EN ES RU
LEGAL

Privacy Policy

Effective October 17, 2026

This is AstroGuide's privacy policy for the iOS app, written in plain English. If anything is unclear, contact us through the support form or at admin@aurelialabs.io.

What we collect

AstroGuide processes the following data to provide the app and operate it safely:

  • Birth data — date of birth, time of birth (or "I don't know"), and place of birth as city and country text.
  • Name — the name or alias you enter so readings can address you.
  • Charts and readings — your calculated natal chart, forecasts, tarot readings, and the questions you type for a tarot spread. Generated text is returned to the app and cached on our servers for a limited time (see below).
  • Account identifiers — an anonymous account ID created the first time you open the app, a session token, and a recovery secret. These are stored in the iOS Keychain on your device.
  • Sign in with Apple (optional) — your stable Apple user identifier and the email address Apple provides to us. Apple may give us a private relay address instead of your real email. We request only the email scope and do not receive your name from Apple.
  • AI consent record — whether you agreed to send data to our AI provider, the consent version, and when you agreed.
  • Daily email — the email address you enter for the daily horoscope email, its language, and whether the subscription is active.
  • Purchases — the Premium subscription status, product, expiry date, and auto-renewal status, together with the Apple transaction identifier that links the purchase to your account. Payments are handled by Apple; we never see your payment details.
  • Support and deletion requests — the email, optional name, topic, and message you submit through the website. The deletion form also takes an optional reason.
  • Technical data — counters used to limit request rates. These use a keyed hash of your IP address rather than the address itself.
  • Journal entries — text you write, and any export files you create. They are stored only on your device. AstroGuide does not receive them.

The iOS app does not request access to your precise location, contacts, photos, microphone, or calendar. It does not use analytics, crash-reporting, or advertising SDKs, and it does not track you across apps or websites.

Why we collect it

Birth data and your name are used to calculate your chart and write the readings you request. Charts and readings are calculated on our servers because the calculation needs your birth data. Your email address is used only for the daily email you subscribe to and for verifying deletion requests. Purchase records unlock Premium and let you restore it after reinstalling. Sign in with Apple is optional; it keeps your chart and purchases available after a reinstall. The AI consent record shows that you agreed before any personal data was sent to the AI provider. Support requests are used only to answer you.

If a piece of data isn't necessary for the app to do its job, we don't ask for it.

Where it lives

Journal entries are stored in the app's local storage on your device. They are not sent to AstroGuide's servers. Deleting an entry or using "Clear journal" removes it from the device. Deleting the app removes the local app data, but a standard device backup made by iOS may include it, depending on your backup settings.

The anonymous account ID, session token, and recovery secret are stored in the iOS Keychain with the "this device only" setting, so they are not synced to iCloud Keychain or moved to another device. Keychain items can remain after the app is deleted, so that a reinstall can reconnect your account.

Birth data, names, charts, consent records, email subscriptions, and purchase links are sent over HTTPS to AstroGuide's servers, because the chart calculation, readings, and purchase checks cannot run only on the device. The public website forms send their data to the same secure API.

Retention periods:

  • Account, chart, consent, email, and purchase records — kept while the account is active. They are removed when you delete the account, in the app or through a verified request.
  • Forecast responses — cached for up to 7 days. The year-ahead reading is cached for up to 30 days. Coordinates looked up for a birth place are cached for up to 30 days.
  • Deletion cleanup — after an account is deleted, a short cleanup record is kept for up to 24 hours so that follow-up passes catch requests that were still in progress.
  • Session revocation marker — after deletion, only a one-way hashed marker remains. It blocks old sign-in tokens for the session lifetime plus one day (currently 91 days), so they cannot recreate the account.
  • Support requests — kept in our intake queue for up to 90 days. Unverified deletion requests expire after 45 days. Email confirmation links are valid for 48 hours.
  • Encrypted server backups — database backups are encrypted and kept for up to 7 days by default. Data you delete can remain inside these encrypted backups until they expire.

Third parties

Before AI processing: when you ask for a generated reading, the data described in our AI disclosure is sent over HTTPS from AstroGuide's backend to OpenRouter, which routes the request to the model provider for the selected model. Each request asks OpenRouter to use only endpoints with zero data retention and to deny data collection. If you do not request an AI feature, no AI request is made. You can withdraw AI consent at any time in Settings.

We use the following services that receive personal data:

  • OpenRouter and the model providers — receive the reading data listed in the AI disclosure: name, age, birth date, time and place, calculated positions, and your question for a tarot spread. They do not receive your email, account identifiers, Apple sign-in data, purchase information, or journal entries.
  • Apple — processes Sign in with Apple and In-App Purchase under Apple's own privacy policy. We receive confirmation of your purchases and the sign-in identifiers described above.
  • OpenStreetMap Nominatim — receives the birth place text you enter, to find its coordinates.
  • Email delivery service — sends the daily email you subscribe to and the verification messages for the email and deletion forms.

We do not sell your data, and we do not share it with advertisers or data brokers.

Your rights

You can, at any time:

  • Change your name or birth data in the Chart tab.
  • Ask for a copy of the server-side data linked to your account through the support form. The app does not currently offer an in-app export of server data. Journal entries can be exported from the Journal screen as text or JSON.
  • Withdraw AI consent in Settings → Withdraw consent. After that, new personal readings are not requested until you agree again.
  • Stop the daily email with the Unsubscribe link in any email, or in the Email section of Settings.
  • Delete your account in Settings → Delete account. See Account deletion.
  • Restore your Premium purchases with "Restore purchases".

If you live in a jurisdiction with stronger rights (GDPR, CCPA, LGPD, others), they apply.

Children

AstroGuide is intended only for adults aged 18 or older. Before your first AI reading, the app asks you to confirm that you are 18 or older. If you are under 18, do not use the app. We do not knowingly collect personal data from anyone under 18; if we learn that we have, we delete it.

Contact

Data controller and developer: Aurelia Labs LLC, 30 N Gould St, Sheridan, WY 82801-6317, United States. Questions, requests, or complaints: support form or admin@aurelialabs.io.

This policy may change. When it does, we'll show the new effective date here. If the text of the AI consent changes, we will ask for your consent again before any further AI processing.