Privacy Policy

Before any privacy details: Astral Edge is astrology-based entertainment and self-reflection. Nothing in the Service is financial, medical, legal, relationship, or career advice. This policy explains how we handle your data; the separate Terms of Service explains the full disclaimer of warranties, limitation of liability, and dispute-resolution rules that govern your use of the Service.

When you sign up we collect: name (from your sign-in provider), email, birth date, time, and place (to compute your chart), and alert preferences. On each forecast we store the 30-day window of computed scores. If you enable push alerts we store your device push token or web push subscription.

We do not collect any data you did not provide. We do not read your contacts, calendar, location (beyond the birthplace you type in), or other apps.

We do not sell your data. We do not use it for advertising. We do not track you across apps or websites.

We compute your forecast. Your birth data is used to compute natal planet positions via Skyfield (JPL DE421 ephemeris, NASA-grade astronomy library, MIT-licensed), and transit positions at each moment in the next 30 days. Vedic-specific calculations (Vimshottari dashas, fixed-star conjunctions) use pyswisseph (Swiss Ephemeris). Scores and window reasons are derived from that math.

We send alerts you asked for. If you enabled push, we send digest and hot-window alerts to the device token or web subscription you registered. We respect your configured quiet hours.

We run the empirical study. We publish an open methodology page that aggregates anonymized hit-rate statistics — never individual birth data.

Supabase (auth + Postgres host) — your account and profile row. Data Processing Agreement in place.

RevenueCat (subscription billing) — your anonymous user ID and purchase receipts.

Stripe / Apple / Google handle actual payment processing when you subscribe. We never see your card number or bank details.

Expo Push / Apple APNs / Google FCM — your device token and notification payloads.

We do not share your data for cross-context behavioral advertising. We do not use third-party analytics trackers.

Under GDPR (EEA/UK), CCPA/CPRA (California), UK Data Protection Act, Canadian PIPEDA, Brazil LGPD, and similar laws you can: access, export, correct, or delete your data at any time. In-app, open Settings → Account → Export my data or Delete account. We respond to written requests within 30 days (45 days for CCPA, extendable as allowed by §1798.130(a)(2)).

California residents should also see our dedicated Your Privacy Choices page for CCPA/CPRA rights including Right to Know, Delete, Correct, Opt Out of Sale/Share, Limit Use of Sensitive Personal Information, and Non-Discrimination. Email privacy@astraledge.app for agent-submitted or appeal requests.

Under California CPRA §1798.140(ae), precise geolocation is classified as Sensitive Personal Information (SPI). The birthplace latitude and longitude you provide are used solely to: (a) calculate your natal chart and forecast, and (b) determine your local timezone for notifications. We do not use SPI to infer characteristics, target advertising, share with data brokers, or profile you commercially.

California residents have the right to limit our use of SPI to only the purposes above — and that limitation is our default. No action needed. To revoke SPI use entirely (which stops forecasts from being generated), delete your account.

Profile and preferences: as long as your account exists. 30-day forecast window: rolling, replaced on each recompute. Push tokens: cleared on sign-out or device un-registration. Account deletion: permanent within 30 days of request; encrypted backup copies purge within 90 days.

If the app crashes, the operating system may send us an anonymized crash log (stack trace, device model, OS version) — no birth data, email, or personal identifiers. These logs are used only to fix bugs and are retained for up to 90 days. You can disable crash reporting at the OS level (iOS Settings → Privacy → Analytics & Improvements; Android Settings → Google → Usage & diagnostics).

Astral Edge is not directed to users under 13 and we do not knowingly collect data from them. The in-app onboarding enforces a 13-year-old minimum (COPPA). Server-side validation rejects submissions for anyone whose computed age is under 13.

GDPR digital-consent age varies by country. In Germany, Netherlands, Ireland, Italy, Croatia, Hungary, Lithuania, Luxembourg, and several others, the minimum is 16 without parental consent. If you are between 13 and 16 in one of those countries and a parent or guardian has not consented, please do not use the app and email support@astraledge.app to delete any account that was created.

Our database and processing servers are located in the United States. If you access the Service from outside the United States, your data will be transferred to, stored, and processed in the United States. For EEA/UK users we rely on Standard Contractual Clauses (SCCs) with our processors; a copy is available on request.

We may update this policy. Material changes are announced in-app and by email at least 7 days before they take effect. The effective date at the top of this page is the date of the most recent material change.

Privacy questions, data requests, or complaints: privacy@astraledge.app. General support: support@astraledge.app. We aim to respond within 30 days.