Privacy Policy

Effective September 29, 2026 · AstroMatch is operated by Phid, Inc..

This policy explains what AstroMatch (the app and its servers) collects, why, who else handles it, how we protect it, and how you can delete it.

What we collect

• Account: if you sign in with Apple, Apple gives us an identifier for you that only AstroMatch receives and, if you choose to share them, your name and email address — which can be a private relay address Apple creates, so we never learn your real one. We never see your Apple ID password. If you sign up with email instead: your email address, a username and a password, stored only as a one-way hash (bcrypt).
• Birth data: your date of birth and, if you add them, your time and place of birth — encrypted at rest, as described below. If you leave out the place, your phone's time zone is taken as the one you were born in and kept with your chart.
• Profile: display name, gender, bio, photos, prompt answers, the city you choose and approximate coordinates for it, and — if you used Find Your Pal (not offered at the moment) — your preferences there (ages, distance, who you'd like to meet).
• What you create: posts, comments, likes, friends, messages (your chats with the star reader too), the cards you share in chats, star letters and stamps, the names you give your friends, compatibility invites, reading reports, quiz answers and results, and the reports or blocks you make.
• Calls: voice and video calls go directly between the two phones, or through our relay server when a direct connection is not possible. Calls are never recorded; we keep only when a call happened, how long it lasted and whether it was answered, shown as a line in your chat. When the phones connect directly, each learns the other's IP address in order to connect.
• Purchases: VIP subscriptions and in-app purchases (reading reports, quizzes) are bought through Apple. We receive the transaction Apple signs to confirm a purchase and ask Apple how a subscription stands; we give Apple your account ID when you buy, so the purchase can be matched to your account. Your card details never reach us. For shop orders (the shop is not offered at the moment): the name, phone number and shipping address you enter and the items bought, with card payments handled by Stripe — your card number never reaches our servers.
• Device: a push-notification token and one for incoming calls; the app's language, so notifications come in it; and your phone's time zone (for example America/New_York), sent with each request so dates and fortunes are worked out for your day.
• Access records: IP address, time, the address requested and the kind of device and app — to prevent abuse (for example, rate limits by IP address) and to fix problems.
• Reader applications: applications to become a reader are closed for now. If you applied before (in the app or on our web form), we keep the pen name, fields, languages, years of practice, sample reading and contact details you entered, only to contact you about joining; nobody else sees them.

How we protect your birth data

• Your birth date, birth time and birthplace are encrypted with AES (Fernet: AES-128 with an HMAC-SHA256 integrity check, a fresh random IV for every value) before they are stored — in your profile, your natal chart and any compatibility (合盘) invite. The database holds only the encrypted form; the key is kept apart from it and never leaves our server.
• They are decrypted only in memory, when a chart, horoscope, reading or compatibility score is being calculated for you.
• To show your age and to respect age preferences in Find Your Pal, the year you were born is kept unencrypted. Age is visible to others anyway; your full birth date is not.
• When you invite a friend to a compatibility reading, each of you enters your own birth details. Neither of you is ever shown the other's birth date, time or place — only the reading made from both.

How we use your data

• To calculate your charts, horoscopes and compatibility, and to suggest people in Find Your Pal (other users there see your name, age, sun sign, photos, prompt answers, bio and roughly how far away you are — not your birth date, birth time, birthplace or coordinates).
• To run chats, calls, the feed, friends, star letters and your subscription and purchases.
• To tell you by push notification about messages, calls, likes and comments, friend requests and finished reports.
• To keep the community safe: reviewing reports, enforcing blocks, and preventing abuse (for example, rate limits by IP address).

AI readings

AI writes the daily horoscope text, natal, BaZi, Zi Wei and Vedic readings, compatibility readings, tarot, dreams, the crystal ball, the star reader's answers, reading reports, quiz results and AI search (if you turn it on). Our AI provider is DeepSeek (People's Republic of China); our servers send it:

• The charts we calculate: signs, houses, aspects, the four pillars and the like — worked out from your birth details by our own software — with the day's sky and calendar.
• What you enter or choose: your question, your dream, the cards you drew, your search words (with AI search on), the recent conversation with the star reader or a reading, and the quizzes you took with their results.
• For some readings, your birth details themselves: natal readings and questions about them send your birth date, birth time and the name of your birthplace; BaZi and Zi Wei readings and questions about them send your birth date, birth time and gender. A compatibility reading (natal or BaZi) for which you enter both births sends the same for both people.
• For a deep pair report: what to call the other person — their display name (when you pick a friend's compatibility invite) or the name you typed — and their chart, without their birth date, time or place.

The daily horoscope, the day, week, month and year fortunes, the star reader, Vedic readings, reading reports, quizzes and readings from a friend's compatibility invite send no birth date, birth time or birthplace. No reading ever sends your email, photos, account ID or your own name or display name — except that when a friend orders a deep pair report about the two of you, your display name is sent as what to call you. Nothing sent tells DeepSeek who a reading is for. Readings are cached on our servers for a while, so the same thing is not sent twice. DeepSeek handles what it receives under its own terms and privacy policy, which say it is processed and stored in the People's Republic of China.

The star reader's memory (VIP)

For VIP members, the star reader uses AI (DeepSeek) to turn what is worth remembering in your conversations into short notes — your work, the people and things you care about, the questions you asked and what it told you — and sends them to DeepSeek with your later questions, so its answers fit you better. This is on by default. Under "Memories" at the top right of the star reader's chat you can see the notes, delete them one by one, clear them all or switch this off at any time, or just tell the star reader "forget everything". Your birth date and age, health, religion, political views, sexual orientation, ethnicity, ID numbers, address and contact details are never kept. The notes are stored encrypted, deleted automatically 90 days after VIP ends, and deleted at once when you delete your account.

The AI assistant on our website

The AI assistant on our help pages (help.starsletters.com) needs no sign-in and is not linked to your account. What you type is sent to DeepSeek (People's Republic of China) to write the answer, which draws only on our help pages, terms and privacy policy. The conversation is kept on our servers (Amazon Web Services, United States) and deleted automatically after 30 days. Please don't enter your birth details, contact details or anything else personal.

Who else handles your data

• Amazon Web Services (United States, US East region) — hosting of our servers and databases.
• DeepSeek (People's Republic of China) — writing AI readings and the website assistant's answers, as described above.
• Apple (United States) — Sign in with Apple, App Store purchases and subscriptions, and delivering notifications and incoming calls (the notification's text, such as the start of a message or a caller's display name, and the device token).
• Cloudflare (United States) — storing and delivering photos and videos, our domain names, and the operator's access to our admin tools.
• OVH (United States) — running the relay server for calls (calls pass through it encrypted).
• Google (United States) — when a call connects, the phones ask Google's STUN servers for their own public IP address.
• Stripe (United States) — card payments in the shop; with the shop not offered at the moment, nothing goes to Stripe.

We share information with authorities only when the law requires it.

Keeping and deleting

You can delete your account at any time in the app (Settings → Delete account). Your birth data — in your profile, natal chart and compatibility invites — is deleted right away; your profile, photos, posts, messages and matches are removed or anonymized, and what the star reader remembers of you is deleted. Server backups that may still contain your data expire within 7 days. Records we must keep for accounting (paid orders) are retained as the law requires. A reader application goes with the account it was made from; one sent from our web form without an account is deleted when you email us from the contact you gave.

Security

All traffic between the app and our servers is encrypted (HTTPS). Birth data and chat messages are encrypted at rest, and passwords are stored only as one-way hashes. Access to our servers is restricted to the operator.

Age

AstroMatch is for people 18 and older. We do not knowingly collect data from anyone younger; if you believe a minor has an account, contact us and we will delete it.

Your choices

You can edit or delete your birth details, profile and content in the app, turn off notifications in iOS Settings, and block or report anyone. For a copy of your data or any privacy question, email info@phidai.com.

Changes

If this policy changes in a way that matters, we will tell you in the app before it takes effect.