Privacy
Privacy policy
Last revised: 8 November 2026
Astra Family works without an account and without a profile. Your birth details stay on your device, encrypted in your browser. Only two things leave it, and you trigger both: your request for help with a bond, handed to an artificial intelligence engine, and the activation of a pass, if you buy one.
What the app stores
For each member of your family: a first name, a date of birth, a time of birth if you know it, a place of birth, and the bond linking them to the others.
Your preferences: whether you have finished the introduction and whether full access is on. If you bought a pass: its code, its end date, and a randomly drawn device identifier.
Nothing else. No photo, no address book, no location, no advertising identifier.
Where this is kept
Only in your browser’s storage, on the device you are using. It is neither sent nor backed up to us: we have no technical means of reaching it.
It therefore depends on that browser. Clearing your browsing data deletes it, and Safari may erase it after seven days without a visit if the app has not been added to the home screen. It does not follow you from one device to another. "Export my data", in the Me tab, lets you keep a copy.
It is encrypted there, with a key created by your browser that no script can extract. This protection has limits, which we would rather write down: it is weaker than that of an app installed from a store, and someone with access to your open session or to your entire disk could read this information. On a shared device, use "Delete all my data" after use.
What leaves your device
The astrological calculations and the readings of your bonds are produced on your device. Nothing leaves until you ask for it.
Four cases are exceptions, and you trigger all four. First, the conversational help: your request is passed to an artificial intelligence engine, described in the next section. Second, activating a pass, described further down. Third, exporting your data. Fourth, sharing a family report - you then choose what is included, and dates, times and places of birth can never be shared.
The artificial intelligence engine
When you ask "Help me understand" about a bond, the answer is written by an artificial intelligence engine. That means passing it what it needs in order to answer.
What is passed to it: the kind of bond linking the two people, the qualitative intensities of the reading, the calculated astrological angles, and the question you wrote.
What is never passed to it: the first names - the two people are referred to by plain markers, which your device replaces with the real first names once the answer comes back. Nor the dates, times or places of birth: those stay on the device and serve only the local calculation. No device identifier, no account and no history accompanies them.
This applies to the question you write yourself as well. If you put the first name of either of the two people in it, that name is replaced by its marker before sending, then restored on screen: you reread your question exactly as you typed it, and the engine never saw it that way.
One limit remains, and we would rather write it than leave it unsaid: this replacement knows only the two people in the bond you are looking at. If you name someone else in your question - a classmate, a teacher, another parent - that name goes with your words.
Everything in transit is encrypted between your device, our relay and the engine.
These elements serve only to produce the answer you read on screen. They build no profile and feed no advertising. Nor does the provider use them to train its models: that refusal is switched on for our account.
One exception, which we would rather write down: this provider applies automated abuse monitoring on its interface, to enforce its own terms of use. It is automatic and involves no reading by us.
Your request passes through a technical relay that we operate - that is what allows us not to expose the engine’s access key inside the app, where anyone could retrieve it. For these requests, this relay writes nothing to disk: the request exists only in memory, for the few seconds of the round trip. Once the answer is displayed, nothing of it remains with us. The publisher does not read your exchanges and keeps no copy of them.
Engine used: Mistral AI, a French company, with servers located in the European Union. How long the provider keeps it: the duration of our contract with that provider; once that contract ends, the data ceases to be accessible within thirty days.
This engine is hosted in the European Union: with this provider, your data is subject to no international transfer.
If you buy a pass
Payment is handled by SumUp, which processes your payment data under its own responsibility. We never see your card number. We receive the transaction details: its amount, its date and what identifies it.
To receive your code, you give us your contact details, in the payment note or by email. We keep your email address, the name and postal address given, the code issued to you and your invoice: that is what allows us to help you, refund you and keep our accounts. This processing is necessary to perform your purchase.
When you activate a code, our relay keeps, for that code: the date of its first activation, up to three randomly drawn device identifiers and its possible cancellation. None of this names you. It is kept for as long as needed to prevent a finished code from being used again.
Your exchanges with us are kept for the duration of the pass, then for five years as evidence. Accounting records are kept for ten years, as the law requires.
Hosting
The site, the app and our relay are hosted by Cloudflare, Inc., a company established in the United States. Your IP address necessarily reaches it, as with any host. We do not record it: it is used in memory to limit abuse. These transfers are covered by the safeguards provided for by the General Data Protection Regulation.
Serious questions are not sent
Some questions should not receive an astrological answer. When yours touches a serious subject - violence, abuse, bullying, eating disorders, addiction, suicidal thoughts, sexual assault - it is not passed to the artificial intelligence engine. Not partly: not at all.
The recognition happens on your device, before anything is sent. The app then answers on its own and points you to a professional: a doctor, a psychologist, or your child’s school support team.
This is not an instruction given to the engine, which it might follow badly or forget: it is a refusal to send, decided before it. Astra Family makes no diagnosis and will never give the appearance of making one.
Reporting an answer
An artificial intelligence gets things wrong. Under every answer, a "Report this answer" button lets you tell us what is wrong: dangerous advice, disturbing content, something that looks like a diagnosis, an invented claim.
The report goes through your own mail app. The screen first shows you what will be attached - the answer as you read it, first names included - and nothing is sent until you press "Send" in your mail software. No date, time or place of birth goes with it.
This is the only circumstance in which the publisher reads an answer that was shown to you, and you are the one who triggers it. We use it to tighten the rules given to the engine.
Children
Children’s profiles are never public, are not searchable and are never used for targeted advertising - the app shows no advertising at all.
These profiles are created by a parent, on their own device, and stay under their control. They can be changed or deleted at any time.
Advertising, analytics, trackers
None of the three. No ad network, no analytics tool, no third-party tracker, no cross-app tracking.
Your rights
See and correct: everything is visible and editable in the app, at any time.
Get your data back: "Export my data", in the Me tab, produces a readable file containing everything that is stored.
Erase: "Delete all my data", in the Me tab, permanently erases all of it. Clearing this site’s data in your browser has the same effect.
None of this requires a request to us: it concerns data that is on your device, it is immediate, and you do it yourself.
We keep none of the requests sent to the artificial intelligence engine, and none of them is attached to an account: there is no history with us to consult or to erase. At the provider of the engine, they are kept for the period stated above, without being linked to your identity.
For what we keep about a purchase, you have the rights of access, rectification, erasure, restriction and objection, within the limits of our accounting obligations. Write to us at the address given below.
What the service is
Astra Family offers a symbolic reading drawn from astrology. It is neither a science, nor medical advice, nor psychological advice. The app makes no diagnosis and has no capacity to make one.
Complaints
The publisher is established in France: the General Data Protection Regulation applies, and the French version of this document is the authoritative one.
Most of your data never leaves your device: there is nothing to ask us for, everything happens inside the app. For what is passed to the artificial intelligence engine or relates to a purchase, the publisher remains your point of contact and answers at the address given below.
If you believe your rights are not being respected, you may contact the French data protection authority, the Commission nationale de l’informatique et des libertés (CNIL), at cnil.fr.
Contact
Publisher: François-Philippe Moussavou, sole proprietor trading as Hairtech Room, established in France.
For any question about this document: [email protected].