Privacy Policy

Metastro is a multi-system Vedic astrology app. We collect the minimum data needed to compute and explain birth charts, and we tell you in plain language what we collect, where it goes, and how to get it back or delete it.

What we collect

• Account. Email address used to sign in via Google OAuth or email/password. We do not store the password — Supabase Auth hashes it server-side.
• Birth profiles. The date, time, and place you provide for yourself and for any other profile you add. You confirm at consent time that you have permission for every profile you add.
• Charts and reports. The computed astrological data derived from your birth profiles, including reports you generate.
• Feedback. Ratings you submit on predictions, used to test the agreement scores. No score is shown as a probability unless a calibration has been fitted and checked against those ratings.

Who it is for

Metastro is for adults: you must be 18 or older to use it, and you confirm that you are when you agree on the consent screen. A parent or guardian may add a child's birth details to their own account. We do not knowingly keep an account belonging to someone under 18, and we delete one when we learn of it.

Where it goes

• Compute backend — hosted on Google Cloud Platform (Oregon, USA, region us-west1). All app↔backend traffic is encrypted over HTTPS (astro.meteormeta.com); release builds reject cleartext HTTP.
• Database — Supabase managed Postgres on AWS (London, United Kingdom, region eu-west-2). Row-Level Security restricts every read/write to the row owner.
• Outside India. Both are outside India, so your data is stored in the United Kingdom and processed in the United States.
• LLM — an LLM provider (currently OpenAI; Anthropic is a configured backup) is invoked per-request to narrate reports, answer your chart and Prashna questions, and score prediction feedback. Prompts carry the structured chart data plus the question or free text you submit for that request; your name, email and account identifier are not sent. Under the provider's standard API terms that content is not used to train its models, and it may be held for up to about 30 days for abuse monitoring before deletion.
• Password check — when you choose a password at sign-up or reset, the app first checks it against the Have I Been Pwned list of passwords exposed in data breaches. Only the first five characters of the password's SHA-1 hash leave your device; the service returns every breached hash that begins with them, and the app finishes the comparison itself. The password, its full hash and your account details are never sent. Like any web request, it reveals your device's IP address to the service.
• Sign-in email — confirmation and password-reset emails are sent through Resend (Resend, Inc.) from Ireland. It receives your email address and the message, which carries a single-use link.
• Crash reports — when the app or the server hits an error, a report goes to Sentry (Functional Software, Inc.), stored in the EU (Germany): what failed and where in the code, the device model and operating-system version, the app version, and your account identifier. Birth dates, times and places, Prashna questions, access tokens and signed download links are removed before a report leaves your phone or our server, and Sentry is set not to store IP addresses. Reports are deleted after 30 days.
• App updates — fixes to the app's text and screens arrive as over-the-air updates served by Expo (650 Industries, Inc.) from the United States. Each time the app checks for one, Expo receives your device's IP address, a random identifier for this installation of the app, and the platform and app version. It receives no account, birth or chart data.

Your rights

• Access & export. Settings → Account → Export data. We deliver a ZIP containing every profile, chart, report, and feedback record we hold for you.
• Deletion. Settings → Account → Delete account. Removes all profiles, charts, reports, and feedback within 30 days; see below for what is kept.
• Withdraw consent. Settings → Account → Withdraw consent. Stops further processing for the chosen consent surface; you remain free to delete the account separately.

How long we keep it

• Your account and everything in it — profiles, charts, reports, Prashna sessions, predictions, ratings, consent records and data exports — for as long as the account exists. Deleting the account erases them within 30 days. A consent you withdraw stays recorded with the account until then, as the record of what you agreed to and when.
• Data exports. The download link expires after 7 days; the package itself is deleted with the account.
• Security log. When an account is deleted, its entries in our audit log lose the account and profile identifiers; the de-identified entries are kept as a security record, with no set end date.
• Crash reports are deleted after 30 days. Text sent to the LLM provider may be held there for up to about 30 days. Our providers' encrypted backups age out on their own schedules.

Contact

Data-protection contact: privacy@meteormeta.com. We respond within 30 days under DPDP / GDPR / equivalent regimes.

This page is served directly from the Metastro backend (astro.meteormeta.com). For machine-readable disclosure see /api/v1/source.