Privacy Policy

1. Introduction

Astrobiography ("we," "our," or "us") operates the Astrobiography mobile application (the "App") and the website astrobiography.com (the "Website"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App and Website.

Astrobiography is operated by SAGITTARIUS-A* LTD, a company registered in England and Wales under company number 16295089, with its registered office at 167-169 Great Portland Street, 5th Floor, London, W1W 5PF. SAGITTARIUS-A* LTD is the data controller for the personal information described in this policy.

By using our services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information You Provide

When you create an account or use our services, we may collect:

• Account Information: First name, last name, email address, and password (encrypted)
• Birth Details: Date of birth, time of birth, and place of birth (provided voluntarily for astrological chart generation)
• Profile Preferences: Sign preferences, notification settings

2.2 Information Collected Automatically

When you use the App, we may automatically collect:

• Device Information: We check whether the App is running on a physical device rather than a simulator, so we know whether to register for push notifications. We do not collect or transmit any advertising or device identifier (IDFA, IDFV, Android Advertising ID, or similar), and the App contains no advertising or tracking SDKs.
• Usage Data: The App records feature-usage and screen-view events (which screens you open, which features you use) and stores them only on your device, keeping the most recent 100 events. This data is not transmitted to us or to anyone else.
• Log Data: Our servers record standard request logs, including IP address and access times, for security and reliability.

2.3 Information from Third Parties

• Authentication Providers: We offer sign-in via Google and Apple (iOS only). When you authenticate through these services, we receive your email address, name, and profile photo (as permitted by your privacy settings). We use Supabase as our authentication provider, which securely manages your login credentials and session tokens.

2.4 Information Sent to AI and Location Services

• AI Content Generation: To generate your readings, birth-chart interpretations and Oracle responses, we send your birth details (date, time and location), the astrological placements derived from them, and your reading or conversation content to Anthropic, the provider of the Claude AI models that produce this content.
• Location Search: When you search for your birth city, the text you type and the place you select are sent to Google's Places API to return city suggestions and coordinates.
• AI Cost Logging: For each AI request we record which model was used, how many tokens it processed, and when — never the content itself.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Generate personalized astrological readings and birth charts
• Process in-app purchases and transactions
• Send you notifications about your reading updates (if opted in)
• Respond to your comments, questions, and requests
• Monitor and analyze usage trends to improve user experience
• Detect, prevent, and address technical issues and fraud
• Comply with legal obligations

4. Data Storage and Security

• All personal data is stored on secure, encrypted servers provided by Supabase (hosted on AWS infrastructure)
• Passwords are hashed using industry-standard algorithms (bcrypt) and are never stored in plain text
• We use TLS/SSL encryption for all data transmitted between your device and our servers
• Authentication tokens are stored securely on your device using platform-native secure storage (Keychain on iOS, EncryptedSharedPreferences on Android)
• We retain your data for as long as your account is active or as needed to provide services
• If you leave your email address on our website for a launch reminder, we use it to send you one message when the App launches, and we delete it after that message has been sent, and in any case within 90 days of you leaving it. We rely on your consent, which you can withdraw at any time by emailing m@sagittarius-a.co.uk. We do not use the address for anything else or share it. To stop misuse of the form we keep a scrambled form of your network address for one day; it cannot be turned back into the address. The page that carries the form loads Cloudflare Turnstile, which checks that a person, not a script, is using it. This happens when the page loads, whether or not you leave your address: Cloudflare receives your network address and technical details of your browser and connection, and tells us only whether the check passed. Cloudflare may place a cookie or use your browser's storage where that is strictly necessary for the check; we set none of our own for it. See Cloudflare's Turnstile privacy notice.
• You may delete your account at any time, from Settings in the App. Deletion is immediate and permanent: your profile, birth details, readings, Oracle conversations, feedback and circle data are all destroyed. The steps, and how to ask us by email instead, are on our account deletion page.
• What we keep after deletion: one internal record type — our AI cost log (the model used, token counts and a timestamp) — is retained with no expiry. At the moment you delete your account it is permanently unlinked from you, so it identifies no one. It contains none of your readings, messages or birth details.

5. Data Sharing and Disclosure

We do not sell your personal information to third parties. We may share information in the following circumstances:

• Service Providers: Supabase (hosting, authentication and database), Anthropic (the Claude AI models that generate your readings), Google (the Places API for birth-location search, and Google Sign-In if you use it), Cloudflare (the check on the launch reminder form on our website), and Vercel (hosting of our website, and counting visits to it). Payment is handled by the Apple App Store or Google Play. The App uses no advertising or analytics SDKs, so no data goes to advertising partners. Our website counts visits with Vercel Web Analytics, which sets no cookies, stores nothing on your device and does not identify you: we see totals such as pages viewed, the site a visit came from, and the country and type of device.
• Legal Requirements: When required by law, regulation, legal process, or governmental request
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected users
• With Your Consent: When you explicitly authorize sharing

6. Subscriptions and In-App Purchases

Astrobiography offers The Complete Almanac subscription (monthly or annual) and several one-time purchases, including the Celestial Blueprint and the Synastry Report. Current prices and what each includes are shown in the App and on your store's product page, which are the authoritative source — this policy deliberately does not repeat them, so it can never quote a stale price.

Subscriptions automatically renew unless cancelled at least 24 hours before the end of the current period. Payment processing is handled securely through Apple App Store (iOS) or Google Play Store (Android). We do not store your payment card details.

You can manage or cancel your subscription:

• iOS: Settings → [Your Name] → Subscriptions
• Android: Open the Google Play app → tap the profile icon → Payments and subscriptions → Subscriptions → select the subscription → Cancel subscription

7. Your Rights and Choices

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate personal data
• Deletion: Request deletion of your account and personal data
• Opt-Out: Disable push notifications or unsubscribe from emails
• Data Portability: Request your data in a portable format

To exercise any of these rights, contact us at m@sagittarius-a.co.uk. To delete your account, use Settings → Delete account in the App or follow our account deletion page.

For UK Residents (UK GDPR): You have rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, including the rights listed above. Our legal basis for processing is your consent and legitimate interest in providing our services. If you are unhappy with how we have handled your personal data, please contact us first so that we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

For California Residents (CCPA): You have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, the right to delete, and the right to opt-out of the sale of personal information. We do not sell personal information.

For EU/EEA Residents (GDPR): You have additional rights under the General Data Protection Regulation, including the right to lodge a complaint with a supervisory authority. Our legal basis for processing is your consent and legitimate interest in providing our services.

8. Children's Privacy

You must be 18 or over to use Astrobiography. Our services are not directed to anyone under 18, and we do not knowingly collect personal information from anyone under that age. If we become aware that we have collected data from someone under 18, we will take steps to delete that information promptly.

9. International Data Transfers

Your information is processed by the service providers listed in section 5, some of which are located outside the UK and the EEA. Those transfers are made under the safeguards the providers offer, such as standard contractual clauses.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy in the App and updating the "Last Updated" date. Your continued use of the App after changes constitutes acceptance of the updated policy.