Privacy Policy

Effective Date: July 6, 2026

App: Gertruda (iOS & Android)

Welcome to Gertruda ("we", "us", or "the App"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and protect your information when you use our mobile application. It also describes your rights regarding your data.

Gertruda is available in multiple languages, including English, Czech, Danish, German, Greek, Spanish, French, Croatian, Hungarian, Italian, Japanese, Kazakh, Korean, Norwegian, Dutch, Polish, Portuguese, Romanian, Russian, Slovak, Slovenian, Thai, and Ukrainian. Some legal documents may be provided in a smaller set of languages, with English used as a fallback where a localized legal document is not available.

1. Information We Collect

1.1 Information You Provide

1.2 Account and Sign-In Data

To save your content and sync it across devices, the App uses Firebase Authentication to create an account for you:

1.3 Information Collected Automatically

Certain information is collected automatically by third-party SDKs integrated into the App:

1.4 Information We Do Not Collect

We do not collect: precise GPS or device location, phone numbers, photos from your photo library, contacts, verified health data, or any biometric information. We collect an email address only if you voluntarily sign in with Google (see Section 1.2); we never ask for or store a password, as authentication is handled entirely by Google and Firebase. Using the App does not require you to create a named account — an anonymous account is created automatically, and linking a Google account is optional.

2. How We Use Your Information

3. Third-Party Services

We use the following third-party services. Each may collect and process data as described below:

3.1 Google AdMob

We use Google AdMob to display banner, interstitial, and rewarded video advertisements. AdMob collects advertising identifiers (IDFA on iOS, Advertising ID on Android), IP address (to derive coarse location), crash data, performance data, and other diagnostic data. This information is used for third-party advertising, analytics, and ad personalization. AdMob's data collection constitutes "tracking" as defined by Apple. For more information, see Google's Privacy Policy.

3.2 Firebase and Google (Google LLC)

We use the following Google and Firebase services:

For more information, see Firebase Privacy Information and Google's Privacy Policy.

3.3 OpenAI

User-entered text (dream descriptions, oracle questions, horoscope-related queries, and your Oracle chat messages) is sent to OpenAI's API — by way of our own Cloud Functions (see Section 3.2) — to generate AI-powered responses and images. For one-off compatibility readings, we minimize identifying information: zodiac signs, blood type labels, genders, and personality archetypes may be transmitted, while neutral placeholders ("Person A" / "Person B") are generally used and names are substituted client-side after the response is received. If you choose to discuss a reading in Oracle chat, the source-reading context and your chat messages may be sent to OpenAI, and that context may include names or other details already shown in the reading so the conversation can stay grounded. OpenAI processes these requests in real time and does not use them to train its models; OpenAI may retain API data for a limited period (currently up to 30 days) for abuse monitoring under its API data-usage policies. Note that, unlike one-off readings, your Oracle chat conversation history is stored by us in Cloud Firestore so you can continue the conversation (see Section 5). OpenAI may process this data according to its own Privacy Policy and Terms of Use.

4. Advertising and Tracking

The App displays banner ads, interstitial (full-screen) ads, and rewarded video ads via Google AdMob. Banner and interstitial ads may appear during normal use; interstitials may appear after certain actions such as generating a horoscope, compatibility reading, or dream interpretation. Rewarded ads are optional — users may choose to watch a rewarded video in full to receive an AI-generated share image. AdMob uses tracking technologies, including advertising identifiers, to deliver personalized ads and measure ad performance.

4.1 Apple App Tracking Transparency (iOS)

On iOS devices, the App will request your permission through Apple's App Tracking Transparency (ATT) framework before allowing AdMob to access your IDFA for personalized advertising and cross-app tracking. You may grant or deny this permission. If you deny tracking, AdMob will serve non-personalized (contextual) ads. You can change your choice at any time in your device's Settings > Privacy & Security > Tracking.

4.2 Ad Personalization (Android)

On Android devices, AdMob may use your Advertising ID to personalize ads. You can reset or opt out of ad personalization in your device's Settings > Google > Ads.

4.3 App Store Privacy Labels

The following data may be collected and linked to your identity, and may be used for tracking, as disclosed in our App Store privacy labels:

Data Type Linked to Identity Used for Tracking Purposes
Advertising Data Yes Yes Third-Party Advertising, Analytics, Product Personalization
Crash Data Yes Yes Third-Party Advertising, Analytics, App Functionality
Performance Data Yes Yes Third-Party Advertising, Analytics, App Functionality
Other Diagnostic Data Yes Yes Third-Party Advertising, Analytics, App Functionality
Coarse Location (IP-derived) Yes Yes Third-Party Advertising, Analytics, Product Personalization
Contact Info (email, name — Google Sign-In) Yes No App Functionality
User Content (dreams, Oracle chat messages, etc.) Yes No App Functionality
Identifiers (account / user ID) Yes No App Functionality

Precise location is not collected. The account and user-content data above (Contact Info, User Content, Identifiers) is used only to operate the App's account, sync, and Oracle features and is not used for tracking.

5. Data Storage and Security

5.1 Local Storage

Your profile (name, birth date, birth place), dream history, oracle (e.g. Eight Ball) history, horoscope cache, blood type readings, notification preferences, report markers, and app settings are stored on your device using local storage (on-device files and preferences). A small amount of app configuration may also be stored on device using Flutter Secure Storage (Keychain on iOS, EncryptedSharedPreferences on Android). When you are signed in, account-based content and synced settings are also stored in the cloud and synced across your devices (see Section 5.2). Zodiac compatibility readings are session-only — they are shown during your session and are not saved to your device or your account; blood type readings are stored as described in Section 1.1.

5.2 Cloud Storage and Processing

When you use account-based features, your content — your profile, dream history, horoscope and eight-ball history, blood type readings, synced settings, and Oracle chat conversations — is stored in Google Cloud Firestore, hosted in the European Union. Access is restricted by security rules so that each account can read and write only its own data. We retain this data so it is available across your devices and so the App can operate account, reporting, and safety features; you can remove it at any time (see Sections 6 and 10).

When you use AI-powered features, your inputs are sent through our Cloud Functions (hosted in the European Union) to OpenAI for processing and image generation. One-off readings (dreams, horoscopes, compatibility, eight-ball) are processed in real time and are not used to train OpenAI's models; see Section 3.3 regarding OpenAI's limited abuse-monitoring retention. AI-generated share images may be stored in Cloud Storage under your account.

Generation records: to protect the integrity of content reports, our servers keep a tamper-proof record (“receipt”) of each AI-generated reading and image request — a copy of the generated content (for images: the generation request and a fingerprint of the delivered file) and a cryptographic fingerprint (SHA-256), written server-side to your account and not modifiable from the App. We use these records solely to verify whether content submitted in a report was genuinely produced by the App. They contain no more personal data than the generated content itself, and they are deleted together with your account.

5.3 Security Measures

We use industry-standard security measures to protect your data, including:

While we take reasonable steps to protect your information, no method of electronic transmission or storage is 100% secure.

6. Data Retention

Data stored locally on your device persists until you delete the App or clear the App's data. Zodiac compatibility readings are session-only and are discarded when you leave the compatibility screen; they are not retained on our servers, although the generation records described in Section 5.2 remain for report verification. Blood type readings are saved locally and in the cloud as described above.

Content stored in the cloud (Section 5.2) is retained for as long as your account exists so that it remains available across your devices. You can end this retention at any time: signing out stops synchronization on a device, and deleting your account in the App (Settings → Account → Delete account) permanently removes your account and its server-side data — including your profile, dream, horoscope, eight-ball, blood type, Oracle chat, synced settings/legal records, and any stored share images (see Section 10). Reports already sent by email may remain in our legal/support mailbox as needed to review and respond to the report.

If we discontinue a feature or shut down the App or service, we may delete, export, anonymize, or retain account content for a limited period as reasonably necessary to wind down the service, comply with legal obligations, resolve disputes, prevent abuse, and maintain security. We will not retain account content longer than reasonably necessary for those purposes, except where applicable law requires or permits a longer period.

Third-party services (Google AdMob, Firebase, OpenAI) may retain data they collect according to their own retention policies. Please refer to their respective privacy policies linked in Section 3 above.

7. Cookies and Similar Technologies

The App itself does not use cookies. However, third-party SDKs integrated into the App (AdMob and Firebase) may use device identifiers, advertising identifiers, and similar tracking technologies to collect data as described in Sections 3 and 4. These technologies function similarly to cookies and are used for advertising, analytics, and performance monitoring.

8. International Data Transfers

Your account content (Section 5.2) is stored in the European Union (Google Cloud Firestore and Cloud Functions). Some processing nonetheless occurs in other countries, including the United States — for example, AI processing by OpenAI and advertising and analytics by Google/AdMob. As a result, your data may be transferred to and processed in countries outside your country of residence. These transfers are necessary to provide the App's services. Where required by law, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) adopted by the European Commission, or the service provider's certification under applicable data transfer frameworks.

9. Children's Privacy

Gertruda is rated 16+ and is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child under 16 has provided us with personal information, please contact us at privacy@gertruda.fun, and we will take steps to delete such information.

If you are between 16 and the age of majority in your jurisdiction, you should review this Privacy Policy with a parent or guardian to ensure you understand it.

10. Your Rights and Choices

10.1 General Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

10.2 Rights for European Economic Area (EEA) Residents — GDPR

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following additional rights under the General Data Protection Regulation (GDPR):

10.3 Rights for California Residents — CCPA

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

To exercise your rights, contact us at privacy@gertruda.fun.

10.4 Rights for Canadian Residents — PIPEDA

If you are a Canadian resident, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA), including the right to access your personal information, request correction, and withdraw consent for its collection, use, or disclosure. To exercise these rights, contact us at privacy@gertruda.fun.

11. Payments

Gertruda is currently offered for free with advertisements and daily usage limits for AI-powered features. The App may include dormant or limited-availability in-app purchase or subscription functionality. If paid features are offered to you, pricing, trial terms, renewal terms, and cancellation instructions will be displayed in the App Store or Google Play purchase flow before purchase. Active subscriptions are managed by the App Store or Google Play and are not automatically cancelled when you delete your Gertruda account.

12. Entertainment Disclaimer

All content provided by the App — including horoscopes, dream interpretations, compatibility readings, and oracle answers — is for ENTERTAINMENT PURPOSES ONLY. It does not constitute professional medical, legal, psychological, financial, or other professional advice. Do not rely on App content for making important life decisions.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Effective Date" at the top of this page and, where practicable, by providing notice within the App. Your continued use of the App after any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy, your data, or wish to exercise your privacy rights, please contact us:

Email: privacy@gertruda.fun

Data Protection Officer (for EEA/UK users): privacy@gertruda.fun

Jurisdiction: Canada (Province of Ontario)