Privacy Policy
This Privacy Policy explains what personal data Astronova (“we”, “us”) collects, why, and your rights over it. It covers users in the European Economic Area and UK (under the GDPR) and in the United States (including California, under the CCPA/CPRA).
The short version: we collect your account and birth details to compute your chart and generate your readings, and we remember your chats so they reload when you return. We use trusted providers to store your data and run the AI. We do not sell your data, show you ads, or use it to train third-party AI. You can download or delete all of your data at any time. You must be 18 or older to use Astronova.
1. Who is responsible for your data
Astronova, operated by Nilay Rajderkar, is the controller of your personal data. For any privacy request, or to reach our data protection contact, email support@astronova.club.
2. Data we collect
We only collect what the Service needs:
- Account data: your email address, your name, an encrypted (hashed) password, and — if you use Google Sign-In — your Google profile picture and the verified email Google provides. We never see or store your Google password.
- Birth details: the name, gender, and date, time, and place of birth you enter, and the geographic coordinates and time zone we derive from the place. These are the inputs to your chart and readings.
- Information about other people: if you use Love Match, the birth details you enter for a partner. You provide these on your own responsibility (see the Terms).
- Conversations and memory: the questions you ask, your chat messages and saved chat threads, and durable notes the AI keeps at your request (for example a stated preference or a life event you mention) so it can remember context across sessions.
- Readings we generate: the readings, timelines, and match results produced for your chart.
- Purchases: if you buy a pack, a record of the purchase (the pack, amount, currency, date, and payment reference) and your credit balance and how it was used. Dodo Payments collects your payment and billing details at checkout; we never receive your card number.
- Usage and technical data: basic operational logs and metering of AI usage (model, token counts) needed to run, secure, and cost-account the Service. We store some data in your browser’s local storage to keep you signed in and resume your flow.
Because birth details reveal your date of birth and can be closely tied to your identity, we treat them as sensitive and protect them accordingly. We do not ask for and do not want payment card numbers, government IDs, health records, or special-category data beyond what you choose to type into a reading.
For California residents, these correspond to the CCPA categories of identifiers, internet activity, and inferences; birth date and precise-ish location derived from your birthplace may be treated as sensitive personal information, which we use only to provide the Service and never to infer characteristics for advertising.
3. How and why we use your data, and our legal bases (GDPR)
- To provide the Service — create your account, compute your chart, generate readings, and remember your chats and profile. Legal basis: performance of our contract with you.
- To generate AI readings and replies — send your birth details, questions, and relevant context to our AI provider. Legal basis: performance of the contract; and your consent for any sensitive details you choose to share.
- To sell and fulfil purchases — add the credits you buy to your account, keep a record of each purchase and credit used, and resolve billing questions. Legal basis: performance of the contract; and our legal obligation to keep accounting records.
- To secure and improve the Service — prevent abuse, debug, and account for usage and cost. Legal basis: our legitimate interests in running a safe, sustainable service.
- To communicate with you — account and verification emails. Legal basis: performance of the contract.
We do not sell your personal data, and we do not use it for third-party advertising or for training third-party AI models on your identifiable content.
Automated processing. Your readings are generated automatically by an AI model from the details you provide. This is for insight and entertainment only: we do not use it to make decisions that produce legal effects or similarly significant effects about you (for example, about credit, employment, or insurance). You can contact us to query any result.
4. Who we share data with (processors)
We share data only with service providers who process it on our behalf under contract, and only as needed to run the Service:
- Supabase — our database, where your account, profile, chats, and readings are stored.
- Google Cloud (Vertex AI, Gemini models) — the AI provider that generates your readings and chat replies from the details and questions you submit.
- Google — only if you choose Google Sign-In, to verify your identity.
- Resend — to send account and verification emails.
- Open-Meteo — to convert a place name into coordinates and time zone (we send only the place text, not your identity).
- Google Cloud — cloud hosting for the app and servers.
Dodo Payments is our Merchant of Record: when you buy a pack it processes your payment as the seller, collects your payment and billing details, and handles tax and receipts under its own privacy policy. We share your account email, name, and the pack you chose with Dodo Payments so it can complete the sale, and it sends us back confirmation of the payment.
We may also disclose data if required by law, or to protect the rights, safety, and security of our users and the Service.
5. International transfers
We and our providers may process your data in the United States and other countries. Where we transfer data out of the EEA/UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
6. How long we keep it
We keep your account and the data tied to it for as long as your account is active. If you delete your account or ask us to erase your data, we delete or anonymize it, except where we must keep limited records to meet legal, security, or accounting obligations. Unverified sign-up attempts expire automatically.
7. Your rights
If you are in the EEA or UK (GDPR), you have the right to access, correct, delete, and receive a portable copy of your data; to restrict or object to certain processing; and to withdraw consent at any time. You also have the right to complain to your local data protection authority.
If you are in California (CCPA/CPRA), you have the right to know what we collect, to access and delete it, to correct it, and to opt out of the “sale” or “sharing” of personal information, and to limit the use of sensitive personal information. We do not sell or share your personal information and use sensitive data only to provide the Service, so there is nothing to opt out of; we honor browser opt-out preference signals (such as Global Privacy Control) where they apply. We will not discriminate against you for exercising your rights.
To exercise any right, email support@astronova.club. We will verify your request and respond within the time the law requires.
8. Data about other people
If you enter someone else’s birth details (a partner), you are responsible for having the right to do so. If that person contacts us and asks, we will delete their details at support@astronova.club.
9. Children
The Service is for adults 18 and over. We do not knowingly collect data from anyone under 18; if you believe a child has provided us data, contact support@astronova.club and we will delete it.
10. Security
We protect your data with measures including encrypted passwords, encrypted connections, and access limited to our backend service. No system is perfectly secure, but we work to keep your data safe.
11. Cookies and local storage
Astronova does not use advertising or analytics cookies and does not track you across other websites. To keep you signed in and to remember where you are in a reading, we store a small amount of data in your browser’s local storage (not cookies). This is strictly necessary for the Service to work and stays on your device.
The one exception is Google Sign-In: if you choose to sign in with Google, Google’s sign-in service may set its own cookies to authenticate you. This loads only when you use the sign-in screen — never on our public pages — and is governed by Google’s own privacy policy.
Because we run no non-essential cookies, we do not show a cookie-consent banner. If we ever add analytics or advertising, we will add a consent banner and ask your permission first.
12. Changes to this policy
We may update this policy; we will change the “last updated” date and, for material changes, notify you where appropriate.
13. Contact
Privacy questions or requests: support@astronova.club.