Privacy
Privacy Policy
Like the Moon, we keep one side hidden: yours.
Version: Draft of 30 September 2026
Astrology Insights (“we”, “us”) helps you calculate your natal chart, read an interpretation, discover your personality type and — only if you choose — meet compatible people. Birth details and personal preferences are sensitive, so we collect as little as possible, keep it in the European Union and give you full control over it.
This policy explains what personal data we process, why, on what legal basis, for how long, who helps us, and which rights you have under the EU General Data Protection Regulation (GDPR) and the Bulgarian Personal Data Protection Act.
1.Who is responsible for your data
The controller of your personal data is [Legal entity name], [legal form], entered in the Bulgarian Commercial Register under UIC (ЕИК) [number], with its registered office at [full address], Bulgaria.
For anything related to privacy, write to [privacy@your-domain.com]. [If a Data Protection Officer is appointed: name and contact details of the DPO.]
2.What data we process
- Account data
- Your email address, a securely hashed password (handled by our authentication provider — we never see your password), your language and theme preferences, and sign-in timestamps.
- Birth data
- Your date of birth, time of birth (optional) and place of birth, plus the coordinates and time zone we derive from that place. This data is visible only to you.
- Natal chart and readings
- The planetary positions, houses and aspects calculated from your birth data, and the interpretations (readings) generated from them.
- Profile data
- Display name, photo, bio, interests, birth year (to show your age), city and an approximate location (rounded coordinates used only to estimate distance), gender, whom you are interested in, and whether you are looking for friends, romance or both.
- Personality results
- Your questionnaire answers, Big Five trait scores, your 16-type result and, if you add it, your Enneagram type.
- Romance preferences (special category)
- If you switch on romance mode, the fact that you are looking for romance together with your gender and the genders you are interested in may reveal information about your sex life or sexual orientation. This is a special category of data under Art. 9 GDPR. We process it only with your explicit consent, which you give separately and can withdraw at any time by switching romance mode off.
- Interactions
- Likes, passes, matches, blocks and reports you make or receive.
- Messages
- The content of your chats with mutual matches. By default messages are deleted automatically 6 hours after they are sent.
- Technical data
- IP address, browser and device information, and error logs that our hosting and database providers process to deliver and secure the service.
3.Why we use it and on what legal basis
- Providing the service
- Creating your account, calculating your chart, generating readings, scoring the personality test and showing your profile — necessary to perform our contract with you (Art. 6(1)(b) GDPR).
- Matching and chat
- Suggesting compatible people and letting mutual matches talk — performance of the contract (Art. 6(1)(b)); for romance mode additionally your explicit consent (Art. 9(2)(a)).
- Safety and moderation
- Age confirmation, handling reports and blocks, and preventing abuse, spam and fake profiles — our legitimate interest in keeping the community safe (Art. 6(1)(f)) and, where applicable, our legal obligations (Art. 6(1)(c)).
- Security and reliability
- Protecting accounts, preventing fraud and fixing errors — our legitimate interest (Art. 6(1)(f)).
- Legal obligations
- Responding to lawful requests from authorities and keeping records the law requires (Art. 6(1)(c)).
Compatibility scores are calculated automatically to suggest people you might like. This ranking has no legal or similarly significant effect on you: you can always browse, like or ignore anyone, whatever the score. We do not make decisions based solely on automated processing within the meaning of Art. 22 GDPR.
We do not use your data for advertising, we do not sell it and we do not share it with data brokers.
4.What other members can see
- Visible to other members
- Only once you choose to become discoverable: your display name, photo, age, city, bio, interests, personality type, what you are looking for and — if chart sharing is on — your Sun, Moon and rising signs.
- Never visible to others
- Your email address, exact birth date, time and place, precise location, questionnaire answers and your messages with other people.
To become discoverable you must confirm that you are at least 18 and have a calculated chart. You can hide your profile again at any time.
5.How long we keep it
- Chat messages
- Deleted automatically and permanently 6 hours after they are sent (default setting). A clean-up job runs every 15 minutes, so a message can exist for up to about 15 minutes longer. If a conversation's retention setting is changed where the app offers this, the setting shown in that conversation applies.
- Reported messages
- When you report a message, we keep a snapshot of it so moderators can review the case — for as long as the case needs and no longer than [12 months] after it is closed, unless we need it longer to establish or defend legal claims.
- Account, birth, chart, profile and personality data
- Kept while your account exists. When you delete your account, all of it — including matches, conversations and messages — is erased from our live database immediately; backup copies are overwritten within [30] days.
- AI readings
- Cached until your chart changes or you delete your account.
- Technical logs
- Kept by our providers for up to [30] days.
6.Who helps us (processors)
We work with a small number of service providers who process data only on our instructions and under data processing agreements (Art. 28 GDPR):
| Provider | What they do | Where |
|---|---|---|
| Supabase | Database, authentication and file storage for the whole service | EU — Frankfurt, Germany |
| Anthropic (Claude) | Writes AI chart readings and short explanations. Receives only computed chart facts (signs, houses, aspects) and your chosen language — never your name, email, birth date, time, place or coordinates. Under Anthropic's commercial terms, API data is not used to train models. | USA — [transfer safeguard to be confirmed: EU–US Data Privacy Framework and/or Standard Contractual Clauses] |
| [Hosting provider, e.g. Vercel] | Hosts and delivers the website | [Region and transfer safeguard] |
| [Email provider, if separate] | Sends sign-in and account emails | [Region and transfer safeguard] |
Place search runs on our own servers using a local copy of GeoNames data, and time zones are looked up locally too — the text you type is not sent to any third party. Fonts are served from our own domain, so loading a page does not contact Google or other font services.
7.Transfers outside the EU
We keep your data in the European Union. Where a provider is located outside the European Economic Area, we rely on an adequacy decision (such as the EU–US Data Privacy Framework for certified companies) or on the European Commission's Standard Contractual Clauses, combined with data minimisation — for example, the AI provider never receives information that directly identifies you.
8.Your rights
- Access
- Ask what data we hold about you and receive a copy.
- Portability
- Receive the data you gave us in a structured, machine-readable format [available in your profile or on request].
- Rectification
- Correct your data at any time in your profile and birth details, or ask us to do it.
- Erasure
- Delete your account in the app (Profile → Delete account). Everything connected to it is erased.
- Restriction and objection
- Ask us to limit processing, or object to processing based on our legitimate interests.
- Withdrawing consent
- Withdraw any consent — for example by switching romance mode off. This does not affect processing that happened before.
- Complaint
- Lodge a complaint with the Bulgarian Commission for Personal Data Protection (КЗЛД), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg — or with the supervisory authority in the EU country where you live or work.
We answer requests within one month. To protect your account we may ask you to confirm your identity, usually by writing from the email address linked to it.
9.Adults only (18+)
Astrology Insights is only for people aged 18 or over. You must confirm your age before you can create a discoverable profile. If we learn that an account belongs to a minor, we delete it. If you think a minor is using the service, please report the profile or write to [privacy@your-domain.com].
11.How we protect it
All traffic is encrypted (HTTPS). Row-level security in our database ensures each member can reach only their own private data, and other members' information is exposed only through narrowly defined queries. Passwords are stored by our authentication provider as salted hashes. Access to production systems is limited to [authorised staff] and protected with multi-factor authentication.
No system is perfectly secure. If a personal data breach is likely to put your rights at risk, we will notify the КЗЛД within 72 hours and inform you without undue delay, as the law requires.
12.Good to know
- Astrology Insights offers astrology and personality insights for self-reflection and entertainment. They are not medical, psychological, legal or financial advice.
- Place data © GeoNames (geonames.org), licensed under Creative Commons Attribution 4.0 (CC BY 4.0).
- Our 16 personality types come from our own open questionnaire based on the public-domain IPIP item pool. They are not affiliated with or endorsed by The Myers-Briggs Company.
13.Changes to this policy
We may update this policy as the service evolves. We will publish every change on this page with a new version date and, for significant changes, notify you in the app or by email before they take effect.
Questions about this document?
Write to us at [privacy@your-domain.com] — we reply within one month.