Privacy Policy

This Privacy Policy explains how Simon Tivadar egyéni vállalkozó, trading as AstroZone, processes personal data on https://getastrozone.com, https://astrozone.hu and in the AstroZone mobile application.

Controller: Simon Tivadar egyéni vállalkozó

Address: Felsőöregszőlők szőlő 159., 6400 Kiskunhalas, Hungary

Email: info@astrozone.hu

Telephone: +36 70 347 1251

It applies to account holders, visitors, purchasers and people whose information a user lawfully submits to a compatibility or related feature.

We process your email address, password hash, name, birth date, account timestamps, verification status and session identifiers to create and secure your account and perform our contract. If you choose Google sign-in, we receive the identifier, name, email and profile image made available by Google.

For personalized astrology features we process birth date, time and place, coordinates, zodiac and ascendant data, gender or pronoun choices and preferences you provide. The legal basis is performance of the Service you request. Account and profile data are kept while the account exists, subject to legal retention duties.

We process prompts, questions, selected cards or signs, generated readings, saved history, mood entries, chat messages and contextual notes to provide, save and secure the requested features. This may include information about relationships, beliefs, wellbeing or other sensitive matters that you voluntarily enter.

Please do not provide unnecessary sensitive data. Where EU GDPR Article 9 applies, processing of sensitive information intentionally supplied for the requested feature relies on your explicit action and consent; you may delete history or your account and withdraw consent for future processing. Withdrawal does not affect earlier lawful processing.

Compatibility and related tools may process another person's name, birth details, description or image. The user supplying it is responsible for having a lawful basis and giving any notice required by law. We use it only to deliver the requested feature, store it when the user chooses to save it and protect the Service.

A person who believes their data was submitted without authority may contact info@astrozone.hu to request investigation or removal. We may need enough information to verify the request without disclosing another user's private account data.

AstroZone sends the minimum context needed for a requested generation to AI infrastructure. Depending on the feature, that can include the prompt, relevant conversation history, birth or compatibility data, selected cards and an uploaded image. AI providers receive technical request metadata as part of operating the service.

The primary route uses Vercel AI Gateway and Google Gemini. We do not intentionally use user content to train AstroZone's own general-purpose model. Whether an external provider may retain or use requests depends on the production plan and contractual settings; production settings and processor agreements must match this notice. Do not submit information you are not authorized to process.

AI output is not a decision producing legal or similarly significant effects and is provided for entertainment.

For purchases we process user and product identifiers, amount, currency, transaction status, billing interval, payment-provider references and entitlement history. Web card payments are handled by Stripe; AstroZone does not receive full card details. Mobile purchases are handled by Apple or Google, with RevenueCat supporting entitlement processing.

For direct web invoices we process the billing details required by law through Billingo Technologies Zrt.. Accounting records are retained for the period required by Hungarian law, currently eight years. Payment and entitlement records are processed to perform the contract, prevent fraud and comply with accounting obligations.

If you use referrals, we process invite codes, attribution and awarded credits to operate the program and prevent abuse. For push notifications we process a device push token, platform, locale, preferences and delivery status through Expo and Apple or Google notification services.

We use your email address for security, verification, password recovery, purchase and service messages. Marketing email is sent only with the required consent or other lawful basis and includes an unsubscribe method. Consent can be withdrawn at any time without affecting essential transactional messages.

Vercel Analytics provides aggregated, cookie-free service measurements. Google Analytics 4 and Google Ads conversion measurement load only after the user's consent through the cookie controls. Depending on consent, this may process device and browser information, truncated or pseudonymous IP information, viewed pages, events and purchase value. Google Analytics retention is configured for no more than 14 months.

Essential storage supports authentication, security, consent choices and requested interface state. The Cookie Policy lists current names, purposes and durations. You can reject or withdraw non-essential consent at any time.

We process IP address, user agent, timestamps, request identifiers, errors and security events where needed to operate the Service, detect abuse, investigate incidents and establish or defend legal claims. Access to production data is limited to authorized personnel and service providers who need it for their role. Administrative access should be logged and reviewed.

We use transport encryption, access controls, row-level database policies, backups and monitoring appropriate to the risk. No internet service can guarantee absolute security. We notify authorities and affected people of qualifying incidents as required by law.

Current recipient categories include:

- Hetzner Online GmbH in Germany - servers, self-hosted database, authentication and file storage;

- Vercel Inc. - web hosting and aggregated analytics;

- Vercel AI Gateway and Google Gemini - AI request routing and generation;

- Stripe Payments Europe, Ltd. - web payments;

- Billingo Technologies Zrt. - invoicing;

- RevenueCat, Apple and Google - mobile purchases and entitlements;

- Google - optional OAuth, analytics and ads measurement;

- Expo, Apple and Google - push delivery;

- the configured transactional email/SMTP provider - email delivery;

- OpenStreetMap Foundation Nominatim - place search; a direct client request also exposes the requester's IP address.

We may disclose data to professional advisers, authorities or courts where lawfully required. We do not sell personal data for money.

Primary application storage is hosted in Germany. Some providers operate globally and processing may involve the United States or another country outside the EEA/UK. Where required, transfers rely on an adequacy decision, the EU-US Data Privacy Framework for a participating recipient, approved standard contractual clauses and supplementary safeguards, or another lawful mechanism.

You may ask info@astrozone.hu for information about the applicable transfer safeguard. Provider certifications and contractual safeguards are reviewed periodically.

We keep data only as long as needed for the stated purpose:

- account, profile, saved readings, chat and uploaded user content - until deletion of the item or account, unless a shorter in-product control applies;

- inactive accounts - may be deleted after at least three years following advance notice;

- transaction and invoice records - for the legally required accounting period, currently eight years;

- security and error logs - normally no longer than 90 days unless an incident or legal claim requires longer;

- consent records and legal acceptances - as needed to demonstrate compliance and handle claims;

- Google Analytics data, if enabled - no more than 14 months;

- public share links - until revoked, expired or removed under the product rules.

Deletion from active systems may be followed by limited backup retention until the normal backup cycle completes.

Where GDPR or UK data-protection law applies, you may request access, correction, erasure, restriction, portability and information about transfers; object to legitimate-interest processing; withdraw consent; and lodge a complaint with a supervisory authority. Rights may be limited where law requires retention or the request affects another person's rights.

Send requests to info@astrozone.hu. We may verify identity and normally respond within one month under GDPR. You may complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), 1055 Budapest, Falk Miksa utca 9-11, https://naih.hu, or your local EEA/UK authority.

Depending on the state and whether a statutory threshold applies to AstroZone, US residents may have rights to know or access, correct, delete and obtain a portable copy of personal information; opt out of sale, targeted advertising or certain profiling; limit specified uses of sensitive information; and appeal a refusal. We will not discriminate against you for exercising an applicable privacy right.

Categories collected are identifiers, account and profile data, internet/activity data, approximate or user-provided location and birth information, commercial records, user content, images, inferences generated for entertainment and sensitive information a user chooses to provide. Purposes and recipient categories are described above. AstroZone does not knowingly sell personal information for money. Optional advertising measurement is controlled through cookie consent.

Submit a request or appeal to info@astrozone.hu. We will verify and respond under the law that applies. An authorized agent may act where permitted after authority is verified.

The Service is not directed to children under 16 and we do not knowingly collect their data. If you believe a child supplied data contrary to this rule, contact us for deletion. Local age and parental-consent rules may provide additional protection.

Astrology calculations and AI personalization create entertainment inferences, but AstroZone does not use them to make decisions with legal or similarly significant effects about employment, credit, housing, insurance, education or healthcare.

We may update this Policy when the Service, providers or law changes. Material changes will be announced in the Service and, where appropriate, by email before they take effect. The version and effective date appear at the top.

Privacy questions and rights requests: info@astrozone.hu

Postal address: Felsőöregszőlők szőlő 159., 6400 Kiskunhalas, Hungary

International website: https://getastrozone.com