Privacy policy
Policy and support website
Our public policy and support pages use Cloudflare free hosting. Visiting these pages sends IP addresses and browser requests to Cloudflare for delivery and security, with related service logs. The site has no ASTRA account system or advertising trackers and does not receive your local collection archive. Contact by email is initiated by you.
Scope and contact
This policy covers the current ASTRA collection beta. Operator: astralee, an individual. Contact: astra6@proton.me. Updated 26 September 2026. ASTRA FX is a separate app. New online services require updated disclosures and consent where applicable before activation.
Local records and app password
Collection details, amounts, photos, notes, wishes and reminders are stored on your device and are not automatically uploaded to ASTRA when you browse. The app password protects local access; verification records use system secure storage and photos are in the app file directory. This does not promise separate end-to-end encryption of every file or a complete cloud backup. System backup behavior depends on device settings. Keep at least two secure, separately stored password backups, such as paper copies.
Rates and public-address queries
Rate refreshes request ExchangeRate-API at open.er-api.com without sending collection amounts or photos. Each balance query sends the public address after consent: BTC to Blockstream (blockstream.info), ETH to PublicNode (ethereum-rpc.publicnode.com), and TRON-mainnet USDT to PublicNode (tron-solidity-rpc.publicnode.com). History uses Blockstream, Blockscout (eth.blockscout.com) and TRONSCAN (apilist.tronscanapi.com), respectively. Providers receive the address, IP and request information and handle logs under their policies. We do not promise a particular processing country or deletion of provider logs.
Session results and external services
Addresses, balances and history are kept only in the current view and cleared on closing, leaving or locking. Cancellation cannot recall information already received by a provider. Opening a source, block explorer or mail app is governed by that service. Query requests do not include your private archive or circle credentials. Never enter a private key, seed phrase or password.
Import, export and permissions
Photos are imported when you select them. Local reminders use system notifications after your choice and permission. Device authentication is performed by the operating system; the app does not read raw biometric data. Unrelated features remain available if you deny a permission. Exported JSON is unencrypted and excludes photo files, the app password and circle certification. You choose whether and where to share it; sharing and mail services process what you send under their rules.
TestFlight and support
Apple processes beta usage and crash information under TestFlight rules. Feedback you submit, including screenshots and comments, may be provided to the developer. The current app contains no advertising-tracking SDK or separate commercial analytics SDK and does not request cross-app advertising tracking. Proton provides the support mailbox; ordinary email is not guaranteed to be end-to-end encrypted. Redact private information from feedback.
Services not yet connected
Circle accounts, chat, calls, paid recovery and AI search are not connected in this beta. No recovery charge is collected. These launch requirements remain planned. Before activation, we will disclose the actual account, content, moderation, push, purchase, communication metadata and AI processing, recipients and retention, and obtain required consent. Payment is not identity verification.
Retention and deletion
Local records remain until you delete or reset them in the app. Exported copies and system backups must be managed separately. Uninstalling does not guarantee deletion of all secure-storage records or backups. Online accounts and local archives are distinct; existing online-account deletion requests should use the relevant service or verified support process. You do not need to pay a recovery charge to make a privacy request.
Choices, international processing and age
Contact support to request access, correction, deletion, restriction or make a privacy complaint. Provide only necessary details; we may verify identity to prevent wrongful deletion but never ask for app passwords or private keys. Requests are handled under applicable law and actual processing circumstances. Query providers, Apple and email services may process data outside your country. Beta invitations are limited to adults. Launch age policy and rating remain to be determined; this beta does not collect identity documents for age checks.
Local experience and market queries
Experience mode uses fictional members, preset replies, simulated audio/video states and simulated payments. It contacts no real person, requests no microphone or camera, charges nothing and changes no real password, archive or certification. Do not enter real passwords or verification codes. Memory-only experience state clears on exit or backgrounding. Authentication demonstrations do not enroll real TOTP or passkeys. Market queries require disclosure of the configured provider and your consent; only your selected public model and quote currency are sent. No configured provider means no request. Fictional valuation examples are separate from real quotes.