Privacy Policy

1. Information we collect

Information you give us

• Account details. Your email address, username and password. We store your password only as a salted hash. You can also add a display name and reading preferences, such as tone and spiritual framing.
• Readings. The questions you ask, the spread and cards drawn, reflections you write about the cards, follow-up questions and the readings Tableu writes for you.
• Your journal. Readings you save, with your notes and reflections. If you choose, a saved reading can include the location where it took place.
• Card photos. If you use card recognition, the photos you upload of your physical cards. We use them to recognize the cards and don’t keep them.
• Payment details. If you subscribe, Stripe collects your payment details. We receive your Stripe customer ID, your plan and your subscription status, never your full card number.
• Messages and feedback. Emails you send us, and ratings or comments you give on readings.
• Shared readings. When you create a share link, the parts of a reading you choose to share. People who open a share link can leave a short note, with a name if they choose. If someone reports a note, we keep the report, the reason given and the reporter’s browser type.

Information collected automatically

• Technical logs. Our hosting provider, Cloudflare, records technical information when you use Tableu: your IP address, browser and device type, the pages and features you request, the time and any errors.
• Error and performance diagnostics. We use Sentry to receive error reports and a sample of performance measurements. These can include error messages, browser and device details, page addresses and timing information. We do not record session replays.
• Usage counts. We count readings, narrations and other features to apply plan limits. For visitors who aren’t signed in, we count against a one-way hash of the IP address instead of the address itself.
• Location, only if you allow it. If you allow location access, your coordinates and time zone are used to add astrological timing to a reading. Coordinates are not kept in our quality records, and they are saved with a reading in your journal only if you choose that.
• Cookies and local storage. One cookie keeps you signed in and expires after 30 days. Your browser also keeps settings such as theme and audio, and unsent drafts, on your device. We don’t use advertising cookies. We use the error and performance diagnostics described above to maintain the service.

2. Using Tableu in ChatGPT

• Connecting. To connect Tableu in ChatGPT, you sign in to Tableu on Tableu’s own page and approve access. We then store an authorization that lets ChatGPT use Tableu’s tools for your account. It lasts up to 30 days; after that, ChatGPT asks you to connect again.
• What we receive. When ChatGPT uses a Tableu tool, we receive what that tool needs, such as your question, the spread, cards you supply or a reflection you ask to save. ChatGPT may also send general hints, such as your language or approximate region, which we don’t store. We don’t receive your ChatGPT conversation history or your OpenAI account details.
• What we keep. Temporary reading jobs started through ChatGPT expire 24 hours after they finish, fail or are cancelled, and are scheduled for deletion. This gives ChatGPT time to collect a finished reading and lets you ask to save an eligible reading during that period. If a job never finishes, its temporary data is scheduled for deletion 24 hours after it started. If you ask to save a reading, the journal copy follows the journal retention period in section 5. Separate quality and feedback records follow their own retention period there.
• What ChatGPT receives. Depending on the tool used, we return:
  • Your linked account’s name and username-based nickname when available, and an identifier for the account that is derived from it but doesn’t reveal our internal account number, when the account lookup tool is used.
  • The spread, cards and their meanings and orientations, the draw seed where applicable, reading text or a support message, a short pattern summary, and the reading’s progress or error status.
  • References that identify a reading job or saved journal entry so later requests can refer to it.
  • Confirmation that a reading or reflection was saved or already present. A reflection response includes its target and the text currently saved at that target, which can include earlier notes on the same reading or card.

The information we send back to ChatGPT is handled by OpenAI under the OpenAI Privacy Policy.

3. How we use information

• To provide Tableu. We use your information to create and secure your account, draw cards, write readings and answer follow-up questions, narrate readings aloud, recognize cards in your photos, create optional artwork, save, search and export your journal, and share readings when you ask.
• To personalize readings. We use your preferences and, with context memory, recurring themes from your past readings. For follow-up questions, we also use relevant journal entries. Archetype Journey tracks the cards that recur in your readings, and you can turn it off.
• To check quality and safety. Readings are scored automatically for quality and safety. For this, we keep a copy of the question and reading after automatically removing contact details, dates and the names we can detect. Automated removal can miss things.
• To run subscriptions and send account emails. We process payments through Stripe and send verification, password-reset and payment-problem emails. We don’t send marketing emails.
• To protect Tableu. We apply rate and plan limits, prevent abuse and fraud, and fix problems.
• To meet legal obligations.

We don’t sell your personal information, share it for targeted advertising or use it to train AI models. The AI providers listed below receive the content needed to provide their services. Their retention and model-training practices depend on their terms and applicable account settings. ElevenLabs may retain submitted text and generated audio and may use content to improve its models unless the applicable account has opted out or is covered by no-training terms. See ElevenLabs’ Privacy Policy and its data-use explanation.

4. How we share information

These service providers help us run Tableu. Each receives only what it needs for its part of the service.

We also share information:

• With people you choose. Anyone with a share link can see what you shared, and the notes left on it, until you delete the link or it expires.
• With ChatGPT, when you use Tableu there, as described in section 2.
• For legal reasons, when we believe in good faith that the law requires it, or that it’s needed to protect the rights, property or safety of our users, the public or us.
• In a business transfer, such as a merger or acquisition. This policy would continue to apply to your information.
• With your permission in other cases.

5. How long we keep information

The temporary job limits apply even if you save a reading. Saved journal entries and separate quality and feedback records follow their own rows in this table. Deleting temporary job data does not delete the copy already returned to ChatGPT.

6. Your choices and rights

• See and export your data. On your Account page, under Privacy & Data, choose Export all data (JSON) for your readings and account data. Export PDF and Export CSV contain journal entries only.
• Correct your data. Update your profile and preferences on your Account page.
• Delete data. You can delete journal entries, share links, media and memories at any time. To delete everything, use Delete account under Privacy & data. Deletion requests cancellation of active Stripe subscriptions and deletes your account data as described in section 5. App-store subscriptions must be canceled separately in your app store.
• Turn features off. You can switch off Archetype Journey, clear context memories and decline location access.
• Disconnect ChatGPT. Remove Tableu in your ChatGPT settings. If you delete your Tableu account, any remaining ChatGPT authorization stops working.
• Ask us. Email hello@lakefrontdigital.io to access, correct, delete or port your data, or to object to or restrict how we use it. We’ll respond within 30 days, and we may need to confirm your identity first. Exercising your rights won’t affect how we treat you.

Depending on where you live, for example in the EU, the UK or California, the law may give you these rights. In the EU and UK, our legal bases are performing our contract with you (providing Tableu), our legitimate interests (keeping Tableu secure and improving reading quality), your consent (for location and optional features, which you can withdraw at any time) and our legal obligations. You can also complain to your local data protection authority.

California residents: We don’t sell your personal information or share it for cross-context behavioral advertising. We use sensitive information, such as precise location or what your questions reveal about your health or beliefs, only to provide the service you asked for.

7. Sensitive topics

Readings can touch on health, relationships, money or beliefs. Share only what you’re comfortable sharing, and don’t include other people’s personal details. Tableu is for reflection, not professional advice. Our Terms of Service explain this.

8. Children

Tableu isn’t directed to children under 13, and we don’t knowingly collect information from them. People aged 13 to 17 may use Tableu with a parent or guardian’s permission. If you believe a child under 13 has given us information, email us and we’ll delete it.

9. Security

We encrypt data in transit with HTTPS and store passwords only as salted hashes. Service keys are kept out of our code, and access to production systems is limited. No system is perfectly secure, so we can’t guarantee security. If a breach affects you, we’ll notify you as the law requires.

10. International transfers

Lakefront Digital is based in the United States. Our providers process data in the United States and in other countries, including on Cloudflare’s global network. For personal data transferred from the EU, the UK or Switzerland, we rely on safeguards such as the Standard Contractual Clauses in our providers’ data processing terms.

11. Changes to this policy

We’ll post any changes on this page and update the effective date. For significant changes, we’ll also tell you by email or in the app before they take effect.

12. Contact us

Lakefront Digital
Chicago, Illinois, USA
hello@lakefrontdigital.io

For help with the app, see Support.