Privacy Policy
Your birth data never leaves your phone. Everything the app sends anywhere is derived geometry — signs, houses, aspects — never the birth date, time, or place that produced it. Readings are written by an AI (Claude, by Anthropic) from that geometry alone. If you join the optional Circle, you choose to share a first name, your chart, an age band, and your city — and you can unshare all of it with one tap. We run no analytics, no ads, and no trackers, and we keep as little as the product can run on.
What stays on your device, always
- Your birth date, birth time, and birthplace — and those of anyone you add.
- Your preferences, settings, and conversation drafts.
- Your oracle (chart chat) transcript.
The app computes your entire chart locally. There is no feature, including every one described below, that transmits raw birth data. “Erase everything on this device” in Settings deletes all local data immediately.
What our servers process, and why
Chart geometry (dossiers)
To write a reading, the app sends only computed placements — signs, degrees, houses, aspects, dignities, cycle dates, and for the astro map, derived line coordinates — to our reading service, which forwards them to Anthropic's Claude API to generate the prose. Placements are not reversible to a birth date, time, or place. Finished readings are cached against an anonymous chart identifier (a one-way SHA-256 hash) so nothing is generated or billed twice. Cached readings unused for 30 days are purged.
An anonymous device identity
The app registers a random device token (stored by us only as a cryptographic hash). It contains and links to no personal information.
Sign in with Apple (optional)
We request no name and no email — the sign-in scope is empty. We store only Apple's opaque account identifier to link your devices, so purchases and cached readings follow you. Deleting your account in Settings removes the account, its device links, entitlements, and cached readings from our servers.
Community reflections
Posts in cycle rooms are signed only with your chart's big three (for example “☉ Gemini · ☽ Leo · ↑ Leo”) — never a name. You can delete your own posts at any time. Posts are filtered before publication and can be reported (hidden automatically at three reports); you can block any author.
The Circle (optional)
If you choose to join the Circle, you publish a matching profile that other mutually-matching members can see:
- the first name (or name of your choosing) you enter;
- your chart's big three and computed placements;
- a five-year age band (never your birth date);
- your city's name and city-rounded coordinates (precision ≈ 11 km — your address and neighborhood are not derivable);
- your matching preferences (what and whom you're looking for).
Mutual interest opens a private two-person thread. Messages you send there are stored to deliver the conversation and are subject to the same safety machinery as all community content: pre-publication filtering (links and contact-detail patterns are stripped), reporting, and blocking. Threads are private to their two members but are not end-to-end encrypted; like any moderated service, reported content can be reviewed by us.
Leaving the Circle in Settings deletes your matching profile immediately.
Purchases
Payment runs entirely through Apple. We never see payment details. We store which entitlements a device or account holds, and we receive signed notifications from Apple when a subscription renews, lapses, or is refunded, so your access stays correct.
Fair-use counters
Daily request counters (per device, for rate limits and abuse prevention) are kept for 35 days, then purged.
Subprocessors
- Anthropic, PBC— generates reading and oracle text from chart dossiers via the Claude API. Dossiers contain derived placements only. Anthropic's commercial API terms do not permit training on this content by default.
- Apple Inc. — Sign in with Apple, in-app purchases, and subscription lifecycle notifications.
- Google Cloud — hosts our server infrastructure.
We use no analytics SDKs, no advertising SDKs, and no trackers of any kind.
What we never collect
Email, phone number, contacts, photos, precise location (your birthplace comes from a fixed city list and is used only on your device; Circle coordinates are city-rounded), advertising identifiers, browsing behavior, or any form of cross-app tracking. A name is stored only if you join the Circle, and only the name you choose to enter; it is deleted the moment you leave.
Age
Aphrodite is for adults only. Users must be at least 18; birth dates indicating a younger age are rejected at entry and never processed. This applies to the entire app, including the Circle's discovery and private threads, and is enforced server-side.
AI, entertainment, and crisis support
Readings, pair readings, the locality reading, and the chart oracle are generated by AI, not by a human astrologer, and the app says so where they appear. Astrology content is symbolic and reflective — entertainment, not prediction, and never medical, legal, or financial advice. The oracle is not a therapist or crisis service; if a conversation suggests a crisis, it is instructed to set the astrology aside and point to real support: in the US, call or text 988, or text HOME to 741741; elsewhere, findahelpline.com.
Your rights and controls
Everything has an in-app control, effective immediately:
- Erase everything on this device — Settings → Data.
- Leave the Circle (deletes your matching profile) — Settings.
- Delete account (removes account, links, entitlements, cached readings) — Settings → Account.
- Delete your own posts, report, and block — on the content itself.
Depending on where you live (GDPR, UK GDPR, CCPA/CPRA, and similar laws), you may have rights to access, correct, delete, or port personal data, and to complain to a supervisory authority. Because we hold so little that is tied to you, most requests are satisfied by the controls above; for anything else, write to support@aethyrresearch.com and we will respond within 30 days. We do not sell personal information and have no advertising relationships to share it with.
Security
Transport is TLS everywhere. Device credentials are stored hashed. Server data is minimized by design (see above) and access is restricted to operating the service, including reviewing reported content. No system is perfectly secure; if a breach affects your data, we will notify you as the law requires.
Changes
We will update this page and its effective date when our practices change, and note material changes in the app before they take effect.