Selene

Home › Privacy policy

Selene Privacy Policy

Last updated: September 27, 2026

Selene is a tarot app powered by artificial intelligence. This policy explains what data is processed when you use it, why, and what rights you have. We've written it so it's easy to understand.

Who is responsible

Pablo Cañardo Cervera, a sole trader (autónomo) in Spain, tax ID 46817893J, with registered address at Carrer de Montilla, 9, 08970 Sant Joan Despí (Barcelona), Spain. You can write to us at hola@seluci.com.

What data is processed

  • Your questions, your conversations with Selene and the cards you choose.
  • The name you enter in Settings, if you enter one. It's optional.
  • Your settings, such as language, deck, or whether you want reversed cards.
  • Your connection's IP address. It's used to limit the number of readings per day and prevent abuse. It's kept in the server's memory for that day and isn't linked to anything else. Our usage statistics also use it for a moment, without storing it (see below).
  • If you create an account: your email address, the date you created the account, whether you have Selene Plus, your Stripe customer ID (if you subscribe), the date and time you agreed for Plus to start immediately (the withdrawal checkbox) and a daily count of your AI messages.
  • If you turn on notifications (the card-of-the-day reminder, in Settings): your browser's push subscription (an address and keys from your browser's push service, for example Google, Apple or Mozilla), the time you choose and your language.

An account is optional. You can use Selene without signing up. We don't use advertising, third-party cookies or cross-site tracking. We only use anonymous, cookie-free usage statistics (see below).

Where it's stored

On your device. Your readings, your journal and your settings are stored only on your phone or in your browser. We don't have them. If you clear the app's data or use "Delete all my data" in Settings, they're gone.

To answer with AI, your question, the cards and the conversation for that reading are sent to our server. The server forwards them to the artificial intelligence provider that generates the answer: OpenAI (USA) or Anthropic (USA), depending on the configuration.

  • The server doesn't store your conversations. It only keeps track of the service's monthly spending, without any of your data.
  • Safety moderation: your messages are checked automatically by OpenAI's moderation service to detect risk situations (for example, self-harm) and, if needed, show you help lines.
  • Selene's voice: if you listen to an answer, the text of what Selene said is sent to OpenAI to generate the audio.
  • The AI providers process the data under their business terms. They don't use it to train their models and may keep it for a limited time (usually up to 30 days) to prevent abuse.
  • This involves an international transfer of data to the USA. It's covered by the EU-U.S. Data Privacy Framework or by standard contractual clauses.

Offline or without AI, Selene reads the cards on your own device and nothing is sent.

Your account, if you create one, is stored on our server. There are no passwords: to sign in, we email you a one-time 6-digit code. These emails are sent by Resend (Resend, Inc., USA) as a data processor, with the same transfer safeguards (EU-U.S. Data Privacy Framework or standard contractual clauses).

Payments. If you subscribe to Selene Plus, the sale and the charge are handled by Link, by Stripe, as the seller (merchant of record). Stripe/Link processes payment data (card or other payment method, billing name and address, country) as an independent controller, under its own privacy policy: to charge you, calculate taxes, send you receipts and invoices, handle refunds and disputes, and prevent fraud. To calculate the taxes for your country, Stripe needs your name and billing address. We never see or store your card details. We only store your Stripe customer ID, whether you have Plus, and the date and time of your consent to start immediately.

Notifications. If you turn on the daily card-of-the-day reminder in Settings, we store your browser's push subscription, the time you choose and your language on our server, only to send you that reminder. It's delivered through your browser's push service (for example, Google, Apple or Mozilla). You can turn it off at any time in Settings.

Usage statistics. To understand how the website is used and improve it, we use Umami, a privacy-friendly web analytics tool hosted on our own server in the EU (Hetzner, Germany). It doesn't use cookies or store anything on your device, and it doesn't do advertising or cross-site tracking. It doesn't store your IP address: it only uses it for a moment to derive an anonymous visit ID and your approximate country. Pages are recorded without query parameters. The data is aggregated: visits, pages, device type, country and anonymous events such as "reading started" or "Plus page viewed".

Why, and on what legal basis

We process this data only to provide the service you ask for: interpreting your cards, talking with you, and managing your account and subscription (Article 6(1)(b) GDPR). We also use it to protect the service against abuse and to detect risk situations, which is our legitimate interest (Article 6(1)(f)). We keep the date and time of your consent for Plus to start immediately so we can prove it, also as a legitimate interest. We don't issue invoices: receipts, invoices and billing data are issued and kept by Link/Stripe as the seller, in line with its legal obligations. Usage statistics are based on our legitimate interest in improving the service; since they don't store anything on your device, no cookie consent banner is needed.

We don't sell or share your data with anyone for any other purpose.

How long it's kept

  • Account: for as long as it exists. You can ask us to delete it by writing to hola@seluci.com.
  • Daily message count: about 3 days.
  • IP address: only for the current day, in memory.
  • Notifications: until you turn them off or your browser's subscription expires.
  • Usage statistics: only aggregated, anonymous data; your IP isn't stored.
  • Readings and journal: on your device, until you delete them.

Sensitive data

Tarot invites you to talk about personal matters. We recommend that you don't write anything that identifies you (full names, addresses, phone numbers) or especially sensitive information (health, sexual orientation, beliefs) that you don't want to pass through the AI provider.

Minors

Selene isn't intended for anyone under 16. If you're younger, don't use it without your parents' or guardians' permission.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to hola@seluci.com. Since your readings are on your device, you can also delete them yourself at any time from Settings.

If you think we haven't handled your data properly, you can file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) (www.aepd.es).

Changes

If we change this policy, we'll let you know in the app along with the update date.