Privacy Policy

This Privacy Policy explains how AstroOS ("we", "us") collects, uses, stores, and protects your personal information when you use the AstroOS application (the "Service"). AstroOS is a personal astrology and life-guidance application currently in controlled beta testing.

We are committed to being transparent about how your data is used. This policy accurately describes the data practices of AstroOS as it currently exists.

AstroOS is operated by an individual based in the United Kingdom. For any privacy enquiries, data requests, or questions about this policy, please contact us at info@astroos.space.

AstroOS collects the following information that you provide directly:

Account Information: Your email address and, if you sign up using Google, your Google account name. Your email is used for authentication and account communication.

Display Name: A name you choose to personalise your experience and AI Guide interactions.

Birth Information: Your birth date, birth time, birth location, and the geographic coordinates (latitude and longitude) derived from your birth location. This information is essential for calculating your natal chart and providing personalised astrology features.

Goals: Titles, descriptions, categories, target dates, and progress notes that you create to align your goals with astrological timing.

Journal Entries: Titles, content, mood selections, and reflection prompts that you write in your private journal space.

Preferences: Your AI Guide personality and presence preferences, notification preferences, security settings, and other application settings.

Your birth date, birth time, and birth location are fundamental to astrology. Without this information, AstroOS cannot calculate your natal chart, generate your Cosmic Calendar, or provide personalised astrological insights.

The geographic coordinates (latitude and longitude) are derived from your birth location to enable precise astrological calculations. These coordinates are stored as part of your profile so that chart calculations do not need to be repeated.

Birth information is processed for the purpose of providing the personalised astrology functionality that is the core purpose of AstroOS.

AstroOS generates and stores the following data based on your birth information and activity:

Natal Chart Data: Your calculated natal chart, including planetary positions, house cusps, aspects, dominant elements, and interpretive summaries. This data is generated using a third-party astrology API and stored so that it does not need to be recalculated.

Cosmic Calendar: Monthly overviews and daily energy readings personalised to your natal chart and current planetary transits.

Cosmic Snapshots: Daily cosmic energy readings, themes, and reflection prompts.

AI Guide Conversations: The messages you exchange with your AI Guide, including your questions and the AI's responses, are stored as conversation records.

User Milestones: Records of your engagement milestones (e.g. onboarding completed, first lesson completed) with the date first achieved.

Technical Logs: Astrology API call logs (recording the action, status, response time, and errors) are stored for diagnostic and monitoring purposes. These logs do not contain your birth information or personal content.

Admin Audit Logs: Records of administrative actions (e.g. account deletion attempts) including the action taken and who performed it.

The AI Guide is a conversational feature that uses an AI language model to provide personalised guidance. When you send a message to the AI Guide, the following information is included in the prompt sent to the AI language model:

• Your display name and subscription tier
• Your natal chart data (Sun, Moon, Rising, and planetary placements)
• Current planetary transits relevant to your chart
• Today's cosmic energy from your stored Cosmic Calendar
• Your active goals (titles, categories, and target dates)
• Your learning progress (completed and started lessons)
• Your AI Guide personality and presence preferences
• Your recent conversation history (up to 6 messages)
• The page you are currently viewing and any chart element you have selected

Journal entries are NOT included in AI Guide context by default. Your Journal content is only shared with the AI language model when you have explicitly enabled the "Use Journal for AI Guide Personalisation" setting in Profile → Legal & Privacy. This setting is OFF by default for all users, including new users and existing users who have not made a choice.

When you enable Journal AI personalisation, up to 5 recent Journal entries (with content truncated to approximately 100 characters) are included in the AI Guide prompt. You can disable this at any time by toggling the setting off. Disabling the setting immediately prevents any further Journal content from being included in AI Guide context.

The setting toggle itself does not trigger any AI request. Only a future intentional message sent to the AI Guide may trigger the normal AI request flow, which will then include Journal context if the setting is enabled at that time.

AI Guide conversations are stored in the AstroOS database as conversation records. Follow-up question suggestions are also generated by the AI language model based on your conversation.

We do not make specific claims about AI language model training practices, data retention by AI providers, or complete anonymity. The AI language model is provided through the Base44 platform, and data sent to it may be processed by the model provider. If you have concerns about AI processing, please contact us before using the AI Guide feature.

Your journal entries are stored in the AstroOS database and are associated with your account. Journal entries are private to your account.

AI Guide access requires explicit consent: By default, your Journal content is NOT shared with the AI Guide. Your Journal entries are only included in AI Guide context when you have explicitly enabled the "Use Journal for AI Guide Personalisation" setting in Profile → Legal & Privacy. This setting is OFF by default for all users.

When enabled, up to 5 recent Journal entries (truncated to approximately 100 characters) are included in the AI Guide prompt. You can disable this at any time. Disabling the setting immediately prevents further Journal content from being sent to the AI.

Administrator access: Administrator and Developer Mode tools display only the count of journal entries, not the content of those entries. Journal content is not exposed through Developer Mode or administrative interfaces.

Deletion: You can delete individual journal entries at any time from the Journal page. When you delete your account, all journal entries associated with your account are permanently deleted.

AstroOS stores certain information in your browser's local storage and session storage to provide application functionality:

• Session data: Login persistence, last active time, last route, and session state to provide the return experience.
• Security settings: Your re-authentication threshold and biometric preferences.
• PWA data: Engagement signals (e.g. login days, features used) to determine when to suggest installing AstroOS to your home screen.
• Notification preferences: Whether you have been asked about notifications and your choices.
• Learning progress: Which lessons you have started or completed.
• Guide interests: Topics you discuss frequently with the AI Guide, tracked to personalise suggestions.
• Chart exploration: Which natal chart elements you have explored, to provide contextual AI Guide suggestions.
• UI preferences: View modes, tutorial completion state, and other interface preferences.

This data is stored locally on your device. You can clear it at any time through your browser settings. Activity timestamps are also periodically sent to the server to record your last active time.

AstroOS uses the following third-party services to provide its functionality:

• Base44: Provides the application infrastructure, including hosting, database storage, user authentication, and the AI language model integration. Your account information, profile data, and all stored application data are processed through the Base44 platform. Base44 may process data outside the United Kingdom.
• Prokerala: Provides the astrology API used to calculate natal charts and planetary transits. Your birth date, birth time, and geographic coordinates are sent to Prokerala's servers when calculating your chart. Prokerala is based in India and processes data outside the United Kingdom.
• Google: Provides OAuth authentication if you choose to sign in with Google. Your Google account name and email address are shared with AstroOS when you use this option. Google's processing is governed by Google's own privacy policy.
• AI Language Model Providers: The AI Guide uses language models provided through the Base44 platform. Prompts containing your personalisation context (as described in Section 6) are sent to the model provider for processing.

No API keys, client secrets, or authentication credentials are exposed to the application frontend or to users.

Because AstroOS uses third-party providers that may process data outside the United Kingdom, your personal information may be transferred to and processed in other countries. Specifically:

• Birth information is sent to Prokerala (India) for astrology calculations.
• AI Guide prompts containing personalisation data are sent to AI language model providers, which may process data outside the UK.
• Application data is stored through the Base44 platform, which may use infrastructure located outside the UK.

We do not make specific guarantees about international transfer safeguards beyond those provided by the third-party services themselves. If you have concerns about international data transfers, please contact us before using AstroOS.

Your information is used for the following purposes:

• Personalisation: To calculate your natal chart, generate your Cosmic Calendar, and provide personalised astrological insights.
• AI Guide functionality: To provide context-aware, personalised guidance through the AI Guide.
• Application functionality: To enable features such as Goals, Journal, Learn, and Cosmic Calendar.
• Security: To manage authentication, sessions, and optional biometric verification.
• Error diagnosis: To log and diagnose astrology API errors and application issues.
• Beta testing: To track engagement milestones and beta testing progress for the controlled beta programme.
• Administrative purposes: To maintain audit logs of administrative actions.

AstroOS processes your personal information on the following lawful bases under UK data protection law:

• Contractual necessity: Processing your birth information to calculate your natal chart and provide the core astrology functionality you requested by creating an account.
• Consent: Processing your journal entries as part of AI Guide context. This is OFF by default. You must explicitly enable "Use Journal for AI Guide Personalisation" in Profile → Legal & Privacy before any Journal content is shared with the AI. You can withdraw this consent at any time by disabling the setting, by deleting journal entries, or by contacting us.
• Legitimate interests: Maintaining technical logs, audit logs, and engagement milestones for the proper functioning, security, and improvement of the Service.

Your data is retained for as long as your account is active. When you delete your account, the following data is permanently deleted: your UserProfile, Goals, Journal Entries, AI Guide Conversations, Cosmic Calendar data, Cosmic Snapshots, and User Milestones.

The following data is retained after account deletion for the periods stated:

• Prokerala API Logs: Retained for 90 days from the date of the API call, then automatically deleted. This retention supports error diagnosis and performance monitoring during the controlled beta period.
• Admin Audit Logs: Retained for 12 months from the date of the log entry, then automatically deleted. This retention supports security, accountability, and dispute resolution.
• User Milestones: Deleted when your account is permanently deleted. They are not retained after account deletion.

Automated deletion: A scheduled maintenance job runs daily to delete expired Prokerala API Logs (older than 90 days) and expired Admin Audit Logs (older than 12 months).

AstroOS takes reasonable measures to protect your personal information. Authentication is managed through the Base44 platform. API credentials for third-party services are stored securely server-side and are never exposed to the frontend application.

Optional security features include re-authentication thresholds and biometric verification (Face ID / Touch ID) where supported by your device.

No method of transmission or storage is completely secure. We cannot guarantee absolute security of your data.

Under UK data protection law, you have certain rights regarding your personal information:

• Right of access: You can request a copy of the personal information we hold about you.
• Right to rectification: You can request correction of inaccurate personal information.
• Right to erasure: You can request deletion of your account and associated data using the account deletion feature in Settings.
• Right to restriction: You can request that we restrict processing of your data in certain circumstances.
• Right to object: You can object to processing based on legitimate interests.
• Right to data portability: You can request your data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on consent (such as AI Guide journal context), you can withdraw consent at any time.

Not all rights apply in all circumstances. To exercise any of these rights, please contact us at info@astroos.space.

If you are not satisfied with our response, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

You can delete your account at any time from Settings → Security → Delete Account. The deletion process is multi-step and includes confirmation safeguards:

• You will be asked to confirm your decision.
• You may be asked to type "DELETE" or your email address, and to verify with biometrics if enabled.
• The last remaining Administrator account cannot be deleted until another Administrator is assigned.
• All deletion attempts, completions, and cancellations are logged in the Admin Audit Log.

Upon completion, the following data is permanently deleted: UserProfile, Goals, Journal Entries, AI Guide Conversations, Cosmic Calendar, and Cosmic Snapshots. You will then be signed out.

AstroOS controlled beta participation is limited to users aged 18 or over.During account registration, users are required to confirm that they are 18 years of age or older. Account creation cannot be completed without this confirmation.

AstroOS does not knowingly collect personal information from individuals under 18. AstroOS does not collect identity documents or use automated age-verification systems for the current controlled beta. The age requirement is enforced through a self-declaration confirmation during registration.

If you believe an individual under 18 has provided personal information to AstroOS, please contact us at info@astroos.space and we will take steps to delete such information.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you within the application. If you do not agree with the updated policy, you may delete your account.

For any questions, requests, or concerns about this Privacy Policy or your personal information, please contact us at info@astroos.space.