Privacy Policy

Effective: 2026 · Last updated: 2026

In short: We process your data only to provide the service. We do not sell it, do not use it for advertising, and do not share it with ad networks. The App contains no ads. You can delete your account at any time.

1. Data Controller

The developer of the Covenly / Cadı AI application.
Contact: support@covenly.net

2. Data We Collect, Why, and For How Long

DataPurposeLegal basisRetention
Email, display name, account identifier Account creation, sign-in, authentication, support Performance of contract While the account is active
Birth date, gender, relationship status, name (optional profile) Personalising readings, zodiac and numerology calculation Performance of contract; consent for optional fields While the account is active; editable in profile
Photos you upload (cup, palm) Generating a reading Performance of contract Until the reading record is deleted
Free-text input (dream description, question) Generating a reading Performance of contract Until the reading record is deleted
Device identifier, platform Enforcing the one-account-per-device rule, preventing abuse Legitimate interest While the account is active
Push notification token Notifying you when a reading is ready and for announcements Performance of contract; consent for marketing messages Until notification permission is withdrawn
Reading history, credit activity, purchase records Providing the service, tracking balance, validating purchases, accounting Performance of contract; legal obligation 10 years for purchase records (tax law)
Your ratings and reviews Measuring service quality, showcase display Consent Until withdrawn or the account is deleted

3. How Data Is Collected

Data is collected electronically: entered by you in the App, obtained automatically from your device (device identifier, notification token), and received from Google or Apple when you sign in with those services.

4. AI Processing

To generate a reading, your input (text and image, if any) is sent to an AI provider. This transfer is made solely to generate the reading. Your name, email, or account details are not sent to the provider. Readings are AI output and are not genuine predictions.

5. Who We Share Data With

We do not sell your data and do not share it for advertising. Data is shared only to the extent necessary with the following providers:

Some of these providers are located outside Türkiye; transfers are made only to the extent necessary to provide the service.

6. Security

We apply administrative and technical measures: HTTPS/TLS encryption on all connections, passwords stored encrypted by Firebase, AI provider keys encrypted with AES-256-GCM, restricted administrative access, regular backups, and access limitation.

7. Retention and Deletion

Your data is retained while your account is active. When you delete your account, data is permanently destroyed; records that must be retained under tax law (such as purchase records) are kept for the statutory period (10 years) and destroyed thereafter.

8. Your Rights

You have the right to learn whether your personal data is processed, to request information about it, to learn the purpose of processing and whether it is used accordingly, to know the third parties to whom it is transferred at home or abroad, to request correction of incomplete or inaccurate data, to request erasure or destruction, to request that such actions be notified to third parties, to object to a result derived solely from automated analysis, and to claim compensation for damage arising from unlawful processing.

Send requests to support@covenly.net; we respond within 30 days at the latest.

9. Deleting Your Account and Data

You can delete your account in the App via Profile → Delete account. Once processed, your account and associated data are permanently removed — the account is not merely deactivated. If you have an active subscription, you must also cancel it via the App Store or Google Play to stop billing.

10. Children's Privacy

The App is not directed to children under 12 and we do not knowingly collect data from them. If we become aware that we have collected data from a child under 12, we delete it without delay.

11. Cookies and Tracking

The App contains no advertising networks, tracking pixels, or third-party advertising identifiers. The device identifier is used solely to enforce the one-account-per-device rule and to prevent abuse.

12. Changes

This policy may be updated. You will be notified in-app of material changes. The current version is always published on this page.

13. Contact

To contact the data controller: support@covenly.net