Privacy Policy
Last updated: 2026-10-17
Baby Astro is operated by BRAINBABY BILISIM ANONIM SIRKETI, D:9, NO:55 GAZIOSMANPASA MAHALLESI, IRAN CADDESI, CANKAYA, Ankara 06680, Türkiye. For anything in this policy, contact [email protected].
This policy covers both the Baby Astro mobile app and this website.
What we collect, and why
Birth date, birth time and birth place. This is the heart of the product — every chart, reading and compatibility score is computed from it. We treat birth data as sensitive personal data. Birth time is optional; without it the app draws a solar chart and hides the houses rather than guessing.
Email address. To create and sign in to your account, and to contact you about it. We do not send marketing email.
Chat messages you send to the assistant. Your question, the current conversation and the chart context needed to answer are sent through our service to BrainBaby. Personal AI Memory is disabled; the assistant does not keep a separate long-term memory of your conversations. Saved chat copies on your device are a separate feature.
Conversations you choose to save to your account. Only after you confirm Save to my account, the complete messages and attached calculated chart context are stored privately in Supabase, linked to your account, birth profile and reading language. Later replies are not saved automatically. These copies are separate from AI Memory and device-only copies. You can reopen them in supported signed-in clients, export them in Settings, or delete an account copy. Deleting clears its message and chart payload; a minimal deletion marker prevents an older device from restoring it. Your account deletion also removes these records.
Journal entries. Mood and note entries you write, stored against your account so they follow you across devices.
Learning progress. Completed lesson IDs are stored against your account to continue the learning path on another device. Your selected wrong answers are not uploaded. A local copy lets you keep progress if syncing is unavailable.
Saved Solar Return reports. The calculated chart context, generated reading, language and save date are stored against your account so you can reopen the report on another device without generating it again. They are included in account export and removed when you delete your account.
Purchase information and billing identifiers. Apple or Google Play processes mobile payments. New mobile releases use Adapty to validate purchases, restore subscriptions and link access to your account; older releases may still use RevenueCat during migration. These providers process account-linked user IDs, device identifiers, transaction history and subscription events for billing and purchase analytics. Web payments, when offered, use Stripe. We do not receive your full payment card details.
Optional mobile ad measurement. In supported mobile releases, AppsFlyer starts only after you allow ad measurement in the app and, on iOS, grant Apple's tracking permission. It can process advertising and app/device identifiers, IP-derived approximate location, app launches, limited product events, diagnostics and performance signals. Consented subscription events can be sent from Adapty to AppsFlyer to measure paid conversions. Enabled advertising partners may receive attribution or conversion information. We do not send birth details, chart readings, chat text or journal entries to these attribution services. You can refuse or withdraw this permission in the app's settings without losing basic app use; withdrawing stops future optional measurement, but does not erase previously processed records. Contact us to request deletion.
Basic diagnostics. Crash and error information, to fix faults.
Optional website analytics. Only if you choose Allow, Google Analytics measures page views and steps such as opening a guide, completing a free chart, viewing plans and starting checkout. We send public page paths, language and limited topic codes for the entry page and last guide used, not birth details, chat text, email, checkout IDs or account IDs. For our X launch links, we may also send a predefined public campaign and creative code to understand which post or ad led to those steps. Arbitrary URL parameter values are not sent. Referrers are limited to known public search/social origins, without paths or query values. Topic and creative attribution are kept in browser session storage after consent and cleared when you withdraw it. This does not track users across devices or share events with X. You may change this choice using Analytics choices on the website. Google may use cookies or similar identifiers for this measurement.
Friend-invite links. Tool invitations include one public campaign marker that is the same for everyone. It does not identify the sender or include their birth data or result. After the recipient opts into website analytics, we can measure visits and product steps attributed to this marker. A copied link or completed share sheet does not prove that another person received it, installed the app or bought a subscription.
What we do not collect
- We do not request GPS or precise device location. Birth *place* is a city you enter for your chart. Optional mobile attribution can infer approximate location from your IP address as described above.
- We do not access your contacts, photos, calendar, health data or microphone.
- We do not sell your personal data. Optional mobile ad measurement and optional website Google Analytics require consent; their data use is described separately in this policy.
Notifications
Reminders — your daily reading, Moon phases, retrograde stations, your Eşref Saati window — are scheduled on your device, and their content is computed locally from your own chart. We do not run a push server and nothing about your notifications reaches us. Turn them off in Settings, or revoke the permission in your phone's settings, at any time.
Who your data is shared with
We do not sell your personal data. When you opt in to mobile ad measurement, attribution or conversion information may be shared with enabled advertising partners. Refusing this optional measurement does not prevent core app use.
- Supabase — account, birth profile, journal entries, learning progress, saved Solar Return reports, explicitly account-saved conversations and cached charts. Hosting and database.
- BrainBaby, reached through Supabase — your questions, the current conversation and birth/chart context. Generating AI answers and readings.
- Adapty (new mobile releases) and RevenueCat (older releases during migration) — account-linked user IDs, device identifiers and purchase history for purchase validation, subscription access, restoration and billing analytics.
- AppsFlyer and enabled advertising partners (optional mobile measurement) — consented device/advertising identifiers, approximate IP-based location, app events, diagnostics and conversion information for attribution, analytics and fraud prevention. Birth details and reading or conversation content are excluded from this integration.
- Apple, Google Play or Stripe — purchase information needed to process the payment on the platform you choose.
- Google Analytics (website only, with your permission) — page paths and anonymous funnel events to understand which content helps people use the product. No birth, chat, email or account details are sent through this integration.
How long we keep it
We keep account data while your account exists, unless you delete individual supported records earlier. When you delete your account, we remove its login and associated data under our control. Device-only or browser-only copies elsewhere may remain: delete those through their local controls or clear that app/browser storage. Signing out hides local copies but does not necessarily erase them.
Payment providers may retain transaction records for legal obligations. Contact us if you need details about retained records or backup copies.
Your rights
You can exercise these yourself, in Settings → Account:
You may also email [email protected] to request access, correction, deletion, restriction of processing, or to object to processing. If you are in the EU or UK you may complain to your data protection authority; in Türkiye, to the KVKK authority.
Legal bases (GDPR). We process birth data and chat content to perform the contract you enter into by using the service. Essential diagnostics rest on our legitimate interest in a working product. Optional mobile ad measurement, website analytics and notifications rely on your consent; you may withdraw it at any time without losing core service access.
- Export your data — returns everything stored about you as JSON.
- Delete your account — requests deletion of your login and associated data. If you no longer have the app, use the account deletion page linked in the site footer or email us from your account address.
Children
Baby Astro is not intended for children under 13 and we do not knowingly collect their data. If you believe a child has given us data, email [email protected] and we will delete it.
Security
Data in transit is encrypted with TLS and data at rest is encrypted by our hosting provider. Access to production data is limited to those who need it. No system is perfectly secure, and we will not pretend otherwise — if a breach affects you, we will tell you as the law requires.
International transfers
Our providers may process your data outside your country, including in the United States, under appropriate safeguards such as the European Commission's standard contractual clauses.
Changes
If we change this policy materially we will update the date above and tell you in the app before the change takes effect.
Not medical, legal or financial advice
Baby Astro is for entertainment and self-reflection. Its readings are not medical, psychological, legal or financial advice and should not replace a qualified professional.