NovaAstra

Astrology with a real ephemeris, dream dictionary and tarot

Privacy policy

Last updated: 5 September 2026

NovaAstra calculates your birth chart on your device — planetary positions, houses and aspects never leave it. Only what is needed for a personal interpretation reaches our server: birth date, time and place, plus text you enter yourself (such as a description of a dream). Those texts are forwarded to the AI service Anthropic (“Claude”) for wording. There is no user account with a name or e-mail address.

1. Data controller

We have not appointed a data protection officer or an EU representative because we do not reach the relevant thresholds. Please address all requests to the contact above.

2. What data we process

What we explicitly do not collect

• No name, no e-mail address, no social login
• No location data: the birthplace is entered via a place search; the app never requests your location
• No contacts, no calendar, no health data
• No advertising, no advertising ID, no analytics SDK, no cross-app tracking
• Your input is not passed on for training AI models

3. Permissions on your device

The app requests only the following permissions. Each of them can be revoked at any time in your device settings; the app remains usable afterwards, with reduced functionality.

• Camera — Only for the photo of the coffee cup. If you never use that feature the app never asks for the camera.
• Photos (only the selected image) — Choosing a cup photo you already have.
• Notifications — Optional: a reminder about the daily sky and about new/full moon. Only requested once you switch it on in the settings.
• Internet — Sending the details for an interpretation and retrieving the archive. The calculation itself needs no internet.

4. Legal bases

We process personal data under the Swiss Federal Act on Data Protection (revFADP). Where the GDPR applies, we rely on:

• Performance of a contract (Art. 6(1)(b) GDPR) — everything needed for the app to deliver the function you requested.
• Legitimate interests (Art. 6(1)(f) GDPR) — secure and stable operation, abuse prevention, troubleshooting.
• Consent (Art. 6(1)(a) GDPR) — for anything you actively enable in this app: the camera, picking a photo and notifications. Consent can be withdrawn at any time with effect for the future by revoking the permission in your system settings.
• Legal obligation (Art. 6(1)(c) GDPR) — in particular commercial and tax retention duties for payments.

We process birth date and time on the basis of your consent, given when you enter them, which you may withdraw at any time by deleting the entry or your account.

5. Recipients and third parties

We do not sell data and do not disclose it for advertising purposes. Data is disclosed only to the following parties, and only where required for operation:

Authorities and courts receive data only where we are legally obliged to provide it.

Transfers abroad

Some of the recipients listed above process data outside Switzerland and the EEA, in particular in the United States. We base such transfers on the European Commission’s Standard Contractual Clauses with the Swiss adaptations recognised by the FDPIC and, where applicable, on the EU-US Data Privacy Framework. We will provide information on the safeguards in place on request.

6. Retention and deletion

Cup photos are deleted automatically after 30 days. Birth details, generated interpretations and the star balance remain until you delete the individual entry or your account. Journal entries and saved readings live on your device and are removed when you delete the app. Purchase receipts are kept for 10 years (accounting duty); server logs expire after 14 days.

Step-by-step instructions are available at Delete data.

7. Children and young people

This app is not directed at children. We do not knowingly collect personal data from children under 16. If we learn that such data has been submitted without parental consent, we delete it without delay.

8. Data security

Wherever the app transmits data at all, connections are encrypted via HTTPS/TLS. On the server side we use access restrictions, tenant separation and regular backups. Nobody can, however, guarantee absolute security for data transmission over the internet.

Cup photos are stored under a randomly generated, unguessable file name outside the web directory and are served only through a verified request from your own account. They are not listed in search engines and never shared with others.

9. Your rights

• Access to the personal data we process
• Rectification of inaccurate data
• Erasure or destruction of your data
• Restriction of and objection to processing
• Receiving or porting your data in a common format
• Withdrawal of consent with effect for the future

An informal message to info@babala.ch or a call to 076 792 63 50. We normally respond within 30 days. To verify your identity we may request suitable proof. You may also lodge a complaint with a supervisory authority (Switzerland: FDPIC; EU: your competent authority).

10. Changes to this policy

We may adapt this policy when the app or the legal framework changes. The version published on this page, with the date shown above, is the applicable one. We announce material changes inside the app.