Legal

Privacy Policy

How Astrummo collects, uses, shares, protects, and deletes personal data across its Android and iOS applications, website, and support services.

Last updated: 11 October 2026

Astrummo is designed as a privacy-conscious personal astrology service. We do not sell personal data, use it for third-party behavioural advertising, or allow advertising networks to build profiles from your activity in Astrummo.

1. Controller and contact details

The controller responsible for personal data processed through Astrummo is:

MB “Decentralizuotas”
Company code: 304897618
Perkūnkiemio g. 13-91, Vilnius, LT-12114, Lithuania
hello@astrummo.com

2. Scope and age requirement

This Policy applies when you visit astrummo.com, use the Astrummo Android application or the iOS application when available, register or manage a service-contact email, contact support, request account or data deletion, or otherwise use Astrummo (together, the Service). Google Play and Apple operate their own store and payment services under separate privacy notices.

Astrummo is intended exclusively for adults aged 18 or older. It is not directed to children or minors.

3. Personal data we process

Category	Examples	Purpose
Account and authentication	Authentication identifier, name, email when supplied, login method, role, account timestamps, and last sign-in	Create and secure your account, maintain sessions, and prevent misuse
Birth and profile	Date and exact time of birth, place search, coordinates, timezone, Moon sign, ascendant, nakshatra, calculated natal and supported divisional chart data, and dated astronomical/transit events	Calculate and display your chart and personalised features, and provide interpretation context
Ask Astrummo and memory	Your exact questions, limited recent conversation context, generated answers, topics, previous concerns, conversation summaries, unresolved questions, and preferences	Answer questions, preserve continuity, and personalise later responses
Optional life context	Information you choose to share about career, relationships, wellbeing, finances, recurring concerns, and previous insights	Personalise responses when memory is enabled and relevant
Compatibility	Partner birth and profile information entered by you	Generate the compatibility result you request
Interpretation usage and controls	Message and processing counts, estimated service cost, subscription state, rate-limit state, and aggregate monthly usage	Apply limits, prevent abuse, operate the Service, and manage costs
Subscriptions	Pseudonymous purchase identity, store transaction, product and entitlement IDs, trial, renewal and expiry state, and cached entitlement	Start, verify, restore, and manage paid access
Notifications	Expo push token, platform, timezone, permission and preference state, minimised scheduling data, and delivery status	Send notifications you request at suitable times
Optional analytics and diagnostics	Pseudonymous events, app version, app/device context, crash and error data, and limited performance traces	Understand product use and improve reliability, only after opt-in
Website and support	Ordinary server logs, IP/network and browser data, pages requested, correspondence, and support content	Operate and secure the website and respond to requests
Service-contact email	Pseudonymous public contact ID, normalized email, pending/verified/deleted state, hash-only verification and status credentials with expiry, provider delivery metadata, service-consent timestamp, locale, abuse-control metadata, and lifecycle timestamps	Verify an address and send critical outage, security, subscription, and other essential-service notices requested by you
Privacy choices	Consent and preference status and update time	Honour and demonstrate your choices
Optional marketing or waitlist email	Email address and separate marketing or waitlist consent, confirmation, and unsubscribe records	Send only optional communications requested through a separate opt-in

Some information is stored locally on your device, including profile data, conversation and memory caches, compatibility information, preferences, progress markers, notification settings, and cached subscription state. Relevant account, profile, memory, usage, and notification information is also stored server-side so the Service can operate across sessions.

Sensitive information

Astrummo is not a medical, therapy, legal, or financial service. Do not provide medical records, diagnoses, government identifiers, payment-card details, passwords, or information unnecessary for an astrology service. If you discuss highly personal matters, they may be included in the context needed to answer your request and, where personalisation memory is enabled, may contribute to future continuity. You can delete conversation memory or request full account deletion at any time.

4. How we obtain personal data

We receive information directly from you when you use an account, enter birth or compatibility data, ask questions, adjust privacy choices, enable notifications, subscribe, register or manage a service-contact email, contact support, or separately opt in to marketing or waitlist updates.

Where sign-in is used, we receive authentication and session information from our authentication provider. We also receive purchase and entitlement data from Google Play for Android purchases, from Apple for iOS App Store purchases when available, and through RevenueCat for entitlement management. Optional analytics come from PostHog, optional diagnostics from Sentry, notification-delivery data from Expo, and place-search results from OpenStreetMap Nominatim.

5. Purposes and legal bases

Purpose	Legal basis
Accounts, chart calculation, Ask Astrummo, compatibility, subscription access, and requested features	Performance of a contract or pre-contract steps requested by you
Optional app analytics and diagnostics	Consent; these features are off by default and may be disabled
Aggregate, cookieless website analytics	Legitimate interests where the privacy-preserving implementation and local law allow; otherwise consent
Optional update emails	Consent; you may unsubscribe at any time
Requested service-contact email and essential notices	Performance of the requested service and our legitimate interests in security, service continuity, and communicating material operational information; marketing remains separate
Notifications you enable	Consent and/or performance of the requested feature
Security, fraud and abuse prevention, rate limits, and legal claims	Legitimate interests, balanced against your rights
Tax, accounting, consumer-protection, and other mandatory records	Legal obligation

When we rely on consent, you may withdraw it at any time without affecting processing already carried out lawfully. We do not use calculated or generated interpretations to make legal or similarly significant decisions about you.

6. Astrology calculations and interpretive processing

Deterministic calculations

Core astronomical and Jyotish calculations are produced by Astrummo’s calculation engine using licensed Swiss Ephemeris components and rule-based logic. These calculations are produced independently of the interpretation layer.

Generated explanations

Ask Astrummo uses a tightly constrained interpretation layer supported by artificial intelligence to translate calculated astrology context into natural-language guidance. For Ask Astrummo, our backend sends your exact question, limited recent conversation context, and a calculated personal astrology dossier and event atlas directly to OpenAI through its Responses API over HTTPS. Other interpretation features continue to use selected hosted language models through our interpretation infrastructure; OpenAI is not the only provider used across all interpretation features.

The dossier and event atlas include calculated natal and supported divisional chart placements; houses, lordships, aspects, dignity and conditions, and strengths; Yoga formation and cancellation; supported Ashtakavarga factors; exact Dasha timelines; dated astronomical and transit events; and calculation and timezone context. This is personal information, not guaranteed anonymous data. The dossier is calculated astrology context, while your question and recent conversation are text you provide and may contain your name, email, phone number, or other identifying information if you enter it. The current Ask Astrummo flow does not automatically strip such identifiers from that text, and it sends the dossier and event atlas rather than only backend-selected facts relevant to an individual question. Do not include payment-card details, government identifiers, or other unnecessary sensitive information.

The iOS onboarding disclosure names OpenAI and requires one Terms/Privacy checkbox, unchecked by default, before proceeding. There is no separate interpretation toggle. If you no longer wish to use this processing, the service-ending option is Account → Privacy & Data → Delete all Astrummo data, described in Section 13. This ends your current Astrummo profile and use of the Service; it is not a way to keep using the same profile with interpretation processing switched off.

Generated explanations can be incomplete, inaccurate, or unsuitable for a particular situation. They are for personal insight, reflection, and entertainment—not medical, psychological, legal, financial, or other professional advice.

7. Analytics, diagnostics, and website measurement

App analytics and diagnostics are off by default. If you opt in, Astrummo uses PostHog for selected analytics events and Sentry for crash, error, and limited performance diagnostics. Session replay, automatic capture, screenshots, profiling, failed-request capture, and default personally identifiable information are disabled in the inspected configuration. You may change or reset these choices in the app’s privacy settings.

Website analytics are disabled. Website security controls block hosting-supplied analytics scripts and measurement connections. Ordinary requests may still expose network and browser metadata needed for delivery and security. Website fonts are delivered through Google Fonts, which receives ordinary request metadata when your browser requests a font file.

8. Notifications, place search, and payments

Notifications

If enabled, Astrummo processes an Expo push token, platform and timezone information, preferences, access state, and minimised chart data needed to plan the notification. You can disable notifications in the app or device settings.

Place-of-birth search

When you search for a place of birth, Astrummo sends the search text to OpenStreetMap Nominatim to obtain settlement and coordinate data. The timezone and historical offset are then calculated using the geo-tz database.

Subscriptions and payments

Android subscriptions are processed through Google Play Billing. If iOS subscriptions are offered in the Astrummo app, purchases made through the App Store are processed by Apple. RevenueCat validates purchases and maintains Astrummo entitlement status. Astrummo receives purchase and entitlement metadata, such as store transaction and product identifiers, but does not receive or store your full payment-card details. The price, currency, tax, trial eligibility, billing date, and renewal terms shown by the store handling your purchase (Google Play or the Apple App Store) at checkout are authoritative for that purchase.

9. Service providers and recipients

We disclose only data reasonably necessary for each provider’s function. We do not sell or rent personal data.

Recipient	Function
Manus	Hosting and infrastructure, authentication and account/session storage where sign-in is used, and processing of prompts, context, and generated outputs for interpretation features routed through this provider. Provider privacy notice.
OpenAI	Direct Responses API processing for Ask Astrummo: exact questions, limited recent conversation context, calculated personal astrology dossier and event atlas, and generated responses; provider storage and retention are described in Section 11
Google Play	Distribution, billing, subscription management, cancellation, and refund handling
Apple App Store	iOS app distribution and, where iOS subscriptions are offered, billing, subscription management, cancellation, and refund handling
RevenueCat	Purchase validation and entitlement management using pseudonymous metadata
PostHog	Optional, consented product analytics using selected pseudonymous events and app/device context
Sentry	Optional, consented crash/error and limited performance diagnostics with minimisation controls
Expo	Push-token registration and notification delivery when enabled
OpenStreetMap Nominatim	Place-search text and returned settlement/coordinate data
Resend	Delivery of separately managed service-contact verification and essential notices, plus distinct waitlist or optional marketing email where requested
Google Fonts	Website typeface delivery
Advisers and authorities	Limited disclosure where necessary for compliance, security, legal advice, or legal claims

10. International transfers

Some providers may process data outside Lithuania or the European Economic Area, including in the United States. Where the GDPR applies, transfers take place under a legally recognised mechanism such as an adequacy decision, the European Commission’s Standard Contractual Clauses, or another lawful safeguard. Contact us for information about safeguards relevant to a particular transfer.

11. Retention

Data	Retention approach
Account, birth/profile, and chart data	While the account is active, unless you delete the category or request full deletion
Conversation summaries and personalisation memory	While memory is used or the account remains active; selectable memory may be deleted
Interpretation usage and anti-abuse records	As reasonably necessary to apply limits, operate the Service, investigate abuse, and manage costs
Subscription and entitlement records	As needed for paid access and applicable accounting, tax, refund, fraud, and dispute requirements
Notification data	Until disabled or deleted, subject to short-lived technical, delivery, and security records
Analytics and diagnostics	Only after opt-in and according to provider settings; opting out stops future collection
Support correspondence	As necessary to resolve the request and related security, contractual, or legal issues
Unconfirmed update email	Deleted after 48 hours if double opt-in is not completed
Confirmed update email	Until you unsubscribe, withdraw consent, or the communication purpose ends
Service-contact verification credential	24 hours; a new request, resend, or email change rotates the active verification credential
Pending service-contact record	Until verified, replaced, removed, or no longer reasonably necessary for verification, security, and abuse prevention
Verified service-contact record	Until you remove the service email or the essential-contact purpose ends, subject to narrowly limited lawful retention
Service-contact abuse and idempotency metadata	For short operational windows reasonably necessary to enforce cooldowns, daily limits, replay protection, security, and dispute handling
Local app data	Until deleted in Astrummo, app data is cleared, or the app is uninstalled; uninstalling does not delete server data

OpenAI processing and provider retention

The current Ask Astrummo integration uses stored responses and background processing at OpenAI. OpenAI’s API data-controls documentation states that stored Responses API application data is retained for at least 30 days. Abuse-monitoring logs, which may include prompts and responses, are generally retained for up to 30 days, with documented exceptions for legal requirements or protection against harm. Background processing does not make this a no-storage service.

OpenAI states that API data is not used to train its models by default unless the customer opts in to sharing. We have not independently verified the Astrummo API account’s sharing opt-in configuration or any Zero Data Retention enrolment, so we do not promise that no data can be used for training or that no provider records are retained. We do not guarantee a particular storage country. Deleting data in Astrummo does not automatically erase records already retained by OpenAI or other providers; their retention rules and applicable obligations still apply.

We periodically review whether information remains necessary. Limited records may be kept longer where required by law, subject to a legal hold, needed for a dispute, or necessary to protect the Service.

12. Your choices and rights

Depending on applicable law, you may have rights to information, access, correction, deletion, restriction, objection, portability, and complaint. You may withdraw consent at any time. We generally respond to GDPR requests within one month, subject to lawful extensions and identity verification.

Change or reset app analytics and diagnostics preferences.
Disable notifications in Astrummo or device settings.
Manage essential service contact and optional marketing independently using a private status credential supplied after verification.
Remove the service-contact email without deleting an Astrummo account or changing the separate waitlist.
Delete conversation memory or birth/profile data selectively.
Use Account → Privacy & Data → Delete all Astrummo data to end your current profile and remove associated Astrummo data, including an account when one exists.
Use our public Delete My Data page outside the app.
Email hello@astrummo.com for a privacy request.

You may complain to the Lithuanian State Data Protection Inspectorate or the supervisory authority in your habitual EU/EEA residence, place of work, or place of the alleged infringement.

13. Account and data deletion

In the app, use Account → Privacy & Data → Delete all Astrummo data. This removes associated Astrummo server records and the account when one exists, including birth/profile memory, long-term life memory, conversation summaries, per-user interpretation usage, notification profiles and deliveries, development-trial records where applicable, and associated interpretation-content reports. It clears device sign-in credentials, the birth profile, chat and personalisation data, and onboarding flags; resets the purchase-user association; and returns the app to welcome/onboarding. Astrummo-owned local notification data, analytics identity, and diagnostics state are also cleared.

Many users are device/profile-based rather than signed into an account. Full deletion ends the current profile and is the service-ending withdrawal path for the interpretation processing described in Section 6. To use Astrummo again, you must create a new profile and accept the current disclosure; this does not necessarily require a new logged-in account. Clearing device credentials does not guarantee global revocation of every server token or cancellation of provider requests already in progress.

Deletion may not remove data controlled independently by Google Play, Apple, RevenueCat, OpenAI, or another provider, and it does not automatically erase provider-retained records. To stop future charges, cancel a subscription separately through the store account used to buy it: Google Play subscriptions for Android purchases or Manage Apple subscriptions for App Store purchases. The app presents Apple’s Manage subscription link before full deletion; Apple also provides subscription cancellation instructions. Cancelling a subscription does not delete your Astrummo account, and deleting your account does not cancel a subscription. Deleting a device-based profile likewise does not cancel an App Store subscription. Narrowly limited transaction and other records may be retained for lawful accounting, tax, dispute, fraud-prevention, or legal requirements. If your request cannot be completed in the app, contact hello@astrummo.com.

The service-contact subsystem is separate from the waitlist and from any app account. A holder of the private status credential may remove the service-contact email and independently enable or withdraw marketing consent at Service-contact preferences. The page never displays the stored email address.

14. Automated processing, security, and adults only

Astrummo automatically calculates astrology factors and may generate personalised explanations, categories, reminders, and recommendations. These outputs do not determine eligibility for employment, credit, insurance, housing, education, healthcare, public benefits, or another legal or similarly significant decision.

We use reasonable technical and organisational measures such as authenticated sessions, pseudonymous identifiers, minimisation, opt-in analytics and diagnostics, access restrictions, and deletion tools. Questions and conversation text sent through the current Ask Astrummo flow are not automatically redacted. No system can guarantee absolute security.

We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided personal data, contact us so we can investigate and delete it where appropriate.

15. Changes and contact

We may update this Policy to reflect changes in the Service, providers, law, or data practices. We will update the date above and provide additional notice where a change materially affects your rights or our use of personal data. Where required, we will request fresh consent.

Questions, requests, and complaints may be sent to hello@astrummo.com or MB “Decentralizuotas”, Perkūnkiemio g. 13-91, Vilnius, LT-12114, Lithuania.