ASTROKEY PRIVACY POLICY

1. WHO WE ARE AND SCOPE

This Policy explains how AstroKey collects, uses, stores, transfers and protects personal data when you use the website, mobile applications and related features.

Full name: LIMITED LIABILITY COMPANY “ASTRO KEY”

Abbreviated name: ASTRO KEY LLC

EDRPOU registration code: 46242532

Registered address: Office 7, 23/1 Smilianska Street, Cherkasy, Cherkasy Region, 18002, Ukraine

Website: https://astro-key.com

Support email: [email protected]

Phone: +380 73 703 69 69

For most user data operations, ASTRO KEY LLC acts as the personal data controller within the meaning of applicable law. Certain payment providers, app stores and other providers may independently determine the purposes and means of processing certain data and act as separate controllers.

2. DATA WE MAY COLLECT

2.1. Account data

• name or pseudonym;
• email;
• user identifier;
• language, country and time zone settings;
• authentication and account security data.

2.2. Data for personalized calculations

• date of birth;
• time of birth;
• place of birth;
• profile name/label;
• a partner's or another person's data, if you lawfully provide it;
• parameters selected for reports, forecasts and compatibility.

Do not enter unnecessary special-category/sensitive data into AstroKey (such as medical diagnoses, biometric or genetic data, political views, religion or sex life) unless expressly needed for a feature and requested by us.

2.3. Payment and subscription data

• product/plan identifier;
• subscription status;
• purchase, renewal, cancellation or refund date;
• transaction identifier;
• currency and amount;
• payment channel identifier;
• AstroCredits balance and activity.

AstroKey generally does not receive or store full payment card numbers or CVV codes. Payment providers or app stores process this data.

2.4. Technical and diagnostic data

• IP address;
• device, browser and operating system type;
• application/device identifiers, where permitted;
• login and security logs;
• error diagnostics, crash logs and performance;
• interaction with Service features.

2.5. Communications

We may retain support requests, correspondence, feedback, complaints, payment inquiries and technical materials you send us.

3. DATA SOURCES

• directly from you;
• automatically when you use the Service;
• from payment providers, acquiring partners, app stores and other payment platforms — to the extent of the data available to us for a particular transaction;
• from technical infrastructure for managing subscriptions and access rights;
• from authentication, analytics, hosting, security and support providers.

4. HOW WE USE DATA

• creating and maintaining your account;
• calculating astrological/numerological indicators, compatibility, forecasts and reports;
• providing and synchronizing paid access;
• accounting for AstroCredits;
• handling inquiries and providing support;
• protecting against fraud, abuse and cyber threats;
• diagnostics, analytics and improving the Service;
• sending service messages;
• marketing communications — only on an appropriate lawful basis and with an option to opt out;
• fulfilling legal, tax, accounting and regulatory obligations.

5. LEGAL BASES FOR PROCESSING

Depending on the jurisdiction, we rely on one or more grounds: performance of a contract or pre-contractual steps; your consent; legitimate interests (security, fraud prevention, product improvement, support); compliance with a legal obligation; protection of rights and legitimate interests. Where processing is based on consent, you may withdraw it for the future.

6. PAYMENT AND SUBSCRIPTION PROVIDERS

6.1. Payment providers and acquiring partners

During payment, a third-party payment provider or acquiring partner may independently collect and process necessary payment, billing, tax and anti-fraud data under its own terms and privacy policy. AstroKey generally receives only the data needed for payment confirmation, accounting, refunds, access provision and support, and does not receive full card numbers or CVV codes.

6.2. App stores and digital platforms

Purchases through an app store or another digital platform are processed by that platform. We may receive product and transaction identifiers, subscription status and technical data, but not full card details.

6.3. Subscription management infrastructure

Third-party technical providers may process user identifiers, subscription status, product and transaction identifiers, purchase/renewal dates and access rights to synchronize subscriptions across supported platforms.

7. OTHER DATA RECIPIENTS

• cloud, server, CDN and database providers;
• analytics and diagnostics providers;
• AI technology providers, where used for a feature;
• email, push notification, CRM and support providers;
• cybersecurity, anti-fraud and monitoring providers;
• accounting, legal and professional advisers;
• public authorities — where required by law.

We aim to share only the minimum necessary data with providers and to use contracts that provide an appropriate level of protection.

To create personal reports and predictions, AstroKey sends profile names or labels, birth details and calculated indicators to OpenRouter and AI model providers to generate text. Only provide another person’s data with their permission. In the iOS app, separate explicit permission to share with these recipients is required when creating an account; existing accounts are asked before new personal AI generation. The recipients are shown before permission is requested. Permission also covers pending iOS orders. You can withdraw it in the iOS app profile: future transfers for these features stop, while completed content remains available. Requests already transmitted cannot be recalled. This iOS permission does not control separate orders placed on the website or Android; this Policy describes data processing on all platforms.

7.1. Android advertising measurement (AppsFlyer)

In the Android app, we use AppsFlyer to connect advertising campaigns with installations, basic in-app actions and validated purchases, measure advertising effectiveness and optimize campaigns. Data for this measurement may be shared with our configured advertising partners, Google Ads and Meta.

This data includes installation and advertising identifiers, an internal account identifier, IP address and technical information about the device and app, basic usage events and validated purchase information, including product, amount, currency and subscription status. We do not send names, email addresses, birth details or personal report content for this measurement.

When measurement is enabled, RevenueCat may use the AppsFlyer installation identifier to send validated purchase events to AppsFlyer and configured advertising partners. Payments, purchase validation and subscription access also work without this advertising measurement.

Before measurement begins, the app checks regional conditions. Where prior consent is required, we ask before collecting data. Where measurement is permitted after notice with a right to opt out, it may begin after that notice without a separate consent request. If the necessary regional check cannot be completed, measurement does not begin.

You can opt out or withdraw consent in the advertising measurement settings in the app profile. Turning it off stops further AppsFlyer collection and removes the AppsFlyer attribution link in RevenueCat to stop future purchase events being shared for this measurement. The app remains available. Data already transmitted cannot be automatically recalled; contact us using the details below about your rights concerning that data.

This choice covers advertising measurement and campaign optimization and does not authorize personalized advertising, advertising audience creation or remarketing. The separate choice about AdMob advertising is described in section 11.

These recipients and their service providers may process data outside your country, including in the United States. International transfers are described in section 8. Further information about the recipients and data processing:

AppsFlyer: Services Privacy Policy

Google Ads: use of data from partner apps

Meta: Privacy Policy

RevenueCat: privacy and app user data

8. INTERNATIONAL TRANSFERS

Data may be processed in Ukraine, the EEA, the United States, Canada and other countries where our providers operate. Where applicable law requires specific safeguards for an international transfer (such as EU standard contractual clauses or another mechanism), we use the appropriate lawful mechanism.

9. RETENTION PERIODS

We retain data no longer than necessary for the purposes described in this Policy, taking into account the life of the account, active subscriptions, disputes, security, backups and mandatory accounting/tax periods. After account deletion, some information may temporarily remain in backups or be retained longer where required by law or necessary to protect rights.

After account deletion, we keep your profile, saved people, all ordered reports and purchased information, calculation results, horoscopes, and natal chart for 30 days. Sign in within 30 days using your previous sign-in method to automatically restore your profile and saved data and update your purchases and balance. After 30 days, this data is automatically and permanently deleted. Deleting your account does not cancel your subscription. If needed, cancel renewal separately before deleting your account.

10. SECURITY

We apply organizational and technical measures designed to protect data against unauthorized access, loss, alteration or disclosure. No system can guarantee absolute security; in the event of an incident, we will act in accordance with applicable notification requirements.

11. COOKIES AND SIMILAR TECHNOLOGIES

The website may use necessary cookies for authentication, security and settings, as well as analytics/marketing technologies where there is an appropriate lawful basis. Where the law requires consent, non-essential cookies must not be activated before it is obtained. Settings can be changed through the available cookie banner/center or your browser.

PostHog product analytics uses persistent identifiers, account-linked events, feature flags and masked browser recordings. Google Analytics and Firebase Analytics share one usage-analytics choice. Where a verified regional basis permits it, analytics starts after notice with an option to refuse; otherwise we ask before collection. Advertising measurement and sharing with Google Ads and Meta, and personalized advertising, have separate choices. Meta Pixel requires advertising measurement and data-sharing permission; it does not require the separate personalization choice. The personalization choice controls Google ad_personalization, Signals and remarketing. Refuse or withdraw each choice in website analytics settings or the app profile. Form values, birth data and report contents are excluded. Analytics permission does not cover Firebase Authentication, databases or other service functions. AdMob and AppsFlyer retain separate privacy settings. Required device tracking permission also applies and does not replace legal consent.

The website uses Google AdSense on free content pages for visitors who are not signed in and users on the Free plan. Paid subscriptions remove advertising. Where applicable, consent and privacy choices for these ads are managed through Google’s advertising privacy message, separately from analytics choices.

Google and other third-party advertising providers may use advertising cookies to serve ads based on your previous visits to AstroKey and other websites. These cookies allow Google and its partners to personalize ads based on those visits. Where consent is required to use these cookies, they are used only after that consent has been obtained.

You can manage or turn off Google ad personalization in Google’s ad settings using the link below. Turning off personalization does not turn off ads themselves. Where this site requests consent to use advertising cookies, you can change or withdraw that consent through the privacy settings in Google’s message.

Manage personalized advertising on Google

12. OTHER PEOPLE'S DATA

If you create a partner profile or enter another person's data, you are responsible for the lawfulness of providing it. Do not provide excessive or sensitive data. On request, we may restrict or delete such data where justified by law.

13. CHILDREN AND MINORS

AstroKey is not intended for independent use by children under 16. If we learn that a child's personal data has been collected without a proper lawful basis, we will take reasonable steps to delete it.

14. YOUR RIGHTS

Depending on where you live, you may have rights of access, rectification, deletion, restriction of or objection to processing, data portability, withdrawal of consent and complaint to a competent authority. To exercise your rights, email [email protected]. We may ask you to verify your identity and will not request more data than reasonably necessary.

14.1. EU/EEA and the United Kingdom

If the GDPR or UK GDPR applies to you, you have the rights provided by the relevant legislation, including the right to contact a supervisory authority.

14.2. United States

If your state's law provides rights of access, correction, deletion, portability, opt-out of certain “sale/sharing” or targeted advertising, we will provide the relevant mechanism to the extent that law applies. AstroKey does not sell personal data for money.

14.3. Canada

Users in Canada may have rights of access and correction, as well as other rights under PIPEDA and/or provincial privacy laws, where applicable.

15. AUTOMATED PROCESSING

AstroKey may automatically generate calculations and texts based on the parameters entered. These results are not decisions that produce legal effects for you or similarly significantly affect you within the meaning of data protection laws. You must not use them as a substitute for professional decisions.

16. POLICY CHANGES

We may update this Policy due to changes in the Service, providers or legislation. We will communicate material changes in the manner required by law.

17. PRIVACY CONTACT

Email: [email protected]. Postal address: Office 7, 23/1 Smilianska Street, Cherkasy, Cherkasy Region, 18002, Ukraine. You may use “Privacy Request” as the email subject.