1. Data Control Manager
DOYEN Audrey, 12 rue Meynadier, 75019-Paris.
GDPR contact email: astroroastapp@gmail.com
If you have any questions regarding the protection of your personal data
or wish to exercise your rights, you can contact us at the address
listed above.
2. Personal Data Collected
2.1. Data Collected During Registration
- Email address (login ID)
- Password (stored as a hash, never in plain text)
- Selected zodiac sign
- Push notification preference (enabled or disabled)
2.2 Data Collected Automatically
- Push notification token, only if you enable notifications
- Account creation date and last login date
- Anonymous technical identifier generated by our authentication service (Supabase).
2.3 Data we do not collect
We do not collect: your last name, first name, phone number, geographic location, browsing data, biometric data, or any data relating to minors. AstroRoast is intended exclusively for adults.
3. Purposes of Processing and Legal Basis
3.1 Provision of the Service
Legal basis: Performance of a contract (Art. 6.1.b GDPR)
- Authentication and management of your account
- Display of your personalized daily horoscope based on your astrological sign
- Feature to share your horoscope on social media
3.2 Push Notifications
Legal basis: Consent (Art. 6.1.a GDPR)
- Sending a daily notification containing your horoscope, only if you enabled this option during registration or in your settings
- You can withdraw your consent at any time from the Profile screen in the app or from your device’s system settings
3.3 Security and Abuse Prevention
Legal basis: Legitimate interests (Art. 6.1.f GDPR)
- Detection and prevention of unauthorized access and fraudulent activities
- Technical access logs for security purposes
4. Data Hosting and International Transfer
Your data is hosted by Supabase (https://supabase.com) on servers located in the European Union (Western Europe region). Supabase Inc. is subject to the European Commission’s Standard Contractual Clauses for data transfers outside the EU.
We do not sell, rent, or share your personal data with third parties for commercial or advertising purposes.
Sharing with Service Providers (Processors):
We do not share any personal data when generating daily horoscopes:
these are generated independently of your profile and in the same way
for each zodiac sign. Our technology provider, MistralAI, does not
receive any information regarding the app’s users or even the percentage
of zodiac signs present on the app. Absolutely no personally
identifiable data (such as your email address or password) is
transmitted to them.
5. Retention Period
- Account data (email, zodiac sign, preferences): retained for as long as your account remains active.
- Notification token: retained until notifications are disabled or the account is deleted.
- Technical security logs: up to 30 days.
- After account deletion: all data is permanently and irreversibly deleted within 30 days.
6. Your Rights
In accordance with the GDPR, you have the following rights regarding your personal data:
- Right of access (Art. 15): to obtain a copy of the data we hold about you (upon request to the contact address)
- Right to rectification (Art. 16): to correct inaccurate data about you (in the app, from the settings)
- Right to erasure (Art. 17): to have your data deleted when it is no longer necessary for the purposes for which it was collected (in the app, from the settings)
- Right to data portability (Art. 20): to receive your data in a structured, machine-readable format (upon request to the contact address)
- Right to object (Art. 21): to object to certain processing activities, particularly for the purpose of notifications (upon request to the contact address)
- Right to restriction (Art. 18): request the temporary suspension of processing
- Right to withdraw your consent at any time, without this affecting the lawfulness of processing carried out prior to withdrawal
To exercise these rights, contact us at: astroroastapp@gmail.com You also have the right to file a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés): Website: https://www.cnil.fr — Phone: 01 53 73 22 22
7. Data Security
We implement the following technical and organizational measures to protect your data:
- Encryption of communications (HTTPS/TLS)
- Passwords stored in hashed form (bcrypt via Supabase Auth)
- Session tokens stored in the device’s secure, encrypted storage
- Strict data access control: each user can only access their own data (Row Level Security)
- Secure hosting with multi-factor authentication for administrator access
8. Nature of the content - Disclaimer
AstroRoast is intended exclusively for individuals 18 years of age and older. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us so that we can delete it.
The horoscopes published by AstroRoast are intended solely for humor and entertainment purposes. They do not constitute predictions, advice, or serious or scientific information under any circumstances. AstroRoast assumes no responsibility for any decisions made based on this content.
9. Changes to This Policy
We reserve the right to modify this Privacy Policy at any time. In the event of a substantial change, you will be notified via an in-app notification or by email at least 15 days before the changes take effect.
The current version is the one with the date shown at the top of this document. Your continued use of the app after receiving notification constitutes your acceptance of the changes.
10. Contact
For any privacy-related questions, contact us at astroroastapp@gmail.com.