Customer information
Privacy notice
Effective: 24 September 2026
Data controller
The controller responsible for personal data processed by Astrea Lume is Hey Hello Ewa Prażmowska-Bekiersz, Sosnowiecka 56, 42-221 Częstochowa, Poland. NIP: 5732466858. REGON: 240247967. Contact: sebastian@astrealume.com. You may also write to the postal address above.
Information we process
We process account identifiers, email address and account name; birth date, optional birth time and birthplace; location coordinates, time zones and calculated chart facts; readings and generation progress; membership and payment-provider references; support correspondence; and technical logs needed to operate and protect the service, which may include IP addresses and request information. Card details are entered with Stripe; we do not store full card numbers.
Compatibility readings
Only provide another person’s birth details when you are entitled to do so, and inform them about this notice. Their information is used for the requested comparison and may be included in report-generation context and saved generation progress.
Purposes and legal bases
Information needed for accounts, profiles, readings and requested membership services is processed to perform a contract or take steps at your request (GDPR Article 6(1)(b)). Security, abuse prevention and reliability rely on our legitimate interests, balanced against your rights (Article 6(1)(f)). Legally required records rely on legal obligations (Article 6(1)(c)). Where optional processing needs consent, we will request it separately; consent can be withdrawn without affecting earlier lawful processing. Daily report emails are not currently offered.
Service providers
We use OpenAI Sites and Cloudflare for hosting and storage; Supabase for authentication; and Google or Facebook when you choose those sign-in methods. OpenAI receives calculated chart facts and relevant birth information to generate interpretations; we do not intentionally include account names or email addresses in interpretation prompts. Open-Meteo receives birthplace search queries. Stripe processes checkout and membership information. Zoho handles support email. Providers receive information relevant to their functions, and some also process information under their own privacy notices.
International processing
Providers may process information outside the European Economic Area. Where GDPR requires safeguards for a transfer, an applicable adequacy decision or appropriate safeguards, such as standard contractual clauses, must cover it. Contact us for information about safeguards applicable to your data.
Retention
Completed readings and the request details for your library are stored with your account so you can reopen them, including after Premium ends. Account, library and profile data are kept while your account is active, unless deletion is requested or another lawful retention reason applies. Saved detailed-report progress expires after seven days; expired progress is cleaned up when that user next requests a detailed report, so expiry does not guarantee immediate physical deletion. Support records, security logs and backups may have separate retention periods according to their purpose. Information is kept longer only where needed for a legal obligation, dispute or another justified purpose, and deleted or anonymised when no longer needed.
Your rights
Subject to the conditions in data-protection law, you can request access, correction, deletion, restriction or portability, and object to processing based on legitimate interests. A locked profile form does not remove your right to request correction. Email us to exercise your rights or close your account. We may request proportionate identity verification. We normally respond within one month and explain any permitted extension. You may complain to Poland’s President of the Personal Data Protection Office (UODO), or another competent supervisory authority.
Cookies and automated processing
Authentication and security use necessary cookies or similar storage. Sign-in and payment providers may use their own storage during their flows. Interpretations are generated automatically for reflection and entertainment; we do not use them to make decisions producing legal or similarly significant effects about you.
Changes
Material changes will be communicated where required, and this notice’s effective date will be updated.