Privacy policy

Who we are

MyAstria is run by RoiSoftStudio Ltd, a company registered in England and Wales (company number 17156775), registered office 82A James Carter Road, Mildenhall, IP28 7DE, United Kingdom. We are the controller of your personal data. For anything about your data, write to hello@myastria.com.

What we collect and why

• Birth details you enter (date, and optionally time and place) to calculate your sign and write the reading you ask for. Legal basis: providing the service you request.
• Readings. We store each reading together with the birth details used, so it can be shown again without being generated twice. Readings made without an account are kept indefinitely and are not linked to any account.
• Account details: email, name, language and either a password (stored only as a one-way hash) or your Google account ID if you sign in with Google. Legal basis: providing your account. We only email you what the account needs: the link to confirm your email when you sign up and the links you ask for, such as a password reset.
• What you save in your account: birth profile, journal entries, prediction ratings and the readings you made, including readings for other people and the names you give them. Legal basis: providing those features.
• Questions to the stars. If you ask the stars a question, we keep it with its answer in your account, and how true it rang if you rate it later. To answer it we use your birth chart, today's reading, your earlier questions and your journal entries of the last seven days. Legal basis: providing the feature you ask for.
• Approximate location. When you ask for a reading we look up your IP address in a database kept on our own server (MaxMind GeoLite) to estimate your city or country and your time zone, so the reading fits your local day and season; for questions to the stars, its rough coordinates also give the times of sunrise and sunset. Your IP address is not stored and is not sent to anyone. The estimated place may be saved with the reading and is part of the context sent to write it. Legal basis: our legitimate interest in personalising the reading you ask for; you can object by writing to us.
• Push notifications, only if you turn them on: your browser's push subscription, used to send the daily reminder. Legal basis: your consent; you can turn them off at any time.
• Newsletter, only if you sign up and confirm: your email, language, where on the site you signed up and when you confirmed. We email you a confirmation link and nothing else until you click it; addresses never confirmed are deleted after seven days. Signed in with a verified email, you can join with one click from More: your account has already confirmed the address, so no confirmation email is sent, and you can leave from the same page. Legal basis: your consent. Every email has a one-click unsubscribe, which deletes your address.
• Analytics, only if you accept cookies: Google Analytics measures how the site is used (pages viewed and actions such as generating or sharing a reading). Legal basis: your consent. If you decline, no analytics cookies are set; Google may still receive basic cookieless signals that it only uses in aggregate.
• Usage statistics, without cookies: from our own database we count, per day, readings, accounts, journal entries, ratings, questions to the stars, newsletter sign-ups and shared links. Only those daily totals leave the app, to our internal dashboard on our own server; no names, emails, birth data or IP addresses. Legal basis: our legitimate interest in knowing how the service is used and fixing what fails.
• Error reports and server logs: when something fails, technical details (browser, page, error) go to our own error-tracking server, and our servers log requests, which can include the birth date of a reading request. We use your IP address in memory to limit abuse and do not store it. Legal basis: our legitimate interest in keeping the service secure and working.

Who else processes your data

• Google (Gemini API) receives your birth details and the reading context to write the reading and, when you ask the stars a question, the question with the context above (including those journal entries). We use the paid Gemini API, under which Google does not use prompts or responses to improve its products.
• Google (Analytics and Google Sign-In), only if you accept analytics cookies or sign in with Google.
• Hetzner Online GmbH hosts our servers, database and error tracking in the European Union.
• Resend delivers our emails (such as email confirmation, password reset and newsletter links) from its EU region.
• Your browser's push service (for example Google, Apple or Mozilla) delivers push notifications if you turn them on.

Google and Resend may process data outside the UK and the EEA, including in the United States, with safeguards such as standard contractual clauses. We do not sell your data.

Cookies and local storage

• auth_token: keeps you signed in. Essential, HTTP-only.
• NEXT_LOCALE: remembers your language. Essential.
• Your cookie choice and a few display preferences are kept in your browser's local storage.
• _ga and _ga_*: Google Analytics, only after you accept.

How long we keep it

Account data stays until you delete your account. Deleting it (More → Profile → Delete account) removes your account, birth profile, journal, ratings, questions to the stars, push subscriptions and the readings that only you had, straight away, and takes the account's email off the newsletter. A newsletter address stays until you unsubscribe. Readings made without an account are kept indefinitely. Server logs and error reports are kept only for a limited time.

Your rights

You can ask for a copy of your data, correct it, delete it, restrict or object to its use, take it with you, and withdraw consent at any time. Write to hello@myastria.com. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or to your local authority (in Spain, the AEPD).

Children

MyAstria is not directed at children under 16.

Changes

If we change how we use your data we will update this page and its date.

This product includes GeoLite Data created by MaxMind, available from https://www.maxmind.com.