Last updated 10 August 2026 · Emily Shurey trading as Enchantra, ABN 87 927 064 532
The short version. Your practice is yours. What you write in Enchantra — your intentions, your journal, your reflections — is stored encrypted, kept for you alone, and available to take back or erase at any moment.
We sell nothing, advertise nothing, and no one trains an AI model on your journal. When a reading is written, the words you chose to share travel to our AI provider for that reading and are not kept there.
Enchantra is made by Emily Shurey trading as Enchantra (ABN 87 927 064 532), based in Australia. Emily is responsible for how your information is handled. If you have a question about anything here, write to keeper@enchantratarot.com and a person will answer.
An email address and a password, so your practice can find you again on a new phone. Passwords are hashed by our authentication provider — we never see them.
A name if you'd like to give one, the region you're in, and how you'd like readings written for you. The region matters for two reasons: it keeps your lunar dates true to where you actually stand, and it means the support resources we offer are ones you can really call.
The cards you draw and how they fall, the intentions you set, the journal you keep, the reflections you record, and the echoes you notice. This is the heart of the app and the most personal thing in it. It is treated accordingly.
When something breaks, we receive a crash report. Those reports are filtered before they reach us: journal entries, reflections, intentions, care messages and free-text notes are stripped out by name, so what arrives is the shape of the failure and not the substance of your evening.
Enchantra contains no analytics, no advertising SDK, and no third-party trackers. Nothing in the app watches how you use it.
Your practice is stored encrypted with AES-256-GCM. The key that opens it is held in your device's secure hardware — the iOS Keychain or the Android Keystore — and never leaves the device, never syncs to iCloud, and never travels in a backup. If someone takes your phone apart, they find sealed data and no way in.
So your practice survives a lost phone, it also syncs to a database hosted by Supabase. Access there is row-level: your rows answer to your account and no other. Connections are encrypted in transit, and the database is encrypted at rest. Backups are held for a limited period and then written over.
Readings are written by a large language model provided by Anthropic. To write one, we send what that reading genuinely needs: the cards drawn and their orientation, the intention you set, the current moon phase, your reading tier, and — where they give the reading its memory — short excerpts of your own recent journal and the echoes you've noted.
Anthropic's terms state that API content is not used to train their models and is not retained after the response is returned, except where their automated safety systems flag a request, in which case it may be held for up to two years, or where the law requires it.
Your email address, your name and your account identity are never sent with a reading. The model receives your words, never who you are.
If a reading lands badly — if it reads as a prediction, or as fear, or simply as harm — you can report it, and a person reads that report within 24 hours. That's a commitment, and keeping it means those reports are stored separately from your practice and are kept even if you later delete your account, with your account identity removed. We keep them so the same failure doesn't reach someone else.
Enchantra is a reflective practice. It is not therapy, medical advice, or crisis care, and it does not replace them. When something in what you write suggests you may be struggling, the app pauses the reading and offers real support lines for your region.
| What | How |
|---|---|
| Delete everything | Profile → Delete account. Removes your account, your practice, and the key that could read what's stored on your phone. Immediate and permanent. |
| Start over | Clears your practice on the device while keeping your account. |
| Get a copy | Write to keeper@enchantratarot.com and we'll send you your practice. |
| Correct something | Your journal and reflections are editable in the app. For account details, write to us. |
Deleting your account removes it from our database at once. Encrypted backups may hold a copy briefly before they roll over, after which nothing remains.
| What | Held for |
|---|---|
| Your account and practice | As long as you have an account. Deleted when you delete it. |
| Reports about a harmful reading | Kept after account deletion, with your identity removed, so the failure can be studied. |
| Crash reports | A limited period set by our error-reporting provider, already stripped of personal content. |
Enchantra is run from Australia. Our database, our servers and our AI provider may process your information in other countries, including the United States. Wherever it goes, it stays under the terms described here, and under contracts requiring equivalent protection.
Under the Australian Privacy Principles you may ask what we hold about you, ask us to correct it, and complain if you think we've handled it poorly. If you're in the UK or the European Economic Area, the UK GDPR and GDPR give you rights of access, correction, erasure, restriction, portability and objection. Ask, and we'll act — we don't require a legal formula.
If our answer doesn't satisfy you, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au, or to your local supervisory authority.
Enchantra is for people aged 16 and over. Tarot itself belongs to anyone — but this app keeps a record of your inner life, responds to what you write, and offers support when something sounds hard. That asks more of a person than a deck of cards does, and 16 is the age at which you can consent to it yourself everywhere we operate. We don't knowingly collect anything from someone younger. If you believe a child has an account, write to us and we'll remove it.
If this policy changes in a way that affects you, we'll say so in the app before it takes effect, rather than quietly updating a date at the top of a page.