Privacy Policy

This Privacy Policy explains how Simon Tivadar egyéni vállalkozó, trading as AstroZone, processes personal data on https://getastrozone.com, https://astrozone.hu and in the AstroZone mobile application.

Controller: Simon Tivadar egyéni vállalkozó

Address: Felsőöregszőlők szőlő 159., 6400 Kiskunhalas, Hungary

Email: info@astrozone.hu

Telephone: +36 70 347 1251

It applies to account holders, visitors, purchasers and people whose information a user lawfully submits to a compatibility or related feature.

We process your email address, password hash, name, birth date, account timestamps, verification status and session identifiers to create and secure your account and perform our contract. If you choose Google sign-in, we receive the identifier, name, email and profile image made available by Google.

For personalized astrology features we process birth date, time and place, coordinates, zodiac and ascendant data, gender or pronoun choices and preferences you provide. The legal basis is performance of the Service you request. Account and profile data are kept while the account exists, subject to legal retention duties.

We process prompts, questions, selected cards or signs, generated readings, saved history, mood entries, chat messages and contextual notes to provide, save and secure the requested features. This may include information about relationships, beliefs, wellbeing or other sensitive matters that you voluntarily enter.

Please do not provide unnecessary sensitive data. Where EU GDPR Article 9 applies, processing of sensitive information intentionally supplied for the requested feature relies on your explicit action and consent; you may delete history or your account and withdraw consent for future processing. Withdrawal does not affect earlier lawful processing.

Compatibility and related tools may process another person's name, birth details, description or image. The user supplying it is responsible for having a lawful basis and giving any notice required by law. We use it only to deliver the requested feature, store it when the user chooses to save it and protect the Service.

A person who believes their data was submitted without authority may contact info@astrozone.hu to request investigation or removal. We may need enough information to verify the request without disclosing another user's private account data.

AstroZone sends the minimum context needed for a requested generation to AI infrastructure. Depending on the feature, that can include the prompt, relevant conversation history, birth or compatibility data, selected cards and an uploaded image. AI providers receive technical request metadata as part of operating the service.

The primary route uses Vercel AI Gateway and Google Gemini. We do not intentionally use user content to train AstroZone's own general-purpose model. Whether an external provider may retain or use requests depends on the production plan and contractual settings; production settings and processor agreements must match this notice. Do not submit information you are not authorized to process.

Voice input (dictation): question fields can be dictated instead of typed. The microphone activates only when you press the microphone button and listens until you stop it, or for 60 seconds at most. The recording is not stored on your device or in our systems; the recognised text goes into the input field, where you can edit it, and nothing is processed further unless you then press send. Recognition normally runs in your browser or mobile operating system (Google or Apple, depending on your device settings), and we receive no audio on that route. Where that is unavailable, the recording is sent to the AI providers named above for transcription only and is discarded immediately afterwards.

AI output is not a decision producing legal or similarly significant effects and is provided for entertainment.

For purchases we process user and product identifiers, amount, currency, transaction status, billing interval, payment-provider references and entitlement history. Web card payments are handled by Stripe; AstroZone does not receive full card details. Mobile purchases are handled by Apple or Google, with RevenueCat supporting entitlement processing.

For direct web invoices we process the billing details required by law through Billingo Technologies Zrt.. Accounting records are retained for the period required by Hungarian law, currently eight years. Payment and entitlement records are processed to perform the contract, prevent fraud and comply with accounting obligations.

If you use referrals, we process invite codes, attribution and awarded credits to operate the program and prevent abuse. For push notifications we process a device push token, platform, locale, preferences and delivery status through Expo and Apple or Google notification services.

We use your email address for security, verification, password recovery, purchase and service messages. Marketing email is sent only with the required consent or other lawful basis and includes an unsubscribe method. Consent can be withdrawn at any time without affecting essential transactional messages.

Vercel Analytics provides aggregated, cookie-free service measurements. Google Analytics 4 and Google Ads conversion measurement load only after the user's consent through the cookie controls. Depending on consent, this may process device and browser information, truncated or pseudonymous IP information, viewed pages, events and purchase value. Google Analytics retention is configured for no more than 14 months.

Essential storage supports authentication, security, consent choices and requested interface state. The Cookie Policy lists current names, purposes and durations. You can reject or withdraw non-essential consent at any time.

We process IP address, user agent, timestamps, request identifiers, errors and security events where needed to operate the Service, detect abuse, investigate incidents and establish or defend legal claims. Access to production data is limited to authorized personnel and service providers who need it for their role. Administrative access should be logged and reviewed.

We use transport encryption, access controls, row-level database policies, backups and monitoring appropriate to the risk. No internet service can guarantee absolute security. We notify authorities and affected people of qualifying incidents as required by law.

Current recipient categories include:

- Hetzner Online GmbH in Germany - servers, self-hosted database, authentication and file storage;

- Vercel Inc. - web hosting and aggregated analytics;

- Vercel AI Gateway and Google Gemini - AI request routing and generation;

- Stripe Payments Europe, Ltd. - web payments;

- Billingo Technologies Zrt. - invoicing;

- RevenueCat, Apple and Google - mobile purchases and entitlements;

- Google - optional OAuth, analytics and ads measurement;

- Expo, Apple and Google - push delivery;

- the configured transactional email/SMTP provider - email delivery;

- OpenStreetMap Foundation Nominatim - place search; a direct client request also exposes the requester's IP address.

We may disclose data to professional advisers, authorities or courts where lawfully required. We do not sell personal data for money.

Primary application storage is hosted in Germany. Some providers operate globally and processing may involve the United States or another country outside the EEA/UK. Where required, transfers rely on an adequacy decision, the EU-US Data Privacy Framework for a participating recipient, approved standard contractual clauses and supplementary safeguards, or another lawful mechanism.

You may ask info@astrozone.hu for information about the applicable transfer safeguard. Provider certifications and contractual safeguards are reviewed periodically.

We keep data only as long as needed for the stated purpose:

- account, profile, saved readings, chat and uploaded user content - until deletion of the item or account, unless a shorter in-product control applies;

- inactive accounts - may be deleted after at least three years following advance notice;

- transaction and invoice records - for the legally required accounting period, currently eight years;

- security and error logs - normally no longer than 90 days unless an incident or legal claim requires longer;

- consent records and legal acceptances - as needed to demonstrate compliance and handle claims;

- Google Analytics data, if enabled - no more than 14 months;

- public share links - until revoked, expired or removed under the product rules.

Deletion from active systems may be followed by limited backup retention until the normal backup cycle completes.

Where GDPR or UK data-protection law applies, you may request access, correction, erasure, restriction, portability and information about transfers; object to legitimate-interest processing; withdraw consent; and lodge a complaint with a supervisory authority. Rights may be limited where law requires retention or the request affects another person's rights.

Send requests to info@astrozone.hu. We may verify identity and normally respond within one month under GDPR. You may complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), 1055 Budapest, Falk Miksa utca 9-11, https://naih.hu, or your local EEA/UK authority.

If you live in the United States, the United States Privacy Notice (getastrozone.com/us-privacy-notice) is the controlling document and gives the full detail: Notice at Collection, sensitive information, "Do Not Sell or Share", Global Privacy Control, the complete list of rights and how to exercise them. The summary below is there so this policy stands on its own.

We grant the following rights to every US resident, not only to residents of states whose statutory thresholds currently apply to us: to know and access, to correct, to delete, to obtain a portable copy, to opt out of sale, sharing and targeted advertising, to limit the use of sensitive personal information, and to appeal a refusal. We will not discriminate against you for exercising any of them.

We do not sell personal information. We do use Google Analytics and Google Ads conversion measurement, which counts as "sharing" for cross-context behavioral advertising under California law. In the US this runs until you opt out — through "Your Privacy Choices" in the footer, or automatically if your browser sends a Global Privacy Control signal, which we always honour. In the EU/EEA and everywhere we cannot confirm the region, nothing loads without your prior consent.

Submit a request or appeal to info@astrozone.hu. We respond within 45 days, extendable once by a further 45 days. An authorized agent may act where permitted after authority is verified.

The Service is not directed to children under 16 and we do not knowingly collect their data. If you believe a child supplied data contrary to this rule, contact us for deletion. Local age and parental-consent rules may provide additional protection.

Astrology calculations and AI personalization create entertainment inferences, but AstroZone does not use them to make decisions with legal or similarly significant effects about employment, credit, housing, insurance, education or healthcare.

We may update this Policy when the Service, providers or law changes. Material changes will be announced in the Service and, where appropriate, by email before they take effect. The version and effective date appear at the top.

Privacy questions and rights requests: info@astrozone.hu

Postal address: Felsőöregszőlők szőlő 159., 6400 Kiskunhalas, Hungary

International website: https://getastrozone.com