Last updated 22 October 2026 · Emily Shurey trading as Enchantra, ABN 87 927 064 532
The short version. Your practice is yours. What you write in Enchantra, your intentions, your journal and your reflections, is stored encrypted, kept for you alone, and available to take back or erase at any moment.
We sell nothing, advertise nothing, and no one trains an AI model on your journal. When a reading is written, the words you chose to share travel to our AI provider for that reading, which deletes them within 30 days.
Enchantra is made by Emily Shurey trading as Enchantra (ABN 87 927 064 532), based in Australia. Emily is responsible for how your information is handled. If you have a question about anything here, write to keeper@enchantratarot.com and a person will answer.
An email address and a password, so your practice can find you again on a new phone. Passwords are hashed by our authentication provider. We never see them.
A name if you'd like to give one, the region you're in, and how you'd like readings written for you. The region matters for two reasons: it keeps your lunar dates true to where you actually stand, and it means the support resources we offer are ones you can call.
The cards you draw and how they fall, the intentions you set, the journal you keep, the reflections you record, and the echoes you notice. This is the heart of the app and the most personal thing in it. It is treated accordingly.
When something breaks, we receive a crash report. Those reports are filtered before they reach us: journal entries, reflections, intentions, care messages and free-text notes are stripped out by name, so what arrives is the shape of the failure and not the substance of your evening.
Enchantra contains no analytics, no advertising SDK, and no third-party trackers. Nothing in the app watches how you use it.
Your practice is stored encrypted with AES-256-GCM. The key that opens it is held in your device's secure hardware, the iOS Keychain or the Android Keystore, and never leaves the device, never syncs to iCloud, and never travels in a backup. If someone takes your phone apart, they find sealed data and no way in.
So your practice survives a lost phone, it also syncs to a database hosted by Supabase. Access there is row-level: your rows answer to your account and no other. Connections are encrypted in transit, and the database is encrypted at rest. Backups are held for a limited period and then written over.
Your readings are written by Claude, a model made by Anthropic. When you ask for a reading, Enchantra sends Anthropic only what that reading needs: the cards you drew and your deck, the moon and your local date and time, your intention, the notes you wrote this cycle and the gist of your earlier readings this cycle.
Your name, your email address and your account are never sent with a reading. Anything you type is sent as you wrote it, so keep contact details out of your notes.
Anthropic doesn't know who you are. It uses what Enchantra sends to write your reading and doesn't use it to train its models. It deletes it within 30 days. If its safety systems flag a conversation, it may keep that conversation for up to two years.
The people you write about stay as you wrote them, because they are often what a reflection is about. If you would rather they didn't, use a first name or an initial.
Sometimes a reading lands badly: it reads as a prediction, or as fear, or as harm. You can report it, and a person reads that report within 24 hours. That's a commitment, and keeping it means those reports are stored separately from your practice and are kept even if you later delete your account, with your account identity removed. We keep them so the same failure doesn't reach someone else.
Enchantra is a reflective practice. It is not therapy, medical advice, or crisis care, and it does not replace them. When something in what you write suggests you may be struggling, the app pauses the reading and offers real support lines for your region.
| What | How |
|---|---|
| Delete everything | Profile → Delete account. Removes your account, your practice, and the key that could read what's stored on your phone. Immediate and permanent. |
| Start over | Clears your practice on the device while keeping your account. |
| Get a copy | Write to keeper@enchantratarot.com and we'll send you your practice. |
| Correct something | Your journal and reflections are editable in the app. For account details, write to us. |
Deleting your account removes it from our database at once. Encrypted backups may hold a copy briefly before they roll over, after which nothing remains.
| What | Held for |
|---|---|
| Your account and practice | As long as you have an account. Deleted when you delete it. |
| Reports about a harmful reading | Kept after account deletion, with your identity removed, so the failure can be studied. |
| Crash reports | A limited period set by our error-reporting provider, already stripped of personal content. |
Enchantra is run from Australia. Our database, our servers and our AI provider may process your information in other countries, including the United States. Wherever it goes, it stays under the terms described here, and under contracts requiring equivalent protection.
Under the Australian Privacy Principles you may ask what we hold about you, ask us to correct it, and complain if you think we've handled it poorly. If you're in the UK or the European Economic Area, the UK GDPR and GDPR give you rights of access, correction, erasure, restriction, portability and objection. Ask, and we'll act. We don't require a legal formula.
If our answer doesn't satisfy you, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au, or to your local supervisory authority.
Enchantra is for people aged 16 and over. Tarot itself belongs to anyone, but this app keeps a record of your inner life, responds to what you write, and offers support when something sounds hard. That asks more of a person than a deck of cards does, and 16 is the age at which you can consent to it yourself everywhere we operate. We don't knowingly collect anything from someone younger. If you believe a child has an account, write to us and we'll remove it.
If this policy changes in a way that affects you, we'll say so in the app before it takes effect, rather than quietly updating a date at the top of a page.