Coven Coven ← Home

Privacy Policy

Effective date: October 13, 2026

This privacy policy describes how Witchcraft & Wicca - Coven App (the "App"), provided by Marcana B.V. (the "Developer"), collects, uses, and shares information when you use the App.

1. What information do we collect?

No account needed

The App does not ask you to create an account or sign in. There is no email address, password, or phone number linked to your use of the App.

Your profile answers

When you first open the App, it asks for your first name (or a witch name), how you would like to be addressed, your birthday, how experienced you are in witchcraft, what you would like to learn about, and what you hope your spells will do. You can change these answers later in your profile.

Your name and birthday stay on your device. The App uses them to greet you, to show your star sign, and in its reminders. Versions before 1.1.3 also sent your first name to the analytics services named below. From version 1.1.3, the App keeps your name on your device and removes the copy that earlier versions sent.

The App sends your age (worked out from your birthday, without the date itself), how you would like to be addressed, your experience level, your interests, and your spell goals to its analytics services, Amplitude and Google Firebase Analytics. If you pick "Other" as a spell goal and type your own goal, that text is sent to Amplitude only. The Developer uses these answers to learn who uses the App and which content to add next.

What stays on your device

The spells you write yourself, your bookmarks, your notes on spells, your ambiance sound settings, and your reminder settings are saved only on your device. They are not uploaded to the Developer, and deleting the App deletes them. Versions before 1.1.3 sent the text of a spell note to Amplitude and Google Firebase Analytics when you closed the note. From version 1.1.3, the App records only that you closed a note with text in it, and the text stays on your device.

Feedback you send in the App

If you use the feedback form in the App, for example to report a bug or to ask for a spell, the App sends your message to the Developer's database on Google Cloud Firestore. With the message, it sends the type of feedback, the date, the app version, your device's language and region settings, and your subscription user ID (an identifier Adapty creates for your installation, see below), so that the Developer can look up your purchase if needed.

Emails you send us

If you contact support by email, we receive the information you choose to share, such as your name and email address. The support email the App prepares for you puts the app version, your subscription user ID, and your region in its subject line, so that the Developer can help you faster.

Payment data

Purchases and subscriptions are processed through Apple's App Store. Payment details are handled and stored by Apple, not by the Developer. The Developer uses Adapty, a subscription management service, to check your subscription status and to show the subscription offer. Adapty receives your purchase records (product, price, currency, and dates), your device's vendor identifier, the subscription user ID it creates for you, and the times you open the App. It does not receive your payment details. If you ask Apple for a refund, we share your purchase and app usage data with Apple to help it decide.

Notifications

If you allow notifications, the App schedules reminders on your device, for example a reminder before a free trial ends. To receive messages from the Developer, such as news about new spells, the App registers your device with Google Firebase Cloud Messaging, which gives it a push token. The App also joins your device to message groups (called topics) based on your subscription status (subscriber, free trial, or former subscriber), the App's language, your device's region setting, your time zone, whether you have completed a spell yet, and a random group number used to test messages. These groups let the Developer send each message to the right people at a sensible local time. They do not include your name or your answers to the profile questions.

Information automatically collected

The App uses analytics services (Amplitude and Google Firebase Analytics) to understand how the App is used and to improve it. These services automatically collect usage and diagnostic information such as device model, operating system version, language, app version, in-app events (for example, that a spell page was opened or a subscription was bought), session information, whether you allowed notifications, whether you are a subscriber or on a free trial, and approximate region derived from IP address.

Crash reports. Google Firebase Crashlytics records crash reports and related diagnostic information, such as the device model, operating system version, and the state of the App when it crashed.

App settings and security. Google Firebase Remote Config lets the Developer change some settings of the App without an update, and Firebase App Check uses Apple's App Attest to confirm that requests to the Developer's database come from the real App.

Tracking and ad measurement

The Developer advertises the App with Google Ads. To learn which ads bring people to the App, Google uses two of the events Firebase Analytics records: the first time you open the App, and each subscription you buy, with its product, price and currency.

When you first open the App, iOS asks whether the App may track your activity across other companies' apps and websites. If you allow it, Firebase Analytics and Adapty collect your device's advertising identifier (IDFA). Google can then match your first open and your purchases to the Developer's ads you saw or tapped, for example on Google Search, YouTube or in other apps. If you decline, the App does not collect the advertising identifier, and Google receives the first open and purchase events without it. Section 8 explains how to change your answer later.

The Developer also advertises on the App Store with Apple Search Ads. If you installed the App after tapping one of these ads, Apple gives the App an attribution token that names the campaign, and Adapty receives it together with your subscription records. This token does not contain the advertising identifier, and the App does not need your tracking permission to send it.

2. How do we use your information?

The Developer processes information based on the legal bases listed in section 3: your consent, legitimate business interests, contract performance, legal obligations, and vital interests.

The App does not show ads and does not send marketing emails. It tracks you across other companies' apps and websites only if you allow it, and the Developer uses that tracking to measure its own ads and for nothing else.

3. Will your information be shared with anyone?

The Developer shares information only with service providers needed to operate and advertise the App, for legal compliance, rights protection, or business obligations.

Service providers. The following third parties process data on the Developer's behalf:

Legal bases for processing:

Business transfers. Information may be shared during mergers, asset sales, financing, or business acquisitions.

Personal data sales. The Developer does not sell personal information to third parties.

4. What is our stance on third-party websites?

The App may link to other websites, such as the App Store pages of the Developer's other apps. The App is not responsible for the safety or privacy practices of these websites. Check each website's own privacy policy.

5. How long do we keep your information?

Information is retained only as long as necessary for the purposes described in this policy or as required by law. When no legitimate business need exists, information is deleted, anonymized, or securely isolated from further processing.

6. How do we keep your information safe?

The Developer implements technical and organizational security measures to protect information. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, and you use the App at your own risk.

7. What are your privacy rights?

Regional rights

If you live in the European Economic Area or the United Kingdom, you have rights that include accessing, correcting and erasing your personal information, restricting its processing, and receiving it in a portable format. You may withdraw your consent at any time, and you may complain to your data protection supervisory authority.

If you live in Switzerland, you can contact the Federal Data Protection and Information Commissioner.

Exercising your rights

The App does not use accounts, so there is no account to manage or delete. To request access to or deletion of analytics data associated with your device, contact contact@marcana.app. Requests are handled within 30 days, though legal requirements may necessitate retention of some records.

Children

The App is meant for people aged 13 and older, as the Terms of Use state. If you are under 13, do not use the App. From version 1.1.3, the App continues past the birthday question only if you are 13 or older, and it never sends an age under 13 to its analytics services. If you believe a child under 13 has used the App, email contact@marcana.app and the Developer will delete the data it holds.

8. Controls for do-not-track features

The App asks for permission to track through Apple's App Tracking Transparency prompt, and it collects the advertising identifier only if you allow it (see section 1). You can change your answer at any time in the iOS Settings app under Privacy & Security, then Tracking. You can turn notifications off in the iOS Settings app under Notifications, then Coven.

9. Do California residents have specific privacy rights?

Shine the Light law

If you live in California, you may ask once a year which categories of personal information the Developer disclosed to third parties for their direct marketing, and the names and addresses of those third parties. The Developer does not disclose personal information to third parties for their direct marketing purposes.

CCPA privacy notice

Resident definition. California residents are people who are in California for other than a temporary or transitory purpose, and people domiciled in California who are outside the state for a temporary or transitory purpose.

Collected personal information categories:

Data usage and sharing. Sections 1 to 3 describe what the App collects, why, and who receives it.

Service provider disclosures. The Developer may disclose information to service providers through written contracts for processing on behalf of the business.

Personal data sales. The Developer does not sell personal information for money. The App sends your first open and your subscription purchases to Google, which uses them to measure the Developer's ads (section 1). If you allow tracking, the App also shares your advertising identifier with Google, so it can link these events to the ads you saw or tapped. California law may treat this as sharing personal information. Turning tracking off in the iOS Settings app (section 8) stops the advertising identifier from being shared. The first open and purchase events are still sent, without it.

Consumer rights

10. Do we make updates to this notice?

The privacy notice may be updated periodically to maintain legal compliance. Material changes are communicated through prominent notices or direct notification.

11. How can you contact us about this notice?

Email: contact@marcana.app

12. How can you review, update, or delete the data we collect from you?

You can change your profile answers in the App at any time. You may request access, modification, or deletion of information by emailing contact@marcana.app.