Privacy Policy — Kiun

The app supports three ways in, and they differ in what we learn about you:

• Anonymous — no email, no name. A random identifier ties your charts and credits to the device. If you lose the device or reinstall, that account cannot be recovered.
• Email and password — we store your email address so you can sign in again and recover access.
• Sign in with Google — Google tells us your email address and account identifier. We do not receive your Google password, nor access to anything else in your Google account.

Charts you enter for other people — a partner, a child, a friend — are stored the same way. Please only enter someone else's birth details if they have agreed to it.

Our database is hosted on Supabase infrastructure. Access is restricted per user at the database level, so one account cannot read another's charts or conversations.

Some of the providers above — Google (Gemini), OpenAI, Supabase and RevenueCat — may process data on servers outside the European Economic Area, including in the United States. Where that happens we rely on the safeguards the GDPR provides for such transfers, such as the European Commission's standard contractual clauses or an adequacy decision, as offered by each provider in its terms for business customers.

Each AI answer in the app has a Report action. When you use it, we store the text of the reported answer, the reason you chose, your interface language, and the date. The report is linked to your account so that the same answer is not reported twice. Only we can read reports, and we use them to review and improve the service. A report is deleted together with your account.

To understand which features are used, we record a few events in our own database: whether you opened the compatibility screen (from your chart or from the chat), reached the score for a pair, and tapped "buy" or "share" in a pair report. Each record contains only your account identifier, the name of the event and the time. Names, birth dates, and the text of questions and answers are never part of it. Events are not shared with third parties and are not used for advertising; they are stored with our hosting provider (Supabase) and deleted together with your account. Nothing is recorded while you are not signed in. The app contains no third-party analytics SDK; Google AdMob collects its own data separately, as described above. We process these events on the basis of our legitimate interest in improving the service; you can object at any time by writing to us.

Under the GDPR we process your data to perform the service you asked for (calculating charts, producing readings, running purchases), to meet legal obligations such as keeping records of transactions, and — for optional rewarded ads — on the basis of your consent, given by choosing to watch one.

We keep your charts and conversations until you delete them or delete your account. Records of purchases are kept for as long as tax and accounting law in Poland requires, even after account deletion: at that point they are kept only as an anonymised purchase journal — the store transaction identifier, product identifier, number of crystals and date, with no link to you.

You can delete individual charts and conversations inside the app at any time. To delete your account and everything attached to it, use Settings → Delete account in the app (see how account deletion works), or write to contact@astrallabs.eu from the address you signed up with and we will erase it. Anonymous accounts have no email address, so we cannot verify an emailed request: delete an anonymous account in the app (Settings → Delete account).

The rules of the service are in the terms of use.

You also have the right to ask what we hold about you, to correct it, to receive a copy, to object to processing, and to complain to the Polish data protection authority (UODO).