Privacy

Updated: October 18, 2026.

Astrea is operated by Second Wind. Your profile and conversations stay on this device and are not synced to an account. Journal text and entry references also stay on this device. Your nickname and journal text are not sent to Astrea's servers. Journal photos are stored privately in Cloudflare and are not sent to AI unless you explicitly choose one in chat. Photos you add to chat are also stored in private Cloudflare storage. Viewed photos are cached on this device to reduce downloads and allow offline viewing. Deleting a journal entry or app data also clears the corresponding photo cache. The system may remove cached photos earlier.

To calculate a chart and create a reading, Astrea sends your birth date, optional birth time, selected city coordinates and time zone to its server. The server calculates chart placements and a sky snapshot. For AI readings, the server sends that calculated chart and sky context to Alibaba Cloud Model Studio in China (DeepSeek V4.1 Flash is primary; Qwen3.8-Flash is used only if the primary is unavailable). For chat replies, it also sends your question and up to the 12 most recent conversation messages. A chat request may include up to the three most recently selected photos in the matching recent conversation. Journal text is not sent to AI; journal photos are included only if you explicitly choose one in chat. The provider processes each request under its own terms and policies; Astrea cannot promise it retains no data. When you continue a selected reading or chart theme, its title, reference date and fact identifiers are also sent so the server can recalculate the context.

Astrea uses anonymous Firebase Authentication for a random app identifier and Cloudflare Workers to process requests. Successful reading and chat results are cached privately in Cloudflare D1 for 24 hours to avoid repeating work, then scheduled for automatic deletion. Operational service logs may contain network address, time and request status; Astrea does not intentionally log request bodies. Firebase SDKs may process installation/session identifiers and technical diagnostics for authentication, operation and reliability, as described in their privacy manifests.

To enforce daily AI limits and prevent duplicate requests, Astrea keeps a one-way digest of your anonymous identifier, daily counts, random request identifiers and request digests privately in Cloudflare D1. Quota metadata excludes your questions and AI replies. When the app checks access, syncs a purchase, requests a daily reading or sends a chat, it also sends your device's current time zone to Astrea. Astrea stores it with daily usage counts in a private Cloudflare D1 record and uses it to reset daily AI limits at local midnight. A time-zone change takes effect after the current allowance period. The stored time zone follows the same retention and deletion rules as that record. Inactive quota records are scheduled for deletion after 90 days and removed when you delete Astrea data. A minimal one-way safety marker remains for up to two days after deletion completes to prevent unfinished requests from writing data again.

Astrea does not use advertising, tracking, or analytics SDKs. Astrea Pro is an optional subscription purchased and billed by Apple or Google Play. RevenueCat processes your app identifier and purchase records to verify access and restore purchases; its own privacy terms and retention practices apply. Astrea cannot delete store transactions, and deleting Astrea data does not cancel a subscription. Manage or cancel it in your app store account. Eligible new Google Play subscribers can start a seven-day free trial. After the trial, the selected plan renews at the displayed price unless cancelled in Google Play before the trial ends; the store shows the price and billing period before purchase. iOS device backups may follow your device settings; Android app backup is disabled. You can delete app data in Settings. Deletion requires an internet connection and removes local app data, the server cache for your anonymous identifier, previously submitted feedback linked to that identifier, and the anonymous Firebase identity. If you can no longer open the app, contact support; do not send your birth details. Deleting a journal entry also deletes its Cloudflare photos and requires an internet connection. Uninstalling alone does not delete cloud photos and removes the anonymous access needed to retrieve them.

For privacy questions or deletion help, contact [email protected].