Privacy Policy

Last Updated: February 16, 2025

Welcome to Astra Veil. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our AI-powered astrology app.

1. Information We Collect

We collect the following types of information:

• Account Information: Email address (via Apple Sign-In or Google Sign-In)
• Birth Information: Birth date, time, and location for astrological calculations
• Chat History: Conversations with our AI astrologer to provide personalized insights
• Profile Facts: Information you share during conversations (relationship status, interests, etc.)
• Device Information: Push notification tokens, app usage analytics
• Subscription Status: RevenueCat purchase history for entitlement verification

2. How We Use Your Information

We use your information to:

• Generate personalized astrological readings and birth chart analysis
• Provide AI-powered chat experiences tailored to your cosmic profile
• Send daily forecast notifications (if enabled)
• Process and verify subscription purchases
• Improve our AI models and app experience
• Communicate important updates about the service

3. AI and Data Processing

Astra Veil uses AI technology to generate personalized astrological insights. When you interact with our AI:

• Your birth data and conversation history are processed through secure servers
• We use leading AI providers to generate personalized responses
• Your data is not used to train AI models without your explicit consent
• All processing is done through encrypted connections

4. Data Storage and Security

We take data security seriously:

• All data is stored on secure cloud infrastructure with encryption
• Row-level security ensures your data is isolated from other users
• Encryption in transit (TLS) and at rest
• API keys and secrets are stored server-side only
• Regular security audits
• Rate limiting to prevent abuse

5. Your Rights

You have the right to:

• Access and download your personal data
• Delete your account and all associated data
• Opt out of push notifications
• Request corrections to your birth information
• Withdraw consent for data processing

6. Data Retention

We retain your data as follows:

• Account data: Until you delete your account
• Chat history: 90 days (rolling deletion)
• Anonymized analytics: Indefinitely for product improvement
• Subscription records: 7 years (tax/legal requirements)

7. Third-Party Services

We use the following third-party services to operate Astra Veil:

• Supabase (Cloud Infrastructure): Secure database and server infrastructure to store and process your data (United States)
• Anthropic (AI Services): Generates your personalized readings and responses using its Claude models. With each reading request, Anthropic receives your birth chart data, your questions and conversation history, and your saved Profile Facts. Anthropic retains API requests for 30 days for abuse prevention.
• RevenueCat (Payment Processing): Manages your premium subscription and entitlements, together with Apple App Store in-app purchases
• PostHog (Analytics): Privacy-focused analytics to improve app performance (no message content; we send your account ID, subscription tier, and your Sun, Moon, and Rising signs)
• Authentication: Apple Sign-In and Google Sign-In services

All third-party providers are bound by strict data protection agreements and process your data only as necessary to provide their services.

Automatic Profile Facts (Life Context)

As you chat, Astra Veil automatically notes factual details about your life — such as your interests, goals, challenges, family situation, and dated life events. These Profile Facts are stored in your account, used to personalize later readings, and sent to Anthropic with each reading request. You can review and clear every stored fact at any time: Profile → Life Context → Clear All. Details about people you mention (for example family members) may also be stored. No health-related information is extracted or stored.

8. Data Residency & International Transfers

Your data is stored in the United States via Supabase's infrastructure. If you are located outside the US:

• By using Astra Veil, you consent to the transfer of your data to the US
• We rely on Standard Contractual Clauses (SCCs) for GDPR compliance
• All transfers are encrypted and protected
• Supabase's sub-processors are listed in their Sub-Processor List

9. Children's Privacy

Astra Veil is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe we have collected data from a child under 13, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: privacy@astraveil.app