Privacy Policy

1. Data Controller

The data controller operating this application (“AstroBlog”) is an individual developer, reachable at destekastroblog@gmail.com. The controller is established in Türkiye.

2. Personal Data We Collect

Our application collects the following personal data:

• Name and username
• Email address
• Date, time and place of birth (required for astrological calculation)
• Your current city (optional, used for transit analysis)
• In-app chat and reading history
• Device identifier (FCM token, used to deliver notifications)
• Google account information (when you sign in with Google)

3. Purposes of Processing

The data collected is used solely for the following purposes:

• Creating your personal natal chart and producing readings
• Forecast, transit, relationship compatibility (synastry), horary and electional readings
• Managing your user account and authenticating you
• Sending app notifications
• Improving the performance of the application
• Operating the token system and handling purchases

4. Legal Basis for Processing

Where the General Data Protection Regulation (GDPR) applies to you, we process your personal data on the following legal bases:

• Performance of a contract (Art. 6(1)(b)): creating and managing your account, authenticating you, and producing the astrological readings you request from your birth data.
• Consent (Art. 6(1)(a)): sending push notifications and, where applicable, showing personalised advertising. You may withdraw your consent at any time.
• Legitimate interests (Art. 6(1)(f)): keeping the service secure, preventing abuse and fraud, and improving application performance.
• Legal obligation (Art. 6(1)(c)): retaining records of purchases where accounting or tax law requires it.

5. Data Security

Your personal data is protected with industry-standard security measures:

• All data transmission takes place over HTTPS (TLS/SSL) encryption
• Passwords are stored hashed with the bcrypt algorithm and are never kept in plain text
• Data is stored on secure cloud servers (MongoDB Atlas, Hetzner)
• Authentication tokens are time-limited and renewed regularly

6. Sharing with Third Parties

Your personal data is never sold to third parties and is never shared for marketing purposes under any circumstances. We work only with the following technical infrastructure and service providers:

• Google Firebase: push notification and authentication services
• Google Sign-In: optional sign-in with a Google account
• Google AdMob: advertising
• MongoDB Atlas: secure data storage (US/EU servers)
• Google Gemini AI: generation of astrological readings. What we send consists of your chart data, your display name and the text of your question. Your email address, your password and your purchase records are never sent.

7. International Data Transfers

The service providers listed in section 6 may process your data outside your country of residence, including in the United States. Where such a transfer takes place from the European Economic Area, it relies on the data transfer safeguards that those providers put in place under applicable data protection law.

8. Your Rights

Where the GDPR applies to you, you have the following rights in relation to your personal data:

• The right to be informed whether your personal data is being processed (Art. 15)
• The right of access to the data being processed (Art. 15)
• The right to rectification of inaccurate data (Art. 16)
• The right to erasure (Art. 17)
• The right to restriction of processing (Art. 18)
• The right to data portability (Art. 20)
• The right to object to processing based on legitimate interests (Art. 21)
• The right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal (Art. 7(3))
• The right to lodge a complaint with your national data protection supervisory authority (Art. 77)

To exercise these rights, email destekastroblog@gmail.com. We respond to requests within one month.

If you are located in Türkiye, the equivalent rights under the Turkish Personal Data Protection Law No. 6698 (KVKK) apply to you; see the Turkish version of this policy.

9. Automated Processing

Your readings are produced automatically: your birth data is used to calculate your chart, and an AI model turns that calculation into text. What you receive is content generated for you to read.

We do not use automated processing to take decisions that produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR. No decision about your account, your access to the service, the price you pay or any entitlement is taken automatically on the basis of these readings, and we do not profile you for such purposes.

10. Data Retention

Your data is retained for as long as your account is active. When you delete your account, all of your personal data is permanently erased:

• If you delete from inside the app: your data is erased immediately and permanently, with no waiting period.
• If you request deletion by email: your request is completed within 30 days at the latest.

You can find step-by-step instructions for deleting your account and data on the Delete Account and Data page.

11. Children’s Privacy

Our application is not directed at children under 16, or under the lower age limit that applies in your country. We do not knowingly collect any personal data belonging to this age group. If we become aware of such a case, the data concerned is deleted immediately.

12. Cookies and Tracking

Our mobile application does not use cookies. Our website uses only the local storage mechanisms required for basic functionality.

13. Changes to This Policy

This privacy policy may be updated when necessary. Significant changes will be announced to users by in-app notification. The current policy is always available on this page.

14. Contact

For any questions or requests regarding our privacy policy or your personal data:

Email: destekastroblog@gmail.com

Instagram: @astroblognet