Privacy notice

Last updated: 8 November 2026

Who we are

Astrablend is responsible for your data. Privacy contact (Data Protection Officer): privacy@astrablend.com.

Stays on your device

Your journal, palm photos and results, tarot history, people you add to a Love Match, and your settings. We never receive these. Palm photos are analysed on your phone. People you follow also stay on your device, unless you use the account backup below.

What we collect and why

1. Account (only if you sign in): your email, to log you in.
2. Shared profile: first name, star sign, Chinese zodiac, Day Master and element balance (birth date only if you turn it on), so friends and group members you connect with can see your daily reading.
3. Friends, groups, hearts and Love Matches you send: to show them to the people involved. Sent matches contain no birth dates.
4. Account backup (on when you sign in; turn it off in Profile at any time): your name, birth date and time, palm reading results (not photos), your deck choice, and the names and birth details of people you follow, so you can restore them on a new phone. Only you can see it; friends and group members never do. Turning it off or deleting your account deletes it. If you add someone you follow, make sure they're happy for you to store their birth details.
5. Notifications (if turned on): a device token, star sign, Day Master, first name and chosen time, to send your daily reading.
6. Subscription: your subscription status and a Stripe customer ID, to switch Circle Premium on and let you manage it. Stripe collects your payment details, billing country and email as the seller, under its own privacy policy. We never see card details.
7. Technical data: our hosting provider briefly processes your IP address and device information to deliver the app and protect it from abuse.

We use your data only to provide these features, with your consent or because you asked for the service. No tracking cookies, no advertising trackers, no profiling, and we never sell or share your data with advertisers. The app remembers your settings with your browser's local storage, which is needed for it to work. Sponsored links are ordinary links: the shop can see that you came from Astrablend, but we don't tell it who you are.

Who processes it

Cloudflare (hosting, notifications), Supabase (database, Singapore), Stripe and its Link service (payments; Stripe sells the subscription as the merchant of record), Google (fonts, which your browser loads from Google so Google sees your IP address; sign-in if you choose it), jsDelivr (loads open-source code libraries) and your browser's push service. Some are based outside your country, including the USA; they protect data under their own contractual safeguards.

How long we keep it

Until you delete it or your account, or turn the feature off. Notification details are deleted when you turn notifications off. Payment records are kept by Stripe as tax law requires. Deleted data may stay in encrypted backups for a short period before it's overwritten.

Your rights

You can access, correct, delete or export your data, and withdraw consent, by using the app's settings or emailing privacy@astrablend.com. We reply within 30 days. You can also complain to the data protection authority where you live.

Security and children

Data is encrypted in transit and protected by access rules, so people only see what you've chosen to share with them. If a breach puts you at risk, we'll tell you and the relevant authority as the law requires (in Singapore, the PDPC within 3 days of assessing a notifiable breach). Astrablend isn't for anyone under 18; if we learn we hold a child's data, we'll delete it.

Changes

If we change how we use your data, we'll update this notice and tell you in the app before it applies.

The full terms, billing terms and disclaimers are in the app: tap Terms, privacy & disclaimers at the bottom of the home screen.

For entertainment, wellbeing and self-reflection only. Not medical, financial, legal or psychological advice.