PRIVACY POLICY

English (EN)

Avaline: Mystic — Privacy Policy

Last updated: July 29, 2026

Welcome to Avaline: Mystic (“Avaline: Mystic”, “we”, “our”, or “us”).

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what information may be collected when you use Avaline: Mystic, how that information is used, when it may be shared, how long it may be retained, and what choices and rights may be available to you.

By using Avaline: Mystic, you acknowledge that your information will be handled as described in this Privacy Policy.

1. About Avaline: Mystic

Avaline: Mystic is an AI-powered entertainment and self-reflection application that may provide:

• AI conversations with a virtual character;
• tarot readings;
• astrology-related features;
• rune readings;
• dream interpretation;
• coffee-ground readings;
• personalized questions and interpretations;
• reading history and journals;
• virtual energy, subscriptions, and rewarded features.

The features available to you may depend on the application version, country, device, account status, and subscription plan.

2. Information We May Collect

2.1 Account and authentication information

When you create or connect a permanent account, we may receive information from the authentication provider, such as:

• a unique account identifier;
• email address;
• display name;
• profile image, where provided;
• authentication provider;
• authentication and session information.

Authentication may be handled through services such as Firebase Authentication and supported third-party sign-in providers.

We do not receive or store the password used for your Google, Apple, or other external authentication account.

2.2 Guest access information

You may be able to use Avaline: Mystic without creating a permanent account.

For Guest users:

• a local or anonymous identity may be created;
• data may remain associated only with the current installation or device;
• reinstalling the application, clearing application data, losing the device, or changing devices may result in loss of Guest data;
• some account, synchronization, recovery, deletion, or export features may not be available.

2.3 Age eligibility information

Avaline: Mystic is intended for users who confirm that they are at least 16 years old.

For age eligibility, we store only the selected eligibility status, such as:

• eligibility not yet confirmed;
• confirmed as 16 or older;
• indicated as under 16.

We do not collect a date of birth, exact age, photograph, passport, identity document, or government ID solely for the age-confirmation screen.

A birth date may be collected separately if you voluntarily create an Astrology Profile, as described below.

2.4 Astrology Profile information

If you use astrology-related features, you may be asked to provide:

• birth date;
• birth time, where known;
• birth city;
• birth country.

Birth date may be required for certain astrology features. Birth time, birth city, and birth country may be optional depending on the requested interpretation.

Astrology Profile information is used only to provide astrology-related functionality, personalized interpretations, and related account features.

Providing Astrology Profile information is voluntary. If you do not provide it, some astrology features may be unavailable or less personalized.

2.5 Questions, messages, and AI interactions

When you interact with Avaline: Mystic, we may process information such as:

• chat messages;
• questions submitted for readings;
• tarot questions and selected spreads;
• dream descriptions;
• rune or coffee-reading requests;
• astrology questions;
• follow-up questions;
• feedback regarding readings;
• character conversations;
• other text submitted to AI-powered features.

This information may be sent to an AI service provider to generate a response.

You should not submit information that you do not want processed, including unnecessary sensitive personal data about yourself or other people.

2.6 Reading history, journals, and personal memory

Depending on the features available in your version, Avaline: Mystic may store:

• previous readings;
• selected cards and spread positions;
• generated interpretations;
• follow-up questions;
• reading feedback;
• dream journal entries;
• Astrology Profile information;
• saved questions;
• Book of Events entries;
• information used to personalize future interactions;
• AI memory connected to your relationship with the virtual character.

These features may allow the application to remember prior interactions and provide more personalized responses.

Where account synchronization is supported, this information may be linked to your account. For Guest users, it may remain only on the current device.

2.7 Voice and speech information

If you use voice input, the application may process audio to convert speech into text.

Depending on the device and speech-recognition configuration, audio may be processed:

• on your device;
• by the device operating system;
• by Google, Apple, or another speech-recognition provider.

We use recognized text to process your request.

Avaline: Mystic does not intentionally retain raw microphone recordings as part of your reading or conversation history unless a specific feature clearly informs you otherwise.

Text-to-speech features may process generated text to produce spoken audio. The processing may occur on the device or through an operating-system or third-party speech service.

Microphone access is requested only when you choose to use a feature that requires it.

2.8 Device and technical information

We may automatically receive limited technical information, including:

• device type and model;
• operating-system version;
• application version;
• language and locale;
• time zone;
• device or application identifiers;
• network information;
• crash reports;
• diagnostic information;
• performance information;
• security and fraud-prevention signals.

This information helps us maintain, secure, troubleshoot, and improve the application.

2.9 Analytics information

We may use analytics services, such as Firebase Analytics, to understand how Avaline: Mystic is used.

Analytics information may include:

• application launches;
• screens viewed;
• feature usage;
• session duration;
• onboarding completion;
• subscription or purchase events;
• technical errors;
• general device and region information.

Where required, analytics collection may depend on your consent or device privacy settings.

2.10 Purchase and subscription information

Payments for subscriptions, energy packages, and other digital products may be processed through Google Play Billing or Apple’s in-app purchase system.

We may receive transaction-related information such as:

• purchased product;
• subscription status;
• transaction identifier;
• purchase date;
• renewal status;
• entitlement status;
• country or store region.

We generally do not receive your full payment-card number or complete bank details from Google Play or Apple.

Payment providers process payment information according to their own privacy policies and legal obligations.

2.11 Advertising information

The free version of Avaline: Mystic may display advertisements or offer optional rewarded advertisements.

Advertising providers may process information such as:

• advertising identifier;
• device information;
• approximate location derived from IP address;
• advertisement impressions;
• clicks;
• rewarded-ad completion;
• consent and privacy choices.

Where required by law, personalized advertising will depend on your consent. You may receive non-personalized advertising where applicable.

We do not knowingly provide advertisers with the content of your private readings, chats, journals, or Astrology Profile for use in selecting advertisements.

2.12 Support and communication information

When you contact us, we may collect:

• your email address;
• the content of your request;
• screenshots or attachments you provide;
• device or account information needed to investigate the issue;
• records of our correspondence.

3. How We Use Information

We may use information to:

• provide Avaline: Mystic and its features;
• authenticate users and maintain sessions;
• provide Guest access;
• generate AI conversations and readings;
• process tarot, astrology, rune, dream, and coffee-reading requests;
• save and restore account-linked data;
• personalize the application experience;
• maintain reading history and journals;
• remember preferences and previous interactions;
• process purchases, subscriptions, energy, and entitlements;
• provide optional advertisements and rewarded features;
• respond to support requests;
• detect abuse, fraud, illegal activity, and security threats;
• enforce our Terms of Service and Child Safety Standards;
• investigate reports;
• comply with legal obligations;
• improve application reliability, safety, usability, and performance;
• develop and evaluate new features.

We do not use Astrology Profile information to verify your identity.

4. AI Processing

Information submitted to AI-powered features may be transmitted to an AI service provider, such as OpenAI, to generate responses, readings, interpretations, or conversation content.

The information sent may include:

• your question;
• relevant conversation context;
• selected cards or reading positions;
• Astrology Profile information when needed for an astrology request;
• previous interactions required for continuity;
• safety and moderation instructions.

We aim to send only the information reasonably necessary to provide the requested feature.

Do not include unnecessary confidential information, passwords, financial account numbers, medical records, government identification numbers, or personal data about another person without authorization.

AI-generated responses may be inaccurate or unexpected. They are not used as authoritative professional decisions about you.

5. Legal Bases for Processing

Where the European General Data Protection Regulation or similar law applies, we may process personal data under one or more of the following legal bases:

Performance of a contract

Processing necessary to provide the application and features you request, including:

• authentication;
• AI conversations;
• readings;
• synchronization;
• subscriptions;
• account management.

Consent

Processing based on your consent, where required, including certain:

• analytics;
• advertising;
• microphone access;
• optional personal information;
• privacy choices.

You may withdraw consent where applicable, although this does not affect processing performed before withdrawal.

Legitimate interests

Processing necessary for legitimate interests such as:

• application security;
• fraud prevention;
• troubleshooting;
• service improvement;
• abuse detection;
• protection of users and infrastructure.

We consider the impact on your privacy before relying on legitimate interests.

Legal obligations

Processing required to comply with laws, lawful requests, accounting duties, consumer-protection obligations, child-safety requirements, or enforcement obligations.

6. How We Share Information

We may share limited information with service providers that help operate Avaline: Mystic.

6.1 Google and Firebase

Google or Firebase services may be used for:

• authentication;
• database or cloud storage;
• analytics;
• crash reporting;
• application configuration;
• notifications;
• security;
• Android purchases.

Google processes information under its own terms and privacy policies.

6.2 AI service providers

AI service providers, including OpenAI where applicable, may process submitted content to generate responses and provide safety filtering.

6.3 Apple

For iOS users, Apple may process:

• authentication;
• application downloads;
• purchases and subscriptions;
• device services;
• crash or diagnostic information;
• speech-related functions.

6.4 Advertising providers

Advertising services may process device, consent, and advertisement-interaction information to deliver and measure advertisements.

6.5 Analytics and diagnostics providers

Analytics and crash-reporting services may process technical and usage information to help us understand performance and resolve errors.

6.6 Legal and safety disclosures

We may disclose information where reasonably necessary to:

• comply with applicable law;
• respond to lawful requests;
• protect users, children, or other individuals;
• investigate fraud, abuse, exploitation, or security threats;
• enforce our Terms of Service;
• report suspected child sexual abuse material or child exploitation;
• protect our rights, property, application, or infrastructure.

6.7 Business transfers

If the application or business is involved in a merger, acquisition, restructuring, financing, or sale of assets, information may be transferred as part of that transaction, subject to applicable law and appropriate privacy protections.

We do not sell private chat content, reading content, journals, or Astrology Profile information to advertisers.

7. International Data Transfers

Avaline: Mystic may use service providers located in countries other than your country of residence.

As a result, personal information may be processed in:

• the European Economic Area;
• the United States;
• other countries where our service providers operate.

Where required, appropriate safeguards may be used, such as contractual protections, adequacy decisions, or other lawful transfer mechanisms.

8. Data Storage and Retention

We retain information only for as long as reasonably necessary to:

• provide requested features;
• maintain your account;
• preserve reading history or preferences you choose to keep;
• comply with legal obligations;
• resolve disputes;
• prevent fraud or abuse;
• enforce agreements;
• protect users and the application.

Retention may depend on whether you use Avaline: Mystic as a Guest or with a permanent account.

Guest data

Guest data may remain on the current device until:

• you delete it;
• you clear application data;
• the application is removed;
• the installation identity is reset;
• the device is lost or replaced.

Guest data may not be recoverable.

Account-linked data

Account-linked data may be retained while your account remains active and may be deleted following a valid account-deletion request, subject to legal and security exceptions.

Safety and legal records

Certain records may be retained for longer where necessary for:

• child-safety reporting;
• fraud prevention;
• legal claims;
• security investigations;
• financial and tax obligations;
• compliance with lawful requests.

We may retain de-identified or aggregated information that no longer reasonably identifies an individual.

9. Account Deletion

Users with a permanent account may request deletion through the Account Management section of Avaline: Mystic.

The deletion process may require:

• confirmation of the request;
• a second confirmation warning that deletion is irreversible;
• recent authentication or signing in again.

Remote account deletion is performed before local account-linked information is cleared.

Following successful deletion, we may delete account-linked information such as:

• authenticated identity;
• account session information;
• reading history;
• messages;
• saved cards and readings;
• account-linked consent records;
• Astrology Profile;
• account preferences;
• AI memory;
• account-linked caches.

Certain installation-level settings may remain on the device, such as:

• language;
• theme;
• time zone;
• age-eligibility confirmation;
• technical installation preferences.

Deleting your account does not automatically cancel a Google Play or Apple subscription. Subscriptions must be cancelled separately through the relevant app-store account.

Some information may be retained where legally required or necessary for security, fraud prevention, child safety, enforcement, or dispute resolution.

10. Data Export

Avaline: Mystic may provide a feature allowing users to request or export a copy of eligible account data.

This feature may not yet be available in every version. Where it is unavailable, the application may display it as “Coming Soon” or “Not available yet.”

You may also contact us to ask about access to your personal information, subject to applicable law and identity-verification requirements.

11. Your Privacy Rights

Depending on your country, you may have the right to:

• request access to your personal data;
• request correction of inaccurate data;
• request deletion of personal data;
• request restriction of processing;
• object to certain processing;
• withdraw consent;
• request data portability;
• lodge a complaint with a data-protection authority;
• request information about how your data is processed.

These rights may be subject to legal limitations and verification of your identity.

To exercise a privacy right, contact us using the details below.

We may need to verify that the request relates to you before responding.

12. Privacy Choices and Permissions

You may control certain processing through:

• application settings;
• device permission settings;
• advertising-consent controls;
• Google or Apple account settings;
• subscription settings;
• account deletion;
• operating-system privacy settings.

You may deny microphone permission and continue using text-based features, where available.

Disabling a permission may prevent the related feature from working.

13. Security

We use reasonable technical and organizational measures designed to protect information against:

• unauthorized access;
• accidental loss;
• misuse;
• alteration;
• disclosure;
• destruction.

These measures may include:

• authenticated access;
• access restrictions;
• encrypted network connections;
• platform security;
• database controls;
• separation of data by account identifier;
• monitoring and error detection.

However, no application, network, transmission, or storage system can be guaranteed to be completely secure.

You are responsible for protecting access to your device and authentication account.

14. Account Data Isolation

Account-linked information is associated with a unique owner identifier.

When different users sign in on the same device, the application is designed to prevent one account from accessing another account’s:

• Astrology Profile;
• readings;
• history;
• messages;
• consent records;
• AI memory;
• account preferences.

Signing out does not necessarily delete account-linked information. It prevents the signed-out account from remaining active on the device.

Deleting an account is a separate operation.

15. Children and Age Restrictions

Avaline: Mystic is not intended for children under 16.

Users must confirm that they are at least 16 years old before accessing the main application experience.

If a user indicates that they are under 16, access to the main application is blocked.

We do not knowingly provide the main service to children under 16.

If you believe that a child under 16 has provided personal information or accessed the service improperly, contact us so that we can investigate and take appropriate action.

Avaline: Mystic maintains separate Child Safety Standards addressing child sexual abuse and exploitation, CSAM, grooming, and related harmful conduct.

16. Sensitive Information

Some questions, journals, dream descriptions, readings, or conversations may reveal sensitive personal information.

You are not required to provide sensitive information to use general application features.

Do not submit:

• passwords;
• payment-card numbers;
• government identification numbers;
• private authentication credentials;
• information you are not authorized to disclose;
• unnecessary medical, legal, or financial documents.

Information provided for spiritual, entertainment, or reflective purposes is still personal information and should be submitted carefully.

17. Third-Party Links and Services

Avaline: Mystic may contain links to external websites, legal documents, app-store pages, or third-party services.

We do not control the privacy practices of independent third parties. Their handling of information is governed by their own privacy policies.

18. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

• new features;
• changes to data processing;
• changes to service providers;
• legal or regulatory requirements;
• security improvements;
• platform requirements.

The latest version will be available on this page.

Where appropriate, we may display a notice in the application or request renewed acceptance or consent.

The “Last updated” date indicates when this Privacy Policy was most recently revised.

19. Data Controller and Business Information

The operator responsible for Avaline: Mystic is:

Legal name / business operator: Myroslava Morozova, Ukrainian individual entrepreneur (FOP)

Business address: 24 Zolotoho Leva St., Birky, Yavorivskyi District, Lviv Oblast, Ukraine

Country: Ukraine

Developer name: Mirka apps

Contact email: echoyouapp@gmail.com

20. Contact Us

For privacy questions, personal-data requests, account-deletion assistance, or concerns about this Privacy Policy, contact:

Email: echoyouapp@gmail.com

For child-safety concerns involving CSAE, CSAM, grooming, exploitation of minors, or related enforcement matters, use the child-safety contact listed in the separate Avaline: Mystic Child Safety Standards.