Privacy Policy

Last updated: April 22, 2026 · Effective date: April 22, 2026

Astralyn (“Astralyn,” “we,” “us,” or “our”) is an AI-assisted reflection and self-understanding application available on web, iOS, and Android. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, how long we keep it, and the choices and rights available to you.

For privacy questions or requests, contact us at privacy@astralyn.app. For support, contact support@astralyn.app.

1. Who we are

Astralyn is operated by Parts For Life LLC, the data controller responsible for the processing of personal data described in this Privacy Policy.

Controller contact details

• Email: privacy@astralyn.app
• Support: support@astralyn.app
• Website: https://astralyn.app
• Mailing address: Parts For Life LLC, Dallas, Texas, United States

If you are located in a jurisdiction that grants you privacy rights, you may exercise those rights using the contact information above.

2. Scope

This Privacy Policy applies to personal data processed through:

• the Astralyn website;
• the Astralyn mobile applications for iOS and Android;
• in-app customer support;
• subscriptions, authentication, analytics, diagnostics, and communications related to Astralyn.

It does not apply to third-party websites, platforms, or services that may link to or from Astralyn and that have their own privacy policies.

3. Information we collect

3.1 Information you provide directly

We may collect the following information when you use Astralyn:

• Account information — such as your email address and, where available, your display name from Sign in with Apple or Sign in with Google.
• Birth data — such as date of birth, time of birth, and place of birth, which are used to generate birth charts, transits, and related features.
• Profile and app preferences — such as language, theme, onboarding selections, and notification preferences.
• Messages and prompts — including the content of conversations you send to the in-app AI reflection partner.
• Support communications — including messages and attachments you send through customer support channels.
• Subscription-related information — such as entitlement status and subscription metadata received from payment and subscription platforms.

3.2 Information collected automatically

When you use Astralyn, we may automatically collect:

• Device and technical information — such as device model, operating system, app version, browser type, language settings, IP-derived coarse region, and locally generated identifiers used for service integrity and abuse prevention.
• Usage information — such as screens viewed, feature interactions, approximate session timing, referral or attribution events, and similar product usage telemetry.
• Diagnostic information — such as crash reports, performance traces, and error logs.
• Cookie, SDK, and local storage data — on the web and app environments, as further described in the “Cookies and similar technologies” section below.

3.3 Information we do not intentionally collect

• We do not collect your precise GPS location.
• We do not access your contacts, photos, or microphone unless we clearly ask for permission for a specific feature.
• We do not sell personal data.
• We do not serve third-party advertising in Astralyn.

3.4 Sensitive information notice

Astralyn may involve personal reflection and users may choose to submit highly personal text in chat. Please do not submit medical records, government identification numbers, financial account credentials, or other highly sensitive personal information unless it is strictly necessary for your intended use of the service.

Astralyn is not a healthcare provider, and conversations in Astralyn are not medical records.

4. How we use your information

We use personal data for the following purposes:

• To provide the service — including creating and maintaining your account, generating charts and related outputs, powering AI reflections, and storing conversation history when applicable.
• To operate subscriptions and transactions — including validating entitlements, managing subscription status, and handling receipts and billing-related service operations.
• To personalize your experience — including language, theme, onboarding, and feature preferences.
• To maintain, secure, and improve Astralyn — including debugging, analytics, fraud prevention, abuse detection, policy enforcement, and internal service improvement.
• To communicate with you — including transactional messages such as passwordless sign-in emails, support replies, receipts, and important product or policy notices.
• To send optional updates — where you have opted in to receive product news, marketing, or promotional communications.
• To comply with law — including tax, accounting, fraud prevention, law enforcement requests, and legal claims.

5. Lawful bases for processing

If you are in the UK, EEA, or another jurisdiction that requires a legal basis for processing, we rely on one or more of the following:

• Performance of a contract — where processing is necessary to provide Astralyn, maintain your account, generate requested outputs, deliver subscription features, or respond to your service-related requests.
• Legitimate interests — where processing is necessary for service security, abuse prevention, diagnostics, product analytics, service improvement, and defending legal claims, provided those interests are not overridden by your rights and freedoms.
• Consent — where required by law, including for optional marketing communications, certain cookies or analytics technologies, and optional permissions such as notifications.
• Legal obligation — where processing is necessary to comply with tax, accounting, legal, regulatory, or law-enforcement obligations.

Where we rely on consent, you may withdraw it at any time, but this will not affect the lawfulness of processing before withdrawal.

6. AI processing

Astralyn uses third-party AI providers to generate certain reflection and chat features. When you send content to the AI chat features, that content may be processed by those providers solely to generate a response for Astralyn.

We may use AI-related inputs and outputs to:

• generate responses you request;
• maintain conversation continuity within the product;
• monitor abuse, misuse, security incidents, or service failures;
• improve prompts, UX flows, and feature quality on an aggregated or de-identified basis.

We do not use your personal chat content to run our own model training. Where our providers contractually limit use of customer-submitted API content, we rely on those contractual protections.

Because AI systems may produce inaccurate or incomplete outputs, you should not rely on Astralyn for medical, legal, financial, or other professional advice.

7. Third parties and service providers

We use carefully selected service providers that process data on our behalf or provide infrastructure necessary to operate Astralyn. Our current providers may include:

• Supabase — authentication, database, and backend infrastructure;
• Anthropic — AI processing for chat and reflection features;
• PostHog — product analytics;
• Sentry — crash reporting and diagnostics;
• Resend — transactional email delivery;
• RevenueCat — subscription and entitlement management;
• Apple App Store / Google Play — payment processing and app marketplace services.

These service providers may process personal data under their own terms and privacy commitments, and we require them to handle data consistently with applicable law and our contractual obligations.

We may also disclose personal data:

• to professional advisers, auditors, or legal counsel;
• in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets;
• to law enforcement, regulators, courts, or other third parties where required by law or reasonably necessary to protect rights, safety, and the integrity of Astralyn.

8. Cookies and similar technologies

Astralyn may use cookies, SDKs, pixels, local storage, and similar technologies to:

• keep you signed in;
• remember settings and preferences;
• understand service usage and performance;
• detect abuse and maintain security;
• measure feature adoption and improve the product.

Types of technologies we may use

• Strictly necessary technologies — required to operate the website or app and provide core functionality.
• Analytics technologies — used to understand how users interact with Astralyn and improve performance and product design.
• Preference technologies — used to remember settings such as language or theme.

Where required by law, we will request your consent before using non-essential cookies or similar technologies, and you may update your preferences at any time.

9. Data retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Our general retention approach is as follows:

• Account information — retained while your account remains active and for a limited period afterward as necessary for account recovery, security, dispute handling, and legal compliance.
• Birth data and profile content — retained while your account is active, or until you delete that information or your account.
• Chat history and in-app messages — retained while your account is active unless you delete them earlier, and removed or de-identified within a reasonable period after account deletion.
• Support communications — retained as needed to resolve issues, maintain records, and improve support operations.
• Analytics and diagnostics — retained for limited periods appropriate to security, debugging, analytics, and service improvement needs, then deleted, aggregated, or de-identified where feasible.
• Billing, tax, and accounting records — retained for the period required by applicable law.
• Backups — may persist for a limited rolling period before deletion or overwrite.

When you delete your account, we will take commercially reasonable steps to delete or de-identify your personal data, except where retention is required for legal, tax, accounting, fraud prevention, dispute resolution, or backup restoration purposes.

10. International data transfers

Astralyn operates globally, and your personal data may be processed in countries other than the one in which you live, including the United States and other jurisdictions where our service providers operate.

Where required by law, we rely on appropriate safeguards for international transfers, such as:

• adequacy decisions where available;
• standard contractual clauses;
• equivalent contractual, technical, and organizational safeguards.

You may contact us for additional information about the safeguards relevant to your data.

11. Your privacy rights

Depending on where you live, you may have rights including:

• the right to access the personal data we hold about you;
• the right to correct inaccurate personal data;
• the right to delete personal data, subject to exceptions;
• the right to restrict certain processing;
• the right to object to certain processing, including processing based on legitimate interests;
• the right to data portability;
• the right to withdraw consent where processing is based on consent;
• the right to lodge a complaint with a supervisory authority or regulator.

To exercise your rights, email privacy@astralyn.app. We may need to verify your identity before processing certain requests. We may also deny or limit requests where permitted by law, for example where fulfilling the request would adversely affect the rights of others or conflict with legal obligations.

We will respond within the timeframe required by applicable law.

California privacy notice

If you are a California resident, you may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including rights to know, access, delete, correct, and limit certain uses of personal information, subject to statutory exceptions and applicability thresholds.

Astralyn does not sell personal information and does not share personal information for cross-context behavioral advertising as those terms are commonly used in California privacy law.

If you use an authorized agent to submit a request, we may ask for proof of authorization and identity verification as permitted by law.

12. Children’s privacy

Astralyn is intended for users 18 years of age or older. We do not knowingly collect personal data from anyone under 18.

If you believe that a person under 18 has created an account or provided us with personal data, contact privacy@astralyn.app and we will investigate and, where appropriate, delete the relevant information.

13. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal data, including encryption in transit, access controls, logging, and security features provided by our infrastructure vendors.

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal data, we will notify affected users and authorities where required by law.

14. Automated decision-making

Astralyn does not make solely automated decisions that produce legal effects or similarly significant effects on individuals.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we may notify you through the app, on the website, by email, or by other appropriate means. The “Last updated” date at the top indicates when this version became effective.

16. Contact us

If you have questions, concerns, or privacy requests, contact:

• Privacy: privacy@astralyn.app
• Support: support@astralyn.app
• Website: https://astralyn.app
• Mailing address: Parts For Life LLC, Dallas, Texas, United States

← Back to Astralyn