Privacy Policy

Astrarium — astrarium.ge and the Astrarium Android app Last updated: 20 September 2026

This policy explains what Astrarium collects about you, why, who else sees it, and what you can make us do about it. It is written to be read, not to be survived.

1. Who is responsible

The controller of your personal data is:

If you contact us about your data, we answer within 10 working days, as the Law of Georgia on Personal Data Protection requires.

2. What we collect

Because you typed it in

• Account: email address, password (stored only as a cryptographic hash we cannot reverse), first name, last name, phone number if you give one.
• Birth data: date of birth, time of birth, place of birth, and the latitude and longitude of that place. Birth time is optional; the chart is computed without it and simply omits what cannot be derived.
• What you ask the Oracle: the full text of every message you send, and every reply.
• Tarot: the spread you chose, the cards drawn, and the question you asked.
• Compatibility: the names and birth details of anyone you compare yourself with. Only enter someone else's birth details if they are content for you to.
• Journal entries, if you write any.
• Settings: language, theme, notification preferences, and whether you agreed to marketing email.

Because the service produced it about you

• Your computed natal chart: planetary positions, houses, aspects.
• Your daily transit readings.
• A memory of you. This is the part most worth understanding. So the Oracle can behave like an advisor who knows you rather than a stranger every time, the system keeps a short written summary of your situation and a list of durable facts about you — the people who matter to you, what you are working towards, what you are struggling with. It is written by an AI model from your conversations. You can read it, and you can delete it, at any time.
• Counters of how much you have used paid features, so free allowances and fair-use limits can be enforced.

Because you paid

• Subscription status and payment records. We never see or store your card number. Card details go directly to TBC Bank, which processes the payment and tells us only whether it succeeded.

Automatically

• Standard server logs: IP address, approximate time, which endpoint was called. These exist for security and debugging and are not used to profile you.
• Anonymous usage analytics through Google Analytics 4 (measurement ID G-WEGC1KXK3X), to see which parts of the site are used. It runs on astrarium.ge only and sets cookies to do so. We use no other analytics service.

What we do not collect

• Your device's location. The app asks for no location permission. The only place we hold is the birth place you typed in yourself.
• Your contacts, photos, calendar, or anything else on your phone.

3. Why, and on what legal basis

4. Artificial intelligence, plainly

Astrarium uses AI language models to write your readings. This means:

• Your conversations and your birth chart are sent to a model provider to produce a reply. Today those providers are Google (Gemini models) and OpenAI, reached either directly or through the Lovable AI gateway.
• The astronomy is not AI. Planetary positions, houses and aspects are computed deterministically from an astronomical ephemeris. The model is only allowed to interpret numbers it was given, and a reading that mentions a planet or sign that was not in its input is rejected before you ever see it.
• We do not use your conversations to train anyone's model, and our providers are used under terms that do not permit them to either.
• The Oracle is not a professional. It is not a therapist, doctor, lawyer or financial adviser, it does not diagnose anything, and it is instructed to refuse to predict death, illness, pregnancy outcomes, court results or medical results. If you tell it you are in crisis, it is instructed to stop reading your chart and point you towards real human help — and it is instructed never to record that disclosure in your memory profile.

5. Who else sees your data

We do not sell your data. We do not share it for anyone else's advertising. These are the companies that process it in order to run the service:

When you search for a birth place, the text you type is sent to OpenStreetMap's public geocoding service. Nothing identifying you is sent with it.

6. Where your data is stored

Your data is stored on Supabase infrastructure in the Mumbai (ap-south-1) region of India, and is processed by the providers above in the European Union and the United States. Georgia is not in the EU, and these transfers are made on the basis of the providers' contractual data-protection commitments.

7. How long we keep it

8. Your rights

You can:

• See everything we hold about you.
• Correct anything wrong — birth times especially, and correcting one recomputes your chart rather than leaving a stale copy.
• Delete your account and everything attached to it.
• Delete just your memory profile, if you want the Oracle to forget you but want to keep your account.
• Take your data with you in a machine-readable form.
• Object to processing based on legitimate interest, and withdraw consent at any time — withdrawing does not undo what was lawful before it.
• Ask us to stop while a dispute is being resolved.

To do any of it, email [TBD], or use the deletion option in your account settings. We do not charge for this and we do not ask why.

If you are unhappy with how we answer, you can complain to Georgia's supervisory authority for personal data protection — as of 2026 the State Audit Office of Georgia, which took over the functions of the Personal Data Protection Service — or go to court.

9. How we protect it

• Every row in the database is protected by row-level security rules that tie it to your account. The rules are enforced by the database itself, not by the app asking nicely, so a bug in a screen cannot show you someone else's chart.
• Everything is encrypted in transit.
• Passwords are hashed, never stored.
• Paid files are served only after the purchase is checked on the server.
• No key that could bypass these rules is ever placed in the mobile app.

No system is perfect. If a breach happens that puts you at risk, we will tell you and the supervisory authority, as the law requires.

10. Children

Astrarium is not for people under 16. We do not knowingly collect data from anyone under 16, and if we discover that we have, we delete it. If you are a parent and believe your child has an account, email us and we will remove it.

11. Changes

If we change this policy in a way that matters, we will tell you in the app and by email before it takes effect. The date at the top always reflects the current version.

12. Contact

[TBD]

*Astrarium provides astrological readings for reflection and entertainment. They are not predictions, and they are not a substitute for professional medical, psychological, legal or financial advice.*