Privacy Policy
Last updated: 28 August 2026
The short version: AstroHi asks for your date, time and place of birth in order to calculate your chart. Your birth time and birth coordinates are stored encrypted, appear in no API response and no log, and are never shown to other users. We do not sell your data, we do not hand it to ad networks, and you can permanently delete your account from inside the app in one tap.
1. Who we are
AstroHi is built and operated by Agleo Technology (Istanbul, Türkiye). “We” and “AstroHi” in this document mean that company.
For any privacy question, request or complaint: [email protected].
2. What we process
| Data | Why | Note |
|---|---|---|
| Email address, name, password hash | Creating an account, signing in, email verification | With Sign in with Apple, Apple's private relay address is enough |
| Date of birth | Age check (18+), sun sign, chart calculation | Your profile shows your age, not the date |
| Birth time and birth place coordinates | Rising sign, house placements, planetary aspects | Stored with column-level encryption; never in a response, a log, or another user's screen |
| Profile: photos, bio, gender, who you are interested in, relationship intent, lifestyle answers | Showing your profile and computing compatibility | You fill these in and can change them at any time |
| Personality test answers | The non-astrological part of the compatibility score | Raw answers are not shown to other users |
| Location | Distance and “people near you” | Precise location is used only for distance; what is displayed is rounded to a grid of about 1 km |
| Interactions: likes, matches, messages, Meet Me notes, reports | Running the product and investigating abuse | Messages are delivered between the two parties; they can be accessed during a moderation review |
| Device push token, platform, time zone, app language | Sending notifications at the right hour in the right language | Turning notifications off removes this record |
| Profile verification video or photo (optional) | Showing that the profile belongs to a real person | Deleted at the end of the retention period once verification is resolved |
| Technical records: IP address, device/OS information, error logs | Security, abuse and rate limiting, debugging | Birth time and coordinates are never written to these |
| Subscription status | Unlocking Premium | Payment happens at Apple; we never see or store your card details |
What we do not collect
- Card numbers, bank details or any payment instrument — payment happens entirely at Apple.
- Your contacts, your calendar, your whole photo library, or background location tracking.
- Advertising identifiers. There is no third-party ad SDK in the app.
3. Legal bases
- Performance of a contract: your account, chart, matches and messages — everything the app needs to function.
- Consent: birth time and birth place, location, and notification permission. All of these are optional and can be withdrawn.
- Legitimate interests: security, fighting fake accounts and abuse, keeping the service stable.
- Legal obligation: properly issued requests from competent authorities.
Preferences that can indicate sexual orientation (who you are interested in) are treated as special category data and processed only with your explicit consent, only to determine matches.
4. How your birth details are protected
- Birth time and birth coordinates are stored with column-level encryption.
- They appear in no API response — they are decrypted only during the calculation on the server.
- They are never written to application logs.
- Other people see only the results: signs, placements, a compatibility score and its reasoning. Never the input.
- If you do not provide a birth time, the rising sign and houses are not calculated and not invented; astrology simply carries less weight in the compatibility score.
5. Who we share it with
We do not sell your data. We share the minimum needed with the providers that run the service:
| Recipient | For what | What goes |
|---|---|---|
| Apple Inc. (US/Ireland) | App Store, in-app purchases, Sign in with Apple | Subscription transactions; payment details stay at Apple |
| Google (Firebase Cloud Messaging) | Push notification delivery | The device push token and the notification text |
| OpenAI, L.L.C. (US) | Turning readings into text | Only computed astrological data and reason codes — no name, email, photo, message content, or the birth time itself |
| Our email delivery provider | Verification and account emails | Your email address and the message itself |
| Our server hosting provider | Application server and database | All hosted data (encrypted fields stay encrypted) |
Calls to OpenAI go through their API; OpenAI states that data submitted through the API is not used to train its models by default. This is a transfer to the United States and rests on your consent; if you do not use the Premium readings, the transfer does not happen.
6. Retention and deletion
- Your account data is kept for as long as your account exists.
- You can delete your account from inside the app: Settings > Delete account. It takes effect immediately, your session ends and your profile stops being visible.
- After deletion, data is permanently removed within a reasonable period; only the minimum records needed for legal obligations or abuse investigations (such as block and report records) may be kept longer.
- Verification media is deleted at the end of its retention period once verification is resolved.
- When a match is removed, the messages become inaccessible to both sides.
7. Your rights
Under the GDPR and, in Türkiye, under KVKK art. 11, you have the right to know whether your data is processed, to access it, to have it corrected or erased, to object to processing, to data portability, and to withdraw consent. Write to [email protected] and we answer within 30 days at the latest. You also have the right to complain to your national data protection authority, or to the Personal Data Protection Board in Türkiye.
8. Children
AstroHi is closed to anyone under 18. Age is checked at sign-up and accounts found to belong to minors are closed. We do not intend to collect children's data, and delete it if we learn we have.
9. Security
- All traffic is encrypted with TLS.
- Passwords are stored irreversibly hashed.
- Birth time and coordinates are encrypted at the column level.
- Authorisation is checked on the server on every request; Premium limits are enforced server-side, not in the client.
- Sign-up and sign-in endpoints are rate limited.
No system is perfectly secure. If you find a vulnerability, please write to [email protected].
10. This website
astrohi.app is a static marketing site. It sets no cookies and runs no analytics or advertising code. Only the web fonts are loaded from Google Fonts, which makes your browser's IP address visible to Google during that request.
11. Changes
If we update this document we change the date above. For significant changes we also tell you inside the app.