Back

Privacy

Last updated: 12/06/2026

In short

We don't store guest readings, conversations or questions. No tracking, no ads. Only what's strictly needed to run the service.

What we do NOT store

  • Questions you ask Solara as a guest
  • The content of AI readings for guests
  • IP addresses for analytics purposes
  • Third-party cookies / tracking pixels

What we DO store

  • Account details (email, name) when you create an account — to let you sign in
  • Saved readings only when you, as a signed-in user, explicitly click "Save to journal"
  • Functional localStorage choices in your browser: language, audio choice, breathing-exercise choice, disclaimer acceptance. These stay on your device and are never sent to us.

Your readings and journal

When you're signed in and save a reading to your journal, we store it in a personal database table that only you can read.

  • Strict access rules (RLS) — our database only lets you (based on your user-id) read, modify or delete your own readings. Other users cannot see your readings.
  • Admins cannot read along — we deliberately chose not to add an "admin read policy" to the table with your readings, questions and journal notes. Even if we wanted to, we cannot via the normal app.
  • AI prompts are one-off — when you request AI synthesis, we only send the cards and your question of that single reading. We share no history with the AI model unless you explicitly consent later.
  • Delete really means delete — when you delete a reading, it's gone from our database (no "soft delete").
  • No training on your data — we do not use your journal content to train AI models, and we don't share it with third parties.

AI & your data

Solara remembers not a single word of what you type. Your questions, journal notes and dreams stay yours — in your own account, shielded by strict database rules.

What does help our model improve: anonymous patterns. For example: which card was drawn, in which spread, in which language, in which emotional register (positive / searching / heavy — categorical, never your words). From this we learn which archetypes resonate and which spreads work best.

  • Never your text. Questions, journals and dream descriptions are never written to our learning table.
  • Never your name or email. Learning signals contain no user_id, only a hash with a monthly rotating salt — we cannot derive you from it.
  • Not human-readable. The learning table is only accessible to automated server processes. No admin, no support, no developer reads along here.
  • Fully opt-out. Prefer not to contribute at all? One switch in your account settings and nothing is recorded anymore.

Sub-processors

  • Lovable Cloud (hosting and database) — EU region
  • Google Gemini via Lovable AI Gateway — for generating readings. Google does not train their models on content sent via this API.
  • ElevenLabs (optional, only for premium audio features) — no retention of audio text

Your GDPR rights

You have the right to access, rectification, erasure, restriction, data portability and objection. For accounts: use the account settings or email support@solaratarot.com. We respond within 30 days.

Legal basis

Processing is based on art. 6.1.b GDPR (performance of the service) and, for optional audio or storage features, art. 6.1.a (your consent, revocable at any time).

Retention periods

Account data: as long as your account exists. Saved readings: until you delete them yourself or close your account. Guest readings: not retained.

Contact

Questions? support@solaratarot.com