Privacy Policy

1. Who we are

Atlastra is operated by SKSECURITY SEBASTIAN KUBAS, a sole proprietorship registered in Poland at ul. Kłobucka 23D lok. 68, 02-699 Warszawa, Poland, NIP 9512522226, REGON 389372579. We are the controller of the Atlastra product data described in this policy. Contact us at support@ankervik.com.

We answer privacy requests within 30 days and formal complaints within 14 days. Our lead supervisory authority is the Polish Urząd Ochrony Danych Osobowych (UODO).

2. Scope and age requirement

Atlastra is offered for market validation in the United States, Canada, the United Kingdom, and Australia. We apply GDPR-first privacy controls and the additional rights described below.

Atlastra is available only to people aged 16 or over. The age check runs on the device before an ineligible person's data leaves it. If the check fails, no profile is created, no analytics identifier is created, and we keep no record of the attempt.

3. Birth data and explicit permission

To draw your globe and calculate city results, Atlastra needs your date, time, and place of birth. Use of an astrology product could reveal or allow an inference about beliefs or worldview, so we treat birth data as sensitive by default.

Before birth data leaves the device, Atlastra shows a layered notice and requires a separate affirmative control that is not preselected. If you decline, no calculation profile is created. We record the version and hash of the notice and permission text, the server time, and the profile to which it applies; the evidence record contains no birth data.

An optional first name stays on the device. It is not synchronized, included in analytics or reports, or sent to an AI provider.

4. Data, purposes, and legal bases

We process data only for named product, security, billing, legal, and user-requested purposes. Performance of our contract is the principal basis for calculations, storage, account access, synchronization, purchases, and requested features. Explicit permission is additionally used for birth data. Legitimate interests support proportionate security, abuse prevention, and pseudonymous product analytics with an opt-out. Legal obligations apply to the minimized transaction records we must retain.

City scores are deterministic symbolic outputs. They do not make legal or similarly significant decisions about you. Atlastra is a reflective lifestyle and entertainment tool, not medical, financial, legal, immigration, relationship, safety, or other professional advice.

• Birth date, time, place, resolved time zone, calculations, scores, watched cities, and saved results: provide the requested map and city features.
• Journal entries and selected intentions: provide private journaling and the context you explicitly choose.
• Apple or Google provider identity and Atlastra account identifiers: authenticate a linked account; provider e-mail is never an account key or merge signal.
• A separately verified recovery and report-delivery e-mail: recover an account and deliver a purchased report; never marketing.
• Store transaction and entitlement records: provide subscriptions and reports and meet accounting obligations.
• Security and operational records: protect sessions, investigate abuse, and operate the service.

5. Product analytics

Product analytics is on by default for eligible users and can be turned off in Settings at any time. Turning it off stops subsequent product events and clears the local analytics queue and identifier where supported. It does not disable purpose-limited security logs, billing reconciliation, or content-free operational telemetry.

Analytics events never contain birth data, coordinates, city names, Journal text, prompts, report content, e-mail addresses, or names. Atlastra sends only a closed, versioned set of pseudonymous product events to Amplitude. Previously retained analytics remains covered by export and deletion rights.

6. Journal and AI-assisted features

Journal entries are private product content. Atlastra does not use them for advertising. A Journal excerpt reaches an AI feature only when you explicitly select that excerpt for one request; the excerpt is transient and is not stored in conversation history.

Ask Atlastra and AI-assisted report narratives remain disabled until the released provider configuration, model, retention, no-training controls, DPA, transfer mechanism, and subprocessor notice are verified. When enabled, only a validated projection of already-calculated facts, the current question, approved source material, and an explicitly selected excerpt may be sent. Raw birth data, coordinates, account identifiers, e-mail addresses, and unselected Journal content are excluded.

Atlastra retains its own Ask questions and answers for 12 months when that feature is enabled. The selected AI providers and their confirmed provider-side retention will be named on the Subprocessors page before activation.

7. Location and partner profiles

Optional location access is foreground-only and coarse. A device coordinate is reduced to a city or region in memory and the raw coordinate is not written to product storage, queues, logs, or analytics. Manual city selection remains available. IP location uses a locally hosted database and does not send an IP address to the database supplier.

Synastry Lite allows you to enter a manual partner profile using an optional alias. Do not add anyone under 16 or data you have no right to use. The profile is limited to your requested comparison, is not used for advertising, and is deleted with its derived results when you remove it.

8. Accounts, sign-in, and recovery

Atlastra can be used through an anonymous profile before you create a linked account. A linked account uses an internal random account identifier and a verified Apple or Google issuer-and-subject pair. Provider e-mail, display name, a RevenueCat identifier, or a matching recovery e-mail never merges accounts.

A recovery e-mail is a separate record. This address is used only to recover your account and deliver your report. We don't send marketing. Magic links are single-use, short-lived, and purpose-bound; an account-recovery link cannot open a report and a report link cannot create an account session.

If your only sign-in method is lost or revoked and you have neither another linked method nor a verified recovery e-mail, the account cannot be recovered. Support cannot bypass proof or merge accounts by e-mail.

9. Payments and reports

Digital purchases are processed by the App Store or Google Play. Atlastra does not receive card details. Store and entitlement integrations remain disabled until their production configuration is verified. When activated, the app displays current storefront products, prices, trial eligibility, renewal terms, restore controls, and the store's cancellation path.

A purchased report belongs to the linked Atlastra account through a durable backend entitlement. Report files and privacy exports will use Cloudflare R2 only after the selected production bucket, encryption, lifecycle, deletion, DPA, and restore controls are verified. Transactional recovery and delivery messages will use Resend only after its production account, DPA, region, retention, suppression, and deletion evidence are verified.

10. Service providers and local data sources

The current active processors are OVHcloud for the private backend and database hosting, Cloudflare for DNS, Tunnel, delivery, and network protection, and Amplitude for pseudonymous product analytics. The Subprocessors page states the current activation status and is updated before another provider receives production personal data.

GeoNames place data, Natural Earth map data, MapLibre software, and the MaxMind IP-location database are pinned or installed locally. Search queries, coordinates, and IP addresses are not sent to those data or software suppliers. Apple and Google act under their own privacy policies when you interact directly with their stores or identity services.

11. International transfers

Some service providers may process limited data outside the European Economic Area. Before activation, Atlastra records the provider's processing location and relies on an applicable adequacy mechanism, the European Commission Standard Contractual Clauses, the UK Addendum, or another valid transfer safeguard. Contact support@ankervik.com for information about the mechanism used for an active provider.

12. How long we keep data

Account/profile data, birth and partner data, Journal content, saved calculations, reports, and confirmed relocation history are kept for the life of the profile or account unless you delete them sooner. The last confirmed location is overwritten when updated. Ask questions and answers are kept for 12 months when AI features are enabled; a selected Journal excerpt is not stored.

Authentication and security logs are kept for 12 months. Pseudonymous allowlisted product analytics and administrative audit records are kept for up to 24 months. A user-linked arrival false-positive record is deleted within 90 days. Security incident records are kept for at least 24 months and longer only while a case remains open.

A minimized transaction record is kept for five years from the end of the relevant Polish tax year. Backups rotate within 35 days, and deletion is reapplied after a restore before restored data is reopened to product traffic.

13. Export and deletion

Settings provides separate self-service export and deletion requests for anonymous profiles and linked accounts. Export is complete or fails as a whole; a ready encrypted ZIP is private, requires authorization, remains available for seven days, and is then erased. We complete privacy requests within 30 days.

Deletion freezes new product access while it is processing and reports completion only after active product data, dependent private objects, and configured processor requests have completed. Download report PDFs first. Deleting Atlastra data does not cancel an App Store or Google Play subscription.

After deletion, only purpose-limited records may remain for their existing periods: an identity-link tombstone for 30 days, security logs for 12 months, pseudonymous analytics and administrative audit for 24 months, open incident evidence for its approved period, and the minimized tax transaction record. These records contain no birth data, Journal text, report narrative, city, coordinate, or prompt, and deletion does not restart their retention clock.

14. Your rights and choices

You may request access, a portable copy, correction, deletion, restriction, or objection where applicable, and you may withdraw birth-data permission. Use the in-app controls where possible or write to support@ankervik.com. We verify a request through the signed-in or anonymous capability path, or against a verified recovery address; do not send birth data or identity documents unless we explain why they are required.

You may complain to the Polish UODO, ul. Stawki 2, 00-193 Warszawa, or to the competent authority where you live. We do not discriminate against anyone for exercising a privacy right.

15. United Kingdom, Canada, Australia, and United States

UK users may exercise UK GDPR rights and complain to the Information Commissioner's Office. Canadian users may exercise applicable PIPEDA and provincial rights and complain to the Office of the Privacy Commissioner of Canada. Australian users may contact the Office of the Australian Information Commissioner and retain all non-excludable Australian Consumer Law rights.

Depending on US state law, users may request access, correction, deletion, or a portable copy and may limit sensitive-data processing. Atlastra does not sell personal information, does not share it for cross-context behavioral advertising, and contains no advertising SDK.

16. Security

Atlastra uses encrypted transport, authenticated service boundaries, record-level encryption for sensitive server data, SQLCipher for sensitive local caches, short-lived access sessions, single-use rotating refresh and magic-link tokens, least-privilege access, and fail-closed validation. No system can be guaranteed completely secure.

Report a potential vulnerability to support@ankervik.com without accessing another person's data, disrupting the service, or including personal data in a proof. Current disclosure contact details are published at /.well-known/security.txt.

17. Changes and contact

Material changes to this policy, the Terms, prices, or data purposes are announced in the app at least 30 days before they take effect and by transactional e-mail when a verified address exists. A Privacy Policy notice is not recorded as marketing or birth-data consent. Non-material changes carry a new effective date and public changelog.

Questions and privacy requests: support@ankervik.com. Postal contact: SKSECURITY SEBASTIAN KUBAS, ul. Kłobucka 23D lok. 68, 02-699 Warszawa, Poland. NIP 9512522226. REGON 389372579.