Privacy policy

Your reflections belong to you.

Effective September 6, 2026 · Applies to Lucky Gacha for iOS and Android

1. The short version

Lucky Gacha does not require an account. Card readings, favorites, Carry and Echo history, settings, notification choices, trial dates, and the locally cached permanent-access state stay on your device. We do not sell personal data, show ads, use advertising identifiers, or track you across other companies’ apps and websites.

2. Information processed

Information kept on your device

The app stores onboarding and consent choices, language and accessibility settings, card and draw history, notification schedules, trial timing, and permanent-unlock status locally. This information is not backed up to a Lucky Gacha account because there is no Lucky Gacha account or user database.

Remote Config required for content safety

The app contacts Google Firebase Remote Config to receive a small list of card IDs that must be removed from future draws for safety or editorial reasons. Google may process a Firebase installation identifier, app version, locale, IP-derived country, IP address, and technical request information to provide and protect this service. The request does not include your card history or reading text.

Public card delivery through Cloud Firestore

Public card delivery also uses Google Cloud Firestore. The app requests the public card catalog and listens for updates without signing in. This connection is independent of optional analytics consent. It does not upload your readings, favorites, journal history, purchase records, or reviewer access code. Public cards received from the service may be cached on your device for offline use. The Firebase SDK sends technical platform and SDK-version information (a Firebase user agent); Google processes network requests to deliver and maintain the service. This is not a backup of your personal records. See Firebase privacy information and Firebase SDK data disclosures.

Optional analytics

If analytics is configured for the release and you enable Analytics during onboarding or in Settings, the app may send an app-instance identifier, general device and operating-system information, app version, locale, approximate country, and product interactions such as opening the app, selecting a table, drawing or revisiting a card, changing consent, and opening a support resource. Events can include internal card and draw IDs, but never your name, email address, contacts, precise location, advertising ID, support-message text, or payment-card details. Analytics is used only to understand reliability and product use. You can turn it off at any time in Settings. Product analytics is not configured in the current production release.

Optional crash reports

On supported Android releases, if you enable Crash Reports, Firebase Crashlytics may receive installation and session identifiers, crash time, app identifier and version, device model and state, operating-system version, stack traces, and error messages. We do not deliberately add card text, email addresses, or other free text to crash reports. You can turn crash reporting off independently in Settings.

Purchases

Apple or Google processes store accounts, payment details, and refunds under its own privacy policy. The app receives the product identifier, purchase or restoration status, transaction date, and store verification material needed to start the iOS trial or unlock permanent access. Lucky Gacha has no receipt server and does not receive your payment-card details. Purchases are separate between Apple and Google accounts.

Support email and this website

If you choose to email tkrdmsdl@gmail.com, your email provider and ours process your sender address and message. We use them only to answer the request and delete them within 30 days after it is resolved, unless a longer period is legally required. Firebase Hosting processes visitor IP addresses and request logs for delivery and abuse prevention and may retain IP data for a few months.

3. Retention and control

• Device records remain until you reset local data or uninstall the app. The in-app reset deliberately keeps the local permanent-unlock cache; uninstalling removes local app records, and the store can restore eligible purchases.
• Product analytics is currently unconfigured in production. Before enabling it, we will configure user-level and event-level data for a two-month retention period. Standard aggregate reports may remain longer.
• Crashlytics retains crash stack traces and associated identifiers for 90 days before removal begins.
• Turning off Analytics resets its local analytics identifier. Turning off Crash Reports stops new app-submitted reports and deletes unsent reports on the device.

4. Service providers and transfers

Google provides Cloud Firestore, Firebase Remote Config, optional Analytics and Crashlytics, email, and website hosting. Apple and Google provide their respective app stores and billing systems. These providers may process information in countries other than yours under their own legal safeguards and terms.

5. Your choices and requests

You can change optional Analytics and Crash Reports independently in Settings, reset device records in Settings, revoke notification permission in system settings, or uninstall the app. For access, correction, deletion, or privacy questions, email tkrdmsdl@gmail.com. Because Lucky Gacha has no account and does not collect your name with analytics, we may not be able to associate an anonymous installation with you after its identifier is reset.

6. Changes

If this policy changes materially, we will update the effective date and publish the revised policy here. A change will not retroactively turn optional collection on.