Legal
Last updated: October 21, 2026 · Effective immediately
Astralora is operated by DigiReply, based in New Zealand ("we", "us", "our"). We are committed to protecting your privacy. This Privacy Policy describes exactly what information we collect through the Astralora mobile application and the website at astralora.com ("Services"), how we use it, how we protect it, and the choices you have. By using our Services, you agree to the practices described here.
If you have questions at any point, contact us at privacy@astralora.com.
To generate your astrological chart and readings, you provide your date of birth, time of birth (optional), and city of birth. This information is stored locally on your device only, in the app's private storage, which other apps cannot access. Your birth date, birth time and birth city are not transmitted to our servers. (For the personal daily reading, planet positions calculated from them are sent; see section 3.) Your birth date and birth location are used solely to perform astronomical calculations — we do not use this data for advertising, profiling, or any purpose other than providing the Service to you.
To find your birth city, the text you type into the city search is sent to OpenStreetMap's Nominatim service, and the selected city's coordinates are sent to a time-zone lookup service (timeapi.io, or timezonefinder.michelfe.eu when you edit your profile) to determine the city's time zone. These requests do not include your name, birth date or device ID.
Under certain privacy frameworks (including GDPR and CCPA), birth date may constitute personal data. We treat it as such and apply appropriate protections accordingly.
The display name you enter during onboarding is stored locally on your device. It is used only to personalise how your home screen greets you and is never transmitted to third parties.
If you choose to tap "Use my location" in the Tonight's Sky section, the app asks for permission to use your device's approximate (city-level) location. It is used only on your device to calculate which planets are above the horizon where you are. Your location is rounded to about 1 km, stored only on your device, and is never sent to our servers or to any third party. If you don't grant permission, the app uses your birth city instead. You can withdraw permission at any time in your device settings.
If you turn on the daily reading reminder, the notification is scheduled by the app on your device. No notification token or identifier is sent to us or to any push-notification service.
If you contact us by email, we receive your email address and the contents of your message. We use this information solely to respond to your inquiry. Support emails are retained for 24 months and then deleted.
On first launch, Astralora generates a random UUID ("device ID") and stores it locally. This identifier is used to authenticate requests to our server (for example, to verify your subscription status). It is not linked to your name, Google account, email address, or any information that personally identifies you to us. It cannot be used to track you across other apps or websites.
The app does not include any crash-reporting or analytics software. If you have opted in to share diagnostics with Google, Google Play may provide us with aggregated crash and performance statistics (for example, device model, Android version and app version). These do not include your birth data, name, location or reading content.
When the app contacts our server (for readings or subscription status), our server stores your device ID, the date it was first seen, your subscription status, and a daily count of reading requests. To prevent abuse, we also keep a daily count of requests per IP address; the IP address itself is not stored — only a salted one-way hash of it, which cannot be turned back into the address. Readings that apply to everyone with the same sign (for example, the daily reading for Leo on a given date) are stored on our server so they can be shared, and are not linked to you.
We verify your subscription status by communicating with Google Play's Developer API (through RevenueCat). We receive confirmation of whether a valid subscription exists and when it expires — we do not receive or store your payment card details, bank information, or billing address. All payment processing is handled entirely by Google Play.
Readings are generated by our server, which sends a request to an AI language model API (currently DeepSeek). The app sends our server only the parameters needed, and our server writes the request. Depending on the reading, it contains:
The personal daily reading needs your whole chart, and a full set of birth-chart positions can indicate approximately when you were born. These positions are sent without your name, birth date, birth city or device ID, are not linked to you, and are used only to write that day's reading. The finished reading is stored on our server under a one-way hash of these values, so it can be shown again that day without a new request, and is deleted after 7 days.
Your name, birth date, birth time, birth location, and device ID are never sent to any AI provider. The prompt these providers receive contains no information that would identify you as an individual. DeepSeek processes this data under its own privacy policy: deepseek.com/privacy.
We use the following third-party services. Each has their own privacy policy governing their data practices:
We do not use advertising SDKs, social login providers, or third-party analytics services that track individual users. We do not sell your personal information to any third party. We do not share personal information with third parties for the purpose of targeted or cross-context behavioural advertising.
We use the information we collect only for the following purposes:
We do not use your information to serve advertisements, to build a profile for resale, or for any purpose not listed above.
Your birth data, profile, approximate location (if allowed) and cached readings are stored locally in the app's private storage on your device, which the operating system prevents other apps from accessing. They are not encrypted separately within the app, so anyone with unlocked access to your device could open the app and see them.
Any information transmitted between the app and our servers (for example, reading and subscription verification requests) is transmitted over HTTPS using TLS 1.2 or higher. Server-side receipt verification is performed using authenticated API calls to Google.
No security system is impenetrable. In the unlikely event of a data breach affecting your personal information, we will notify affected users and relevant authorities as required by applicable law.
Our Services are not directed to children under the age of 16. We do not knowingly collect personal information from anyone under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@astralora.com and we will delete the information promptly. If you are under 16, please do not use the Services.
Under the New Zealand Privacy Act 2020 you can ask to access the personal information we hold about you and ask us to correct it. Email privacy@astralora.com. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.
If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR) or equivalent applicable law:
Our legal bases for processing are: (a) performance of our contract with you, for computing your chart and delivering your subscription; (b) our legitimate interests, for abuse and fraud prevention; and (c) legal obligation, where required by applicable law.
To exercise any of these rights, email privacy@astralora.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.
If you are a California resident or a resident of another U.S. state with applicable privacy legislation, you may have the following rights:
To exercise any right, email privacy@astralora.com with "Privacy Request" in the subject line. We will verify your identity before processing your request and respond within 45 days (with one possible 45-day extension).
Astralora is operated by DigiReply from New Zealand. If you are located outside New Zealand, certain data (such as subscription verification requests routed through Google Play, and reading generation requests routed through our AI provider, currently DeepSeek) may be processed in servers located in other countries, including the United States. Where required, we rely on applicable transfer mechanisms (such as standard contractual clauses under GDPR) to ensure your data receives an adequate level of protection.
The Services may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies before providing any information to them.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, for material changes, provide notice within the app or by email. Your continued use of the Services after notice of changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.
For any privacy-related questions, requests, or concerns:
We aim to respond to all privacy enquiries within 5 business days.