Privacy
Privacy Policy
Like the Moon, we keep one side hidden: yours.
Version: Draft of 1 October 2026
Astrology Insights (“we”, “us”) helps you calculate your natal chart, read an interpretation, discover your personality type and — only if you choose — meet compatible people. Birth details and personal preferences are sensitive, so we collect as little as possible, keep it in the European Union and give you full control over it.
This policy explains what personal data we process, why, on what legal basis, for how long, who helps us, and which rights you have under the EU General Data Protection Regulation (GDPR) and the Bulgarian Personal Data Protection Act.
1.Who is responsible for your data
The controller of your personal data is [Legal entity name], [legal form], entered in the Bulgarian Commercial Register under UIC (ЕИК) [number], with its registered office at [full address], Bulgaria.
For anything related to privacy, write to [privacy@your-domain.com]. [If a Data Protection Officer is appointed: name and contact details of the DPO.]
2.What data we process
- Account data
- Your email address, a securely hashed password (handled by our authentication provider — we never see your password), your language and theme preferences, and sign-in timestamps.
- Birth data
- Your date of birth, time of birth (optional) and place of birth, plus the coordinates and time zone we derive from that place. This data is visible only to you.
- Natal chart and readings
- The planetary positions, houses and aspects calculated from your birth data, and the interpretations (readings) generated from them.
- Profile data
- Display name, photo, bio, interests, birth year (to show your age), city and an approximate location (rounded coordinates used only to estimate distance), whom you are interested in, and whether you are looking for friends, romance or both. We also ask your gender when you set up your chart; “Prefer not to say” is always an option, and you can change or remove it in your profile at any time. We use it to write your reading in the right grammatical form, to point you to the article sections for women or for men and, if you switch on romance mode, for matching. Your gender on its own is not a special category of data.
- Personality results
- Your questionnaire answers, Big Five trait scores, your 16-type result and, if you add it, your Enneagram type.
- Romance preferences (special category)
- If you switch on romance mode, the fact that you are looking for romance, together with the genders you are interested in and your own gender, may reveal information about your sex life or sexual orientation. This is a special category of data under Art. 9 GDPR. We process it only with your explicit consent, which you give separately and can withdraw at any time by switching romance mode off. We then delete whom you are interested in; your gender stays in your profile until you change or remove it.
- Interactions
- Likes, passes, matches, blocks and reports you make or receive.
- Messages
- The content of your chats with mutual matches. By default messages are deleted automatically 6 hours after they are sent.
- Technical data
- IP address, browser and device information, and error logs that our hosting and database providers process to deliver and secure the service.
3.Why we use it and on what legal basis
- Providing the service
- Creating your account, calculating your chart, generating readings (in the grammatical form that matches your gender, if you share it), scoring the personality test and showing your profile — necessary to perform our contract with you (Art. 6(1)(b) GDPR).
- Matching and chat
- Suggesting compatible people and letting mutual matches talk — performance of the contract (Art. 6(1)(b)); for romance mode additionally your explicit consent (Art. 9(2)(a)).
- Safety and moderation
- Age confirmation, handling reports and blocks, and preventing abuse, spam and fake profiles — our legitimate interest in keeping the community safe (Art. 6(1)(f)) and, where applicable, our legal obligations (Art. 6(1)(c)).
- Security and reliability
- Protecting accounts, preventing fraud and fixing errors — our legitimate interest (Art. 6(1)(f)).
- Legal obligations
- Responding to lawful requests from authorities and keeping records the law requires (Art. 6(1)(c)).
Compatibility scores are calculated automatically to suggest people you might like. This ranking has no legal or similarly significant effect on you: you can always browse, like or ignore anyone, whatever the score. We do not make decisions based solely on automated processing within the meaning of Art. 22 GDPR.
We do not use your data for advertising, we do not sell it and we do not share it with data brokers.
4.What other members can see
- Visible to other members
- Only once you choose to become discoverable: your display name, photo, age, city, bio, interests, personality type, what you are looking for and — if chart sharing is on — your Sun, Moon and rising signs.
- Never visible to others
- Your email address, exact birth date, time and place, precise location, questionnaire answers and your messages with other people.
To become discoverable you must confirm that you are at least 18 and have a calculated chart. You can hide your profile again at any time.
5.Notifications
- What we send
- An email or a push notification when you have a new match or an unread message. Emails include the name of the person who wrote to you, never the message itself. A push notification shows who wrote to you, not what they wrote — unless you turn on “Show the start of the message”, in which case up to 60 characters of the message appear, on the lock screen too.
- How to turn them off
- At any time under Profile → Notifications. Push notifications are turned on separately on each device and stop on that device when you sign out. Quiet hours hold back push notifications, not emails.
- One-click unsubscribe
- Every notification email contains an unsubscribe link that works without signing in; many email services also show an “Unsubscribe” button next to the sender. Important account emails, such as password resets, still arrive.
- What we keep
- Your notification settings, the push subscription of each device where you turned them on (its address at the push service, the encryption keys, the browser type and language), and a log of sent notifications — with no content and no email addresses. The log is deleted after 30 days.
Notifications are part of the service and you control them, so the legal basis is the performance of our contract with you (Art. 6(1)(b) GDPR).
6.How long we keep it
- Chat messages
- Deleted automatically and permanently 6 hours after they are sent (default setting). A clean-up job runs every 15 minutes, so a message can exist for up to about 15 minutes longer. If a conversation's retention setting is changed where the app offers this, the setting shown in that conversation applies.
- Reported messages
- When you report a message, we keep a snapshot of it so moderators can review the case — for as long as the case needs and no longer than [12 months] after it is closed, unless we need it longer to establish or defend legal claims.
- Account, birth, chart, profile and personality data
- Kept while your account exists. When you delete your account, all of it — including matches, conversations and messages — is erased from our live database immediately; backup copies are overwritten within [30] days.
- AI readings
- Cached until your chart or your gender changes, or you delete your account.
- Notifications
- The log of sent notifications (no content, no email addresses) is deleted after 30 days, and the internal delivery records up to 7 days after sending. A device's push subscription is deleted when you turn notifications off on it, sign out there, or the push service reports that it is no longer valid.
- Technical logs
- Kept by our providers for up to [30] days.
7.Who helps us (processors)
We work with a small number of service providers who process data only on our instructions and under data processing agreements (Art. 28 GDPR):
| Provider | What they do | Where |
|---|---|---|
| Supabase | Database, authentication and file storage for the whole service | EU — Frankfurt, Germany |
| Anthropic (Claude) | Writes AI chart readings and short explanations. Receives only computed chart facts (signs, houses, aspects) and your chosen language — never your name, email, birth date, time, place or coordinates. Under Anthropic's commercial terms, API data is not used to train models. | USA — [transfer safeguard to be confirmed: EU–US Data Privacy Framework and/or Standard Contractual Clauses] |
| [Hosting provider, e.g. Vercel] | Hosts and delivers the website | [Region and transfer safeguard] |
| Resend | Sends account emails (sign-up confirmation, sign-in, password reset) and notification emails about new messages and matches. Receives your email address, your language and the email itself — for example the display name of the person who wrote to you. Message text is never sent by email. | EU — Ireland (sending); Resend, Inc. is based in the USA — [transfer safeguard to be confirmed: EU–US Data Privacy Framework and/or Standard Contractual Clauses] |
| Your browser's push service: Google FCM, Mozilla, Apple or Microsoft WNS | Delivers push notifications to your device if you turn them on. Receives only the device's address at that service (the endpoint) and an encrypted payload it cannot read. Which service is used depends on your browser. | Depends on the service, often the USA — [transfer safeguard to be confirmed] |
Place search runs on our own servers using a local copy of GeoNames data, and time zones are looked up locally too — the text you type is not sent to any third party. Fonts are served from our own domain, so loading a page does not contact Google or other font services.
8.Transfers outside the EU
We keep your data in the European Union. Where a provider is located outside the European Economic Area, we rely on an adequacy decision (such as the EU–US Data Privacy Framework for certified companies) or on the European Commission's Standard Contractual Clauses, combined with data minimisation — for example, the AI provider never receives information that directly identifies you.
9.Your rights
- Access
- Ask what data we hold about you and receive a copy.
- Portability
- Receive the data you gave us in a structured, machine-readable format [available in your profile or on request].
- Rectification
- Correct your data at any time in your profile and birth details, or ask us to do it.
- Erasure
- Delete your account in the app (Profile → Delete account). Everything connected to it is erased.
- Restriction and objection
- Ask us to limit processing, or object to processing based on our legitimate interests.
- Withdrawing consent
- Withdraw any consent — for example by switching romance mode off. This does not affect processing that happened before.
- Complaint
- Lodge a complaint with the Bulgarian Commission for Personal Data Protection (КЗЛД), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg — or with the supervisory authority in the EU country where you live or work.
We answer requests within one month. To protect your account we may ask you to confirm your identity, usually by writing from the email address linked to it.
10.Adults only (18+)
Astrology Insights is only for people aged 18 or over. You must confirm your age before you can create a discoverable profile. If we learn that an account belongs to a minor, we delete it. If you think a minor is using the service, please report the profile or write to [privacy@your-domain.com].
12.How we protect it
All traffic is encrypted (HTTPS). Row-level security in our database ensures each member can reach only their own private data, and other members' information is exposed only through narrowly defined queries. Passwords are stored by our authentication provider as salted hashes. Access to production systems is limited to [authorised staff] and protected with multi-factor authentication.
No system is perfectly secure. If a personal data breach is likely to put your rights at risk, we will notify the КЗЛД within 72 hours and inform you without undue delay, as the law requires.
13.Good to know
- Astrology Insights offers astrology and personality insights for self-reflection and entertainment. They are not medical, psychological, legal or financial advice.
- Place data © GeoNames (geonames.org), licensed under Creative Commons Attribution 4.0 (CC BY 4.0).
- Our 16 personality types come from our own open questionnaire based on the public-domain IPIP item pool. They are not affiliated with or endorsed by The Myers-Briggs Company.
14.Changes to this policy
We may update this policy as the service evolves. We will publish every change on this page with a new version date and, for significant changes, notify you in the app or by email before they take effect.
Questions about this document?
Write to us at [privacy@your-domain.com] — we reply within one month.