Terms & Policies

Purpose

These Terms set out the conditions and procedures for using KCARD78 ("the Service") and the rights and obligations of users and the operator.

Definitions

• Paid credits: credits you buy. They can be used for 5 years from the purchase date.
• Free credits / free passes: credits and reading allowances granted at no cost (sign-up bonus, promotions).
• Readings left: the right to use one deep reading or AI interpretation.
• Subscription: a monthly or yearly product that allows AI interpretations for a set period.

Nature of the Service

KCARD78 is a digital-content service connecting tarot symbolism with your question. Card draws and standard interpretations are free. Paid products provide access to personalised, generative-AI tarot interpretations through reading allowances or subscriptions. This is not a consultation with a human professional. We do not verify or guarantee future events, another person’s thoughts, health, profits or relationship outcomes. Content is for entertainment and self-reflection, not medical, legal, investment or psychological treatment advice.

AI interpretations

Interpretations are written by generative AI and may be inaccurate or vary in wording. You purchase the described digital content and access, not a fulfilled prediction or a professional consultation. Results are labelled as AI-generated. Differences in interpretation do not create a promised outcome; rights concerning errors, non-delivery, misdescription and statutory refunds remain intact.

Accounts and age

Signing in is optional and the free features work without it. You must be at least 13 years old to create an account (14 in Korea) and enter your date of birth when you sign up. Buying paid products requires you to be at least 18 (or the age of majority in your country; 19 for Korean residents), which we ask you to confirm at checkout. If someone signs up, verifies or pays using another person's identity or account, that person is responsible. You can delete your account in Settings at any time, which deletes your account data. We may restrict accounts that are used improperly.

Free passes

The sign-up screen states the number and conditions of welcome AI readings. The welcome benefit is granted once on first registration and needs no purchase or paid subscription. It does not automatically become a paid subscription or charge you when it ends. Duplicate or improper claims may be restricted; free benefits have no cash refund value.

Products and payment

Current products are reading packs, monthly subscriptions and yearly subscriptions. Products and checkout show price, reading allowance, daily limit, eligible readings and history allowance. Web charges are the stated USD total; KRW, JPY and EUR are estimates. Issuer conversion and foreign-transaction fees may apply. For web purchases, Dodo Payments is the Merchant of Record handling sales, taxes, payments and refunds; KCARD78 delivers content and customer support. The applicable seller and terms appear at final checkout. Dodo buyer terms and mandatory consumer rights are not limited. Changing providers does not migrate existing subscriptions. Switching a web subscription to another plan with the same billing period takes effect on the next billing date, when it renews at the new plan price; nothing is charged when you switch, and you can cancel the change in My Info before that date. Android follows separate Google Play payment policies. Unconfigured methods are unavailable.

Renewals and cancellation

Single readings and reading packs are one-time purchases without renewal. Subscriptions automatically charge the discounted total every selected number of months. You must review and accept the price, interval and daily limit before the first charge. Daily allowances reset when the date changes in your account’s time zone and do not roll over. After the daily limit, eligible separate reading credits may be used; otherwise wait until the next day. Cancel renewal before the next payment through subscription management in member information. Cancellation stops the next renewal and retains access until the paid period ends; it is not an automatic refund of prior payments. If subscription management is unavailable, contact contact@kcard78.com.

Payment-data security

Web payment details are handled on Dodo Payments’ HTTPS-hosted checkout, and Android payments by Google Play. KCARD78 does not collect or store full card numbers or CVCs. Order identifiers and payment, subscription and refund status are retained under the privacy policy. Never send card numbers, CVCs or passwords to support.

Restrictions and responsible use

Registration and payment must meet the stated minimum ages and applicable local law. Do not treat tarot results as verified facts or guarantees of investment returns, treatment or gambling outcomes, or use them to deceive or threaten others. There are no betting or gambling features awarding money or material prizes. Payment-provider regional and business restrictions may make purchasing unavailable.

Digital delivery and errors

There is no physical shipping or shipping fee. Once the server confirms payment, the reading allowance or subscription period is applied to the same signed-in account. Submitting a question starts AI generation and the result is shown in the browser; waiting time depends on the network and AI provider. A return page alone is not proof of payment or fulfilment. If benefits are missing, refresh or sign in again and contact support; do not purchase the same product again. If a technical error prevents delivery of an AI result, the reading credit or subscription daily use is restored. Contact support if restoration does not appear.

Refunds and consumer rights

Unused single readings and packs are fully refundable within 14 days of payment. Later unused balances and subscriptions follow the separate refund and cancellation policy. Refunds of normally delivered use may be limited, but statutory withdrawal rights and rights for non-delivery, defects, misdescription and duplicate charges remain intact. Cancelling renewal and requesting a refund are separate actions. Refund and cancellation policy

Prohibited acts

You must not:

• copy, distribute or commercially use the Service's content without permission;
• send excessive automated requests that interfere with the Service;
• impersonate others or use sharing features to harm others;
• obtain free passes twice or improperly, or abuse payment disputes (chargebacks) without a legitimate reason after paying.

Copyright

Copyright in the card artwork, interpretation texts, design and code of the Service belongs to the operator. You may freely view and share for personal use; commercial use or bulk copying requires prior permission.

Changes and suspension

The operator may change the Service or suspend some features. Free features may change without notice, but if the content or price of a paid product changes we will tell you on the payment screen and by notice beforehand. If we discontinue a paid service, we refund unused paid credits, readings and the remaining period of subscriptions.

Limitation of liability

Unless caused by intent or gross negligence, the operator is not liable for damages arising from use of the free Service, nor for interruptions caused by force majeure or failures of external services (payment, sign-in, sharing, AI providers, etc.). This clause does not limit liability that the operator bears under the law in connection with paid services (refunds, restoration on error, etc.).

Changes to these Terms

The operator may change these Terms within the limits of applicable law. Changes are announced on this page 7 days before they apply (30 days for changes that are unfavourable or material), and if the consent text at checkout changes we raise its version and ask for consent again. Continuing to use the Service after a change means you accept it; if you do not, you may delete your account.

Governing law and disputes

These Terms are governed by the laws of the Republic of Korea. Rights that the consumer-protection law of your country of residence guarantees you are not limited by these Terms. Please first contact us by email; if a dispute is not resolved, you may use the competent court or the consumer dispute resolution procedures of your country of residence.

Operator information and contact

Operator details are on the Legal Notice page. For questions about the Service, payments or refunds, email us at the address on the Contact page.

Referral and coupon benefits

Referral benefits apply to first-time accounts registered within 7 days of opening a valid invitation link. The inviter and new member each receive one AI question credit; existing members, self-referrals and duplicate registrations are excluded. Each account may use a given coupon once, subject to its remaining quantity, expiry and retirement status. A monthly coupon provides 30 days from the end of an existing active subscription, or from redemption if there is no active subscription. No automatic billing occurs. Monthly-subscription daily question limits apply. Pausing referrals or retiring coupons does not remove benefits already validly awarded.

Overview

KCARD78 offers free card draws and standard interpretations alongside paid AI tarot content. This policy covers account and usage records, AI and speech processing, and payment and refund data. Free basic features are available without signing in.

Information stored when you log in (optional)

You may log in with a Kakao, Naver or Google account; logging in is optional. If you do, the following is stored on our server (Cloudflare D1).

• The member ID that provider gives us (provider and number)
• Your name (nickname) and, if you agree to share it, your email address
• Sign-up time, last log-in time, the display language at sign-up and the country you connected from at sign-up (country code only; your IP address is not stored)
• The number of log-ins and the type of device you last used (reduced to mobile/desktop, operating system and browser name; the raw connection details are not stored)
• The number of AI readings you received while logged in
• Your reading history, kept on the server so you can see it on several devices (time drawn, reading type, cards and orientation, the question you typed and any AI reading text — up to your latest 300 entries; deleting your history in Settings or deleting your account removes it from the server too)
• Notes and restriction records the operator keeps for handling enquiries and preventing abuse
• When you agreed to the terms and privacy policy, and whether you opted in to news and event notices (optional)

Payment, consent and refund records, and processing abroad

Web purchases are processed by Dodo Payments and Android app purchases by Google Play. For web purchases we send Dodo Payments your email, account/order linkage identifiers, selected product and purchase terms, and link payment, subscription, cancellation and refund status to your account. KCARD78 does not store full card numbers or CVCs. Dodo Payments Inc. (United States) and its overseas affiliates act as Merchant of Record for buyer transactions, taxes, payments and refunds (Privacy Policy). Google Play purchases are processed by Google; KCARD78 receives only the purchase confirmation, product and status to link to your account (Google Privacy Policy). This information may be processed in the United States, United Kingdom and other countries when you pay; consult each provider’s policy for contacts, retention and processing locations. We do not send this payment information if you do not purchase.

• Order records: order number, product, amount and currency, payment time, status (paid/refunded), the email entered at checkout, remaining credits, readings and subscription expiry
• Payment consent records: the consents you ticked at checkout (immediate delivery, loss of the right of withdrawal, age confirmation), the exact text and text version, the time, screen language, IP address and browser information (User-Agent)
• Reading delivery records: for readings that used credits, the creation time, amount used, the time the result reached your screen and whether it succeeded (not including the question text)
• Refund request records: request time, calculated refundable amount, processing status and notes

Emails

We send service emails such as a welcome message, payment and subscription confirmations, and cancellation or payment-hold notices to the email address you agreed to share when logging in. Promotional emails, such as news, events, return reminders or unfinished-conversation reminders, are sent only if you opted in to marketing notifications at sign-up or in Settings, and you can turn them off anytime with the unsubscribe link in each email or in Settings. Emails are delivered by Resend (Resend, Inc., USA), which receives only the email address and message content needed for delivery. Delivery records (type, time, result) are deleted after one year.

Age confirmation and date of birth

To restrict sign-up by children (under 13; under 14 in Korea) and confirm the minimum age for paid purchases, we ask for your date of birth at sign-up and store it on your account. We do not use it for any other purpose and delete it when you delete your account. If we later introduce identity verification (mobile verification for Korean users) or SMS verification (other users), we will additionally store the birth date confirmed by verification and a one-way hash (of the verification link value or phone number; never the original) to prevent duplicate free passes, and we will announce this in this policy beforehand.

Device storage and member reading history

Language, settings and guest reading history are stored in the browser. Signed-in members’ cards, orientations, reading type, time, question and interpretations are also stored on the server for access across devices. Delete records in My reading history; account deletion removes them. We do not request precise GPS location. Connection metadata supplies a country code at sign-in and a regional timezone for daily subscription limits. History retention follows product benefits and the service maximum of the latest 300 records. Older records beyond the limit may be deleted.

Match link data

When you create a match link, the drawn card numbers and the creation time are stored in Cloudflare KV. This contains nothing that identifies a person, and only someone with the link can open it. Stored entries are deleted automatically after a period of time.

Visitor, operations and API error records

User-page analytics and administrator operations use separate collection endpoints and tables. We store a random session value in sessionStorage, renewed after 30 minutes of inactivity, to analyze visits, behavior, performance and error categories. To tell new from returning visits we store only the date of your first visit in localStorage; no identifier is created. It is not a count of real people or an account identifier. We process masked paths without query strings, the previous page (a path on this site, or another site's address and path without query strings), language, country code and the region/city Cloudflare estimates from your IP, device/OS/browser category and screen-width range, referral domain/medium/campaign, time on page while it is visible and scroll depth, event type/time, performance values and error categories. These analytics do not store questions, readings, typed input, names, emails, raw IPs or raw error messages. Administrators, detectable bots and DNT/GPC signals are excluded from user behavior statistics; bot detection is imperfect. So that trends can be compared over any period, visit/session details and non-identifying daily aggregates are kept while the service operates and deleted when it closes. Visit details (raw event records) older than 90 days are moved to R2 storage in the same Cloudflare account and kept for the same period. Administrator operation details last 30 days. When you start a payment, enter a coupon, create an invite link or sign up, Cloudflare Turnstile checks browser signals to block automated requests; after you pass, a verification cookie (kc_hv) valid for 12 hours is stored. It contains only an expiry time and a signature. Cloudflare processes hosting, security, infrastructure and Web Analytics metrics under its own retention and sampling policies; we import its daily aggregates (views, referral domains, paths, countries, device/browser, performance metrics) and keep them for the same period. Separately, to investigate errors and restore usage, we retain member-linked AI reading/voice request references, stages/times, provider/model, error codes, usage/estimated cost and debit/recovery status for up to 90 days. This ledger contains no question, reading, audio file or secret key. Account deletion removes the member link. Legally retained payment/consent records follow the separate policy above.

AI readings and input data

An AI request sends your question, cards, reading type, language and display name to the provider configured on our server, which may be OpenAI, Anthropic, DeepSeek or Cloudflare Workers AI, depending on settings (including per-guide settings). If DeepSeek is used, the information sent may be processed in China or other countries. Do not enter sensitive personal details or other people’s confidential information. AI readings are for reflection and entertainment, not guaranteed facts or professional decisions. Results follow the history retention limits and may be removed when you delete them, delete your account or exceed the saved-history limit. Optional quality-review samples, when enabled, are retained for up to 14 days. Provider processing and retention follow its policies and the service configuration; they are not necessarily limited to our 14-day sampling period.

Personalised AI readings are available only to signed-in members. Signup credits, referral rewards, subscription expiry dates and usage counts are linked to the member account and managed on the server. Signup credits are awarded once at first registration; a new day or a change of device or network does not grant them again. The timezone used to check a subscription's daily limit is set from Cloudflare connection-region metadata on the first check and stored with the account. Daily counters from the previous allowance system are cleared after approximately four days, and the account timezone is deleted when the account is deleted.

Listening is off by default. If you turn it on for a character using ElevenLabs, we send chunks of the AI reading, the language and voice settings to ElevenLabs for speech synthesis. Any question or personal information quoted in the reading may also be sent. Processing, international processing and retention follow the provider’s privacy policy and service settings. Keep listening off to use text only. We record synthesis calls and character counts per member to enforce limits, but do not separately store generated personal-reading audio files on our server. Public character samples are prepared and stored by the administrator. Browser voices are not sent by our server to ElevenLabs; their processing depends on your browser and device settings.

Reporting AI content

Report inappropriate content from an AI reading or My reading history. We privately review the reported text, cards, reading type, language, available model information, reason, details and processing records linked to your account. The question is not sent as a separate report field, but quotations in the reading may contain it. Reports are automatically removed after at most 90 days and on account deletion.

Server logs

The Service runs on Cloudflare Workers. For operation and security, connection data (IP address, browser type, access time) may be processed temporarily by Cloudflare under its own privacy practices.

Third parties

We do not sell or share collected data with third parties. When you log in, the provider you choose (Kakao, Naver or Google) handles the log-in under its own policy. If you choose to share a result through an external service such as KakaoTalk or Instagram, that service’s own policy applies.

International processing and app payments

Cloudflare hosts and processes service and account data. AI requests send the information described above to the configured AI provider. Processing may occur in the United States or other countries; consult each provider’s privacy policy for contacts and retention. Purchases are disabled for the first Google Play release. If Play payments are enabled later, Google processes payment; we verify purchase tokens, order identifiers, products, purchase state and grants or reversals linked to your account. We do not store card numbers. Statutory retention follows the payment section above.

Web purchases are processed by Dodo Payments and Android app purchases by Google Play. For web purchases we send Dodo Payments your email, account/order linkage identifiers, selected product and purchase terms, and link payment, subscription, cancellation and refund status to your account. KCARD78 does not store full card numbers or CVCs. Dodo Payments Inc. (United States) and its overseas affiliates act as Merchant of Record for buyer transactions, taxes, payments and refunds (Privacy Policy). Google Play purchases are processed by Google; KCARD78 receives only the purchase confirmation, product and status to link to your account (Google Privacy Policy). This information may be processed in the United States, United Kingdom and other countries when you pay; consult each provider’s policy for contacts, retention and processing locations. We do not send this payment information if you do not purchase.

Your rights and how to exercise them

You may at any time access, correct or delete your personal information, or ask us to restrict processing or withdraw consent. In Settings › My data you can view what we store, change notification consent and clear your card history, and in Settings › Delete account you can delete your account data. For other requests, email us at the address below and we will respond without undue delay (within the period required by law). Payment, consent and refund records that we must keep by law may be excluded from deletion during the retention period, in which case we will tell you why. You may also complain to the data-protection authority of your country of residence.

Children's information

The Service does not accept sign-ups from children under 13 (under 14 in Korea) and does not knowingly collect their personal information. If we learn that a user is under that age, we delete the account and its data without delay.

Contact

For privacy questions, email contact@kcard78.com and we will respond after review.

Invitations, coupons and duplicate-claim prevention

Opening an invitation link uses a random visit cookie for 7 days, with server-side expiry checks. We store account invite links, referral relationships, credit awards, coupon redemptions and subscription expiry dates to provide benefits and prevent duplicate claims. On account deletion, personal invite links and account references in benefit receipts are removed. One-way benefit identifiers and de-identified receipts are retained for one year after deletion and then progressively removed. Marketing receipts do not contain raw social-provider IDs, emails, questions or IP addresses. These benefits are independent of consent to promotional notifications.