Privacy Policy

How Your Data Is Protected

• App data stored on your device is encrypted with AES-256-GCM
• All data in transit uses HTTPS/TLS encryption
• Cloud data is protected by row-level security — only you can access your data
• In the phone apps, login tokens are stored in your device's secure keychain/keystore. On the web, they are kept in encrypted browser storage
• Research contributions are anonymized (no names, locations binned to 15° latitude bands)
• AI interpretations are processed by Anthropic's Claude — birth chart data and target names may be sent for analysis

Data We Collect

• Birth date, time, and location (for chart calculation)
• Personality test responses and scores
• Blind validation test ratings
• Target profiles (names and birth data of people you add)
• Tarot readings
• Daily reflection responses
• Email address (for authentication)
• Billing records: your Stripe customer ID, plan and beta status, credit purchases, and the cost of each AI or voice request (to apply your allowance and credits). Card details are handled by Stripe and never reach our servers.
• Beta applications (email, name, and optionally what you'd use the App for), if you apply through the form

Birth chart data and personality scores are treated as health-adjacent data and receive the highest level of protection.

Third-Party Services

• Supabase — Cloud database, authentication and server functions (encrypted at rest)
• Cloudflare — Hosts the web app
• Anthropic Claude AI — Birth chart data and target names are sent for AI-powered interpretations
• Google Cloud Text-to-Speech — The text of a reading is sent to create the voice version (beta, Beacon and Pulsar)
• ElevenLabs — The text of a reading is sent to create the voice version (Pulsar+)
• OpenStreetMap (Nominatim) — The place name you type for a birth location is sent to look up its coordinates. Time zones are worked out on your device
• Stripe — Web payments: your email and payment details go to Stripe, which processes the payment and emails your receipt
• RevenueCat — In-app subscriptions on iOS and Android (your account ID and purchase status)
• Formspree — Receives beta applications and contact messages you send through our forms
• Google AdMob — Ads in the iOS and Android apps for free accounts only (no ads for beta testers or subscribers, and none in the web app)
• Sentry — Crash reporting in production builds only (no personal data, only error stack traces and device type)

We do not sell your data. We do not use behavioral analytics or tracking services.

Your Rights & Requests

You can delete the data on this device, your cloud data, or your whole account at any time from the Privacy & Data page in the App.

If you can't sign in, or you want a copy of your data, send a data request through our contact form at https://astro-deep.pages.dev/contact?type=data. We reply by email and confirm that you own the account before acting on a request.