Last updated: 14 September 2026
In one sentence: Astrae needs your birth date, time and place to calculate your natal chart. If you create an account, we store that encrypted so you can get it back on another device. We don't sell anything to anyone, there are no ads, and we don't track you across apps.
The data controller is Edgard Erick Blacutt Chávez, developer of the Astrae app, based in La Paz, Bolivia.
For anything related to this policy or to your data, write to info@astrae.blacutthnos.com. We answer every request within 30 days at the latest.
| Data | Why | Legal basis |
|---|---|---|
| Name or nickname | To address you inside the app | Performance of a contract |
| Gender | Grammatical agreement in the Spanish texts | Consent |
| Birth date, time and place | To calculate your natal chart. This is the core of the app — without it Astrae cannot work | Performance of a contract |
| People you add under Connections | To compare two charts | Consent |
| Messages you write in the chat | To generate the reply you read | Performance of a contract |
An account is optional. You can use Astrae without one; it exists for the chat and for restoring your data if you change devices. If you sign in with Apple or Google, we receive a user identifier and, if you allow it, your email address. If you use Apple's "Hide My Email", we only ever receive the anonymous relay address Apple generates, never your real one.
| Data | Why | Legal basis |
|---|---|---|
| Your subscription status | To know whether you have premium access. Handled by RevenueCat; we never see or process your payment details, which stay with Apple | Performance of a contract |
| Usage counters | To apply the monthly limits on queries and generations | Legitimate interest: preventing abuse and controlling costs |
| IP address (transiently) | To rate-limit requests per hour. Stored as an irreversible value rather than the address itself, and deleted within hours | Legitimate interest: security |
| Crash and performance reports | To find and fix bugs. Collected by Firebase Crashlytics and not linked to your identity | Legitimate interest: maintaining the app |
| Aggregated usage statistics | To understand which screens get used. Firebase Analytics, without identifying you | Legitimate interest: improving the product |
One technical detail we think is worth telling you. When the app asks the server to generate text for your chart, it does not send your birth data as the identifier: it sends a cryptographic digest (SHA-256) of it. That value lets us tell one chart from another in order to apply usage limits, but it cannot be reversed. The server cannot derive your birth date or place from it.
Chat conversations are stored on your device only. We do not keep them on our server: delete the app and they go with it.
To answer you, the text of your message and a summary of your natal chart are sent at that moment to Anthropic, the provider of the language model that generates the reply. Anthropic processes them to produce the answer and does not use them to train its models. Their terms are at anthropic.com/legal/privacy.
If we later add conversation sync across devices, it will be something you have to turn on yourself, and we will update this policy before it ships.
Only the providers we need in order to run the app, and only the minimum in each case:
| Provider | Why | What they receive |
|---|---|---|
| Anthropic | Generating texts and chat replies | Your message and a summary of your natal chart. Never your name, email or account identifier |
| Apple / Google | Sign-in | They send the identifier to us, not the other way round |
| RevenueCat | Subscription management | A subscriber identifier and purchase status |
| Google Firebase | Crash reports and aggregated statistics | Technical device and crash data, without identifying you |
| Hostinger | Server hosting | Stores the data described here, encrypted |
Our server is hosted in a Hostinger data centre in Brazil. The data controller resides in Bolivia. Our providers may process data in the United States and in the European Union.
If you live in the European Economic Area or the United Kingdom, this is an international transfer to countries without a European Commission adequacy decision. We rely on our providers' standard contractual clauses and on the security measures described below — in particular encrypting sensitive data before storing it.
| Data | Retention |
|---|---|
| Your account and birth data | Until you delete it. We don't remove accounts for inactivity |
| Texts generated for you | 45 days from creation, then deleted automatically |
| Failed generations | 7 days |
| Sign-in sessions | 365 days from sign-in |
| Usage counters | The current calendar month |
| Rate-limiting data | A few hours |
| Chat conversations | Not stored on the server |
You can exercise the rights of access, rectification, erasure, restriction, objection and portability at any time, and withdraw consent where processing is based on it.
Two of them are available directly in the app, without writing to us:
For anything else, write to info@astrae.blacutthnos.com.
Note that deleting your account does not cancel your subscription: that belongs to your Apple ID and is managed in iOS Settings → your name → Subscriptions.
If you live in the European Economic Area and believe we have not handled your request properly, you can complain to your national supervisory authority.
Astrae is not directed at children under 16 and we do not knowingly collect their data. If you believe a child in your care has given us information, write to us and we will delete it.
If we change this policy we will update the date at the top. When a change materially affects how we handle your data, we will tell you inside the app before it takes effect.