Astarly Privacy Policy

1. Overview

Astarly LLC operates the Astarly website, mobile apps, learning products and community features. These Terms govern use of those services; product-specific terms shown before purchase also apply.

Where required by law, we request your consent (e.g., for certain cookies/marketing).

2. Data we collect

We collect data that you provide directly, data from your use of the Services, and limited data from third parties (e.g., app stores, payment processors).

• Account & profile: name, email, password (hashed), language, avatar, role/title, location.
• Content you submit: courses, posts, comments, messages, reviews, and related metadata.
• Usage & device: logs, timestamps, pages/screens, crash reports, device model/OS, coarse location, cookies/SDK identifiers.
• Payments metadata: transaction IDs, amounts, timestamps and status from Stripe/PayPal; card numbers are not stored by us.
• Store data: app store receipt/transaction info and subscription status (Apple/Google).
• Communications: support requests, feedback, abuse reports.
• If you use a third-party sign-in provider, we receive the identifiers and profile information needed for that sign-in, subject to the permissions you grant. We may process push-notification tokens and delivery preferences when you enable notifications.

3. How we use data

We use data to operate the Services and deliver features you request.

• Provide and personalize the Services, including recommendations and content.
• Authenticate users, prevent fraud/abuse, and ensure platform integrity.
• Process payments, subscriptions, and entitlements.
• Provide support and respond to requests.
• Analyze performance, fix bugs, and improve UX.
• Send service messages; send marketing where permitted (with opt-out/consent where required).
• Comply with legal obligations and enforce our terms.

4. Legal bases (GDPR)

Where the GDPR applies, we rely on the following legal bases.

• Performance of a contract: to create your account, deliver content, and process payments.
• Legitimate interests: to secure the Services, prevent abuse, and improve features (balanced against your rights).
• Consent: for certain cookies/SDKs, marketing communications, or optional data uses.
• Legal obligation: to comply with tax, accounting, and compliance requirements.

5. Sharing & processors

Astarly uses service providers to operate the platform. When you enable optional marketing, advertising partners such as Meta or Google may receive device identifiers and activity. This can be treated as a sale or sharing under applicable privacy law even without a monetary payment.

• Hosting/CDN, analytics, logging, crash reporting, anti-fraud, and security tooling.
• Payment processors (Stripe/PayPal) and app stores (Apple/Google) to complete transactions and manage subscriptions.
• Customer support and moderation providers to handle tickets and platform safety.
• Disclosures required by law, to protect rights, or as part of a business transaction (e.g., merger).

• Third parties may process data in jurisdictions other than yours, subject to transfer safeguards.

6. International transfers

Where data is transferred internationally, we use appropriate safeguards such as Standard Contractual Clauses and risk assessments, along with technical and organizational measures.

• You can contact us to learn more about transfer mechanisms that apply to your data.

7. Data retention

We keep personal data only as long as necessary for the purposes described, including legal, accounting, or reporting requirements.

• Account data: retained while the account is active and for a reasonable period after deletion for fraud prevention and legal obligations.
• Transaction records: retained per tax/accounting laws.
• Logs/analytics: retained for shorter operational windows unless needed for security or legal reasons.

8. Account deletion & your rights

Delete your Astarly account or data

You can request deletion of your Astarly account and associated personal data without signing in or reinstalling the app.

1. Email [email protected] from the email address registered to your Astarly account, with the subject “Delete my Astarly account”. If you cannot access that address, contact the same support email for help verifying ownership.
2. To request deletion of specific data while keeping your account, use the subject “Delete my Astarly data” and identify the data or content you want removed.
3. We may ask you to verify account ownership before processing the request. Never send your password or payment card details.

• Account deletion requests cover your account and profile and the personal data associated with your use of Astarly, including community content and activity, learning activity, and notification identifiers.
• Some transaction records and security or fraud-prevention records may need to be retained for legal, accounting, or security reasons as described in Data retention. We will explain any applicable retention when responding to your request.
• Deleting your Astarly account does not cancel a subscription billed by Apple App Store or Google Play. Manage or cancel any such subscription in the store that bills you.

Where applicable, you may request access, a copy, correction, deletion, restriction or portability; object to eligible processing; withdraw consent; or exercise California rights to opt out of sale/sharing and limit sensitive-data use. We do not discriminate for exercising applicable rights. Contact [email protected]; authorized representatives should explain their authority. You may complain to your local data protection authority and seek available review or appeal.

Reject marketing in Cookie settings to disable optional browser advertising. A Global Privacy Control signal also disables marketing tracking in that browser. These controls apply to the current browser; contact [email protected] for an account-level privacy request. Traditional Do Not Track signals are not separately interpreted by this cookie control.

• Access, rectification, erasure, restriction, and portability (GDPR).
• Object to processing based on legitimate interests and to direct marketing.
• Withdraw consent at any time (where processing is based on consent).
• Under CPRA/CCPA: know, delete, correct, opt-out of “sale/share”, and limit use of sensitive data.
• Lodge a complaint with a supervisory authority (EU/UK).

• To exercise your rights, contact us at [email protected] or via in-app/settings tools. We may need to verify your identity.

• Delete your account
• Astarly Cookie Policy

9. Children

Astarly accounts and community features are for adults aged 18 and over. If you believe a child has supplied personal data, contact [email protected] so we can investigate and take appropriate deletion or account action.

10. Security

We implement organizational and technical measures to protect personal data, including encryption in transit, access controls, monitoring, and backups.

• No method is 100% secure; you are responsible for using strong passwords and enabling 2FA where available.
• We notify users and/or authorities of certain incidents as required by law.

11. Payments & app stores

Website payments are handled by Stripe or PayPal; we receive tokens/metadata to confirm transactions and do not store full card numbers.

For iOS/Android in-app purchases, Apple App Store or Google Play handle billing, receipts, subscription management, and refunds under their policies.

• Refund handling follows our Refund Policy and, for in-app purchases, the relevant store’s rules.
• We may receive limited store metadata to validate entitlements and detect fraud.

12. Generative AI

If you use AI-powered features, your prompts and outputs may be processed to deliver the feature, enforce safety, and improve quality.

• Do not include sensitive personal data in prompts.
• We do not use your personal data to train or fine-tune our AI without your consent.
• AI outputs may be inaccurate; do not rely on them for professional advice.

13. Changes to this policy

We may update this Privacy Policy. Material changes will be communicated by notice, banner, or email where appropriate.

14. Contact

• EU/UK residents may also contact their local supervisory authority.
• For data requests, include the email used for your account and any relevant IDs.

[email protected]