Astra is a mobile app that calculates your birth chart from real astronomical data and turns it into a personal daily experience with artificial intelligence. This policy explains what data we collect, why we collect it and how we protect sensitive information such as your date, time and place of birth.
01 Data controller
The Astra mobile app and related services are operated by TheCrest (hereinafter "Astra", "we"). We act as the data controller under Turkish Personal Data Protection Law No. 6698 ("KVKK").
The registered company name, MERSİS number and address will be added to this section once the App Store Connect application is complete.
02 Data we collect
| Category | Scope | Source |
|---|---|---|
| Account data | E-mail address, Apple ID or Google ID, display name | Directly from you |
| Birth data (sensitive) | Date of birth, time (if known), place (city, coordinates, time zone) | Directly from you |
| Usage data | In-app interactions (which screen you opened, which transit you viewed) | Automatic |
| Astra AI chat content | Messages you write and the replies you receive | Directly from you |
| Dream and intention texts | Free text you enter in the Dream Interpretation and Manifestation features | Directly from you |
| Purchase history | Subscription status, transaction identifier (card details never reach us) | Apple / RevenueCat |
03 Purposes of use
- Calculating your birth chart (deterministically, with Swiss Ephemeris).
- Personalising daily readings, transit interpretations and Astra AI replies.
- Managing your subscription and verifying your purchases.
- Detecting abuse (excessive requests, off-topic chat attempts).
- Improving the product — through aggregated, de-identified usage statistics.
We do not use your birth data for advertising and we do not sell it to third parties.
04 AI processing
Astra AI and all AI-generated interpretations are produced by OpenAI language models. Anthropic may be configured as a fallback provider for service continuity; this policy is kept up to date about which provider is active.
Astrological calculations such as planetary positions, houses, aspects and dates are always performed by our own deterministic engine (outside the AI); only these computed results (e.g. "Sun in Cancer, 4th house") are sent to the model — your name, the text of your birthplace or any raw identity data is never passed to the model.
Your chat messages are stored for as long as your account exists, to improve your experience and prevent abuse; see Retention and deletion.
05 Third-party sharing
Our contractually bound service providers that help us process your data:
| Provider | Role |
|---|---|
| OpenAI | AI text generation (Astra AI, daily readings, interpretations) |
| Anthropic | Fallback AI provider (only when enabled) |
| Apple | Authentication (Sign in with Apple), in-app purchases |
| Authentication (Sign in with Google), only if you choose this method | |
| RevenueCat | Subscription status synchronisation |
| Sentry | Error/crash monitoring (technical logs without personal data) |
| Resend | Delivery of password reset emails — only your email address and a one-time code; servers in the EU (Ireland) |
We do not share your data with any other party unless required by law.
06 Retention and deletion
We keep your data for as long as your account exists. When you complete Profile → Delete my account in the app, your account and the personal data linked to it (including birth data, birth chart, chat history, dream and intention texts) are deleted permanently and irreversibly. This happens immediately in the live system.
Your data may remain for up to 7 more days in the security backups taken regularly for disaster recovery, after which it is deleted automatically. During this period backups are used only to restore the whole system after a failure; the data of a deleted account is never restored individually or processed again.
Usage statistics that can no longer be linked to you (anonymous) may continue to be kept for product analysis. Purchase records may be kept longer by Apple under tax law.
07 Your rights under KVKK
Under Article 11 of KVKK you have the right to:
- Learn whether your data is being processed
- Request information about it if it has been processed
- Learn the purpose of processing and whether it is used in line with that purpose
- Request correction if it has been processed incompletely or inaccurately
- Request its deletion or destruction
- Object to a result arising from processing carried out exclusively by automated systems
- Claim compensation for damages suffered due to unlawful processing
You can exercise the right to deletion directly in the app. Other requests can be sent to the address in the contact section; we reply within 30 days at the latest.
08 Data security
Your data is encrypted in transit with TLS and stored in our hosting provider's disk-level encrypted databases. Your session keys are kept on your device in the iOS Keychain. Access to the admin panel is limited to two-factor authentication (TOTP) and every administrative action is written to an audit log.
09 Children's privacy
Astra is not intended for users under 16 and we do not knowingly collect data from this age group. If we become aware that we have collected data belonging to a child, we delete it immediately.
10 Changes to this policy
When we make a material change to this policy we notify you in the app. Continuing to use the app after the change means you accept the current policy.