Privacy Policy
Effective 5 November 2026
In short
- You can use Astraya without an account. Signing in with Google (or with Apple, on iPhone) is optional.
- Your questions and chats are sent to an AI provider to write the replies. We never send your name or email with them.
- By default, chats may also be used to improve our AI characters. You can turn this off in Settings → Help improve AI fortune tellers.
- We use Google services for sign-in, purchases, ads, analytics and crash reports, and on iPhone Apple's for sign-in and App Store purchases. We do not sell your data.
- Your notes and recent reading history are kept on your phone. You can ask us to delete what we hold at any time.
Who we are
Astraya is published by Tam Duc Studio, an individual developer in Vietnam, who is responsible for the data described here. Questions or requests: hamhansamu@proton.me — we answer within 30 days. You must be 16 or older to use the app; if a child has used it, write to us and we will delete what we hold.
What we collect
Account and device. A random identifier our server creates for your installation (not your advertising ID). If you sign in with Google: your Google account identifier, email address and profile picture address — never your password. If you sign in with Apple (iPhone): your Apple ID identifier, the email address you choose to share (which may be an Apple private relay address) and, the first time only, the name you choose to share — never your password; we also keep a token from Apple, stored encrypted, so that deleting your account can revoke Astraya's access to your Apple ID. If you buy Premium: which plan you hold and until when, verified with Google Play or, on iPhone, with the App Store (Apple sends us a signed transaction identifier and the renewal date — we never see your card).
What you write. The questions you ask, the readings written for you, your chats with AI characters, and the thumbs-up or thumbs-down and reports you give on replies. In community rooms: your nickname, avatar, messages, reports and blocks. Feedback you choose to send from Settings.
Usage and diagnostics. Crash reports; usage events such as which screens are opened (never the text you write); which campaign link you installed from, if any; short technical error summaries with no identifiers; and the days on which the app is used. Usage events, campaign and error summaries follow the Settings → Usage analytics switch: off by default in the EEA and the UK, on by default elsewhere. Crash reports are always on so we can fix the app. Links you share from the app carry a short source tag (for example that it came from a share, and which feature) so we can count how many people open or install the app from shares; the tag contains nothing about you or the person you send it to, and if someone installs the app from such a link, the app may open the shared page on first launch.
Advertising. Google AdMob shows ads. What it collects, and whether ads are personalised, follows the choice you make in the consent dialog, which you can change in Settings → Ad privacy choices.
Notifications. Only if you turn on notifications for a community room: a notification token for your device and the rooms you follow. Notifications never contain message text or nicknames. If you allow notifications on your phone, Astraya may also send occasional notifications suggesting you come back (for example after a period of inactivity) through Firebase Cloud Messaging, at most about once a week; this uses a notification token held by Google and not sent to our server, and you can turn these notifications off in your phone's notification settings (channel “Tips & updates”) without losing other notifications.
How we use it
- To run the app: daily limits, your readings and chats, Premium, community rooms.
- To write readings and replies with an AI model (see below).
- To improve our AI characters: unless you turn it off, chats you start may be reviewed and analysed, including by our AI provider, without your name or email.
- To keep the community safe: handling reports, hiding messages, banning abuse. We keep a record of these moderation actions.
- To fix problems and understand how the app is used.
- To show ads, according to your consent choice.
Who receives it
- DeepSeek, the AI provider that writes readings and replies, on servers outside Vietnam and outside the EEA. It receives your question, the cards and the conversation — never your name, email or advertising ID.
- Google — Play Billing (purchases), AdMob (ads), Sign-In (only if you sign in), and Firebase (analytics, crash reports and community notifications).
- Apple (iPhone) — App Store purchases (we receive the transaction identifier, plan and renewal date, and Apple notifies us of renewals, cancellations and refunds) and Sign in with Apple (only if you use it).
- KLIPY, which provides the GIFs and stickers in community rooms. It receives what you search for and your language — never your name or email.
- Other users see your community nickname, avatar and messages, in Astraya and in our app Starsign. Nothing else about your account is shown.
We do not sell personal data.
What stays on your phone
Your reading history and the notes you write are kept in a database on your device; the app keeps the 20 most recent readings. We do not back this up, so wiping the phone or uninstalling the app removes it. Readings are also stored on our server so the app can offer them back to you (see below).
How long we keep it
| Data | Kept |
|---|---|
| Account, device identifier, readings and chats stored on our server (with ratings and reports on AI replies), community nickname, blocks and bans, rooms you follow | Until you ask us to delete them or your account |
| Community messages | 30 days. Reports: until reviewed, then 90 days. Previous nicknames: 90 days. Penalties (warnings, mutes, bans): 180 days |
| Text passing through our AI gateway | 7 days |
| Usage and technical data (counters, rewarded-ad grants, error summaries, days of use) and feedback | Up to 90 days |
| Notification tokens | Until you turn notifications off or sign out; deleted if not refreshed for 60 days |
| Records of moderation actions | 1 year |
| Purchase records, and cost records of AI calls (no content) | As long as tax and accounting law requires |
Your choices and rights
You can turn off usage analytics, AI improvement, personalised ads and notifications in Settings at any time. You can ask us for a copy of your data, to correct it or to delete it by writing to hamhansamu@proton.me — it's free, and we answer within 30 days.
Deleting your account and your data
In the app (fastest): Profile → Delete account (under Sign out, when you are signed in). Your PrivyZone account is deleted immediately — it is shared with Starsign, so it is deleted there too — together with every device linked to it, your chats with AI characters (with your ratings, reports on replies and your AI-improvement choice), the readings stored on our server, your community profile, messages and blocks, and the link to your Premium. If you signed in with Apple, we also ask Apple to revoke Astraya's access to your Apple ID. Reports you have filed are kept for the period above so moderators can answer appeals. Your reading history and notes live only on your phone and are not erased — uninstall the app to remove them. Deleting your account does not cancel a subscription: cancel it in Google Play or the App Store first, or billing continues.
By email: Write to hamhansamu@proton.me and ask us to delete your data. If you signed in with Google or Apple, write from that address (or tell us which one). If you used the app as a guest, say so and we will explain how to find the identifier on your phone. We delete your account link, readings, chats, community profile, messages, blocks and device identifiers within 30 days. Reports already filed are kept for the period above so moderators can answer appeals, and records the law requires (such as proof of purchase) are kept as required. Uninstalling the app does not by itself delete what is on our server.
If you are in the EEA or the UK
We rely on: contract to run the app and write the readings you ask for; consent for analytics and personalised ads; and legitimate interests to improve our AI characters, prevent abuse and keep the community safe — you can object at any time with the switch in Settings or by writing to us. Sending your question to our AI provider outside the EEA is necessary to give you the reading you asked for. You may complain to your data protection authority.
If you are in California: we do not sell your personal information, and do not share it for cross-context behavioural advertising beyond the ad consent choice above.
Security
Traffic is encrypted, the AI key never leaves our server, and your device secret is kept in the phone's secure storage. If a breach ever affects your data, we will tell you.
AI-generated content
Readings and replies are written by an AI model. The AI readers are fictional characters, and nothing they say is medical, financial or legal advice.
Changes
We will update the date above when this policy changes, and tell you in the app about important changes.
Language
If a translation and the English version disagree, the English version prevails.