Privacy

What is stored

• Account: your email address, and the name and avatar from your Google account if you used one.
• Profile photo: if you upload one, the picture — cropped to a square, at most 512 px — is kept in Supabase Storage in a public folder under a random address. Circle members see it next to your name. Anyone who has the exact link can open it; nobody can list or guess addresses. Removing the photo or deleting your account deletes the file.
• Birth data: date, time, whether the time is known, and the name, coordinates and timezone of the birth place.
• The computed chart: planet positions, houses and aspects, derived from the birth data.
• Your Ask AI conversations: the messages you send and receive, which model produced each answer, and how many tokens it used.
• Notifications and whether you have read them.
• Circle memberships and the share level you chose for each room.
• People: the name, birth data and computed chart of anyone you add for synastry.
• Life events: the label, date and category of anything you mark on your lifeline.
• Reading feedback: your hit/miss mark on a daily line, a transit contact or a natal reading.
• Report requests: report type, status, and — for a relationship-decision report — the question you typed.
• Reading history: which daily reading you were shown, and on which day.
• Notification preferences: how often you want to hear from each source, and your quiet hours.
• Push notification subscription: the endpoint address, the subscription keys and the browser's user_agent — what it takes to deliver a notification to your browser. Kept in Supabase; deleted together with your account.
• Mailing list signups: your email address and which list, if you join one (the weekly sky card, a premium notice, a coming-soon tool).
• Unidentified rate-limit record: the IP address of a visitor using the free tools without an account — kept only for the abuse limit and deleted automatically within about 24 hours.
• Telegram link: if you connect Telegram, the numeric id of your chat with the bot, tied to your account. Disconnecting in the app, or deleting your account, removes it.
• Mobile app push token: if you turn on notifications in the iOS or Android app, the device token and the platform (ios or android). Kept in Supabase; deleted together with your account.
• AI usage record: for each model call, who asked (you or the system), which feature (chat, contact explanation, report, daily reading), the speed/depth tier, the provider and model name, and the number of tokens used. No message text. It is what the usage allowance is counted from. Deleted together with your account.

If you want off a newsletter list: unsubscribe.

What is not stored

• Birth details entered into the free tools. They are computed on the server, returned to you, written nowhere, and never placed in a URL.
• Payment details. We do not take payments yet.
• Location tracking, advertising identifiers, third-party analytics cookies.

What a Circle shares

The birth date, time and place you entered are not shown to anyone at any level. The share level decides how much of the COMPUTED chart others see: Sun and Moon, or Sun, Moon and Rising, or the full natal chart. The full natal chart includes degrees, the Rising and houses, so anyone in the room can work out your birth time to within minutes from them. Only you can change your level; not even a room’s admin can raise it.

What reaches the AI

The model receives structured astrological data, not prose: degree, sign, house, aspect. Your name, your email and your birth place are not sent to it. What you type into Ask AI does of course reach the model — that is the question you asked. Every request goes through OpenRouter, a US-based company, and nowhere else: we hold no direct account with the model vendors. The models behind it are run by OpenAI and Google, and by Anthropic as a fallback. We select only endpoints that do not retain requests or use them for training; this relies on OpenRouter's classification of providers.

Journal notes stay private to you unless you turn on "Use my recent notes" under settings, Reading. While it is on, the text of your last few journal notes (at most three, from the last two weeks, each cut to 240 characters) is sent to the AI provider together with the day's astrological data, so the daily reading can refer to them. A reading written this way is kept for you only: it is not shared with other readers, not shown in Circle, Telegram or the widget, and not used for sign horoscopes, notifications, analytics or error reports. Turn the setting off and notes are no longer sent from the next reading on. Notes already sent are processed under the same terms as the rest of what reaches the AI.

Where it lives

The database is Supabase, with row level security on: every query runs as your session and sees only your rows. The application runs on Vercel.

Other services that receive data

Besides Supabase and Vercel above, these services receive data, and only when the feature is in use. What each of them keeps, and for how long, is set by their own terms, not by us, and is not listed here.

• Resend (email delivery): sign-up confirmation, sign-in link and password-reset messages are sent through Resend. It receives your email address and the message itself, including the one-time link in it.
• Telegram (only if you connected it): Telegram receives your chat id and the text of every message between you and the bot: the morning reading, the answers to the Today, Moon, Week, Sky and Chart commands (calculated chart data included) and whatever you type to the bot. Free text you type to the bot is not sent to the AI.
• Apple and Google notification services (only if you turned notifications on): in the iOS and Android apps a notification is handed to Apple (APNs) or Google (FCM), which receive the device token, the notification's title and text, and the address it opens in the app. In a browser, the push service of the browser's maker (Google, Mozilla, Apple or Microsoft) receives the subscription address and an encrypted notification.
• The AI route (OpenRouter and the model vendors behind it): what is sent is structured chart data (degree, sign, house, aspect) and the text you wrote for the AI: your Ask AI question, the question of a relationship-decision report and, if you turned it on, your recent journal notes. What is not sent: your email address, your birth place, your cycle data. What we keep of a call is the AI usage record listed above, which holds no text.

Legal basis

For each purpose, the ground we rely on (KVKK arts. 5 and 6; GDPR arts. 6 and 9).

• Account, birth data, computed chart, People, life events, readings, conversations, reports, journal and Circle: necessary to provide the service you asked for (contract: KVKK art. 5/2-c, GDPR art. 6(1)(b)).
• Sending chart data and your own question to the AI route: necessary to produce the reading you asked for (contract). Your recent journal notes are sent only if you turn that setting on, which is your explicit consent, withdrawn by turning it off.
• Cycle data: your explicit consent, given by turning the feature on in settings and withdrawn by turning it off. It is health-related data, a special category (KVKK art. 6, GDPR art. 9(2)(a)).
• Notifications (push, Telegram, inbox) and the mailing list: your consent, given when you turn them on or join, and withdrawn when you turn them off or unsubscribe (KVKK art. 5/1, GDPR art. 6(1)(a)).
• Circle sharing: the share level you choose for each room is your consent to that sharing. The default is the narrowest.
• Security, rate limiting and error reports: our legitimate interest in keeping the service safe and working, with as little data as possible (KVKK art. 5/2-f, GDPR art. 6(1)(f)).

How long it is kept

Each kind of data and how long it stays. Where a period is given, a daily job deletes what is past it; where it says "until you delete it", nothing deletes it for you.

• Account, birth data, computed charts, People, life events, reading history and feedback: until you delete it or delete your account.
• Ask AI conversations: until you delete it or delete your account.
• Reports (the request and the finished text): until you delete it or delete your account.
• Journal notes: until you delete it or delete your account.
• Circle memberships and share levels: until you delete it or delete your account.
• Push subscriptions and device tokens: until you delete it or delete your account. A subscription that a push service reports as gone is removed at the next send. One that stays valid but is never used is not removed automatically.
• Telegram link: until you delete it or delete your account. You can disconnect it in the app at any time.
• Mailing list addresses: until you unsubscribe.
• Rate-limit records of visitors without an account (IP address): 1 day. Deleted by the database the next time the counter is used.
• Usage counters per reader (chart, chat and contact-explanation limits): 30 days. Counted from the moment of use.
• AI usage records (no message text): 395 days. Counted from the call. 395 days is 13 months.
• Pair-link guest submissions: first name, computed result and result page address: 90 days. Counted from the day the link expires or is revoked. The person saved in the owner’s People list is not removed by this; the owner deletes it.
• Expired or revoked invite links, pair links, widget tokens and Telegram link codes: 90 days. Counted from the day they expire or are revoked.
• Error reports (only when error reporting is on): as long as the vendor keeps it; we set no period. The period is set in the Sentry project, not here, and this page does not state a number for it.

Transfers abroad

The services named on this page, among them Supabase, Vercel, Resend, OpenRouter and the model vendors behind it, Telegram, Apple and Google, process data outside Türkiye and in part outside the European Economic Area. The application itself runs in Frankfurt on Vercel. We send data to them because it is needed to provide the feature you use (contract), and for optional features (notifications, Telegram, journal notes in the reading, cycle data where it applies) because you turned them on. This page does not claim an adequacy decision or standard contractual clauses for these transfers, and we have not checked whether the vendors’ own terms contain them. If you do not want data to go abroad, do not use the feature that sends it, or delete your account.

What is counted

We count how often each page is opened, plus these moments: onboarding starting and finishing, whether a birth time was known, a circle being created, an invitation being sent and accepted, a notification being opened, a notification frequency being changed, the daily reading being viewed, and asking to be told about premium. The counter lives where the app lives — on Vercel — so it sets no cookie and goes to no third party. What an event may carry comes from a closed list written in advance; your birth date, your email address, your chart, your conversations and your reports are not on that list and never reach it.

When something breaks

When the app fails we send the error and where it happened to Sentry — only if error reporting has been configured, which is optional. What goes into a report is the error message, the stack trace and the request path. What does not: your birth data, your email address, your chart contents, your chat messages and your report text. No screen recording is ever taken. Everything after the question mark in an address, and the secret code inside an invitation link, is removed before the report is sent.

Exercising your rights

You can ask us to confirm whether we process your data, give you a copy, correct it, delete it, restrict or object to its processing, and you can withdraw a consent you gave (KVKK art. 11, GDPR arts. 15 to 21). In the app you can export your data and delete your account from the account menu; switching a feature off withdraws the consent behind it. Deleting an account removes your birth data, your chart, your conversations, your reports (the finished text as well as the request that produced it) and your Circle memberships together. For anything the app does not do itself, write to the address below.

Complaints

If you are not satisfied with our answer, you can complain to the supervisory authority. In Turkey that is the Personal Data Protection Board (KVKK, kvkk.gov.tr). If you live in the European Union or the European Economic Area, it is the data protection authority of your country.

Who answers for this data

Lizastro is responsible for the data described on this page. There is no separate company behind it.

Questions and requests about your data go to app@lizastro.app

Governing law

This page and the use of Lizastro are governed by the laws of the Republic of Türkiye.