Home › Privacy Policy

Privacy Policy

Last updated: July 31, 2026

This document is the privacy policy of Mistera AI ("Mistera", "we") for the app and website, prepared in accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK").

Data controller: Ahmet Taha Berberoğlu (operator of Mistera AI). For any question or request, write to [email protected].

What data do we collect?

• Account data: your e-mail address, display name (if any) and an irreversible hash of your password. Your password is never stored in plain text.
• Social sign-in: if you sign in with Google or Apple, the authentication token and e-mail address provided by them.
• Reading content: the questions you ask, the cards you pick or that are recognized from a photo, the generated interpretations and any notes you add. Numeric summaries (embeddings) are derived from this content so your history can be searched meaningfully.
• Astrology profile: birth date, optional birth time, birth place, latitude, longitude, and time zone. The calculated birth chart is stored with your account. Transit and astrology-assistant results are added to astrology history only when you leave saving enabled; the free daily sky note is not stored separately.
• Relationship compatibility: birth dates, times, and locations entered temporarily for a comparison are used only while processing the request and are not stored permanently. If you explicitly choose to save, names, your focus, the deterministic score, and the generated reading—which may contain planetary placements—may be stored with your account.
• Card photos: an uploaded photo is processed only to recognize the card names and is deleted from the server as soon as processing finishes; it is not stored permanently.
• Device and connection data: a randomly generated device ID, your IP address and basic request logs (for rate limiting and abuse prevention).
• Credit and transaction records: your credit balance and every balance movement (spend, refund, regeneration, purchase).
• Ad interactions: rewarded-ad start and completion records.
• Age and consent record: an audit record of your 18+ declaration, international AI-transfer preference, the notice version shown, date and time, and—when it can be derived through the trusted proxy—the country code.

Cookies and local storage

A first-party "mistera_session" cookie keeps you signed in. Preferences such as theme, language, onboarding state and ad frequency are kept in your browser's local storage. If you are signed in, a copy of your reading history is also cached in local storage for fast display; it is cleared from your device when you sign out or delete your account. We do not use third-party tracking cookies for advertising or analytics.

Why and on what legal basis do we process your data?

• Generating tarot and astrology readings, keeping the results you choose in history, and managing your account — performance of a contract (KVKK art. 5/2-c).
• E-mail verification, password reset and account security notices — performance of a contract and legitimate interest (KVKK art. 5/2-f).
• Rate limiting, fraud and abuse prevention — legitimate interest (KVKK art. 5/2-f).
• Compliance with legal obligations — KVKK art. 5/2-ç.

Who is your data shared with? (International transfers)

Mistera relies on the following service providers to run the service. Their servers may be located abroad (US/EU). International transfers are carried out under the applicable transfer condition and safeguards in KVKK art. 9. Separate explicit consent is requested before AI features and can be withdrawn in Settings; the consent record does not replace the data controller’s other obligations and safeguards under KVKK art. 9.

• Groq (US): your questions and card details are processed to generate tarot interpretations; card photos are processed to recognize cards. Astrology prompts contain calculated planetary placements, your focus, or the message you send to the astrology assistant—not raw birth dates, locations, or coordinates entered temporarily for relationship compatibility.
• Google Gemini API (Google AI Studio): the same AI inputs may be processed only in countries where the operator has separately enabled regional routing and confirmed the required transfer safeguards. Because the terms of the free/unpaid Gemini service are not suitable for real users’ personal or sensitive content, real-user traffic is not routed to Gemini under those terms.
• Hugging Face (US): hosting of the application server.
• Neon (US/EU): database hosting (accounts, reading history, credit records).
• Cloudflare: content delivery and security layer; processes your IP address.
• Google / Apple: authentication only if you sign in with a social account.
• Google (Gmail) / Brevo: delivery of verification and password-reset e-mails.

Your data is never sold to third parties and no advertising profiles are built.

How long is your data kept?

Your account data, birth profile, calculated charts, and saved tarot/astrology readings are kept until you delete your account. A compatibility result you do not save is not written to persistent storage after the request. You can permanently delete your account at any time via Settings → Account → Delete account. In guest mode, data is linked only to a device ID. Records subject to legal obligations (e.g. transaction records) may be retained for the periods required by law.

Your rights under KVKK

Under KVKK art. 11 you have the right to:

• Learn whether your personal data is processed and request information about it.
• Learn the purpose of processing and whether it is used accordingly.
• Know the third parties to whom your data is transferred, in Türkiye or abroad.
• Request correction of incomplete or inaccurate data.
• Request erasure or destruction of your data.
• Object to a result produced against you exclusively by automated systems.
• Claim compensation if you suffer damage due to unlawful processing.

Send your requests to [email protected]; they are answered within 30 days at the latest.

Children's privacy

Mistera is intended for users aged 18 and over; we do not knowingly collect data from anyone under 18.

Changes

This policy may be updated from time to time. Significant changes are announced in the app; the current version is always published on this page.

The in-app version of this text: Open in the app