Privacy Policy
Israel Oluye Dianga, trading as D&D TechBros, the developer of AstralRoots ("we", "us") makes the AstralRoots app. This policy explains what we collect, why, who helps us handle it, how long we keep it, and the choices you have. Questions: support@astralroots.app.
1. What we collect
What you give us
- Account details. Your email address and password. The password is stored only as a secure hash by our database provider. If you use Continue with Google, Google shares the email address and name on your Google account with us.
- Your name. Your first and last name, or the name you choose to be called in the app.
- Birth details. Your date of birth, your time of birth if you know it, and your place of birth (its name, coordinates and time zone). We use these to calculate your natal chart.
- Work and focus. Your job title, an optional sentence about your work, your area of work, and the part of life you want your readings to focus on.
- Journal entries. What you write in the journal, with its date, the mood you chose, and the moon event or prompt it belongs to.
- Daily check-ins. The answer you tap to "How are you arriving today?", one a day, on a scale of five.
- Saved readings. The daily readings you choose to keep.
- Preferences. Your notification choices, the time you want your daily reading, and the reminders you set.
What is created as you use AstralRoots
- Your natal chart (planet positions, signs, houses and aspects), your daily readings, and the personal dates computed from your chart (your lunar and solar returns and the Jupiter and Saturn seasons ahead).
- Your daily Cosmic Energy scores, kept so the app can show the change since yesterday and a 7-day line.
- Your AstralRoots Plus status (plan, trial, renewal or expiry dates).
- A push notification token for your phone, so we can send the notifications you have turned on.
- Crash reports, if the app crashes and crash reporting is on (see Firebase Crashlytics below).
What stays on your phone only
A copy of your journal and upcoming sky events, so the app works offline, the reminders you set on your own lunar and solar returns, and a few settings such as whether you have seen the welcome screens. Signing out removes these from the phone.
What we do not collect
We do not collect your phone's location, contacts, photos or advertising identifiers, and AstralRoots contains no advertising or analytics tools.
2. How we use it
- To create your account and sign you in, including the 6-digit codes we email to confirm your address or reset your password.
- To calculate your chart and write your daily readings.
- To send the notifications you have turned on.
- To provide AstralRoots Plus and check your subscription.
- To keep AstralRoots reliable and fix crashes.
- To answer you when you contact us.
We do not sell your data, use it for advertising, or share it with data brokers. We rely on our agreement with you to provide the app, on your consent for optional details and notifications, and on our legitimate interest in keeping the service secure and working.
3. How readings are written
The text of your readings, and the written pieces about your seasons and returns, is generated by a language model (Claude, made by Anthropic) from your chart, the day's sky, and the work and focus details you choose to share. A person does not write your reading. The model receives the inputs listed under Anthropic below and never your name, your email or your journal. Readings are for reflection and entertainment and are not medical, legal, financial or career advice.
4. Who helps us, and what they receive
- Supabase (our database, sign-in and server functions) stores the account data described above. Our database is hosted on Amazon Web Services in the European Union (Ireland). Supabase's software rules mean each account can read only its own data.
- Resend delivers our account emails: the code that confirms your address and the code that resets your password. It receives your email address and the content of those emails.
- Google Sign-In, if you choose Continue with Google, confirms who you are and shares your email address and name with us.
- Astrology calculation (Astrologer API through RapidAPI). To calculate your chart we send the moment of your birth in universal time and the coordinates and name of your birthplace. Nothing else leaves us: not your name, your email or your account ID.
- Anthropic writes the text of your readings with its language model (see section 3). For that we send your chart and today's sky, your area of work, your job title and description, and your focus area. We do not send your name, your email or your journal.
- Firebase Cloud Messaging (Google) delivers push notifications. It receives your phone's push token and the text of each notification.
- Firebase Crashlytics (Google), when crash reporting is on, receives crash reports: what went wrong in the app, your phone model, Android version, app version and a random installation identifier. Crash reports are not linked to your AstralRoots account.
- RevenueCat manages AstralRoots Plus. It receives your account's random ID and your purchase and subscription details from Google Play.
- Google Play handles payments. We never see your card details.
Place names come from GeoNames and are stored in our own database, so your place searches are not sent to GeoNames.
Some of these providers may process data outside your country, including in the United States, under their own contractual and legal safeguards.
5. How long we keep it
- Your account details, chart, journal, check-ins, saved readings, reminders and preferences: until you delete your account.
- The raw answer from the astrology calculation service: 30 days, after which it is deleted. We keep the chart we calculated from it.
- Daily readings: 400 days for free accounts; for AstralRoots Plus accounts, for as long as the account exists.
- Push tokens: until you sign out, delete your account, or the token stops working.
- Crash reports: for a limited time under Firebase's retention rules.
When you delete your account, your data is removed from our database straight away. Copies may remain in our providers' encrypted backups for a short time until those backups expire.
6. Your choices and rights
- See and correct your details in the app (Me), or by emailing us.
- Get a copy of your data. In the app, Me then Export my data creates one file with your data that you can save or send. You can also email us.
- Delete your account in the app (Me, then Delete account). You can also ask us to delete it without the app: see astralroots.app/delete-account.
- Turn notifications off in the app or in your phone's settings.
- Withdraw consent, object, or complain. You can withdraw consent at any time, object to how we use your data, and complain to your data protection authority. In Kenya that is the Office of the Data Protection Commissioner.
7. Children
AstralRoots is for people aged 18 and over. We do not knowingly collect data from anyone younger. If you think a child has an account, email us and we will delete it.
8. Security
Your data is encrypted in transit and at rest by our providers, and rules in our database make sure each account can read only its own data.
9. Changes to this policy
When we update this policy we change the effective date above, and for significant changes we tell you in the app before they apply.