1. Data Controller

The data controller is Halina Wnuk, address: Strażacka St. 52A, 35-312 Rzeszów. Contact for privacy matters: odkryjwrozbe@gmail.com, tel. +48 697 836 770.

The identification details of the controller are published in legal documents and during the contract process, not in the promotional parts of the site.

2. What data we process

Depending on the function used, we may process: email address, first name, technical and security identifiers, order number and history, selected service, payment status, content of questions and generated interpretations, optional user's date of birth, relationship status, and optionally the first name or nickname of another person.

We do not ask for the date of birth of another person, PESEL, scans of documents, full card details, medical data, or exact address in the question content. Payment data is entered directly in the payment operator's checkout.

3. Purposes and bases of processing

• creation, handling, and fulfillment of the order — performance of a contract;
• preparation of the preview and full interpretation — acting at the user’s request before the conclusion of a contract and performance of a contract;
• handling payments, complaints, and contact — performance of a contract and legal obligations;
• sending the completed interpretation to the specified email address — performance of a contract;
• tax and accounting settlements — legal obligation;
• security, content moderation, abuse prevention, and defense or pursuit of claims — legitimate interest;
• electronic marketing — solely on the basis of separate, voluntary consent, if such a function is activated.

Confirmation of familiarization with this policy is not consent to the processing of data necessary for contract performance.

4. Technology providers and data recipients

Data may be processed by infrastructure and hosting providers of the service, Supabase (database and technical infrastructure), Stripe (payments), OpenAI (generation, moderation, and classification of content), Resend (transactional messages), domain/technical hosting providers, and — when needed — accounting or legal entities.

Only the scope necessary to prepare a preview, full interpretation, or safe content classification is transmitted to OpenAI: the content of the question and situation description, the user's first name, the user's optional date of birth, the optional first name or nickname of the other person, and information about the card layout. Data about the other person is minimized.

The recipient's email address and the content of the message necessary to fulfill the order are transmitted to Resend. We do not sell personal data. If the provider processes data outside the European Economic Area, the legally required bases and transfer safeguards are applied.

5. How long we store data

Data related to orders, payments, and settlements is stored for the period necessary to provide the service, handle complaints, fulfill legal obligations, and possibly establish, pursue, or defend claims. Accounting and transaction data is stored for the period required by tax and accounting regulations.

Contents of questions, situation descriptions, and interpretations are data with elevated privacy. As a rule, they should be stored no longer than necessary to fulfill the order, handle complaints, and meet legal obligations. The user may request their earlier deletion, provided that further storage is not required by law or necessary to establish, pursue, or defend claims.

6. Your rights

Depending on the processing basis, you have the right to access, correct, delete, limit processing, transfer, object, and withdraw consent with respect to operations based on consent. Send your request to odkryjwrozbe@gmail.com. You also have the right to file a complaint with the President of the Personal Data Protection Office.

7. Virtual tarot reader Aurora and artificial intelligence

Aurora the Fairy is a virtual character using an AI system. Artificial intelligence models are used to prepare chat responses, a brief preview, a full interpretation upon payment confirmation, as well as moderation and classification of sensitive content. The user is informed about this during the first interaction with the chat and in the ordering process.

The mechanism does not make decisions that have legal consequences for the user or similarly significant effects. Interpretations are for entertainment and reflective purposes.

8. Data minimization and information about other people

Provide only information necessary to describe your own situation. Do not enter document numbers, medical data, financial data, exact addresses, or information you are not authorized to share. If you mention another person, use at most a first name or nickname and primarily describe your own perspective of the relationship.

9. Cookies and similar technologies

Technologies necessary for security and order processing may operate without additional consent. Analytical or marketing tools may only be activated upon the user's explicit choice. Settings can be reopened at any time using the "Cookie Settings" button. Details can be found in Cookie Policy.

10. Document changes

The policy may be updated when service functions, providers, or regulations change. The current version is published on this page.