Privacy Policy

Effective November 7, 2026

Kismet Cup ("Kismet Cup," "we," "us") is an iPhone app for coffee cup readings, tarot, daily horoscopes, and birth charts. This policy explains what we collect, why, and the choices you have. It covers the Kismet Cup app and this website.

Kismet Cup is operated by Ali Murat Erkek, an individual developer based in İzmir, Türkiye.

1. Information we collect

Your account

You sign in with Apple or with an email address and password. You need an account to use Kismet Cup.

• Sign in with Apple: we receive a unique Apple ID identifier for Kismet Cup and, only if you choose to share them, your name and email address. If you choose "Hide My Email," we receive a private relay address from Apple instead of your real one.
• Email and password: we store your email address and a securely hashed version of your password. We never see or store the password itself. We use your email only for account messages, such as confirming your address or resetting your password, and never for marketing.

What you tell us in the app

• First name, so readings and greetings can address you.
• Birth date, birth time (optional), and birth place, to work out your sign and birth chart. Your birth place is turned into map coordinates on your iPhone, using Apple's built-in geocoder, and we store the place name, its coordinates, and the time zone. We do not use your phone's location.
• Relationship status (optional). It only shapes the tone of the Love part of a reading and is never shown in the reading text.
• Cup photos you take or choose for a coffee reading (see Cup photos).

What we create for you

• Your readings (coffee, tarot, and birth chart) and which ones you mark as favorites, saved to your account so you can find them in History.
• A usage record of when you request readings, used to give you your free reading, enforce fair daily limits, and prevent abuse of free readings.

Collected automatically

• Subscription status. Purchases are handled by Apple. We and our subscription provider, RevenueCat, receive the subscription product, status, trial and renewal dates, and transaction identifiers, linked to a random account ID. We never receive your payment card or billing details.
• Notification token. If you allow notifications, iOS gives the app a push token, which we store with your notification setting and delivery time so we can send your daily horoscope note. You can turn this off at any time.
• Crash and error reports. When the app crashes or hits an error, it sends a diagnostic report to Sentry: device model, iOS and app version, a random identifier, and technical details of the error. Reports are set up not to include your readings, photos, or password.
• Security check. The email forms (sign-up, sign-in, password reset, and resending a confirmation email) run Cloudflare Turnstile, a check that tells people from bots. Sign in with Apple does not use it. It may process your IP address and technical signals from your device and browser. It is not used for advertising.
• Server logs. Like any online service, our servers record technical information such as IP address, request time, and app version for security and troubleshooting.

We do not use advertising identifiers or advertising networks, and we do not collect your contacts, your precise location, or your health data.

2. How we use it

• To create and secure your account, and to send account emails such as address confirmation and password reset.
• To personalize and write your readings, horoscopes, and birth chart.
• To provide your free reading, unlock Premium when you subscribe, and restore purchases.
• To send the daily notification you turned on.
• To keep the service safe: preventing bots, fraud, and abuse of free readings.
• To fix crashes and improve reliability.
• To answer your support requests and to meet legal obligations.

3. How readings are written

Readings are written by an AI model, Claude, provided by Anthropic. To write a reading, our servers send Anthropic only what the reading needs: your first name, birth details, sign, relationship status if you set it, and, for a coffee reading, your cup photo. Anthropic processes this on our behalf to generate the text. Under its commercial terms, Anthropic does not use this information to train its models and may keep it only for a limited period for safety and abuse monitoring.

4. Cup photos

Your cup photo is uploaded to private storage that only your account and our servers can reach. It is used only to write that reading and is deleted as soon as the reading is ready. If a reading fails, the photo is deleted right away too, and an automatic cleanup removes any photo left over for any reason within about an hour. Cup photos are never used to train AI models and are never shared with anyone other than Anthropic for writing your reading.

5. Service providers

We use a small number of companies to run Kismet Cup. They process data only on our instructions and only to provide their service to us.

6. What we never do

• We do not sell your personal information.
• We do not share it for cross-context behavioral advertising, and we show no ads.
• We do not track you across other companies' apps or websites.

We disclose information only to the providers above, when the law requires it (for example, a valid court order), to protect the safety and rights of our users or others, or as part of a merger or sale of the business, in which case this policy continues to apply to your information.

7. How long we keep data

• Account, profile, and readings: until you delete your account.
• Cup photos: deleted as soon as your reading is ready, and in any case within about an hour.
• Crash reports: kept by Sentry for up to 90 days.
• Server and email delivery logs: kept for a limited period for security and troubleshooting, then deleted.

After you delete your account, copies may remain in encrypted backups for a short time until those backups are overwritten.

8. Deleting your account

You can delete your account in the app: open the Profile tab, tap Delete account, then Delete forever. This permanently removes your account, email address, name, birth details, relationship status, readings, any cup photos, your usage record, and your notification token from our servers, and clears your data from the app on that iPhone. If you signed in with Apple, we also ask Apple to revoke Kismet Cup's access to your Apple ID.

Deleting your account does not cancel a subscription. Subscriptions are billed by Apple. Cancel in Settings > [your name] > Subscriptions on your iPhone.

If you can't open the app, email [email protected] from the address on your account (or tell us how you signed in), and we will delete your account for you.

9. Your other choices

• Edit your birth details and relationship status any time in the Profile tab.
• Turn the daily notification off in the Profile tab or in iOS Settings.
• Reset your password from the sign-in screen with "Forgot password?"
• Ask us for a copy of your data or to correct it by emailing [email protected].

10. California privacy rights

If you live in California, the California Consumer Privacy Act (as amended by the CPRA) gives you these rights:

• Right to know and access the personal information we have collected about you, the categories of sources, why we use it, and who we disclose it to.
• Right to delete your personal information. You can do this yourself in the app (see Deleting your account).
• Right to correct inaccurate personal information.
• Right to opt out of sale or sharing. We do not sell or share personal information, so there is nothing to opt out of.
• Right to limit use of sensitive personal information. The only sensitive information we hold is your account login (email and password), used only to sign you in, so this right does not apply.
• Right not to be discriminated against for using any of these rights.

In the last 12 months we collected these categories, from you and from your use of the app, for the purposes in section 2: identifiers (email address, Apple ID identifier, account ID, push token, IP address); personal characteristics you provide (birth date and relationship status); commercial information (subscription status); internet or device activity (crash reports, server logs); and user content (cup photos, deleted right after use). We disclosed them only to the service providers listed in section 5, for business purposes.

To make a request, email [email protected]. We will verify the request by confirming it with the email address on your account, and we respond within 45 days. You may use an authorized agent; we may ask for proof that you authorized them. We do not disclose personal information to third parties for their own direct marketing.

11. Children

Kismet Cup is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has created an account, email us and we will delete it.

12. Security and where data is stored

Data travels over encrypted connections. Our database limits each account to its own records, passwords are stored only as secure hashes, and cup photos sit in private storage. No system is perfectly secure, but we work to protect your information and keep only what we need. Our servers are in the United States.

13. This website

kismetcup.com uses no cookies, analytics, or ads, and loads no third-party scripts. It is hosted by Cloudflare, which processes visitors' IP addresses to deliver and protect the site. The security check page used inside the app loads Cloudflare Turnstile as described above.

14. Changes and contact

If we change this policy, we will update the effective date above, and for significant changes we will tell you in the app before they take effect.

Kismet Cup is operated by Ali Murat Erkek, an individual developer based in İzmir, Türkiye. Questions or requests: [email protected].