CARDS ON THE TABLE Zodiac App
Privacy Policy
Official Privacy Policy Location and Authority This Privacy Policy applies exclusively to the Cards On The Table Zodiac App and any related services operated by Casey Staton. The definitive, legally binding, and most current version of this policy is hosted publicly by the Service Provider at: cardsonthetabledatinggame.com (Privacy Policy).
Please note that any automated or structural links labeled "Privacy Policy" in the footer, frame, or layout of external web hosting platforms (such as Flycricket or general document-hosting networks) govern only those third-party hosting services. They do not represent, alter, or apply to the data collection, backend infrastructure, or user privacy practices of the Cards On The Table zodiac gameplay application.
This privacy policy applies to the Cards On The Table Zodiac App app for mobile devices, together with any related services operated by Casey Staton (collectively, the "Application"). Casey Staton is hereby referred to as the "Service Provider".
1. Age Requirements and Consent
The App is a two-person conversation game containing adult relationship and sexual topics. Gameplay is restricted to people aged 21 and over.
The Application is strictly restricted to users aged 21 and older due to adult themes and content. Individuals under 21years of age are strictly prohibited from using the Application under any circumstances.
By accessing and using this Application, you represent that you meet these age requirements and are legally permitted to use it in your jurisdiction.
We do not request an exact age, date of birth, identity document, gender field or guardian contact details. Eligibility acceptance does not authorize optional AI reflections, contact sharing, marketing or purchases.
2. Information Stored on Your iPhone
Local practice can be used without an online account. It stores player names, zodiac signs, illustrated avatars, eligibility declarations, edited questions, answers, reviews, skips and game progress on the iPhone.
The App does not upload or synchronize local-practice data. The saved file uses iOS file protection and is excluded from device backups by the App. Anyone you allow to use the unlocked iPhone may see this information.
Ending a practice game removes its answers and eligibility acceptances but retains profiles and deck edits. Erase local practice removes the saved practice file. Deleting an online account does not erase local practice.
Account-Linked Gameplay Processing & Independent Choice Online gameplay involves the processing of sensitive, personal answers and profile choices. Each adult participant must make an explicit, separate, default-off choice within the Application interface to authorize account-linked gameplay data processing. This individual acceptance is recorded electronically on our servers.
3. Online Accounts and Gameplay Information
Online accounts and private tables use Superapp Cloud, powered by Supabase. Online gameplay information is stored and linked to accounts and tables; it is not merely temporary transit data or anonymous statistics.
Information processed for online features includes:
Sign-in information, account identifiers and session credentials.
Selected profile names, zodiac signs and avatars.
Invitation codes, invitation activity and table participants.
Age, Terms and guardian-acceptance declarations.
Selected or written answers, reviews, skips, results and game progress.
Optional contact details, connection permissions and AI-consent choices.
Purchase-verification records, notification preferences and safety reports.
Email/password authentication is handled by Supabase Auth. Sign in with Apple may provide an email address, including a private relay address, and a name. Session credentials are stored in iOS Keychain.
Answers may reveal sensitive information about intimacy, sexual preferences, religious or philosophical beliefs, family, finances and relationships. Written answers may also contain other personal information. Participation is voluntary; do not enter information you do not want your partner or the online service to hold.
4. Sharing and Access
There is no public answer feed. The two authenticated participants access their private table under the App’s eligibility and gameplay rules. A participant’s current answer remains hidden from their partner until both submit.
Authorized operational or support personnel and infrastructure providers may process stored information to operate, secure or support the service. Private tables are not anonymous or end-to-end encrypted.
Optional phone numbers, contact emails and social details are stored when you choose to submit them. The App does not access your iPhone address book. Contact sharing requires both participants’ connection permission, gameplay eligibility and the required active Platinum access. Your sign-in email is not automatically shared as a contact.
You can withdraw contact sharing, close the table or block the partner. Withdrawal cannot recall screenshots, copies or communications already received outside the App.
Account-Linked Gameplay Processing & Independent Choice
Online gameplay involves the processing of sensitive, personal answers and profile choices. Each adult participant must make an explicit,
separate, default-off choice
within the Application interface to authorize account-linked gameplay data processing. This individual acceptance is recorded electronically on our servers.
5. Service Providers and Purchases
Supabase
(through Superapp Cloud) processes authentication, online profiles, table information, answers, consent records, contact shares, reports and verified membership information.
Apple
provides Sign in with Apple, App Store billing, system permissions and the on-device AI framework.
For online purchase verification, the server sends account identifiers and signed Apple transaction information to RevenueCat and receives verified access status. This processing is identifiable purchase verification, not solely anonymized analytics. The App does not contain an embedded RevenueCat SDK.
Apple handles payment details. The App does not receive payment-card or bank-account numbers.
Deleting your App account does not cancel an Apple subscription or automatically delete records independently maintained by Apple or RevenueCat. Subscriptions can be managed through iPhone Settings → your Apple Account → Subscriptions.
Provider Privacy Information Links:
Supabase:
https://supabase.com/privacy
RevenueCat:
https://www.revenuecat.com/privacy
Apple:
https://www.apple.com/legal/privacy/
6. Optional On-Device AI Reflections
AI reflections require separate consent from both players. Consent starts off, and either player may withdraw it.
The feature uses Apple Foundation Models locally on a supported Apple Intelligence iPhone running iOS 26 or later, when the model is available.
Only category totals—aligned, to-discuss and skipped counts—enter the AI prompt. Names, account identifiers, zodiac signs, questions, individual answers and contact details are excluded.
The App does not send the AI prompt or generated reflection to Cloud or an external AI service and does not use them to train a model. Online gameplay information and online consent records are still stored on the server as described above.
Generated reflections remain in screen memory and are not saved as game history. Closing the reflection screen or clearing consent removes the reflection from that screen. For the other online participant, withdrawal takes effect when their App next successfully refreshes the consent state. This is not an instant recall from another device, and previously copied text cannot be recalled.
AI reflections may contain mistakes. They do not change the game score or provide scientifically validated compatibility predictions.
7. Analytics, Communications and Technical Logs
The App does not include advertising, a behavioral-analytics SDK, tracking pixels, cross-app tracking, data-broker sharing or email/SMS marketing features. It does not collect screen-view histories or time spent in the App for analytics.
Online providers may process technical connection and security information, such as IP addresses, request timestamps, authentication events and errors, to operate and protect their services. This is distinct from behavioral analytics or advertising tracking.
Account-confirmation, password-reset and support communications are service messages, not marketing.
Reports contain the reporter’s account identifier, table reference, report text and creation time. Support correspondence contains the information you choose to provide.
8. Retention and Deletion
Local practice remains until erased or the App is deleted. Offloading the App may retain its local data.
Online accounts remain until deletion. Active or unfinished tables retain gameplay information so participants can resume. There is no automatic deletion after a fixed period of inactivity. An invitation’s expiry prevents joining but does not itself delete the table.
Closing a table clears saved answers, reviews, results, age and AI-consent records and contact shares. Participant/profile identifiers and closed-table metadata may remain until account deletion.
Blocking restricts the connection and clears contact sharing; it is not equivalent to deleting all answer history. Withdrawing age eligibility restricts gameplay and clears relevant sharing and AI permissions without erasing the game history.
Selecting Account → Delete my account requests deletion of your authentication account, online profile, memberships, device registrations, authored reports and blocks, and tables in which you participate, including their shared answers and contacts.
The other participant’s independent account is not deleted. Reports submitted by another person may remain with their table reference removed. If deletion cannot be confirmed, the App displays an error rather than reporting success.
Provider logs, backups, support correspondence and purchase or legally required records may be retained separately under applicable obligations and provider arrangements. Deletion of active account data does not promise immediate removal from backups or independent provider records. Contact privacy support regarding these records.
Signing out, uninstalling the App and cancelling a subscription are not substitutes for online account deletion.
When you request the deletion of your game account, the Application removes your account-linked profile from active matchmaking pools. However, users must note the following technical behaviors: * Manual Sign in with Apple Disconnection Required: Deleting your account within the game provides manual instruction paths to sever your connection. It does not perform an automatic Apple authorization-token revocation. You must manually remove the app's permissions within your iOS iCloud settings to fully stop Apple-side token tracking. * Retention of Completed Match History: Withdrawing your online eligibility or deleting your account restricts your future access to the platform but does not itself instantly erase existing shared game history. Written answers, private table choices, and interactions previously transmitted to a consenting gaming partner remain visible on that partner's device and within cached database archives to preserve their historical app experience.
Apple processes payments for in-app purchases. The Application does not receive your payment-card or bank-account numbers. To verify purchases and provide purchased features, the Application and its online services process purchase-related information, including product and transaction identifiers, purchase and expiration information, an identifier associating a purchase with your game account, and entitlement status. RevenueCat is used for server-side verification of online purchase benefits.
Deleting your game account does not cancel an Apple subscription or necessarily erase purchase records held by Apple or RevenueCat. Those providers handle their records under their respective policies and applicable legal obligations. Subscription cancellation and refund requests must be handled separately through Apple. See the Terms of Use for purchase, renewal, restoration and cancellation conditions.
9. Security, International Processing and Your Rights
Online requests use HTTPS. Server access controls restrict App access to authenticated accounts and authorized participants. Session credentials use iOS Keychain, and local practice uses iOS file protection. No system is completely secure, and these safeguards cannot prevent a participant from copying information they can view.
Service providers may process information outside your country. Contact privacy support for information about relevant processing locations and applicable safeguards.
Depending on applicable law, you may request access, correction, deletion, portability, restriction or objection to processing, or withdraw consent where processing relies on it. We may request information reasonably necessary to verify a request. Do not send passwords or identity documents by email unless a secure and necessary process has been agreed.
The App does not sell personal information or share it for cross-context behavioral advertising. You may also contact your relevant data-protection authority.
External links open services with their own privacy practices. Changes to this policy will be published with an updated effective date. New optional processing requiring consent will use a separate opt-in.
Automated Safety Content Screening & Reporting Limitations To maintain a secure environment, newly created online user names, written text answers, and shared contact text undergo an automated, English-language, rules-based screening process before they are stored on Superapp Cloud/Supabase. Users must be aware that this automated screening has inherent limitations and can miss harmful, abusive, or non-compliant content. Conversely, user-submitted safety alerts and misconduct reports are not subjected to automated screening filters. This design explicitly ensures that users can accurately describe evidence, attached behaviors, and unredacted details directly to support personnel.
10. Your California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. To exercise your CCPA/CPRA rights, contact the Service Provider at cardsonthetabledatinggame@gmail.com.
The Service Provider may use the information you provide to send important information and required notices.
11. Disclosure of Information
The Service Provider may disclose User Provided and Automatically Collected Information:
As required by law, such as to comply with a subpoena, or similar legal process;
When they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
With their trusted service providers who work on their behalf, do not have an independent use of the information the Service Provider discloses to them, and have agreed to adhere to the rules set forth in this privacy statement.
Official Privacy Policy Location and Authority
This Privacy Policy applies exclusively to the Cards On The Table Zodiac App and any related services operated by Casey Staton.
The definitive, legally binding, and most current version of this policy is hosted publicly by the Service Provider at: cardsonthetabledatinggame.com/cardsonthetablezodiacapp-privacypolicy
This privacy policy is effective as of 2026-10-12.
Privacy Contact: cardsonthetabledatinggame@gmail.com