Privacy Policy

Controller

Astralya. Contact: support@astralya.app.

What we collect

Email, first name (optional), the photos you send, the generated reading text and transaction data (processed by Stripe — we never store card details).

Why we use it

To generate and deliver your reading (performance of contract), email you the link and meet tax obligations. We don't use your data for marketing without consent and never sell it.

Photos

Photos are stored privately and deleted automatically 24 hours after upload (or after your reading, if a new photo is pending, up to 7 days). They are not used to train models or for biometric identification.

From each photo we generate a stylised line map (contours and strokes only, with no colour or skin texture). That map is stored as part of your reading until you ask for deletion.

Processors

Supabase (hosting and storage, EU), OpenAI (image analysis; API data not used for training), Stripe (payments), Resend (email), Vercel (hosting). Transfers outside the EU are covered by Standard Contractual Clauses.

Retention

The reading text stays available on your private link until you ask for deletion. Billing records are kept for the legally required period.

Your rights

You can request access, rectification, erasure, restriction or portability of your data by writing to support@astralya.app. You may also complain to your data protection authority.