Draft — not yet reviewed by a lawyer.
This describes what the software actually does today, written from the code, and it is accurate as far as that goes. It is not legal advice and it has not been through a qualified review. Do not publish it as the operative policy, and do not submit it to an app store, until someone competent has been over it.
Privacy
What Auspex holds, and what it does with it
Last updated: this draft.
A birth time and place is about as identifying as personal data gets, and it is the one thing this app cannot work without. So the short version: it is stored to compute your charts, it is used for nothing else, and you can take it back or destroy it whenever you like.
Who is responsible
[Legal entity name and registered address go here.] is the data controller. Questions, or any request under this policy: [contact email].
What is collected
If you join the launch list
Your email address, the date you gave it, and which page the form was on. That is the whole record — no IP address, no device identifier, no tracking pixel. It is used once, to tell you the app has launched.
If you create an account
- Your email address and a hashed password. The password itself is never stored.
- For each chart you save: a birth date, a birth time, a place name with its coordinates and time zone, a label you choose, and any notes you add.
- A record of the consents you gave, and when — required so we can show what you agreed to.
- Your subscription status and tier, received from the app store's billing provider.
- Charts and comparisons you explicitly save, and readings the app generated for you.
What it is used for
Computing charts, transits and calendars; showing you readings; keeping you signed in; and billing. That is the complete list.
Birth data is never used to target advertising. The free tier carries ads and the paid tiers do not, and no ad is selected using anything from your chart. Your birth data is never sold, and never shared with a data broker or an advertiser.
Who else sees it
- Hosting. The servers and database run on a cloud host, which necessarily stores the data on our behalf under contract.
- Billing. Subscriptions run through the app stores and a billing provider, which tells us your tier and status. They receive no birth data.
- Place lookup. When you type a birth place, the text you typed is sent to a third-party geocoding service to turn it into coordinates. Only the place text goes; it is not sent with your name, your birth date, or anything identifying you.
- Advertising, free tier only. The mobile app shows ads from a third-party ad network, which will set its own device identifiers subject to the permission you give it. It receives no birth data.
- Reading generation. When a written reading is produced, only a normalised, stripped chart is used — planetary positions and aspects. Your name, birth date, birth time and birth place are not part of it.
Cookies
The web app sets three cookies and they are all strictly necessary: a session token, a refresh token, and a CSRF token. There is no analytics cookie and no advertising cookie on the web app. This marketing site sets no cookies at all.
Your rights
Under UK and EU data protection law you can ask for a copy of your data, correct it, delete it, or object to how it is used. Two of those are buttons rather than requests:
- Export. Download everything held about you, as structured data.
- Deletion. Delete your account and the data goes with it — charts, birth data, saved readings.
To be removed from the launch list before there is an account to delete, email [contact email] and it will be erased.
How long it is kept
Account data is kept while the account exists, and is deleted when you delete it. Launch-list addresses are kept until the launch email is sent, or until you ask for removal.
Children
Auspex is not intended for under-16s and accounts should not be created for them.
Changes
If this policy changes in a way that affects what happens to your data, you will be told in the app rather than by a silent edit to this page.