Privacy Policy

Astrobloom ("we", "us", or "our") understands the importance of your personal information. We are committed to protecting your personal data in accordance with applicable laws and regulations by implementing appropriate security measures. This Privacy Policy applies to all services provided by the Astrobloom platform (myastrobloom.com).

• Account information: phone number, email address, username
• Chart information: date of birth, time of birth, place of birth, name, gender (used to generate cultural personality analysis)
• Usage data: feature usage records, access times and frequency
• Device information: browser type, operating system version, screen resolution (used to optimize display)
• Payment information: transaction records (specific payment details are processed by third-party payment providers; we do not store sensitive payment information such as bank card numbers)

• Generate personalized cultural personality analysis reports
• Provide personalized trend insights and calendar services
• Process your orders and payments
• Improve product features and user experience
• Send service notifications and important updates
• Ensure account security and prevent risks

Your personal information is stored on secure servers. We implement the following security measures: all data transmissions are encrypted via HTTPS; sensitive information is stored with encryption; strict access controls are enforced; and regular security audits and vulnerability assessments are conducted. Although we make every effort to protect your information, please understand that no internet environment is 100% secure. We recommend that you safeguard your login credentials.

We commit to the following: we will not sell your personal information to third parties. Exceptions include: sharing with your explicit consent; disclosure required by applicable laws or regulations, or by administrative or judicial authorities; and cases where disclosure is necessary to protect the personal or property safety of users or the public. We may use de-identified statistical data for academic research or product improvement; such data cannot be used to identify specific individuals.

If we need to share your data with a third-party AI service, see the «AI Services and Data Sharing» section below.

Some features require sending data to third-party AI service providers to generate interpretations or images. This section describes the features involved, the recipients, the data transmitted, and how you authorize this sharing.

Features powered by AI:

• AI Companion chat
• Liuyao (six-line) divination interpretation
• AI-assisted naming suggestions
• Character portraits (chart-based AI text and image generation)
• «Is today suitable?» action recommendations and activity AI analysis
• Daily inspirations and conversation memory extraction

AI service providers:

• Google AI (Gemini) (Google LLC) — primary provider for AI Companion chat, AI naming suggestions and portrait image generation. Privacy policy: ai.google.dev/gemini-api/terms
• OpenAI (OpenAI, L.L.C.) — failover provider for AI Companion text chat only, used when Gemini is unavailable. Privacy policy: openai.com/policies/privacy-policy

Data sent to AI services:

• Your BaZi chart attributes: five-element composition, day master, ten gods, stem-branch relationships, hidden stems, day pillar of the date being analyzed
• AI Companion chat: the message text you type
• AI naming: chart attributes plus your preferences (e.g. desired characters, gender)
• Character portraits: chart attributes plus your appearance/style preferences
• Activity/inspiration analysis: the activity description you enter in «Is today suitable?»

Data NOT sent to AI services:

We never send your real name, phone number, email address, raw birth date, birth location, device ID or login credentials from your account record. Chart attributes (such as day pillar) are de-identified and cannot be reverse-engineered to determine your exact birth time. Note that AI Companion chat sends the message text you type: before it leaves our servers we automatically mask patterns that look like email addresses, phone numbers, card numbers and national ID numbers, but this masking is best-effort — please avoid typing sensitive personal details into the chat.

Your consent and control:

• The first time you use any AI feature, the app displays an explicit consent prompt that lists the types of data being sent and the recipient. We send data only after you confirm.
• You can withdraw this consent at any time in Account Settings → Privacy. After withdrawal all AI features become unavailable, but your core BaZi analysis is unaffected.
• AI-generated content passes server-side sensitive-content and compliance filters before being displayed.

Third-party protection commitment:

We have data processing agreements with the AI service providers above that require them to apply security and confidentiality protections at a level equal to or higher than those described in this Privacy Policy, to use received data solely for delivering the services we contract for, and not to use it for model training (except aggregated anonymous statistics).

To provide you with a complete service, we integrate the following third-party services:

• Stripe (Stripe, Inc.) — card and local payment processing on the web. Receives payment details, amount, currency and an order reference.
• Apple In-App Purchase (Apple Inc.) — payment processing on iOS. Receives the purchase transaction and receipt.
• Google Play Billing (Google LLC) — payment processing on Android. Receives the purchase transaction and receipt.
• Google, Apple and Facebook sign-in — used only if you choose social login. We receive your account identifier, name and email address from the provider.
• Expo Push, Apple Push Notification service and Firebase Cloud Messaging — deliver the notifications you have enabled. Receive a device push token and the notification content.
• Google Analytics 4 / Firebase Analytics (Google LLC) — product and purchase analytics. Receives events, an app instance identifier and, for signed-in users, a pseudonymous account identifier. Subject to your analytics consent choice.
• Sentry (Functional Software, Inc.) — crash and error diagnostics. Receives error traces and device/app version; configured not to attach personal data.
• Our email delivery provider — sends verification, security and service emails to the address on your account.

These third-party service providers process data in accordance with their respective privacy policies. We recommend reviewing their privacy policies for more information.

You have the right to: view and modify your personal information (via "Account Settings"); delete chart data you have created; delete your account (after deletion, we will delete or anonymize your personal information within a reasonable period, unless otherwise required by law); and withdraw your consent (by discontinuing use of the related services).

We use cookies and similar technologies to maintain your login status, remember your preference settings, and conduct anonymous traffic analysis. You can manage or delete cookies through your browser settings, but this may affect the normal use of certain features.

Our services are not directed at children under the age of 14. If we discover that we have collected personal information from a child under 14 without parental consent, we will promptly delete the relevant information. If you are a guardian and become aware that your child has provided us with personal information, please contact us so we can take appropriate action.

We may revise this Privacy Policy from time to time. If there are significant changes, we will notify you through in-app notifications or dialog prompts. If you continue to use our services after the policy update, you are deemed to have agreed to the updated Privacy Policy.

If you have any issues, comments, or suggestions regarding this Privacy Policy, or if you need to exercise your personal data rights, please contact us through the following channels:

• Email: [email protected]
• Submit a ticket via the in-app "Help Center"

We will process your request within 15 business days.