Privacy Policy

Last updated: 29 August 2026

Astronaria ("we", "us", "our") is operated by eBranding OÜ (registry code 14440091), registered at Tehnika põik 2, Uuemõisa alevik, 90401 Haapsalu linn, Lääne maakond, Estonia. This Privacy Policy explains what personal data we collect when you use Astronaria, why we collect it, how it's used, and the rights you have over it. Astronaria is available to users worldwide, and we process personal data in accordance with the EU General Data Protection Regulation (GDPR), as our company is established in Estonia, and, where applicable, in accordance with the privacy laws of the country where you live.

1. Data controller

eBranding OÜ, registry code 14440091, address Tehnika põik 2, Uuemõisa alevik, 90401 Haapsalu linn, Lääne maakond, Estonia, is the data controller responsible for your personal data. For any privacy question or request, contact us at privacy@astronaria.ee.

2. What personal data we collect

- Account data: name, email address, and authentication data when you sign up (via Supabase Auth), including one-time login codes.

- Birth data: your birth date, time, and place, which you provide voluntarily so we can generate your astrology and numerology readings. This is the core input for our service and is treated as sensitive.

- Payment data: when you purchase Astronaria PRO or a one-time product, payment is processed directly by Stripe. We do not store your card details — we only receive confirmation of payment, your billing country (used for currency/pricing), and a Stripe customer/subscription reference.

- Usage data: your interactions with the app, such as chat messages sent to our AI assistant Astro, generated readings, and feature usage, so we can provide and improve the service.

- Technical data: IP address, device/browser type, and approximate location (derived from IP, used only to determine currency for pricing), collected automatically when you use the app.

3. Why we process your data (purpose & legal basis)

- To create and manage your account, and provide the core service (performance of a contract).

- To generate your personalised astrology, numerology, tarot, and AI chat content using OpenAI's models (performance of a contract).

- To process payments and manage subscriptions/purchases via Stripe (performance of a contract, legal obligation for invoicing).

- To send transactional emails (order confirmations, horoscope delivery) via Resend (performance of a contract).

- To keep the service secure and prevent abuse (legitimate interest).

- To comply with legal and tax obligations (legal obligation).

Where we rely on consent (for example, optional communications), you may withdraw it at any time.

4. Who we share data with

We only share personal data with service providers who process it on our behalf, under data processing agreements, strictly to operate Astronaria:

- Supabase (authentication & database hosting)

- OpenAI (generating AI astrology/numerology/chat content — chat and profile inputs are sent to OpenAI to generate a response)

- Stripe (payment processing)

- Resend (transactional email delivery)

- Our hosting/infrastructure provider (application hosting)

We do not sell your personal data, and we do not share it with advertisers or data brokers.

5. International data transfers

Some of our service providers (e.g. OpenAI, Stripe, our hosting provider) are based in or process data in the United States. Where personal data is transferred outside the European Economic Area, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or the provider's participation in an equivalent data protection framework.

6. Data retention

We keep your account and birth data for as long as your account is active, so we can continue to provide the service. If you delete your account, we delete or anonymise your personal data within a reasonable period, except where we're required to keep records (e.g. invoices) for legal or tax purposes.

7. Your rights

Depending on where you live, you may have the right to:

- access the personal data we hold about you;

- correct inaccurate data;

- request deletion of your data ("right to be forgotten");

- export your data in a portable format;

- object to or restrict certain processing;

- withdraw consent at any time, where processing is based on consent.

You can exercise most of these rights directly from your account settings (data export and account deletion), or by emailing privacy@astronaria.ee. If you're in the EU/EEA, you also have the right to lodge a complaint with your local data protection authority — in Estonia, this is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee).

8. Security

We use industry-standard measures to protect your data, including encryption in transit, access controls, and secure authentication. No system is 100% secure, but we work to protect your information against unauthorised access, loss, or misuse.

9. Children's privacy

Astronaria is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll notify you via the app or by email. The "last updated" date at the top of this page always reflects the current version.

11. Contact

Questions about this Privacy Policy or your data? Email us at privacy@astronaria.ee.