTDPA, VCDPA, UCPA), you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate personal data.
• Deletion (Right to be Forgotten): Request permanent deletion of your account and associated personal data, except for the limited records we must keep — see Section 7.1 below.
• Portability: Request a machine-readable copy of your data.
• Opt-out: Opt out of push notifications (including streak reminders) in your device settings, and of personalised advertising via Profile → Manage Privacy Choices where applicable. The App does not currently offer an in-app switch for analytics or crash reporting; you can reset your advertising ID in your device settings, or email us to delete the analytics data linked to your account.
• Withdraw Consent: Where processing is based on your consent (e.g., personalised advertising in regulated regions), you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal. See Section 9 for the in-app entry point.
• Lodge a Complaint: EU/EEA and UK users may lodge a complaint with their national data protection authority.

7.1 Account Deletion

You can permanently delete your Ascendra account and associated personal data (except the limited records listed under What we keep below) in two ways:

• In-app (recommended, immediate): Open the App → Profile → Delete Account. After confirmation, your account is queued for deletion and processed within seconds. You will be signed out automatically.
• By email: If you no longer have access to the App, send a deletion request from the email address associated with your account to avlaskin176@gmail.com with the subject line "Ascendra — Delete My Account". We will verify your identity and complete the deletion within 30 days.

The deletion process removes the following data permanently:

• Your Firebase Authentication record (email, display name, profile photo reference).
• Your user profile in Firestore (display name, avatar preferences, date of birth, language preference, credit balance, subscription status fields).
• All readings: tarot spreads, dream interpretations, and horoscope entries.
• Achievement progress and unlock history.
• Reward-ad view counters and AI-usage audit records.
• Your referral code and the lookup record under it.
• Records of server-side reading and horoscope charges, the link between your subscription purchase token and your account, and any content reports you submitted.

What we keep or cannot delete on your behalf:

• Active Google Play subscriptions: Deleting your account does NOT cancel an active Ascendra Plus subscription. Cancel any active subscription separately — on Android via Google Play Store → Subscriptions, on iOS via Settings → your Apple Account → Subscriptions — before deleting your account, or you may continue to be billed.
• Purchase and fraud-prevention records: We keep records of your Google Play and App Store purchases (order ID, purchase token, product, credits granted, dates and your internal account ID), the history of credit changes on your account, technical diagnostics from failed purchase checks, and per-device daily counters of rewarded ads. They are needed to process refunds and chargebacks, to prevent the same purchase or reward from being used twice, and to meet accounting obligations. They are not accessible to client applications and are not used for any other purpose. Google and Apple also keep their own records of your purchases under their privacy policies.
• Analytics data: Usage events already sent to Firebase Analytics are not removed automatically when you delete your account. Google Analytics deletes user-level data after its retention period (at most 14 months); if you want it deleted sooner, email us and we will delete the analytics data linked to your account. Aggregated statistics that cannot be linked back to you (e.g., total install counts) may be kept.
• Crash reports: Crash and error reports are not linked to your account, so we cannot find them by your account and they are not removed when you delete it; Firebase Crashlytics begins deleting them automatically 90 days after they are collected. Crash events in Firebase Analytics are covered by the analytics data item above.
• Records we are legally required to keep: Where applicable law requires us to retain certain transaction or fraud-prevention records, we will keep only the minimum necessary and securely delete the rest.
• Anti-abuse trial record: To prevent the one-time free allowance from being claimed repeatedly by deleting and re-creating an account, we retain a one-way cryptographic hash (SHA-256) of your identity key — your email address, or, if you used the App without an account, your device identifier. Stored alongside it are the date the record was first created, the date it was last seen, your used free allowance (free readings and dream interpretations consumed, the dates they were used, and whether a signup bonus was granted), the referral code you applied (if any), your unused credit balance at the moment of deletion, and the internal account ID it came from. Your email address and device identifier are never stored in readable form, only as this one-way hash. If you later create a new account with the same email or device, the free allowance is not granted twice, and if you use the same email address your unused credits are returned to the new account. The record is never shared with anyone and is accessible only to our server functions — client applications cannot read it.
• Locally cached data: Data stored on your device (DataStore, SharedPreferences, the Daily Card widget cache, unsent crash reports) is removed automatically when you uninstall the App or clear its data in your device settings.

Deletion is permanent and irreversible. There is no undo — achievement progress and reading history cannot be restored after deletion. The only exception is unused credits, which are returned if you create a new account with the same email address (see the anti-abuse trial record above).

To exercise any of the other rights listed above (access, correction, portability, opt-out, withdrawal of consent, or to lodge a complaint), please contact us at the email address provided in Section 14.

8. Push Notifications

The App may send push notifications for the following purposes:

• Daily Card Reminders: A morning reminder to check your daily tarot card (scheduled at 8:30 AM local time).
• Streak Reminders: An evening reminder if you haven't checked your daily card, to help maintain your streak (scheduled at 8:00 PM local time).
• Achievement Notifications: Alerts when you unlock new achievements or reach milestones.
• Astrological Event Alerts: Notifications about upcoming astrological events such as Mercury Retrograde, eclipses, solstices, equinoxes, and supermoons (scheduled at 10:00 AM local time).
• Re-engagement Reminders: Context-aware notifications if you haven't opened the App today, with information about your current streak or progress toward milestones (scheduled at 2:00 PM local time). These notifications use your streak count, last activity date, and achievement progress to provide relevant messaging.
• Win-back Messages: Notifications if you haven't used the App for 3 or 7 days, encouraging you to return (scheduled at 12:00 PM local time). These use your last activity date to determine eligibility.
• Horoscope Reminders: A morning reminder to check your free daily horoscope (scheduled at 9:00 AM local time).
• Dream Reminders: An evening reminder to record your dreams before you forget them (scheduled at 10:00 PM local time).

Each notification type uses a separate Android notification channel, allowing you granular control over which notifications you receive. You can manage or disable any notification type individually through your device settings.

9. Advertising

The App displays rewarded video advertisements to non-subscriber users who choose to watch them, provided by Google AdMob. In connection with advertising:

• Before any ads are served to users in regulated regions (EU/EEA, UK, Switzerland under GDPR; California, Colorado, Connecticut, Virginia, Utah, and other US states with applicable privacy laws), you will be asked to make a privacy choice via the Google User Messaging Platform (UMP). For GDPR regions, this is a consent prompt (opt-in for personalised ads); for US-state regulations, it is an opt-out notice in line with applicable state law.
• If you consent to personalised ads, Google AdMob may collect and use device identifiers, IP address, approximate location, and browsing/interaction data to serve relevant ads.
• If you choose non-personalised ads, limited data (such as approximate location for contextual targeting) may still be collected.
• Ad content is provided by third-party advertisers and is not endorsed or controlled by Ascendra.
• Ad availability may vary by region and advertiser demand.
• Ascendra Plus subscribers are not shown ads. The advertising SDK is nevertheless part of the App for all users, so on a subscriber's device it may still initialise and request an ad in advance, which sends the device advertising identifier, IP address and device information to Google AdMob according to the consent choice made in the UMP form. Such ads are never displayed to subscribers.
• Changing your choice later: If you live in a regulated region, you may update your ad-consent or opt-out choice at any time inside the App: Profile → Manage Privacy Choices. Selecting that option re-opens the same UMP form and lets you change your previous answer. Your updated choice takes effect on the next ad request.

For more information about how Google handles your data in connection with advertising, please see Google's Privacy Policy and Google AdMob's data disclosure.

10. Home Screen Widget

The App offers an optional home screen widget that displays your current Card of the Day. The widget reads data from a local SharedPreferences store on your device. No additional data is collected or transmitted by the widget beyond what the App already processes.

11. Third-Party Links

The App may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including through Google Firebase (United States), OpenAI (United States), and Google AdMob (United States). These countries may have different data protection laws. By using the App, you consent to such transfers. We take appropriate measures to ensure your data is protected in accordance with this Privacy Policy.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Effective Date" at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of the App after any changes constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

avlaskin176@gmail.com