Last Updated: 9 October 2026
Astoria Astro is operated by TADATY TEKNOLOJİ VE YAZILIM LİMİTED ŞİRKETİ. This Privacy Policy explains the general way information processed through Astoria Astro is managed. For the detailed mandatory disclosure under Turkish Personal Data Protection Law No. 6698, please refer to the separately presented KVKK Privacy Notice; this Policy does not replace that Notice.
1. INFORMATION WE PROCESS
• account/authentication information and email address,
• first name, last name and other profile information,
• date, time and place of birth and calculated astrological information,
• questions, text, images and related inputs used for AI features, together with AI results and saved content,
• coin, purchase, refund/chargeback/refund-review and rewarded-ad transaction records,
• push tokens and notification preferences,
• application, device, security and required technical-log information,
• IP addresses, approximate location derived from them, ad interactions, permission-dependent identifiers and advertising privacy choices associated with advertising services.
2. WHY WE USE INFORMATION
We primarily use information to operate and authenticate accounts; calculate natal charts and astrological content; generate AI content requested by Users; display saved results; operate the coin, purchase, refund and advertising-reward systems; send notifications; perform location/geocoding functions; prevent abuse; troubleshoot technical issues; provide support; secure the application; and comply with legal obligations.
3. ARTIFICIAL INTELLIGENCE
Certain Astoria Astro features use the OpenAI API provided by OpenAI OpCo, LLC. When you request an AI feature, Astoria Astro is intended to send only the information required to generate that specific feature; not every profile field is automatically sent to every AI feature.
Where AI Data Sharing permission is a separate User choice, no new third-party AI generation is initiated without that permission. If you withdraw the permission, future third-party AI generation may be blocked while previously generated content still within its retention period may remain available under the product rules.
4. BIRTH, ASTROLOGY AND LOCATION INFORMATION
Astoria Astro may use your date, time and place of birth to calculate your natal chart and related astrological information. Calculated natal-chart information may be reused for relevant features.
For location search and geocoding, location text such as country/city/district entered by you may be sent to Open-Meteo. Under the current technical design, Astoria Astro does not intend to attach your Astoria Astro account identifier to that geocoding request.
5. IMAGES
Images selected for coffee-fortune readings or similar features may be uploaded to Astoria Astro and processed to provide the feature you request. Where an AI feature processes an image, the required image may be sent to the OpenAI API under your AI Data Sharing permission.
When a coffee-fortune job finishes successfully or with an error, the application attempts to delete the temporary photos used for that job. Separate cleanup applies to temporary files left behind after unsuccessful deletion or incomplete processing: the current cleanup runs every 6 hours and deletes files whose last-write time is more than 12 hours old. This threshold does not mean that every file is deleted at exactly 12 hours; the next cleanup run and technical failures may affect deletion time.
These timings apply to photos in Astoria Astro’s temporary file storage. Retention of generated AI results and service providers’ own processing/retention terms are separate.
6. COINS AND PURCHASE INFORMATION
Astoria Astro maintains coin balances and coin transactions through backend systems. For Apple App Store or Google Play purchases, Astoria Astro may process ProductIds, transaction identifiers, purchase tokens, verification status, coin-credit records, refund/void/revocation/chargeback and necessary refund-review records.
Astoria Astro is not designed to directly collect or store your credit-card number. Real-money payment is processed through the relevant application-store billing system.
Where separate User permission is requested before delivery/consumption information is shared with Apple for a refund review, the information is shared only if permission has been granted; declining that permission does not prevent the purchase.
7. ADVERTISING AND REWARDS
Rewarded advertisements are served through Google AdMob. The advertising service may process IP addresses and approximate location derived from them, device and application information, ad interactions, error and performance data, and identifiers depending on permissions and configuration, for ad delivery, measurement and abuse prevention.
Before an ad is loaded, the current advertising privacy status is evaluated through Google’s consent-management platform (UMP), and a choices form is shown when required. Declining permission does not by itself prevent you from using your account or features that do not require advertising. Limited or non-personalized ads may be available depending on your choices, applicable law and the advertising service’s rules; ad availability is not guaranteed. When privacy choices need to be managed again, you can use “Ad privacy choices” in your Profile.
iOS tracking permission (ATT) is separate from advertising privacy choices. Without ATT permission, the IDFA advertising identifier is unavailable. You can manage this permission in your device’s system settings.
The Astoria Astro User identifier and advertising transaction identifier may be used for AdMob server-side reward verification. Coins are credited only after server verification and the applicable product rules are satisfied.
8. PUSH NOTIFICATIONS AND MARKETING
Push notifications may be delivered using Expo push services and the device operating-system notification infrastructure. A push token and required device/platform information may be processed for this purpose. You can manage device notification permission through operating-system settings.
Service notifications may relate to AI results, account/security events or transaction status. If promotional push notifications such as campaigns, coin offers or new-feature promotions are enabled in the product, they are sent only to Users who have provided the required preference/permission, and that preference may be withdrawn.
Under the current Astoria Astro policy, promotional/marketing emails or SMS messages are not sent. If the current practice concerning app-only push notifications under Türkiye’s commercial-message framework changes, or if marketing email/SMS is introduced, the necessary compliance steps and legal-text updates will be implemented before such communications begin.
9. THIRD-PARTY SERVICE PROVIDERS
Depending on the production feature in use, Astoria Astro may rely on:
• Microsoft Azure — production cloud/hosting infrastructure,
• Google/Firebase Authentication and Google Sign-In — authentication,
• Apple Sign in with Apple — authentication,
• OpenAI OpCo, LLC / OpenAI API — AI-assisted content generation,
• Expo — push-notification delivery infrastructure,
• Google AdMob — rewarded advertising and server-side verification,
• Open-Meteo — location search/geocoding,
• Apple App Store and Google Play — in-app purchase, verification, refund and refund-review processes,
• Google email infrastructure — User support communications.
Firebase Analytics and Firebase Crashlytics are not used in the current production design. If a material provider or processing structure changes, this Policy may be updated as a new version.
10. INTERNATIONAL PROCESSING
Some third-party providers may operate systems or activities outside Türkiye. The production Microsoft Azure region depends on the production configuration selected by the Company. Certain information may be processed abroad using a transfer mechanism required under applicable Turkish data-protection law.
AI Data Sharing permission does not replace the legal mechanism required for recurring international transfers. Further legal information is provided in the KVKK Privacy Notice.
11. RETENTION
We do not intend to retain all information indefinitely. Information is retained as necessary to provide the service, operate accounts, maintain security, comply with legal obligations and resolve disputes. Under the current Astoria Astro product rule, UserAiContent history is retained for 30 days; different retention periods may apply to purchase, accounting, refund/chargeback, legal and security records.
12. ACCOUNT DELETION
Users may submit an account-deletion request through Astoria Astro. The period during which an account can be reactivated depends on the restoration period configured in the application’s management settings; it is not an unchanging “30-day” period for every User and every point in time.
After the applicable restoration period expires, permanent deletion is handled by the background cleanup process; expiry does not mean that all records are erased simultaneously. Purchase, accounting, dispute or security records that must legally be retained may be kept only for the relevant purpose and applicable period. Your rights to submit requests under KVKK remain unaffected.
13. SECURITY
Reasonable technical and administrative safeguards are used to protect personal information. However, no internet-based system can be guaranteed to be completely secure.
14. AGE 18+ POLICY
Astoria Astro is not directed to individuals under the age of 18; Users must be at least 18 years old to create an account and use the services. If the Company determines that a User is under 18, it may suspend or terminate the account and take appropriate action regarding related data in accordance with applicable law.
Astoria Astro’s 18+ usage requirement is separate from the content-age rating assigned by the App Store or Google Play.
15. PRIVACY CHOICES
Users may withdraw or re-grant AI Data Sharing permission, manage device notification permission, change the promotional-push preference offered in the product, request account deletion and exercise rights under KVKK.
Advertising privacy choices can be managed through “Ad privacy choices” in your Profile when required; iOS tracking permission is managed in the device’s system settings. Advertising choices, iOS tracking permission, AI Data Sharing permission, marketing preferences and any separate permission to share data for Apple refund reviews are independent. Granting one does not grant the others.
After AI Data Sharing permission is withdrawn, no new third-party AI generation is initiated. Previously generated content still within its retention period remains accessible under the product rules. This does not withdraw acceptance or acknowledgement of the User Agreement, KVKK Privacy Notice or Privacy Policy.
16. USERS OUTSIDE TÜRKİYE
Where Astoria Astro is offered outside Türkiye, mandatory data-protection rules in the User’s country may also apply. Where such law applies to Tadaty, mandatory rights under that law are not excluded by this Policy. Users may contact the Company using the details below.
17. CHANGES
This Privacy Policy may be updated to reflect material changes in the services, providers or applicable law. Material changes may be published as a new version.
18. CONTACT
TADATY TEKNOLOJİ VE YAZILIM LİMİTED ŞİRKETİ
Address: MARMARA MAH. HÜRRİYET BLV. İNŞAAT NO: 221 İÇ KAPI NO: 12 BEYLİKDÜZÜ / İSTANBUL
Telephone: +90 534 364 56 83
Privacy/KVKK and General Support Email: tahak.tadaty@gmail.com