Imaginalis

Privacy

For the Imaginalis app for iPhone and this website. Effective 29 September 2026.

Aiden Buis makes Imaginalis in the Netherlands and is the controller of the data described here under the EU General Data Protection Regulation (GDPR). “We” in this policy means him. For anything about your data, write to hello@getimaginalis.com.

In short

What stays with you

Your journal. The cards you draw or log, your spreads, your notes and your lesson notes live on your iPhone. If you use iCloud, they sync through your own iCloud account, in the app’s private database there. We have no access to that database, and no servers of our own that hold a copy.

Spoken notes. When you speak a note, your iPhone turns your voice into text on the device. The recording waits on your iPhone until its words are in, and the app then deletes it. Recordings never go to iCloud or to us.

Your chart. If you add your birth date, time and place under Your chart, the app keeps them in one file on your iPhone, outside iCloud and outside your backups, and sends them nowhere. The list of towns comes with the app, so your birthplace is never looked up online. “Delete my chart” removes the file.

Reminders are set on your iPhone, and the answers you give in the introduction are stored there too. The app sends some of those answers with the usage statistics below.

Usage statistics

Unless you turn it off, the app sends short records of what happens in it to PostHog, our analytics service. A record says, for example, that someone opened the Journal, reached a step of the introduction, drew a card from their own deck, added a note, finished a lesson or started the free week. With it go the app and iOS version, the kind of device, and a random ID the app makes when you first open it. PostHog keeps a profile for that ID: your answers in the introduction (such as how well you know tarot and what you hope to get from it), your reminder and drawing settings, whether you’re a member and on which plan, and the dates of your first card, note and lesson.

The app never sends the words you write, ask or say: no notes, no questions, no transcripts, no names of your own spreads, no search text. It never sends your birth details. It sends no name, no email address and no advertising ID, and it doesn’t record your screen. We have set PostHog to drop your IP address and not to work out your location from it.

We use these statistics to find bugs and to see where people get stuck or give up, such as the step of the introduction where most people leave, so we can make the app better. Our legal basis is our legitimate interest in improving Imaginalis (Article 6(1)(f) GDPR), balanced by the switch that lets you stop it at any time.

In the app the switch is called “Share anonymous usage”, because no name or account stands behind the random ID. Under the GDPR the data counts as pseudonymous: the ID ties your records together, even though we can’t tell who you are.

To turn it off, tap the gear on Today, then turn off Share anonymous usage under Privacy. The app stops sending at once and forgets its random ID. If you turn it back on, it starts again with a new ID.

Purchases

You buy a membership from Apple, through the App Store. Apple handles the payment under its own privacy policy. We never see your card, your name or the email address of your Apple Account.

RevenueCat runs the membership for us. It receives the App Store record of your purchases (which plan, when it started, renewals, a free week, a cancellation or a refund) together with a random ID it makes for your install. The app uses this to open the membership and to restore it on a new iPhone, and we use it to count trials, renewals and cancellations. Our legal basis is our contract with you (Article 6(1)(b) GDPR): the app needs this record to know you’ve paid.

iCloud

Apple stores your journal in your iCloud account under Apple’s privacy policy. We can’t read it. You can turn iCloud off for Imaginalis in your iPhone’s settings, and the journal then stays on that iPhone alone.

When you write to us

If you email us, from the app or elsewhere, we receive your address and whatever you write, and we use them only to answer you. Our mailbox is hosted by Fastmail.

This website

This site sets no cookies and runs no analytics, trackers or scripts. Cloudflare hosts it and handles the technical data any web server needs to send you a page, such as your IP address.

Who processes data

These services process data on our behalf:

Apple is not our processor. It provides the App Store and iCloud to you directly, under Apple’s privacy policy.

How long we keep it

Your rights

Under the GDPR you can ask us for a copy of your data, and ask us to correct it, delete it, or limit how we use it. You can object to our use of it, and you can take data you gave us elsewhere. Write to hello@getimaginalis.com and we’ll answer within a month.

The random ID isn’t shown in the app, so we can’t always tell which usage records are yours. Tell us what you’d like and we’ll do what we can. For a purchase record we may ask for your App Store receipt, so we can find it. Some things you can do yourself:

You can also complain to a data protection authority. In the Netherlands that is the Autoriteit Persoonsgegevens; elsewhere in the EU, the authority where you live.

Children

Imaginalis isn’t meant for children under 13, and we don’t knowingly collect data from them. If you think a child under 13 has sent us data, write to us and we’ll delete it.

Changes

When this policy changes, we’ll post the new version here with a new date. If a change affects what the app sends, we’ll also say so in the App Store notes for that update.