Privacy Policy

Effective date: [EFFECTIVE_DATE]

This policy applies to the Astral Compass iOS application, its related widget, and the Astral Compass website. It is a working draft and must be completed before publication with the legal entity name, address, and final contact details.

1. Data Controller

The controller for the processing described in this policy is [LEGAL_ENTITY_NAME], trading as [TRADING_NAME_IF_DIFFERENT] if applicable, with registered address at [LEGAL_POSTAL_ADDRESS].

Privacy contact: [PRIVACY_CONTACT_EMAIL]. Data protection officer or representative, if applicable: [DPO_OR_PRIVACY_REPRESENTATIVE_CONTACT_IF_APPLICABLE].

2. Scope

This policy covers:

  • The Astral Compass iOS application
  • The companion widget
  • The marketing website and legal pages
  • Support or privacy-related communications

3. Data We Process in the App

Depending on the features you use, Astral Compass may process the following categories of data:

  • Profile data you enter, such as first name, date of birth, time of birth, and place of birth
  • Ritual content, including mood, notes, card history, favourite cards and rituals, settings, and notification preferences
  • Derived astrological profile data calculated from the profile information you provide
  • Technical diagnostics, device information, operating system version, error traces, and pseudonymous internal identifiers
  • Usage events, such as app launches, ritual starts and completions, spread type, widget opens, and notification opens
  • Text submitted for text-to-speech conversion when the Gradium voice engine is selected
  • No voice samples: custom voice creation is not available in this version

4. Data We Process on the Website

The website processes limited data necessary to display pages and remember local preferences.

  • Theme and language preferences stored in local browser storage
  • Standard server and delivery logs generated by your hosting and CDN providers, if any
  • Any contact data you voluntarily submit through future forms or support channels

The website itself uses no analytics, no advertising and no cookies. Fonts and icons are self-hosted, so viewing a page sends no request to Google or any other third party. Only your theme and language choices are saved, in your browser's local storage (localStorage); they never leave your device.

5. Purposes and Legal Bases

We process data for the following purposes:

  • To provide the requested service, including ritual history, astrology calculations, notifications, voice playback, and exports
  • To secure, debug, maintain, and improve the application
  • To measure product usage where consent has been obtained
  • To respond to privacy, support, or legal requests
  • To document consent and compliance obligations where required by law

Depending on the context, the legal basis may be performance of a requested service, consent, legitimate interests, or compliance with legal obligations.

6. Where Data Is Stored

Most user-entered app data is stored locally on the device using on-device storage. However, some data may be transmitted to service providers when certain features are enabled or used.

7. Service Providers and Recipients

  • PostHog: product analytics, pseudonymous usage events, only if the user opts in (off by default) and while that option stays enabled
  • Sentry: crash reporting and diagnostics, including technical context and a pseudonymous identifier, only if the user opts in (off by default)
  • Gradium: text submitted for cloud text-to-speech, only when the Gradium voice engine is selected. The text goes through our own relay server (hosted in the EU by Railway), which forwards it to Gradium's EU endpoint without storing it
  • Apple services: iOS system services, local notifications, and Apple's geocoding service, which receives the coordinates of the birth city you pick to determine its time zone
  • Hosting or infrastructure vendors: website delivery, DNS, TLS, and server logs where applicable

8. International Transfers

Some providers may process data outside your country of residence. Before publication, this section must be completed with the actual transfer mechanism used by [LEGAL_ENTITY_NAME], such as an adequacy decision, standard contractual clauses, or another lawful safeguard.

9. Retention

  • App profile, ritual notes, history, favourite cards and rituals, and local settings remain on the device until the user deletes them or removes the app
  • Export files are created locally only when you request one, protected, and deleted as soon as the share sheet closes
  • Analytics and crash data sent to third parties are retained according to the controller's configured retention rules, which must be finalized before publication
  • Consent records may be retained as long as necessary to document lawful activation of consent-based services

10. Your Choices and Rights

  • Disable pseudonymous usage analytics in the app settings (off by default)
  • Select the offline Apple voice engine to avoid sending voice text to Gradium
  • Keep the on-device Apple voice if you do not want any reading text sent to Gradium
  • Export your local data as JSON from the app settings
  • Delete ritual history or clear all local app data from the app settings
  • Disable daily notifications in the app settings

Depending on applicable law, you may also have rights of access, rectification, erasure, restriction, objection, portability, and withdrawal of consent. You may lodge a complaint with the competent supervisory authority.

11. Children and Sensitive Information

Astral Compass is not intended to knowingly collect personal data from children under the age threshold applicable in the target jurisdiction. This threshold must be completed before publication.

Users should avoid entering unnecessary sensitive information in free-form ritual notes, including health, legal, financial, or government identifier data.

12. Updates

We may update this policy from time to time. The current version should be published at [PUBLIC_PRIVACY_POLICY_URL].

13. Contact

For privacy-related questions, requests, or complaints, contact [PRIVACY_CONTACT_EMAIL].