Privacy and Safety
Your Data, Your Control
AstraTalk is designed around user sovereignty. You own your spiritual data and control how it's used.
What We Collect
- Account data — Email, name, password (hashed, never stored in plain text)
- Birth data — Date, time, and location of birth (used for chart calculations)
- Profile data — Spiritual preferences, interests, and guidance style
- Usage data — Conversations with Astra, assessment results, ritual completions
- Technical data — Device info, session data (for security and performance)
How We Use It
- To generate your Soul Codex and personalized spiritual guidance
- To power Astra's contextual understanding of your chart and cycles
- To deliver personalized Daily Ascent content
- To improve the platform experience
What We Never Do
- Sell your personal data to third parties
- Share your spiritual profile without your consent
- Use your data for advertising
- Store your password in readable form
AI Safety Principles
Astra, our AI spiritual guide, follows strict safety guidelines:
- Reflective, not prescriptive — Astra offers perspectives and invitations to reflect, never commands or ultimatums.
- No medical claims — Astra does not diagnose conditions or prescribe treatments. Spiritual guidance is not a substitute for licensed medical or mental health care.
- No financial or legal advice — Astra will not tell you to make financial decisions or take legal action based on spiritual readings.
- Crisis escalation — If Astra detects language suggesting self-harm or crisis, it provides crisis resource information and encourages professional support.
- Transparency — Astra identifies itself as an AI. It does not claim to be human, psychic, or omniscient.
Data Confidence Policy
Some spiritual outputs require higher-confidence data to be accurate:
| Feature | Requires Birth Time? |
|---|---|
| Life path number | No |
| Sun sign | No |
| Rising sign (ascendant) | Yes |
| House placements | Yes |
| Planetary hours | Yes |
| Astrocartography | Yes (recommended) |
When birth time is unknown, AstraTalk clearly marks affected outputs with confidence indicators rather than showing potentially inaccurate data.
Consent Management
- Explicit opt-in — AI personalization and data embedding features require your explicit consent.
- Revisitable — You can change your consent preferences at any time in Settings > Privacy.
- Granular — Consent is per-feature, not all-or-nothing.
Account & Data Management
From your Settings page, you can:
- Export your data — Download a complete copy of your AstraTalk account under the GDPR "right of access" (Article 15)
- Delete specific data — Remove conversations, assessments, or other feature data
- Delete your account — Permanently remove your account and all associated data
What's Included in a Data Export
When you request an export from Settings > Privacy > Export My Data, we generate a JSON file containing every piece of personal data associated with your account:
- Account profile — email, name, verification status, account creation timestamp
- Soul Codex — all versions of your codex payload, confidence scores, and update history
- Spiritual profile — archetype, assessment history, personal preferences
- Journal entries — every self-map journal, shadow work entry, dream journal entry, and unconditional-love practice entry you've ever written
- Chat history — your full Astra conversation history, including every message exchanged
- Oracle readings — every themed card draw and every full-spread oracle-deck reading
- Credits — your current credit balance and the complete transaction ledger (grants, purchases, consumption, refunds)
- Subscription history — all active and historical subscriptions, plus every tier-change event
- Consents — a record of every consent you've granted, revoked, or modified
- Ritual onboarding — the ritual preferences you set during onboarding
Exports are delivered within minutes for accounts with normal data volumes. You can request a fresh export up to 3 times per day.
Data Retention Defaults
AstraTalk retains your data for as long as your account is active. When you delete your account:
| Category | Retention After Deletion Request |
|---|---|
| Account profile, soul codex, journals, chat history, readings | Deleted within 14 days (during the grace period you can cancel the deletion) |
| Financial records (Stripe invoices, credit ledger) | Retained for 7 years per US tax / PCI requirements, then deleted |
| Audit logs (security-sensitive events) | Retained for 2 years, then deleted |
| Legal holds | Retained until the legal hold is released |
| Anonymized usage analytics | Retained indefinitely (no personal identifiers) |
Deletion requests are processed automatically by a daily job after the 14-day grace period expires. Once processed, the data cannot be recovered.
Audit Logging
Sensitive operations on your account (password changes, session revocations, data deletions) are audit logged for your security. You can view your account activity in Settings.
Disclaimers
AstraTalk is a spiritual wellness and personal growth platform. It is not a substitute for professional medical, psychological, legal, or financial advice. All guidance is offered for reflective and educational purposes. Consult qualified professionals for health, legal, or financial decisions.