Privacy Policy

Last updated · June 2026

Scope & principles
What we collect
How we use it
Storage & security
AI systems & model training
Sharing
Your rights & controls
Contact

1. Scope & principles

This policy explains how Loreona ("Loreona", "we", "us") handles data when you use the Loreona iOS app or visit loreona.com.

Loreona is designed around a small set of privacy principles:

Collect only the data required to operate the product.
Never sell personal data or share it with advertisers.
Never use journal entries or reflections to train AI models.
Provide clear export and deletion controls.

2. What we collect

Account identifiers. A pseudonymous account ID associated with Sign in with Apple. We do not require your real name.
Journal entries & reflections. Content you create in the app, including written entries, voice transcriptions, tarot sessions, and narrative summaries.
Technical & usage data. Limited analytics and diagnostic information used to monitor stability, debug crashes, and improve performance.
Subscription status. Information from Apple indicating whether you have an active subscription or purchase. Payment card details are never provided to Loreona.

Additional disclosures required by applicable laws (including GDPR and CCPA categories, retention periods, and processor lists) will be added before public launch.

3. How we use it

To provide tarot readings, reflections, narrative summaries, and related app functionality.
To maintain and improve the reliability, safety, and performance of the app.
To respond to support requests when you contact us.

We do not use your journal content for advertising, behavioral profiling, or cross-app tracking.

4. Storage & security

Data is encrypted in transit using HTTPS/TLS and encrypted at rest using infrastructure-level encryption provided by our hosting providers.

Access to production systems is restricted to authorized personnel and limited to operational needs such as maintenance, debugging, and customer support.

Data may be processed and stored in the United States or other jurisdictions where our service providers operate.

5. AI systems & model training

Loreona uses third-party AI providers to generate readings, reflections, and summaries.

Your journal entries, reflections, and generated outputs are not used by Loreona to train AI models.

Where supported by our providers, requests are processed under enterprise or zero-retention policies intended to prevent submitted content from being retained for model training.

We do not sell personal data.

We do not share your data with advertisers or data brokers.

We share limited information with infrastructure and service providers only as necessary to operate Loreona (for example: hosting, authentication, analytics, crash reporting, and AI processing).

7. Your rights & controls

Export. You can export your journal history and related data from Settings → Data → Export.
Deletion. You can permanently delete your account and associated data from Settings → Data → Delete Account.
Access & correction. You may contact us to request access to or correction of personal information associated with your account.

Some information may remain in encrypted backups for a limited retention period before permanent deletion.

8. Contact

Questions about this policy can be sent to [email protected].