Privacy Policy

Summary

Asteriva collects only what the app needs: your account email, the birth details you provide, and the astrology data derived from them. We do not sell personal information, we do not run targeted advertising, and this website sets no trackers. Asteriva Guide — the feature that answers questions about your chart — uses artificial intelligence and works only with your explicit consent. You can delete your account from inside the app at any time.

Who is responsible and how to reach us

Asteriva is operated by Mert Kuzey Tokşen (“we”). Asteriva is a brand name currently operated by an individual; if a company is incorporated later, this section will be updated. For any privacy matter, contact support@asteriva.app.

What this policy covers

This policy covers the Asteriva mobile app and the asteriva.app website. It does not cover the app stores you may install the app from or other third-party services that have their own policies.

What we collect

We collect three kinds of information: what you give us, what is derived from it, and a small amount of technical data that operating a server unavoidably produces. Each category is listed below.

Your email address and a one-way hash of your password (Argon2id). We never store the password itself and cannot read it.
Sign-in session records per device (token identifiers and their creation/expiry times), so you can sign out everywhere and stolen tokens can be revoked.

Profile and birth details

Your display name.
Birth date and, if you provide it, birth time — including a marker for times made ambiguous by daylight saving.
Your birth place, selected from a places catalogue (a GeoNames place identifier), together with its coordinates and time zone. These are required to compute your chart correctly.
Your app language and time-format preference.
The date of your last birth-data change, used to apply the 30-day change limit.

Derived astrology data

A stored copy of your computed birth chart (a “snapshot”), so it does not need to be recomputed on every request.
Your Sun, Moon and rising signs.

Daily content selections

Which reading was selected for your account for which day, so a day’s reading stays the same when you reopen the app.

Session and security records

The session records above, plus request-rate protections that temporarily count requests to prevent abuse.

Stored only on your device

Your Asteriva Guide chat history is stored on your device, not on our servers.
On this website, your language choice is stored in your browser only, and only if you pick one.

Technical data collected automatically

Our servers keep short-lived operational logs (IP address, request time, user agent) produced by ordinary web infrastructure. They are used for security and troubleshooting and rotate away automatically.
Neither the app nor this website contains advertising identifiers, analytics SDKs or third-party trackers.

How we use information

To provide the service: compute your chart, select your daily reading, keep your account working.
To keep the service safe: sessions, abuse prevention, rate limits.
To answer your questions when you write to support.
To operate Asteriva Guide, when you have enabled it.

Legal bases

We do not rely on a blanket “use means consent”. Each purpose has its own basis:

Performance of contract — providing the app and your account.
Legitimate interest — security, abuse prevention, operational logs.
Explicit consent — Asteriva Guide’s data sharing with the AI provider. Consent can be withdrawn in the app at any time.
Legal obligation — where the law requires us to keep or disclose specific records.

We do not sell data or run targeted ads

We do not sell or rent personal information, and we do not share it for cross-context behavioural advertising. There are no ad networks in the app or on this website.

Service providers

We share data only with the infrastructure that runs the service:

OVHcloud — hosts our application server (EU region).
MongoDB Atlas — hosts our database (EU region).
Cloudflare — provides DNS for our domain and routes our support email.
Resend — delivers our transactional security emails (for example password reset codes). Your email address is sent to Resend only to deliver such an email; sending is routed from Resend’s Ireland (EU) region. Resend’s handling of delivery metadata and logs is subject to its own infrastructure and retention policy. We use it for delivery only — no marketing and no tracking. Incoming support email reaches us separately through Cloudflare Email Routing.
OpenAI — processes Asteriva Guide requests, only when you use the feature and only after your explicit consent (see below).
RevenueCat and the relevant app store — when you use a premium membership or purchase extra question allowances, your purchase and entitlement information may be processed by RevenueCat and the app store you bought through. We never see your full payment card details.

Asteriva Guide and artificial intelligence

Asteriva Guide generates its replies with artificial intelligence. When you use it:

Your current question, up to your last three completed chat turns, and astrological context derived from your chart are sent to OpenAI to generate a reply and to run a safety check on it.
Your name, email, user identifier, birth place, coordinates, birth date and time, and time zone are not sent for this purpose. If you type such details into a question yourself, they travel as part of the question.
Nothing is sent before you give explicit consent, and withdrawing consent stops new questions immediately.
Your chat history stays on your device. Our servers keep only your question allowance counters, technical de-duplication records, and any reports you submit about replies (with the reported content, so we can review it).
Under OpenAI’s current published policies, chat requests may be retained by OpenAI for a limited abuse-monitoring period; the separate safety check is published as not retained.

Premium, question allowances and payments

When a premium membership or extra question allowances are offered and you choose to buy them, the purchase itself is handled by the app store, and entitlement state may be processed by RevenueCat. Our servers then store which allowances your account has and how many questions you have used. We do not receive or store full payment card numbers.

International transfers

Our application server and database are hosted in the EU. Cloudflare operates a global network for DNS and email routing. When you use Asteriva Guide, requests are processed by OpenAI, which may process data in the United States; this happens only with your consent.

How long we keep information

Account, profile and derived astrology data: while your account exists.
Operational server logs: short-lived, rotated automatically.
Support emails: as long as needed to resolve your request.
After account deletion, the server-side data listed in this policy is removed from active systems; operational backups expire on a rolling schedule.

Security

All traffic uses TLS. Passwords are hashed with Argon2id. The database accepts connections only from our API — neither the app nor this website connects to it directly. Sessions can be revoked per device, and the servers follow a least-privilege configuration.

Deleting your account and data

The fastest way is in the app: Settings → Delete account. If you cannot access the app, email support@asteriva.app from your registered address — see the Delete account page for the exact subject line and steps. Deletion removes your account and the server-side data described in this policy from active systems.

Depending on your jurisdiction, including the EU GDPR and the Turkish KVKK, you have the right to access, correct, delete and export your data, to restrict or object to certain processing, to withdraw consent at any time, and to complain to your supervisory authority. Corrections to your name and birth data can be made directly in the app; anything else, write to us.

Other regional rights

Where other national or US state privacy laws (such as California’s) apply to you, you have equivalent rights of access, correction, deletion and non-discrimination, and the right to know that we do not sell or share personal information for behavioural advertising. Use the same contact address to exercise them.

Children

Asteriva is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

Third-party links

If the app or this website links to third-party pages (for example an app store listing), those services apply their own privacy policies.

Changes to this policy

When our processing changes, we will update this page and the date at the top before the change takes effect.

Contact

support@asteriva.app — for any question, request or complaint about this policy. Operator: Mert Kuzey Tokşen.