Privacy Policy

When you use Stardy, we collect the following information:

• Account information: phone number, full name, email, date of birth (sign-in is via SMS code; one account per phone number)
• Astrology data: birth time, birth place and its coordinates, and the natal chart computed from them
• Location data: your current city, determined automatically from your IP address. GPS is not used and location permission is never requested
• Notification data: device notification token, app version, language and time zone (to deliver notifications in your own local time)
• Usage data: in-app preferences
• Device information: device model, operating system (for crash reporting)
• Subscription data: purchase and entitlement records for Stardy Plus. Your identity is passed to the payment platform as your account ID; purchase events reach our server through the payment platform's notifications

The details of the people you add for compatibility (name, birth date, time and city) are NOT collected: they are stored only on your own device and are never sent to our servers. For the compatibility calculation, only that person's sky positions (sign and degree), the relationship type, the language and the chart's precision flags reach the server. If you delete the app, these entries are deleted with it.

We do not collect photos, usernames, gender, or GPS location history.

We use the data we collect to:

• Calculate your natal chart and generate your personalized daily analysis
• Calculate compatibility analyses with the people you add
• Personalize the experience: timing, planetary seasons, the tomorrow teaser
• Send the notifications you opted into (at 08:00 in the morning and 22:00 in the evening, local time; both are generated from your own chart)
• Provide and manage the Stardy Plus subscription: entitlement checks, the monthly compatibility quota, restoring purchases
• Improve the service, maintain security and prevent abuse

We do not sell your personal data to third parties, and we do not share it with advertisers, employers or insurers. Your data is shared only with the following service providers, and only as technically required for the service to work:

• Supabase: database, authentication and server functions (core infrastructure)
• RevenueCat: subscription management; it receives your account ID as its user identifier
• Apple / App Store: processes the payment itself. We never see or store card details
• Firebase Cloud Messaging: push delivery (the device notification token)

We use industry-standard security measures to protect your data. All data transfers occur over encrypted connections (HTTPS/TLS).

When you delete your account, all your personal data is permanently deleted within 30 days. You can delete your account from the Settings section.

There is one exception: the compatibility credit ledger. Because purchased credits can be restored from the store, these spend records are not deleted with the account. The ledger contains no personal content; it only records how many credits an account has used. This exception exists to prevent unlimited credits being minted through delete-and-restore.

Under KVKK (Türkiye's data protection law) and the GDPR, you have the following rights:

• The right to access your data
• The right to request correction of your data
• The right to request deletion of your data
• The right to object to data processing

To exercise these rights, write to [email protected].

For questions about our privacy policy: [email protected]