Privacy Policy

In short

Astrolith does not ask you to create an account, shows no ads and uses no third-party software for advertising. Usage analytics never include what you enter, and you can turn them off at any time. Everything you enter (birth details, journal, day log, settings) is stored on your phone. If you create an optional account, only a copy encrypted on your phone goes to the cloud, and no one, including us, can read it.

This policy restates, in everyday language, the processing described in the Data Protection Notice. It also covers which data is never collected, how notifications work, what happens on share cards, and whether your data is included in device backups.

What is stored, and where

Your profile and people details (name, birth date, time and place, relationship label) are kept in your phone's local storage. So are your journal entries and moods, the record of the reading shown each day, and your "Did it ring true?" answers. So are your settings: house system, notification time, which profiles get notifications, and display level. If you create an account, an encrypted copy of these is also kept in the cloud, as described below.

Your trial start date is also kept in the device's secure storage (iOS Keychain or Android Keystore) to make misuse harder. On iOS, this date may stay in the Keychain even if you delete the app. On Android, clearing the app's data deletes it. So the trial can be used only once per device, our server keeps a one-way code made on your phone from the Android ID. It also keeps the date the trial first started on that device. The code is not linked to your name, your account or any other data, and it is deleted after 400 days.

If you want, you can create an optional account with your email address. The account is for moving your data to a new phone, syncing it across several devices and adding friends. There is no password: to sign in, we email you a 6-digit code.

If you create one, your data (profiles and birth details, people, journal, day logs, tarot spreads, learning data and settings) is encrypted on your phone. The key can be opened only with your backup password or your recovery code. The data goes to our cloud server (Supabase, Frankfurt (Germany)) only in encrypted form (end-to-end encryption). The key stays in your phone's secure storage, and no one, including us, can read this content. Your trial start date and the usage counts on your device are not part of this encrypted backup.

The server cannot see the content. To run the service, it keeps the following in readable form: your email address and when the account was created and last signed in. It also sees how many encrypted records you have, their size and when each one changed. Your friend code, your public key, who you are friends with and any purchase record linked to your account are also stored. When the app connects, the server also receives your device's IP address. We do not store it in our tables, but it may stay in the cloud provider's technical logs for a limited time.

You can delete your account at any time in the app, under "Account and cloud". Deleting it permanently removes your email address, all your encrypted data in the cloud, your keys, your friendships, friend cards and your purchase record. The data on your phone stays where it is. Deleted data may remain for a short time in the cloud provider's routine backups until those backups roll over. If you sign out, the data on your phone also stays; syncing stops and the key is deleted from this phone.

Friends: you give your friend code only to the people you choose. When you add someone's code or accept their request, you agree to send them your card. The card holds your name and the birth date, time, place and time zone of your first profile. It is encrypted on your phone with your friend's public key, so only their phone can open it; there it is added to People as a person. When you add a code, your card goes with the request, so the other person sees your request with your name. If your profile changes, the card is updated. The server cannot see what the card contains; it only knows who sent a card to whom and when it changed. When you end a friendship or delete that person, the cards in both directions are deleted from the server. The person then disappears from both phones at the next sync.

In this version, the app also connects to our server at launch to read a few app settings, for example whether a newer version is recommended. This request carries none of the data you enter.

What is not collected

An account is not required: you do not need to give a name, email address or phone number to use the app. The optional account asks only for your email address. There is no password; you sign in with a code sent to your email.

The app has no ads. There is no third-party software development kit (SDK) for advertising or analytics, and no advertising ID or tracking cookie is created or shared. Usage analytics use a random number created on the phone, and you can turn them off at any time; the app's own code sends them. The details are under "Usage counts on your device" below.

The app never requests access to location, camera, microphone or external storage.

Usage counts on your device

To understand how the app is used, a few numbers are kept on your phone. Examples are which onboarding step was reached, the days the daily reading was opened, and a share card being opened. These numbers contain no identity, name, birth date, time or place, chart, journal text, mood or exact time. The only birth-related thing counted is whether onboarding ended with "I don't know my birth time". Counts are kept per week; weeks older than 26 weeks are deleted automatically.

You can see the full list of what can be counted, and your phone's counts, under You > Settings > Privacy and your data > "What this device counts". You can reset them at any time.

The counts kept on the phone hold no exact time; the events sent while sharing is on carry the moment they happened. If you turn sharing off, these numbers are not sent anywhere.

Sharing usage data: this is on from the moment you give the first-launch confirmation, and the app does not ask a separate question for it. The "Share usage data" box is under You > Settings > Privacy and your data > "What this device counts". You can turn it off there at any time and turn it on again; turning it off does not change how the app works. No account is needed. While sharing is on, everything counted in the closed list shown there is also sent, as individual events, to an analytics service called Mixpanel. The events go to its server in the European Union. An event holds the event name and its values from that list, the moment it happened (the exact time) and a random number created on the phone. It also holds the app version, the platform (iOS or Android), the app language and "TR/other", based on the phone's time zone. The service needs two technical fields as well: our project token, and a random number for that one event so it is not counted twice. An event holds nothing else. A small profile record is also kept under the same random number. It holds the app version, the platform, the app language, "TR/other", your plan (free, trial or Astrolith+), the day sharing was turned on and when the record was last updated. It is refreshed when it changes, at most once a day. Your name, email address, birth details, chart, journal text, the people you add, your location, an advertising ID and the phone's own identifiers are never sent. The random number is not linked to your account or your email address. It only links events from the same phone to each other. Nothing counted before the first-launch confirmation is sent. The request reaches the service with your device's IP address. We send it with the setting that tells the service not to derive a location from the IP address and not to write the address on the event. No third-party software development kit (SDK) was added for this; the app's own code sends the events.

Turning it off and deletion: when you uncheck the box, sending stops. The random number and any events still waiting to be sent are deleted from your phone. A request to delete your profile record at the service is sent at that moment; if the phone is offline then, the request is not sent. If you check the box again, a new number is created. To have events that were already sent deleted, send us the random number shown in that section before you turn sharing off. Write to hello@astrolithapp.com. Once the number is gone from your phone, we cannot match events to you.

Personal reading written with AI (optional)

Astrolith+ subscribers and people in the trial period may be offered text on the day's cards, and the opening of the weekly and monthly readings, written for them by AI. The feature starts turned off. It works only if you turn it on, and you can turn it off at any time in the You tab.

When it is on, some information is sent through our server to the model that writes the text. It is your Sun, Moon and rising signs. It is also the planets in that week's cards and in your weekly and monthly readings, with the sign, house and life area they touch. The shape the app computed for that period and the kinds of major sky events in it are sent too. Your relationship status is included if you gave it, along with your app language. Your name, your birth date, time and place, your journal entries and the people you added are not sent.

The text is written by the Gemini model of Google LLC, which handles the request under its own API terms. Our server passes the request on and does not store what is sent or the text that comes back. To confirm your subscription, the store's purchase record is checked on each request. The weekly number of requests is counted against an irreversible hash of your identifier. During the trial there is no purchase record. A random code that the app creates for this install is sent in its place. Our server keeps only an irreversible hash of that code, the date of the first request and the number of requests. The code is not tied to your name, your account or a device identifier.

Every text that comes back is checked on your phone before you see it. A text that fails the check is not shown, and the ready-made reading stays in its place. Written texts are stored only on your phone and are deleted when you turn the feature off.

A text written by AI is still an interpretation. It does not predict the future and is not health, financial or legal advice.

Notifications

Daily reminder notifications are scheduled entirely on your device, with the operating system's local notification scheduler. They are not "push" notifications sent from a server; notification content never leaves your device.

When you turn on notifications, the operating system asks for permission. You can turn this permission off at any time in your phone's settings.

Home screen widget

If you add the widget to your home screen, your phone calculates the day's tone, its main theme and void-of-course Moon times for the next seven days. They are kept in the app's own storage (on iOS, in the area the app shares with the widget) and do not leave your device either.

The widget appears on the home screen and the Lock Screen, so anyone looking at your phone can see it too. Your birth details are not shown on the widget. If you do not want it, remove the widget from your home screen; "Reset all data" also deletes the widget's content.

Purchases

Subscriptions are handled entirely through the App Store or Google Play. Payment details such as your card or billing address never reach the app or us; Apple or Google processes them under their own privacy policies.

To check whether a purchase is valid, the app first uses the store's own interface, on the phone. Apart from this check, the app sends no personal data to Apple or Google; the only other contact is the rating window described below.

If you are signed in to your account, the purchase is also verified on our server and linked to your account. This makes it work on another phone signed in to the same account, including on the other platform. For this, the app sends our server the proof of purchase the store gives it: Apple's signed transaction on iOS, or the Google Play purchase token on Android. The server checks Apple's signature against Apple's root certificates. For Google, it asks the Google Play Developer API for the purchase status. The stores' renewal, cancellation and refund notices are verified again the same way.

The server keeps one purchase record linked to your account. It holds the product (monthly or yearly), platform, status (active, grace period, expired or revoked), expiry date and the store's transaction or order number. It also records whether it was a test purchase and when it was last updated. The proof of purchase itself, card details and billing details are not stored. The record exists to carry your access across your devices and to stop one purchase being used by two accounts. It is deleted automatically when you delete your account. Without an account, purchases are verified only on the phone, through the store's own interface.

Store rating

When you answer "It did" to the daily reading, the app may ask the operating system to show the App Store's or Google Play's own rating window. This request is made only after at least three positive answers and a week of use, at most once per app version, and at least 120 days apart. Apple or Google decides whether the window actually appears. The request is never made after a "Not really" answer, an error or the purchase screen.

If you leave a rating, your rating and review go directly to Apple or Google under their own policies. The app does not learn what rating you gave, or whether you gave one; no personal data is sent from the app for this window.

So that the request is not repeated, the times it was made (at most three) and the app version are kept on the phone. "Reset all data" deliberately keeps this record, so you are not asked again after a reset; removing the app deletes it too.

Share cards

When you share a card, your name is not added to it by default; it appears only if you turn on "Add my name to the card" while sharing. Your birth date, time and place never appear on the card.

To be honest: a card that shows only sign names can still give away your birthday roughly. Someone who can guess your birth year and region could narrow it down to a few days. This limit comes with how signs work, and we want you to know it before you share.

While a card is being created, a temporary image file is made on your device. This file is deleted right after the share ends, whether it succeeded, failed or was canceled.

Match code

The "Send my code" option in People turns your birth date, birth time, birthplace location (to about 1 km) and time zone into a 16-character code. The code does not contain your name.

You send the code yourself, with an app you choose, only to the person you choose. The code does not pass through a server of ours, and the app does not send it anywhere. When the recipient adds it to their app, your details are stored only on their phone.

A code that has been sent cannot be taken back. So send it only to people you trust, and do not share it publicly.

When you add a code someone sent you, that person's birth details are stored as a person only on your phone. The person is not notified, and you can delete them at any time.

Export and device backups

Your data is not included in the operating system's cloud backup (iCloud or Google backup), and on Android it is not moved by direct phone-to-phone transfer; this includes scheduled notifications. This is a deliberate choice: your data leaves the phone only in ways you choose (an export file or the optional encrypted account). The cost is clear: without an account, your data does not come back by itself if you change phones or reinstall the app.

That is why "Export my data" exists. It puts your profiles, people, journal, day logs and learning data into one file, which you can move anywhere (your own cloud account, your computer) with your own sharing tools. Once the file is created it is entirely under your control; we do not keep a copy, because we never see it.

On a new device, or after reinstalling, you can bring the same file back with "Restore from backup".

Deletion

The "Reset all data" option is under You > Settings > Privacy and your data. In one step it deletes all profiles, people, journal entries, day logs, learning data, usage counts on the device, error logs, scheduled notifications and the home screen widget's content.

A reset deliberately keeps two records. One is the trial start date, so the trial does not restart. The other is the times the store rating request was made, so you are not asked again. Neither contains personal information.

"Reset all data" also deletes your choice about sharing usage data, the random number and any events still waiting to be sent. It also sends a request to delete your profile record. Sending stops. The app goes back to its introduction, and if you give the first-launch confirmation again, sharing turns on again with a new number. Events already sent are not deleted by a reset or by removing the app. To have them deleted, send the random number shown in "What this device counts" to hello@astrolithapp.com before you reset.

Removing the app from your phone (uninstalling) deletes all data on the device. The only exception is the trial start date, which may stay in the iOS Keychain. The data is excluded from operating system backups; if you have an account, the encrypted cloud copy stays until you delete the account. Removing the app does not delete the account.

While you are signed in, records you delete one by one also leave the encrypted cloud copy at the next sync. Only an empty deletion marker remains. "Reset all data" empties only that phone and signs that phone out; your encrypted cloud copy and your other phones stay as they are. The option "Delete my account and cloud backup too" on the same screen deletes the account and all cloud data along with the phone. The account itself, your friendships and the card your friends hold go away only when you delete the account or end the friendship. To delete the account: You > Settings > "Account and cloud" > "Delete account".

Children's privacy

Astrolith is designed for users aged 18 and over and does not knowingly collect data from anyone under 18.

Changes and contact

This policy is effective as of 15 October 2026. If there is a significant change, it is shown in the app with the new version date.

Questions: hello@astrolithapp.com