Privacy Policy

Who we are

Austral is operated by Nuance Tecnologia Financeira Ltda. (CNPJ 57.925.001/0001-64), Rua Oscar Trompowsky, 844, apto. 1, Gutierrez, Belo Horizonte/MG, CEP 30441-123, Brasil (“Austral”, “we”). We are the controller of the personal data described here under Brazil’s General Data Protection Law (Lei nº 13.709/2018, “LGPD”) and, for people in the European Economic Area, the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

Our Encarregado (data protection officer) is Pedro Santiago de Oliveira, reachable at privacy@austral.app.br. We have not appointed a representative in the European Union under GDPR art. 27.

This policy covers the Austral app for iPhone, the Android app once it is available (Austral isn’t on Android yet), and this website.

The short version

• Your profile (name, birth data and settings) is saved on our servers so your readings work every day. Your name and birth data are encrypted before they’re stored. Signing in is optional.
• The people you add, your mood history and your Ask conversations stay on your device.
• In your circle, friends see each other’s first name, Sun, Moon and Rising signs and a reading compared by sign, not each other’s birth date, time or place. Your birthday (day and month) reaches your friends only if you turn on birthday sharing; with the signs they see, it can let them work out your birth year and roughly your birth time.
• An ordinary invite or compatibility gift link shares your birth details with whoever accepts it; a link made for your circle shares only your signs.
• Your voice never leaves your phone. Only two numbers do.
• When you use AI features, and only after you give your permission in the app, the facts needed to write the reply are sent to Anthropic, our AI provider in the United States.
• Purchases go through the App Store (or Google Play, once Austral is on Android). We never see your card.
• Notifications and emails are off until you turn them on, and you choose which kinds you get.
• We don’t sell data, show ads, use analytics SDKs or track you across other companies’ apps and websites.
• You can delete everything from the app (Profile → Delete my data) or by asking us.

What we collect and why

This section lists every kind of personal data Austral handles. “On your device” means the data sits in the app’s private storage on your phone, where we can’t see it. “Not stored” means our server uses the data to answer a request and keeps nothing once the answer is sent.

Your profile

Your name, birth date, birth time (or that you don’t know it), birthplace (city, coordinates and time zone), your relationship status and, only if you choose to give it, your gender. Relationship status changes your love readings. Gender is never used to compute a reading; in Portuguese and Italian it is used only so the texts agree grammatically with you. With your profile we save your language and time zone, your app settings (Personalized writing, Brutal feedback), the record of your AI consent (granted or withdrawn, with the dates) and when the profile was created and last used. We use your profile to compute your chart, horoscopes, lucky moments, compatibility and notifications.

• Where: on your device and in our database, on our servers hosted by Vultr (see “Hosting and server logs” below). Your name and birth data are encrypted at the application level before they’re stored. If you don’t sign in, the saved profile is linked only to a random install ID and a secret our server gives your device (see below), not to an email or an account. Readings are computed on request.
• Legal basis: performance of the service you asked for, a contract (LGPD art. 7, V; GDPR art. 6(1)(b)).
• Kept: until you delete it in Profile → Delete my data, or 24 months after you last use the app, whichever comes first.

People you add

The name and birth details of partners, friends or family you add for compatibility. This is data about other people, so add someone only when you have a fair reason to and they would reasonably expect it.

• Where: on your device. They are sent to our server for each compatibility request without being stored, and to Anthropic when you ask about them in Ask, after you give your permission (see “AI features”). They are stored on our server only as part of a gift or invite (see below) or when a friend adds themselves to your Compatibility from a link.
• Legal basis: the legitimate interest, yours and ours, in offering compatibility readings (LGPD art. 7, IX; GDPR art. 6(1)(f)).
• Kept: on your device until you remove the person or delete your data.

Your account (Sign in with Apple)

Signing in is optional: you can use all of Austral without an account. On iPhone you can sign in with Apple so your profile, your links with the people you add and your Premium subscription follow you to a new device. Apple then gives us a stable account identifier for Austral, an email address, which can be a private relay address that forwards to you (Apple’s “Hide My Email”), and, the first time you sign in, the name you chose to share; we never see your Apple password. We store the identifier, the email, that name and the token Apple issues for revoking the sign-in encrypted, and look the account up by a one-way fingerprint (hash) of the identifier. We also keep the installations where you signed in, the time the account was created and last used, and a fingerprint of each session (kept 180 days), and we link the account to your subscription.

• Where: in our database.
• Legal basis: performance of the service (LGPD art. 7, V; GDPR art. 6(1)(b)).
• Kept: until you delete your account, or 24 months after you last use it. Deleting it (Profile → Delete my data while signed in) first revokes Austral’s Sign in with Apple authorisation with Apple, then removes the account, every installation linked to it and their data, and the subscription records linked to it. You can also stop using Sign in with Apple for Austral in your iPhone settings (Settings → [your name] → Sign-In & Security → Sign in with Apple; on older iOS versions, Password & Security → Apps Using Apple ID); that ends the sign-in but doesn’t delete your data, so delete it in the app or ask us.

Install ID and device secret

A random identifier the app creates the first time it opens, plus a secret our server issues to that installation. Together they let the app reach your saved profile without an account. They identify the installation, not you. We also use the install ID to count AI messages against the daily limit, to run gifts, invites and referral rewards and limit their abuse, and to link notifications and email preferences to your profile.

• Where: on your device and on our server, with your saved profile and the daily message counts.
• Legal basis: performance of the service and our legitimate interest in preventing abuse (LGPD art. 7, V and IX; GDPR art. 6(1)(b) and (f)).
• Kept: as long as your saved profile (the device secret is stored with it); the install ID also stays in the other records that hold it, such as your push token or your purchases, for as long as each of those is kept (see below); daily message counts for up to 30 days.

AI features

Austral uses Claude, an AI model made by Anthropic, PBC (United States), to write some texts. The astrology never comes from the AI: every planet, sign, house, aspect, date and score is computed by our server first, and the AI only writes the words around those facts.

• Ask (AI astrologer): your messages, the chart facts relevant to your question, your first name and, when your question is about them, the names and birth details of people you’ve added are sent to Anthropic to write the reply. Your conversation history is stored only on your device. Ask is used only when you open it and write. If you report an answer, the app opens an email to us with that answer, the date and your support code; nothing is sent unless you send that email.
• Personalized writing (AI-written readings): the computed facts of a reading and its standard draft text are sent to Anthropic to reword it for you. The result is cached on our server for up to 30 days under a code derived from those facts (a hash), not under your name or ID. You can turn this off in Profile → Personalized writing.
• Mood reflection (“A Reflection”): with Personalized writing on, your two energy numbers, the mood you picked and the reading’s text are sent to Anthropic to word your reflection.
• Palm reading (Premium): the photo you take or choose is sent to Anthropic to write the reading. It is processed in memory and never stored by Austral, and it is not used to identify you.
• Email haiku: if you get personal emails and have given AI permission, some of them carry a short poem written by AI. Only the event, the sign and its element are sent to Anthropic (no name, no birth data), and the email says when a poem was written by AI.
• Your permission first: the app asks for your explicit permission before any of your personal data is sent to Anthropic. Until you agree, nothing is sent and you get the standard texts. You can withdraw your permission at any time in Profile; from then on nothing more is sent.
• Legal basis: your consent (LGPD art. 7, I; GDPR art. 6(1)(a)), which you can withdraw at any time without affecting what was processed before. Personalized writing can also be switched off on its own.
• Anthropic processes this data on our behalf under its commercial terms, which don’t allow it to train its models on it. It may keep requests for a limited time for safety and abuse monitoring, as its terms describe.

Mood Detector

The Mood Detector records a few seconds of your voice on your phone, with your permission to use the microphone. The app computes two numbers from its loudness, energy and tension (0 to 100), and only those two numbers, with the mood you pick, are sent to our server to write your mood reading. The recording is deleted from your phone right after it is measured. Austral analyses how your voice sounds, not what you say.

• Where: the recording never leaves your phone; your mood history stays on your device; the numbers and the mood you pick are not stored on our server. With Personalized writing on, they also go to Anthropic (see “AI features”).
• Legal basis: performance of the service (LGPD art. 7, V; GDPR art. 6(1)(b)); for what goes to Anthropic, your consent.

Gifts, invites and referral rewards

When you send a gift or an invite, our server stores your first name, the recipient’s name if you typed one, your note, the link’s code, when it was created, opened and claimed, and the derived signs of the person who opened it (for example “Leo Sun, Pisces Moon”) so you can see that they opened it. An invite or a compatibility gift also stores your birth details, to work out the reading it shows (what each kind of link shares is just below). The recipient’s birth data is used to compute their reading and is stored only if they tick “Add me to [your name]’s Compatibility”. To limit abuse, we count how many times a link is opened, with the network (IP) address, for one hour. Links expire after 30 days and you can revoke them at any time. For referral rewards, we keep which installations invited and joined, and the reward given.

Ordinary links and circle links. An invite or a compatibility gift made with “Friends who accept join my circle” ticked is a circle link. Any other, including the link on an “Our match” card, is an ordinary link, and it shares birth details: the reading on its page is computed from your birth details and those of whoever opens it, and anyone who has the link can open it (up to 20 times); a person who accepts it in the app can receive your first name and birth details, to add you to their Compatibility; and whoever ticks “Add me to [your name]’s Compatibility” sends their name and birth details to your app. A circle link shares no birth details in either direction: its page is computed from your Sun, Moon and Rising signs only (and the details the opener types), accepting it gives nobody your birth details, and it doesn’t offer “Add me”.

• Legal basis: for you, performance of the service (LGPD art. 7, V; GDPR art. 6(1)(b)); for the recipient’s birth data, their consent, which they can withdraw (LGPD art. 7, I; GDPR art. 6(1)(a)); for abuse limits, our legitimate interest (LGPD art. 7, IX; GDPR art. 6(1)(f)).
• Kept: until 30 days after the link expires or is revoked, then deleted; open counts for one hour; referral records as long as the saved profiles involved.

Your circle

When someone accepts your circle link in the app and both of you agree (you when you create the link, they when they accept it), you are connected in each other’s circle. Each of you sees the other’s first name, Sun sign, Moon sign (only with a birth time) and Rising sign (only with a precise birth time and place), and a reading of the two of you. Our server compares you by sign: your reading is built from your own chart and only those signs of your friend, and the overall score and verdict come only from both people’s signs, so they are the same on both phones. Neither phone receives the other person’s birth date, year, time or place, with one exception each person chooses for themselves: birthday sharing (below). We store that the two installations are connected, since when, and the link that connected you. For invite rewards we count how many friends joined your circle. We also keep daily totals (for example, how many invites were created or accepted that day) that contain no installation, link or person.

You can pick your bond with each friend (friend, family, partner and so on). It is stored with your side of the connection, sets the tone of your own reading, doesn’t change the shared score, and isn’t shown or sent to your friend. Birthday sharing (“Share my birthday with my circle”) is off until you turn it on. When it is on, each friend in your circle can get a notification on your birthday that names you, and so learns its day and month. The year, time and place are not sent, but together with the Sun, Moon and Rising signs your friends already see, the day and month can let them work out your birth year and roughly your birth time (to within a few hours). It is your choice, and you can turn it off at any time. We store your choice and when you last changed it, read the date from your saved profile, and check your choice and your connection again just before each notification is sent, so turning sharing off or removing a friend stops them. With three friends or more, “Your circle together” shows your circle as a whole, from your own chart, your friends’ signs and your own reading with each of them (the 30 newest friends); it doesn’t compare two friends with each other. With Austral Premium, “Deeper synastry” reads your own chart against a friend’s Sun, Moon and Rising signs only. None of this uses our AI provider, and neither does the page a circle link opens, even for someone who turned on Personalized writing: nothing from a circle friend’s profile, or from a circle link, is sent to it. Either of you can remove the other at any time (“Remove from circle”): the connection, and the bond each of you picked, are deleted on both sides, and your friend isn’t notified. We then keep a note that the two installations were disconnected, and when, for 31 days, so that a link made before the removal can’t connect you again (only a new link can); it holds no names or birth details.

• Legal basis: performance of the service, at the request of both people (LGPD art. 7, V; GDPR art. 6(1)(b)); birthday sharing, the consent of the person who turns it on, which they withdraw by turning it off (LGPD art. 7, I; GDPR art. 6(1)(a)); daily totals, our legitimate interest in improving the service (LGPD art. 7, IX; GDPR art. 6(1)(f)).
• Kept: a connection, with the bond each of you picked, until either of you removes it or deletes their data, and at the latest until the first of your two profiles is deleted (24 months after its last use); your birthday-sharing choice as long as your own profile; the note that a connection was removed, 31 days. “Delete my data” removes all your connections, on both sides, with the bond you picked for each friend, your birthday-sharing choice and those notes. Records that a circle notification was queued or sent (which connection and when, without names) expire within 31 days. Daily totals are kept for 400 days.

Share cards

You can share a card about your chart, a reading or your circle as an image. The “Top aspects” card about you and a circle friend shows both first names, both Sun signs, your shared score and the top aspects of your reading together. The “My circle” card shows your first name and each friend’s Sun sign and score; friends’ first names appear only if you turn on “Show friends’ names”, which is off by default. Our server draws these two circle cards from the saved profiles each time your app asks for them, for your installation only, and doesn’t store them; the web address of their image holds only an encrypted code that works for your installation alone. The “Top aspects” card about a person you added shows both first names, both Sun signs, your score and the top aspects, computed from the birth details on your phone, which are sent for that request and not stored. The web address of every other card image (the cards about your own chart, “Our match”, and “Top aspects” about a person you added) contains what the card shows, signed but not encrypted. The QR code on a “Top aspects” or “My circle” card is a circle link from you: for 30 days, anyone who scans it (up to 20 people) can join your circle and then sees what “Your circle” describes, your birthday too if you share it; you can revoke it in Profile → Gifts and invites. The QR code on an “Our match” card is an ordinary link. A card with someone’s name on it is about them too: share it only where they would expect it. Once you share a card image, it is a copy outside Austral: we can’t delete it or take it back.

• Legal basis: performance of the service you asked for (LGPD art. 7, V; GDPR art. 6(1)(b)); for another person’s first name and sign on a card, the legitimate interest, yours and ours, in letting you share your readings (LGPD art. 7, IX; GDPR art. 6(1)(f)).
• Kept: not stored on our server; a card image you share stays wherever you shared it.

Austral Premium and purchases

Subscriptions and Premium gifts are bought through the App Store (or Google Play, once Austral is on Android). Apple or Google processes your payment; we never see your card or bank details. To give you Premium, our server checks the purchase with Apple or Google, which also tell our server when it renews, expires or is refunded, and stores its state: the store, the plan, the store’s transaction identifier (for Google Play, only a one-way fingerprint of the purchase token), whether it is active, in a free trial, in a grace period, renewing, cancelled or refunded, its expiry date, whether it is a test purchase, and the installations or account it belongs to. For a Premium gift we keep which purchase paid for which gift code. When you sign in with Apple, the subscription is linked to your account so you can restore it on a new device. The app keeps a signed entitlement token on your device with your plan and its dates.

• Legal basis: performance of the contract (LGPD art. 7, V; GDPR art. 6(1)(b)) and, for records the tax and consumer laws require, a legal obligation (LGPD art. 7, II; GDPR art. 6(1)(c)).
• Kept: until 400 days after the subscription expires, then deleted automatically, or until you delete your account; Delete my data without an account removes your installation from these records. We keep a record longer only where the law requires it. Apple and Google keep their own purchase records under their privacy policies.

Notifications

Notifications are off until you allow them. Most of them (your day, the Moon, sky events) are prepared by our server from your saved profile and scheduled on your phone, so they arrive even offline. For notifications about your gifts, your invites and your circle (for example “Maya opened your gift”), the app registers a push token: an address for your phone issued by Apple or Google, stored with your platform, language, time zone, the categories you turned on and when it was last updated and, from Austral 1.3, your quiet hours and the voice of these notifications (Brutal feedback on or off). When you open a notification, the app tells our server which notification it was (its category and wording variant, with your install ID, never its content or your birth data), so we can learn which notes are useful and send fewer of the others.

The “Your circle” category covers three notes: someone joined your circle through your link, a good day to talk with a friend, and friends’ birthdays. It is on once you allow notifications, and you can turn it off in Profile → Notifications. “A good day to talk” comes at most once a week, is chosen from your and your friend’s Sun and Moon signs and the sky that day, and is scheduled on your phone like the others. The other two are sent by our server through Expo and Apple’s (or Google’s) push service, outside your quiet hours: a friend-joined notification about 20 seconds after your friend joins, or when your quiet hours end; a birthday notification during the day, between 10:00 and 20:00 your time. They name your friend by first name, so Expo and Apple (or Google) receive that name with the rest of the notification’s text and the link it opens in the app (a code for your connection, never a birth detail). You get a birthday notification only for a friend who turned on birthday sharing, and only while they keep it on and you are still connected.

• Where: in our database; delivered through Expo’s push service and Apple Push Notification service or Firebase Cloud Messaging.
• Legal basis: performance of the service you turned on (LGPD art. 7, V; GDPR art. 6(1)(b)); for the open events, our legitimate interest in sending fewer, better notifications (LGPD art. 7, IX; GDPR art. 6(1)(f)), which you can object to by turning notifications off.
• Kept: the push token, with your quiet hours and voice, until you turn notifications off, it stops working, or you delete your data; notification open events for 90 days.

Email

Email is optional. On iPhone, after you sign in with Apple, you can choose “Email me about my sky”; we then use the address Apple gives us (which can be a private relay address). We first send a confirmation email, and nothing else goes out until you confirm (double opt-in). Personal emails about your sky are grouped in three categories (your birthday and year, the Moon, sky events), all off until you choose them. We store the address encrypted, a keyed fingerprint of it so one address has one subscription, your language and time zone, the categories you chose and a record of your consent (when you asked, when you confirmed, the policy version, where you subscribed and when you withdrew). To send personal emails on the right day, we keep a list of the dates your next emails are due (for example the day of your solar return); it contains no birth date, time or place, but those dates can hint at your birthday or sign, and it is deleted with your subscription. We also keep a log of which email was sent when, to respect the frequency limit (one personal email every three days at most) and never send the same one twice. Service emails (confirming your address, the welcome email, the confirmation that your data was deleted and replies to data-access requests) are not marketing and are sent only when needed.

• Where: in our database; delivered by Resend, Inc., our email provider, from its São Paulo (Brazil) region.
• Legal basis: your consent for personal emails (LGPD art. 7, I; GDPR art. 6(1)(a); ePrivacy Directive art. 13), which you can withdraw with one click in every email or in the app; performance of the service for service emails (LGPD art. 7, V; GDPR art. 6(1)(b)).
• Kept: an unconfirmed address for 7 days; a confirmed subscription while you’re subscribed and up to 24 months after your last activity; after you unsubscribe, it is deleted 30 days later; the list of upcoming email dates until a few days after each date; the send log for 400 days.

Messages to us

When you write to us (support, privacy requests, a reported Ask answer), we receive what you send, your email address and, if you include it, your support code.

• Legal basis: our legitimate interest in answering you (LGPD art. 7, IX; GDPR art. 6(1)(f)) and, for privacy requests, a legal obligation (LGPD art. 7, II; GDPR art. 6(1)(c)).
• Kept: as long as needed to handle your message and for up to 24 months after, to follow up on it, unless the law requires longer.

Birthplace search

When you search for a city, the text you type is sent to our server, which looks it up with the Open-Meteo geocoding service. No identifier of you or your device is sent to Open-Meteo.

• Legal basis: performance of the service (LGPD art. 7, V; GDPR art. 6(1)(b)).
• Kept: not stored, apart from the server logs below.

Hosting and server logs

Our API and the database that stores saved profiles, accounts, subscriptions, notifications and email preferences run on our servers hosted by Vultr (The Constant Company, LLC) in Miami, United States. The servers keep request logs with the IP address, time and path of each request (for a gift or invite, the path includes the link’s code), never its query string (the part of a web address after “?”) or its content, so never your birth details, push token or email address. We use them to keep the service secure and working. This website is delivered by Amazon Web Services (CloudFront and S3).

• Legal basis: our legitimate interest in security and preventing abuse (LGPD art. 7, IX; GDPR art. 6(1)(f)).
• Kept: 2 weeks.

Sensitive data

We don’t ask for sensitive personal data (LGPD art. 5, II and art. 11; GDPR art. 9), such as information about your health, religious beliefs or sex life. Please don’t include it in Ask messages or gift notes. If you do, it is used only to answer you, at your explicit request (LGPD art. 11, I; GDPR art. 9(2)(a)), and Austral doesn’t store Ask messages on its server; a gift note is stored with the gift as described above.

What we don’t do

• We don’t sell or rent personal data.
• We don’t show ads and don’t share data with advertisers or data brokers.
• We don’t use analytics or advertising SDKs, and we don’t track you across other companies’ apps or websites. That’s why the app never asks for permission to track you (App Tracking Transparency).
• We don’t make decisions with legal or similarly significant effects on you based solely on automated processing (GDPR art. 22). Readings are generated automatically, but they are for reflection and entertainment.
• We don’t use your data to train AI models, and our AI provider doesn’t either.
• We don’t send promotional notifications unless you turn on that category yourself.

Who receives data

We share personal data only with providers that help us run Austral, under contracts that let them use it only on our instructions:

• Vultr (The Constant Company, LLC): hosting of our API and database (servers in Miami, United States).
• Anthropic, PBC: AI text generation (United States).
• Resend, Inc.: email delivery (São Paulo, Brazil; a US company).
• Expo (650 Industries, Inc.): delivery of push notifications to Apple and Google (United States); it receives the push token, the notification’s text, which in circle notifications includes a friend’s first name, and the link the notification opens in the app.
• Amazon Web Services, Inc.: delivery of this website through CloudFront (locations worldwide).
• Open-Meteo: place search; it receives only the search text.

Apple and Google act as independent controllers when you download the app, sign in with Apple, pay for a subscription or receive a push notification; their own privacy policies apply. When you send a gift or invite, the person who opens it sees your first name, your note and a reading; on an ordinary link that reading is computed from your birth details, and a person who accepts it in the app can receive them (see “Gifts, invites and referral rewards”). When someone ticks “Add me to [your name]’s Compatibility”, your app receives their name and birth details. Your circle friends see what “Your circle” describes, and the people you send a card to see what is on it.

We may also disclose data when the law requires it or a competent authority orders it, or to protect the rights and safety of our users. If Austral is ever transferred to another company, your data stays protected under this policy.

International transfers

Some of our providers process data outside your country: our servers at Vultr in Miami, United States, Anthropic (United States, only after you give your permission in the app), Expo (United States, for push notifications) and Resend (a US company, sending from Brazil). CloudFront delivers this website from locations near you. So, for people in Brazil and the European Economic Area, using Austral can mean an international transfer of personal data. For these transfers we rely on the safeguards the law provides: the standard contractual clauses approved by the ANPD (LGPD art. 33, II, b; Resolução CD/ANPD nº 19/2024), the European Commission’s standard contractual clauses (GDPR art. 46(2)(c)) and, for providers certified under it, the EU–US Data Privacy Framework (GDPR art. 45). You can ask us for information about these safeguards.

How long we keep data

We keep data longer only when the law requires it, for example to respond to a legal claim, and only for as long as needed.

Security

Data travels between the app and our servers over encrypted connections (HTTPS/TLS). Your name, birth data and email address are encrypted at the application level before they’re stored, so they can’t be read from the database without our keys. We don’t keep backups of the database. Readings are computed on request. Access to our systems is limited to authorised people. On your phone, Austral’s data sits in the app’s private storage, protected by your device’s lock. No system is perfectly secure: if a security incident is likely to put you at risk, we will tell you and the authorities as the law requires (LGPD art. 48; GDPR arts. 33 and 34).

Your rights

Under the LGPD (art. 18) you can ask us to:

• confirm whether we process your data, and give you access to it;
• correct incomplete, inaccurate or outdated data;
• anonymise, block or delete data that is unnecessary, excessive or processed unlawfully;
• port your data to another provider;
• delete data processed with your consent;
• tell you who we share your data with;
• tell you about the possibility of refusing consent and its consequences, and let you withdraw consent;
• stop processing that doesn’t comply with the law (opposition, art. 18, § 2).

Under the GDPR (arts. 15 to 22) you have the right of access, rectification, erasure, restriction of processing and data portability, the right to object to processing based on legitimate interests, and the right not to be subject to decisions based solely on automated processing that significantly affect you. Where we rely on consent, you can withdraw it at any time, without affecting the processing before (art. 7(3)).

How to exercise them: write to privacy@austral.app.br. Include the support code shown in the app (Profile → Help or Profile → Delete my data) or, if you signed in with Apple or subscribed to our emails, write from that address, so we can find your record. Without either we may not be able to identify you, and the law doesn’t require us to collect more data just to do so (GDPR art. 11; LGPD art. 18). We answer within 15 days (LGPD art. 19) and in any case within one month (GDPR art. 12(3)). You can see and edit your profile in the app, change your notification and email choices there, and delete everything in Profile → Delete my data.

Complaints: you can complain to Brazil’s Autoridade Nacional de Proteção de Dados (ANPD), to Italy’s Garante per la protezione dei dati personali (garanteprivacy.it) or to the data protection authority where you live or work in the European Union. We’d appreciate the chance to fix things with you first.

Deleting your data

In the app, go to Profile → Delete my data. This erases everything stored on your phone and deletes your saved profile and every record on our server tied to your install ID and, if you signed in, your account and every installation linked to it, including your push tokens and email subscription; it also revokes Austral’s Sign in with Apple authorisation. You can also request deletion by email, without the app and without signing in. Deleting your data doesn’t cancel a subscription: cancel it in your App Store or Google Play settings.

Children

Austral is not directed at children under 13, and we don’t knowingly collect their data. If you are under the age at which you can consent to data processing in your country (14 in Italy, and up to 16 in some EU countries), use Austral only with the permission of a parent or guardian. In Brazil, we process adolescents’ data in their best interest and don’t knowingly process data of children under 12 without the specific consent of a parent or guardian (LGPD art. 14). If you think a child has given us data, write to privacy@austral.app.br and we will delete it.

This website and cookies

austral.app.br sets no cookies and runs no analytics, advertising or tracking scripts. Your browser keeps two small preferences in its local storage: the language you chose and whether you turned on the southern-hemisphere view of the Moon. They never leave your browser. The home page asks our server for the sky at the current hour, sending only the date and time. Gift and invite pages send our server the birth details you type to compute your reading, as described under “Gifts, invites and referral rewards”. The pages that open the app from an email (/open/) only send you on to the app or its store page. CloudFront keeps request logs (IP address, time and path) for the website. On iPhone, the App Store button on a gift or invite page also copies that page’s link to your clipboard, so the app can open your reading after you install it; the link stays on your phone.

Changes to this policy

When we change this policy we update the version and the date at the top. If a change is significant, we tell you in the app before it takes effect and, where the law requires it, ask for your consent again. Version 1.3 describes your circle as Austral 1.3 runs it (readings compared by sign, the bond you pick for each friend, birthday sharing, “Your circle together”, “Deeper synastry”, circle notifications and share cards) and says plainly what an ordinary invite or gift link shares. Version 1.1 added Austral Premium, Sign in with Apple, gifts, invites and referral rewards, notifications and email, and described our hosting at Vultr.

Contact

Privacy questions and requests: privacy@austral.app.br. Encarregado (DPO): Pedro Santiago de Oliveira. Everything else: support@austral.app.br. Postal address: Nuance Tecnologia Financeira Ltda., Rua Oscar Trompowsky, 844, apto. 1, Gutierrez, Belo Horizonte/MG, CEP 30441-123, Brasil.