Privacy policy

1. Who is responsible for your data

The controller (database owner) of your personal data is [TODO: legal name of the operator and registration number], [TODO: postal address for legal notices]. For any privacy question or request, write to [TODO: contact email, e.g. privacy@your-domain].

2. What we collect

We collect only what Astroma needs to work:

• Account: your email address and user ID; if you sign in with Google, the name on your Google account; your language and plan.
• Birth details for each chart you save: date, time (if you know it), place name, coordinates and time zone, the label (me, partner, friend, other) and the name you give it, plus the chart we calculate from them.
• Content you create: your chat questions and the AI's answers, conversation titles, your daily forecasts, personality portraits, tarot cards of the day and their readings, and, for each AI answer, the model used and its token counts and cost.
• Subscription: your plan, its status and dates, and Lemon Squeezy's customer and subscription IDs. The billing notifications Lemon Squeezy sends us include your name, email address and country. We never receive or store your card details.
• Usage limits: a timestamp for each chat question, to count your weekly allowance. If you ask questions while signed out, we store a keyed hash of your IP address instead of the address itself.
• Usage ledger: for each AI request (chat answers, forecasts, portraits and tarot readings), the time, the kind of request, the model, its token counts and its cost, linked to your account, or, if you're signed out, to the same keyed hash of your network instead of your IP address. We use it to enforce daily usage limits, prevent abuse and keep AI costs under control.
• Waitlist: your email address and language, if you joined the waitlist.
• Technical data: our hosting provider records standard request logs (such as IP address, browser and time). Error reports are sent to Sentry after birth details, emails, chat content, cookies, IP addresses and URL query strings are removed.

3. Why we use it, and on what basis

We use your data to provide Astroma: to calculate and show your charts, write your forecasts and readings, answer your questions, keep your account and subscription working, and enforce plan limits. This is necessary to perform our agreement with you.

We also use limited data, based on our legitimate interests, to keep the service secure, prevent abuse, and find and fix errors. Where we need your consent for something, we'll ask for it, and you can withdraw it at any time.

We do not sell your data, use it for advertising, or share it with data brokers. We don't use your birth details or conversations to profile you for anyone else.

4. How the AI features work

To write forecasts, portraits, tarot readings and chat answers, our server sends a request to OpenRouter, which routes it to an AI model provider (currently a DeepSeek model; the model may change). The request contains the planetary positions calculated from your chart, the day's sky, your question and the recent messages of that conversation, your language and, for some chat tools, your birth date. It does not contain your email address, account ID or the name of the place you were born.

These providers may process requests outside Israel and the European Economic Area, under their own terms and privacy policies. We do not use your conversations to train AI models.

5. Who processes your data for us

We use these service providers (sub-processors), each only for the purpose listed:

• Supabase: database and sign-in (stores your account, charts and content, and sends sign-in emails).
• Vercel: hosting of the website and its servers (our server functions run in Frankfurt, Germany).
• OpenRouter and the AI model providers it routes to: generating AI text, as described above.
• Lemon Squeezy: payments, as our merchant of record. For payment data Lemon Squeezy is an independent controller under its own privacy policy.
• Sentry: error monitoring, with personal data removed before reports are sent.
• Google: only if you choose to sign in with Google.
• Open-Meteo: place search. When you type a birthplace, our server sends the search text (not your IP address or account) to its geocoding service.

6. Calendar feed links

For a saved chart you can subscribe to its planner in a calendar app. The feed link contains a random secret token instead of your birth details. Anyone who has the link can see the events in that feed (for example, favourable days and transit dates for that chart), and your calendar provider (such as Google or Apple) fetches it regularly. Treat the link like a password and share it only with people you trust. To revoke a link, delete that chart; the token is deleted with it.

7. Cookies and local storage

We use only cookies and storage that Astroma needs to work. We don't use advertising or third-party analytics cookies.

• Sign-in session cookies (set by Supabase Auth, named sb-…): keep you signed in.
• astroma_active_chart: remembers the last chart you opened (its ID, or the birth details of an unsaved chart), so the tabs reopen it. Kept for 180 days and removed when you sign out.
• NEXT_LOCALE: remembers your language.
• Browser storage (astroma:warm): today's date and your language, so we prepare your daily forecast at most once a day.
• The Lemon Squeezy checkout and customer portal run on Lemon Squeezy's own site and set their own cookies, under their policy.

8. International transfers

Our providers may store or process data outside Israel and the European Economic Area, including in the United States. Where the GDPR applies, transfers rely on adequacy decisions or the European Commission's standard contractual clauses offered by these providers. Israel is recognised by the European Commission as providing adequate protection.

9. How long we keep it

• Your account, charts and content: until you delete them or your account. Deleting a chart deletes its conversations, forecasts, portraits, tarot draws and calendar token.
• When you delete your account, everything above is deleted at once, along with your sign-in, usage counters and waitlist entry. Your usage ledger entries are unlinked from you at the same time: only anonymous token and cost totals remain, until they too are deleted after 90 days. Copies in our database provider's backups expire on its backup schedule.
• Billing notifications from Lemon Squeezy: the full content for 12 months, for support and disputes; after that, or when you delete your account, the personal details in them are removed and only the event type, subscription ID and date remain. Lemon Squeezy keeps your invoices as required by tax law.
• Chat usage counters and the usage ledger: 90 days.
• Error reports and request logs: for the retention periods of Sentry and Vercel, typically up to 90 days.

10. Your rights

Under the Israeli Privacy Protection Law you may review the information we hold about you and ask us to correct or delete information that is inaccurate, incomplete or out of date. Where the GDPR applies, you also have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability, and to withdraw consent.

You can do the most common things yourself, on the account page:

• Download my data: a JSON file with your profile, charts, conversations, forecasts, readings, subscription status and usage ledger.
• Delete my account: permanently deletes your account and data, and cancels any subscription that could still charge you.
• Edit or delete individual charts and conversations at any time.

11. Making a request or a complaint

For anything else, write to [TODO: contact email, e.g. privacy@your-domain] from the email address of your account. We'll answer within 30 days. If you're not satisfied, you can complain to the Israeli Privacy Protection Authority or, in the EU, to your local data protection authority.

12. Security

Data is encrypted in transit. Database access rules let each person read only their own rows, secret keys stay on our servers, and birth details are removed from error reports and logs. No system is perfectly secure; if a breach affects your data, we'll notify you and the authorities as the law requires.

13. Children

Astroma is not intended for children under 16, and we don't knowingly collect their data. If you believe a child has given us data, write to us and we'll delete it.

14. Changes to this policy

We'll update this policy when our practices change. The date at the top shows the latest version; if a change materially affects you, we'll tell you in the app or by email before it applies.