Privacy Policy

Astrobloom (myastrobloom.com and the Astrobloom mobile apps) is operated by Astro Bloom Limited, a company registered in Hong Kong (“Astrobloom”, “we”, “us”). Astro Bloom Limited is the controller of the personal data described in this policy. This policy explains what we collect, why, on what legal basis, how long we keep it, who receives it and the rights you have.

• Account information: phone number, email address, username
• Chart information: date of birth, time of birth, place of birth, name, gender (used to generate cultural personality analysis)
• Usage data: features you use, and when and how often you use them
• Device information: browser type, operating system version, screen resolution (used to optimize display)
• Payment information: transaction records (specific payment details are processed by third-party payment providers; we do not store sensitive payment information such as bank card numbers)
• Analytics data, only if analytics is allowed (see the Cookie Policy): pages and features you use, a random identifier stored on your device, the campaign link you arrived from and your approximate country derived from your IP address
• Email records: for the product emails (including reminders about an unfinished order), monthly summaries and account notices (such as a trial or membership about to end) we send you, whether each email was delivered, bounced or was reported as spam. Where we count opens and clicks, also when you first opened each email and first clicked a link in it, and how many times you did: opens with a 1×1 image in the email (unless we have turned open counting off), clicks with links that pass through our own site. We decide whether to include our own tracking when each email is sent, using the location information then on record. We include it only when two pieces of information both place you outside the EEA, the UK and Switzerland: the latest country recorded during sign-in or session renewal, from what our network provider reports for your connection, if it was recorded in the last 90 days; and your device’s time zone as last saved with your account. Even then we leave tracking out if anything else we hold suggests you are in those places (your region setting, or the country recorded with an order, an email consent or a cookie choice). Otherwise we do not count opens or clicks ourselves: we add no such image, and our links identify you only where they have to, to manage or confirm your subscription. We never add our own open or click counting to sign-in, security or subscription-confirmation emails. Separately, our email provider Brevo adds its own open-tracking image and passes links through its servers to count clicks, in every email it sends for us, including sign-in, security and subscription-confirmation emails, wherever you are. We have set Brevo to keep these counts anonymous: they only go into overall totals and are not linked to you in its reports. To see which emails are useful, we also compare the emails we sent you with the orders you paid for (amount and currency) in the 7 days after each email and, where we count clicks, in the 7 days after your first click. Unsubscribing stops comparisons with your orders for all your emails, including earlier ones. Resubscribing to emails does not automatically restart these comparisons.
• Contributions: titles, summaries, body text, tags and images submitted by verified authors, and records of their review.

• Generate personalized cultural personality analysis reports
• Provide personalized trend insights and calendar services
• Process your orders and payments
• Improve product features and user experience
• Send service notifications and important updates
• Ensure account security and prevent risks
• Review and publish contributions submitted by verified authors, with attribution under the author's nickname or a generic contributor label if no nickname is set.

If you are in the European Economic Area (EEA), the United Kingdom or Switzerland, we rely on the following legal bases:

• To provide the service you signed up for (performance of a contract): your account, charts and reports, purchases and subscriptions, and service messages.
• Your consent: analytics (our own statistics, Google Analytics and Firebase Analytics), sharing data with AI service providers for AI features, push notifications, and the product emails and monthly summaries you subscribe to. You can withdraw consent at any time; for emails, with the unsubscribe link in any of them or in your email settings.
• Our legitimate interests: keeping the service secure, preventing fraud and abuse, diagnosing errors, and seeing which of our emails are useful from whether each one was delivered and whether you paid for an order in the 7 days after it. To leave our own open and click counting out for readers who may be in these places, we also note the country your connection comes from when you sign in or your session is renewed. We do not add our own open or click counting to emails to those readers, though our email provider still counts opens and clicks anonymously (see “Information We Collect”). You can object to this processing (see “Your Rights”). Unsubscribing from any type of our emails also stops the comparison with your orders for all your emails, including earlier ones, and resubscribing to emails does not automatically restart it.
• Legal obligations: keeping payment and accounting records required by law.
• Contributions: we rely on performance of a contract to handle and publish the contribution you submit. Review and compliance checks, including reviewer-triggered translation, rely on our legitimate interests in protecting people's rights and operating a safe, compliant platform. You may object as described in “Your Rights”. The submission rights confirmation grants a content license; it is not consent to personal-data processing.

Your personal information is stored on secure servers. We implement the following security measures: all data transmissions are encrypted via HTTPS; sensitive information is stored with encryption; strict access controls are enforced; and regular security audits and vulnerability assessments are conducted. Although we make every effort to protect your information, please understand that no internet environment is 100% secure. We recommend that you safeguard your login credentials.

Uploaded contribution images are re-encoded and metadata, including EXIF and GPS location data, is removed. This does not remove personal information visible in the image itself.

• Account, chart and report data: for as long as your account exists. After you delete your account we delete or anonymize it within 30 days, except where the law requires us to keep it.
• Analytics data: events in our own statistics are deleted after 90 days; Google Analytics keeps event data for 14 months.
• Email records (which emails we sent you, delivery, opens, clicks): for as long as your account exists; they are deleted when you delete your account.
• Records of your cookie and analytics choices: 3 years, so that we can show that we respected them.
• Payment and invoice records: for as long as tax and accounting law requires, generally up to 7 years.
• Contributions are retained while published and while your account exists, including drafts and review records. When you delete your account, your contributions are taken offline and their titles, summaries, body text, tags, images and attribution are deleted. Contribution content in caches and backups is cleared within 30 days after account deletion. Review-event metadata without contribution content is retained for 2 years after account deletion, and longer if needed until any dispute or legal proceedings have concluded. These exceptions do not permit continued public display of the contribution itself.

Our servers are in the United States and our website is delivered through Cloudflare’s global network. Our service providers, such as Google, Stripe and Apple, may process data in the United States and other countries.

When we transfer personal data of people in the EEA, the UK or Switzerland to a country without an adequacy decision, we rely on the EU–US Data Privacy Framework where the recipient is certified, or on the Standard Contractual Clauses in our providers’ data processing terms.

Some AI features use providers that process data in China, which does not have an EU adequacy decision. We send them only the de-identified data described in “AI Services and Data Sharing”, and only after you give explicit consent in the AI consent prompt.

Contribution review translation sends the submitted text to Google for processing in the United States and other locations. This transfer relies on the Data Privacy Framework or Standard Contractual Clauses described above. For transfers from the UK, we rely on the UK Extension to the EU–US Data Privacy Framework, for which Google LLC is certified; where that extension does not apply, we use the Standard Contractual Clauses with the UK Addendum, or the UK International Data Transfer Agreement (IDTA). You can request a copy of the safeguards relied on by using the privacy contact details in “Contact Us” below. This processing is separate from the AI features processed in China described in the preceding paragraph.

We commit to the following: we will not sell your personal information to third parties. Exceptions include: sharing with your explicit consent; disclosure required by applicable laws or regulations, or by administrative or judicial authorities; and cases where disclosure is necessary to protect the personal or property safety of users or the public. We may use de-identified statistical data for academic research or product improvement; such data cannot be used to identify specific individuals.

If we need to share your data with a third-party AI service, see the «AI Services and Data Sharing» section below.

Published contributions and the author's nickname (or a generic contributor label) are public to all visitors.

Some features require sending data to third-party AI service providers to generate interpretations or images. This section describes the features involved, the recipients, the data transmitted, and how you authorize this sharing.

Features powered by AI:

• AI Companion chat
• Liuyao (six-line) interpretation
• AI-assisted naming suggestions
• Character portraits (chart-based AI text and image generation)
• «Is today suitable?» action recommendations and activity AI analysis
• Daily inspirations and conversation memory extraction
• Contribution review translation: when a reviewer selects “Translate into Chinese”, the contribution's title, summary, tags and body text are sent to Google AI (Gemini) to generate a Simplified Chinese translation. The translation is available only to reviewers and is not published. We do not send account identifiers, email addresses or nicknames from your account record; please also keep personal details out of the contribution itself. This reviewer-triggered processing is part of moderation, based on the legitimate interests described below; it is separate from the optional AI features and their consent controls described in this section.

AI service providers:

• DeepSeek — primary provider for AI text services, including chat, analysis and customer support, and independent review of community AI content. Privacy policy: DeepSeek
• MiniMax (international API) — backup provider for AI text services and provider for generating community AI content. Privacy policy: MiniMax
• Google AI (Gemini) (Google LLC) — provider for contribution review translation and the text descriptions and images used to create ideal-partner portraits. Privacy policy: Google

Data sent to AI services:

• Your BaZi chart attributes: five-element composition, day master, ten gods, stem-branch relationships, hidden stems, day pillar of the date being analyzed
• AI Companion chat: the message text you type
• AI naming: chart attributes plus your preferences (e.g. desired characters, gender)
• Character portraits: chart attributes plus your appearance/style preferences
• Activity/inspiration analysis: the title and description you type when creating an activity or inspiration in Astrobloom, or the text you enter in «Is today suitable?» — never content from connected calendars

Data NOT sent to AI services:

We never send data obtained from Google Calendar or other connected calendars to any AI service provider (see “Connected calendars”). We never send your real name, phone number, email address, raw birth date, birth location, device ID or login credentials from your account record. Chart attributes (such as day pillar) are de-identified and cannot be reverse-engineered to determine your exact birth time. Note that AI Companion chat sends the message text you type: before it leaves our servers we automatically mask patterns that look like email addresses, phone numbers, card numbers and national ID numbers, but this masking is best-effort — please avoid typing sensitive personal details into the chat.

Your consent and control:

• The first time you use any AI feature, the app displays an explicit consent prompt that lists the types of data being sent and the recipient. We send data only after you confirm.
• You can withdraw this consent at any time in Account Settings → Privacy. After withdrawal all AI features become unavailable, but your core BaZi analysis is unaffected.
• AI-generated content passes server-side sensitive-content and compliance filters before being displayed.

Provider data handling

The processing of data sent to these providers is subject to their applicable service terms and privacy policies, linked above. Please review those documents for information about data retention, use and available privacy choices.

To provide you with a complete service, we integrate the following third-party services:

• Stripe (Stripe, Inc.) — card and local payment processing on the web. Receives payment details, amount, currency and an order reference.
• Apple In-App Purchase (Apple Inc.) — payment processing on iOS. Receives the purchase transaction and receipt.
• Google Play Billing (Google LLC) — payment processing on Android. Receives the purchase transaction and receipt.
• Google, Apple and Facebook sign-in — used only if you choose social login. We receive your account identifier, name and email address from the provider.
• Expo Push, Apple Push Notification service and Firebase Cloud Messaging — deliver the notifications you have enabled. Receive a device push token and the notification content.
• Google Analytics 4 / Firebase Analytics (Google LLC): product and purchase analytics. Receives usage events, a random identifier and, for signed-in users, a pseudonymous account identifier; our servers also report completed purchases. Used only if analytics is allowed (see the Cookie Policy).
• Sentry (Functional Software, Inc.) — crash and error diagnostics. Receives error traces and device/app version; configured not to attach personal data.
• Brevo (France) — sends verification, security and service emails to the address on your account, and the product tips and monthly summaries you subscribe to. Receives your email address and the content of each email, and counts opens and clicks only in anonymous totals. What we record about these emails, and how Brevo counts opens and clicks, is described under “Information We Collect”. You can turn the subscribed emails off at any time from the link at the bottom of each email or in your email settings.

These third-party service providers process data in accordance with their respective privacy policies. We recommend reviewing their privacy policies for more information.

Depending on where you live, and in particular if you are in the EEA, the UK or Switzerland, you have the right to:

• Access the personal data we hold about you and receive a copy
• Correct inaccurate data (most of it can be edited in Account Settings)
• Delete your data, including deleting your account
• Ask us to restrict processing in certain cases
• Receive data you gave us in a machine-readable format
• Object to processing based on our legitimate interests
• Withdraw consent at any time, for example in Cookie Settings or in the app’s privacy settings. This does not affect processing before you withdrew
• Lodge a complaint with a data protection authority, in particular in the country where you live or work, or where you believe the problem occurred (in the UK the ICO, in Switzerland the FDPIC)

To exercise these rights, contact us using the details below. We may need to confirm your identity. We reply within one month.

We use cookies and similar technologies to keep you signed in, remember your settings and, if allowed, measure how our services are used. The Cookie Policy lists them and explains how to change your choice.

Our services are not directed at children under the age of 14. If we discover that we have collected personal information from a child under 14 without parental consent, we will promptly delete the relevant information. If you are a guardian and become aware that your child has provided us with personal information, please contact us so we can take appropriate action.

We may update this Privacy Policy from time to time. We will tell you about significant changes through a notice on the site or in the app. Where a change affects processing that is based on your consent, we will ask for your consent again.

If you have questions about this Privacy Policy or want to exercise your rights, contact us:

• Controller: Astro Bloom Limited, Hong Kong
• Email: [email protected]
• Submit a ticket via the in-app "Help Center"

We reply within 15 business days, and in any case within one month.