AskRunes Privacy Policy
Last updated: 17 October 2026
AskRunes is a rune-reading app for reflection and entertainment. This page explains what the app keeps, where it keeps it, what it sends to other companies, and what you can do about it.
AskRunes is offered by Volodymyr Leskiv, sole proprietor (ФОП), Ukraine ("we"). You can reach us at waltcommercial@gmail.com.
Who is responsible for your data
The data controller for AskRunes is Volodymyr Yuriiovych Leskiv, a sole proprietor registered in Ukraine (ФОП Леськів Володимир Юрійович).
- Postal contact address: 11 Kruta Street, Lviv, Lviv Oblast, 79019, Ukraine
- Privacy contact: waltcommercial@gmail.com
You can contact us about your personal data or to exercise your data-protection rights using these contact details. Full operator details are in our Terms of Use.
The short version
- You use AskRunes without creating an account. We do not ask for your name, your email address or a password.
- The name and the birthday you enter in Settings stay on your phone. The app never sends them anywhere.
- The questions you ask and the chat messages you write are sent to our server and to OpenAI, which writes the answer. Please do not put anything into a question that you would not want to share.
- Basic readings stay on your phone, unless you switch on "Keep basic readings on the server too" in Settings.
- If you have no plan and have not bought Remove ads, the app shows ads from Google.
- You can delete the readings and chats of your current guest account, or the account itself, at any time in Settings.
How the app knows you
The first time you open AskRunes, it creates a guest account for you on our server: a random ID with no name, email address or password. Its credentials are kept on your phone, and your readings and chats are linked to it. The app sends this ID to our server with every request and to RevenueCat, so that it can tell which plan you have. It also leaves your phone when you share it from Settings or send the support email.
This ID, the installation ID and the phone identifier below do not name you, but they are personal data under the law where you live, and we treat them so.
If you reinstall the app or change your phone, a new guest account is created. The readings of the earlier account are no longer shown in the app. They stay on our server as records of that account until you ask us to delete them, with the earlier ID if you still have it. They remain personal data, and the words of a question can identify you by themselves.
On Android the app also sends the App Set ID of your phone with every request for a reading or for your daily count, and with each basic reading it keeps on our server. It is an identifier Google gives the apps of one developer on a device; Google resets it when you remove the last of those apps, after more than a year in which none of them used it, or when you reset the phone to its factory settings. On iOS the app sends Apple's identifier for vendors. Our server keeps only a salted hash of it, tied to the first free account that used the phone, to count the free plan's daily readings per phone and to prevent abuse; it is never used for advertising and never shared.
What stays on your phone
| What | Why |
|---|---|
| The name and the birthday you enter in Settings | The greeting, your birth rune and your life rune |
| Your settings (language, reminder, basic readings and others) | So the app remembers them |
| Your readings and chats: every basic reading, and a copy of every AI reading and every chat message | So History works without a connection |
| The talismans you saved | So you can open them again |
| A count of the readings you have opened | To decide when a full-screen ad is due |
| Which answers you have reported | So the app can show that you reported them |
| The session of your guest account | So the app stays signed in to it |
| A random installation ID | Created on your phone the first time a reading is asked for, and sent with each request for a reading |
Basic readings are made on your phone and stay there, unless you switch on "Keep basic readings on the server too" in Settings (it is off when you start). Then the question, the runes, the spread, the language and the date of each basic reading, also those made before, are sent to our server and kept like an AI reading. If you tap "Interpret with AI" on a basic reading, its question and its runes are sent to our server and to OpenAI, as for any AI reading.
The daily reminder is scheduled on your phone itself. We do not send it, and we do not receive anything when it appears. The first time you turn the reminder on, the app asks for your phone's permission to show notifications.
When you share or save a reading or the rune of the day, the app makes what you share on your phone: a picture, which it gives to the app you choose or to your gallery; the reading as text, which it gives to the app you choose or copies to your phone's clipboard; or a PDF, which it gives to the app you choose. The text, the copy and the PDF always carry your question; the picture carries it unless you switch that off, each time you share. We do not receive what you share. Saving a picture to the gallery may ask for the permission to write to your phone's storage; the app never asks to read your photos.
What our server keeps
Our server is run on Supabase, a hosting service. It keeps:
| What | Details |
|---|---|
| Your AI readings | Your question, its language, the spread, the runes, the answer, which AI model wrote it, how long it took, how much text the model read and wrote, and the date |
| Your basic readings, only if you switched on "Keep basic readings on the server too" | The question, its language, the spread, the runes and the date |
| Your chats about a reading | Your messages and the answers |
| Your use of the limits | How many readings, chat messages, reports and uploads you used in an hour, a day or a month |
| Your plan | Which plan you bought, in which store, when it ends and whether it renews |
| Your reports | If you report an answer: the reason, your note, and a copy of the reported answer, its language and which AI model wrote it |
| A random installation ID | Created on your phone, used to tell installations apart |
| A hashed identifier of your phone | A salted hash of your phone's App Set ID (Android) or identifier for vendors (iOS), never the identifier itself, kept with the ID of the first guest account that used the phone for free readings, to count the free plan's daily readings per phone |
Through the app, only your guest account can read your readings and chats; we can read what our server keeps to run and protect the service.
What we send to other companies
| Company | What it gets | Why |
|---|---|---|
| OpenAI | Your question, the language, the spread and the runes that were drawn. For a chat also the reading, the earlier messages of that chat and your new message. | To write the answer |
| Google AdMob | What Google's ad software on your phone collects, such as the advertising ID and the IP address | To show ads, if you have no plan and have not bought Remove ads |
| Google Play | Your purchase | To sell you a plan or Remove ads |
| RevenueCat | Your purchases and your guest account ID | To know which plan you have |
| Supabase | Everything listed under "What our server keeps" | To run our server |
| Expo | When the app starts, it asks Expo's update service whether a newer version of the app's code exists. The request carries your phone's operating system, our project's ID and a random token; Expo states that it carries no unique device identifier. Like any connection, it shows your IP address to Expo. Expo's own policy is at https://expo.dev/privacy | So that we can correct the app's code between store releases |
About OpenAI:
- The app never adds your name, your birthday, your account or anything about your phone to what it sends. But whatever you type into a question or a chat message is sent as you typed it.
- OpenAI states that data sent through its API is not used to train its models unless the sender opts in; we have not opted in. OpenAI states that it keeps logs for the monitoring of abuse for up to 30 days, or longer where the law requires it or where it is reasonably necessary to protect its services or others from harm. We ask OpenAI not to store the conversations themselves.
About ads:
- With a plan or Remove ads, the app does not start Google's ad software at all.
- If the law of your region asks for it, the app asks for your choice before it shows ads that use your data. You can change that choice in Settings, under Privacy options.
- Google explains how it uses information from apps that show its ads at https://policies.google.com/technologies/partner-sites.
We never see your card or other payment details. We do see which plan you bought, in which store, when it ends and whether it renews.
Please leave names, health details and anything private out of your questions and messages. If you include such details, we process them only to write the answer, and you can delete the reading or your account at any time.
We do not sell your data.
How long we keep it
| What | How long |
|---|---|
| Readings and chats | Until you clear your reading history or delete your account. After a reinstall or on a new phone, the readings of the earlier account are no longer shown in the app, and they stay on our server as records of that account |
| Reports | For as long as we need them to review the answer, also after you clear your history or delete your account; when you delete your account, your account ID is removed from them, and the note and the copied answer stay as you and the AI wrote them |
| The daily counts, your plan and the installation ID | For as long as AskRunes is offered, or until you ask us to delete them |
| The hashed identifier of your phone | For as long as AskRunes is offered, or until you ask us to delete it |
What you can do
- Delete your account. Settings, Delete my account. This deletes your account on our server with its readings, chats and plan record, and the app starts a new account. Reports you sent stay without your account ID, and the hashed phone identifier stays, so a new account on the same phone keeps the free plan's count. A plan you bought comes back with Restore purchases.
- Delete your readings and chats. Settings, "Clear reading history". This deletes the readings and chats of your current guest account on your phone and, when your phone is online, on our server. If the server could not be reached, the app tells you, and you can try again. It cannot be undone. Readings made under an earlier account, before a reinstall or on another phone, are no longer shown in the app; a deletion request reaches them only if you still have that account's ID, as it was shown in Settings at the time.
- If you have removed the app, or want a copy of what we keep. Write to waltcommercial@gmail.com (Settings, Support opens the email with your ID already in it), or include the ID shown in Settings under About, so that we can find your account. We answer within 30 days.
- Stop the ads. Buy a plan or Remove ads.
- Change your choice about ads that use your data. Settings, Privacy options (shown where the law asks for the choice).
- Cancel a plan. In Google Play, under Subscriptions.
Wherever you live, you can ask us for access to your data, its correction or deletion, and the end of its use. If you live in the European Economic Area, the United Kingdom or Switzerland, you also have the right to restrict our use, to object to it, to receive the data you gave us in a usable form, to withdraw a consent at any time (ads: Settings, Privacy options), and to complain to the data protection authority of your country.
Why we are allowed to use this data
- To give you what you asked for, as our agreement with you: readings, chats, your plan and its limits.
- With your consent: ads that use your data, where the law asks for the choice.
- Because we have a legitimate interest in it: keeping the service from abuse, and reviewing answers that were reported.
How we protect it
The connection between the app and our server is encrypted. Every request carries your account's signed token, and our database lets an account read only its own readings and chats. The phone identifier is stored only as a salted hash. Our server's keys never enter the app. We never handle card details; Google Play does.
Children
AskRunes is not meant for children under 16, and we do not knowingly collect data from them.
Other countries
The companies named above process data in countries other than yours, including the United States. For such transfers we rely on the safeguards each of them offers in its data-processing terms, such as the European Commission's standard contractual clauses; write to us for details.
Changes
If this policy changes, this page shows the new text and its date.