Privacy Policy

Effective June 6, 2026

Cast is built privacy-first: a tarot reading is intimate data, and our design goal is that we never see it. This policy explains, in plain language, what stays on your device, what leaves it, and why.

The short version

• Your questions, notes, readings, and decks live on your device and sync only to your own iCloud — never to our servers.
• We have no accounts, no ads, and we sell no data.
• We collect anonymous usage analytics (which features are used, never their contents), and you can turn this off in Settings → Privacy.

What stays on your device

Everything that makes up your practice: your intentions and questions, your journal entries and notes, your readings and their cryptographic seals, and your decks — including the photographs of your own cards, if you bind one. Card images are stored encrypted with iOS file protection. The entire rite — shuffling, cutting, drawing, verifying — runs on-device and works fully offline.

iCloud sync

If iCloud sync is on (it is by default; you can turn it off in Settings), your decks and journal are mirrored to your private iCloud database, encrypted under your own Apple account. This data never passes through servers we operate, and we cannot read it. Decks you’ve bound sync this way too — photograph your cards once, and they’re ready on your other iPhone or iPad. Turning sync off keeps everything local; copies already in iCloud remain in your account, under your control.

The entropy relay

If you enable remote randomness sources (quantum vacuum, atmospheric noise, League of Entropy), Cast fetches random numbers at the moment of your shuffle through our relay at api.castcards.app. These requests carry nothing about you or your question — they are requests for raw numbers, nothing more. The relay passes them through live, does not cache them, and keeps no logs that could identify you or be linked to a reading. Like any server, it briefly sees the IP address and time of a request in order to function; that is the whole of it, and we say so here because honesty is the product.

Analytics

To understand which parts of Cast are used and which need work, we collect anonymous product-interaction events (for example, “a shuffle was completed” or “a seal was verified”) through a third-party analytics service (Mixpanel). These events are not linked to your identity, and they never include:

• your intention, question, or any text you write;
• which cards you drew or what your readings contained;
• your notes, or the names of custom decks.

You can turn analytics off at any time in Settings → Privacy, and the switch takes effect immediately.

What we never do

• No accounts — we couldn’t attach data to you if we wanted to.
• No advertising, no trackers for ad networks.
• No sale or sharing of personal data with third parties.
• No AI training on your content — your questions and notes are not used to train anything.

Children

Cast asks that users be 13 or older, for one reason only: the original 1909 plates include a small amount of classical nudity. That is the whole of it — and we knowingly collect no personal information from anyone, of any age.

Changes

If this policy changes, we will update this page and the effective date above. Material changes will be called out in the app’s release notes.

Contact

Questions about privacy? support@castcards.app