Privacy Policy

This Privacy Policy explains how ASTRA ANALYTICS Ltd. ("we", "us", "AstroAIgent") collects, uses, and protects personal data when you use the AstroAIgent mobile application and the associated website at astroaigent.com (together, the "Service"). It is written to comply with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR") and the Bulgarian Personal Data Protection Act.

1. Who we are

The data controller is:

The Service is built and run for us by Aura Digital EOOD (EIK 208345580, Sofia, Bulgaria). Aura Digital processes personal data only on our behalf and on our instructions, as our processor under Art. 28 GDPR.

We have not appointed a Data Protection Officer because the scale of our processing does not require one under Art. 37 GDPR. The email above reaches the person responsible for privacy matters.

2. What we collect

We process the following categories of data:

• Account data: email address, name (optional), and a hashed password. Provided by you at sign-up.
• Birth data: date, time, and place of birth, used to compute your natal chart. This is the core input of the Service. You may also enter the same data for companions (partners, friends, family) so the AI can reference their charts.
• Time zone: the app reads the time zone set on your phone (for example Europe/Sofia) and stores it with your profile, so that notifications arrive at your local time. The app does not ask for location permission and does not use GPS.
• Chat content: messages you send to the AI and the AI's responses, stored so you can revisit them later.
• Memory facts: short notes the AI extracts from your chats ("you're considering a career change", "your daughter's birthday is in July") so future conversations stay grounded. You can view and delete them under Settings › AI Memory.
• Attachments: images and documents you upload to a chat. Stored only for the duration of that conversation.
• Service data: when you sign in, and the app version, platform and language of your phone; how many questions you ask and what the AI costs us for them, counted by hour and by day; the server's logs (IP address, time and address of each request) and error logs. For each signed-in device we keep its IP address and user agent with the session. At sign-up we also keep a fingerprint of the device (stored only as a hash), the IP address and the user agent, to limit how many accounts one phone can create.
• Usage analytics (only if you allow it): when you open the app, which screens you view, which notifications you tap and from where you open the plans screen. Never your chats, your birth data or the names of people and places. The app asks you separately and sends nothing until you say yes; you can turn it off any time in Settings › Usage analytics.
• Sign-in data: if you sign in with Google or Apple, they confirm your identity and send us your email address and, if you allow it, your name.
• Billing data: paid plans are bought through the App Store or Google Play. Apple or Google takes the payment; we receive only a transaction reference and the subscription status, never card numbers.

We do not collect location data, contact lists, biometrics, or any special category data under Art. 9 GDPR. You may use the Service anonymously beyond the email + birth data minimum.

3. Why we process it (legal basis)

• Contract (Art. 6(1)(b)): we need your account and birth data to deliver the Service you signed up for – computing your chart, running daily horoscopes, answering chat questions.
• Consent (Art. 6(1)(a)): for memory facts and the charts of the people you save in People, which are convenience features you can disable or delete at any time, and for usage analytics, which stays off until you allow it.
• Legitimate interest (Art. 6(1)(f)): security logs and abuse prevention, including the limit on accounts per device; and statistics about the Service as a whole – how many people use it, ask questions and come back, and what the AI costs. These reports show totals, never individual users, and hide any group of fewer than five people. Support may open a single account to answer a request or fix a problem (see section 10).
• Legal obligation (Art. 6(1)(c)): retention of invoicing data for accounting (10 years under Bulgarian law).

4. Who we share it with (sub-processors)

We do not sell personal data. The Service relies on the following sub-processors, each under a Data Processing Agreement:

• Anthropic, PBC (United States) – runs the AI models that generate horoscopes and chat replies. We send the content of your prompt (your chart plus your message) over TLS. Anthropic states it does not train on API traffic.
• Aura Digital EOOD (Bulgaria) – builds and maintains the Service and operates the server and database on our behalf.
• Hostinger International Ltd. (Lithuania / EU) – hosts the marketing site and the server that runs the backend (Germany), and provides outbound SMTP for transactional emails (password resets, billing receipts).
• Cloudflare, Inc. (United States) – DNS, CDN, and DDoS protection. May see IP addresses and request metadata.
• Apple Distribution International Ltd. and Google Commerce Ltd. (Ireland) – sell the paid plans in the App Store and Google Play and take the payment. They are independent controllers for payment data.
• Google and Apple – if you choose to sign in with them, they confirm your identity. They are independent controllers for that sign-in.

The backend API and the PostgreSQL database, where your account, birth data, chats, and memory facts are stored, run on a server in the EU.

Birthplace search runs through our own server. It sends only the place name you type to Photon (komoot GmbH, Germany), a place search built on OpenStreetMap data. Your account, email and IP address are not sent.

5. International transfers

Transfers to Anthropic and Cloudflare leave the EEA. We rely on the EU-U.S. Data Privacy Framework where the recipient is certified, or the European Commission's Standard Contractual Clauses otherwise. On request we will share the relevant agreement.

6. How long we keep it

• Account, profile, chats, memory facts: until you delete your account, plus 30 days in backups before they roll off.
• Usage analytics events: 90 days; deleted at once if you turn usage analytics off.
• Question and AI cost counters: 13 months.
• Sessions (IP address and user agent of a signed-in device): up to 37 days.
• Sign-up device record (device hash, IP address, user agent): as long as your account exists.
• Server logs: up to 52 days.
• Invoicing data (when applicable): 10 years per Bulgarian accounting law.

You can delete your entire account from Settings › Delete account. The deletion is permanent and immediate; backups containing the deleted data are deleted within 30 days.

7. Your rights

Under GDPR you have the right to:

• Access a copy of the data we hold about you.
• Rectify inaccurate data – for the most part directly editable in the app; otherwise email us.
• Erase your data (see "Delete account" above, or email us if the in-app flow does not cover your case).
• Restrict or object to processing based on legitimate interest.
• Data portability – download a machine-readable copy of your profile, chats, memory, consents and usage analytics events in Settings › Download my data, or ask us for it.
• Withdraw consent at any time without affecting lawfulness of prior processing – for usage analytics, in Settings › Usage analytics.

Send any request to [email protected]. We respond within 30 days. If you believe we have mishandled your data, you can complain to the Bulgarian Commission for Personal Data Protection (Комисия за защита на личните данни, cpdp.bg).

8. Cookies and similar technologies

The marketing site uses only strictly necessary cookies (session, CSRF, language preference). We do not use third-party tracking cookies or advertising pixels. The mobile app uses platform-level local storage for sign-in tokens and preferences; this is not accessible to third parties. The app sends us usage analytics events (section 2) only after you allow it, and contains no advertising or third-party analytics code.

9. Children

The Service is not directed at children under 16. We do not knowingly collect data from anyone below that age. If you believe a minor has created an account, contact us and we will delete it.

10. Security

We hash passwords with Argon2id, encrypt traffic in transit with TLS 1.2+, run the backend on a hardened EU-located VPS behind a firewall, back up the database every day (the copy kept off the server is encrypted), and limit access to production credentials to authorised maintainers only. No system is perfectly secure, but these are the controls we operate today.

To answer requests, fix problems and stop abuse, our support staff can open a single account and see its plan and limits, how many questions it asked and what they cost, its devices, consents and notification settings, and the titles of its chats (the first question of each). They do not see the conversations themselves there. Every opening of an account is recorded.

11. Changes to this policy

We may update this Policy when the Service changes (new sub-processor, new feature, new legal requirement). Material changes will be flagged in-app and on this page; the "Last updated" date at the top of this document always reflects the current version.

12. Contact

Privacy questions, requests, or complaints: [email protected].