1. Who We Are

2. Information We Collect

We do not intentionally collect sensitive personal data (e.g., race, political opinions, health data). We encourage users not to include sensitive data in User Content.

3. How We Use Your Information

We process information to:

• Provide & Operate the Service, including generating AI feedback and managing Ink credits.
• Improve & Personalise the Service through aggregated analytics and machine learning.
• Process Payments and maintain accurate billing and accounting records.
• Communicate with you about updates, security alerts, and support requests.
• Detect & Prevent Fraud and abuse, enforce our Terms of Service, and protect the integrity of the Service.
• Comply with Legal Obligations, including tax and regulatory requirements.

4. Legal Bases for Processing (EEA/UK Users)

We rely on the following legal grounds under the GDPR:

• Contract: Processing necessary to perform our contract with you (e.g., providing the Service).
• Legitimate Interests: Improving the Service, securing our systems, and preventing fraud (balanced against your rights).
• Consent: Where we rely on optional cookies or send marketing emails (you may withdraw consent at any time).
• Legal Obligation: Compliance with applicable laws (e.g., accounting, taxation).

5. Sharing & Disclosure

We do not sell your personal data. We disclose information only as described:

5.1 Service Providers & Sub-Processors

• OpenAI, L.L.C. – language model processing
• Stripe, Inc. – payment processing
• Google Cloud Platform & Render – hosting & database (USA)

Service providers access data solely to perform services on our behalf and are bound by confidentiality obligations.

5.2 Affiliates & Business Transfers

We may share data with subsidiaries or in connection with a merger, acquisition, or asset sale. You will be notified of any material changes.

5.3 Legal & Safety

We may disclose information if required by law, subpoena, or to protect the rights, property, or safety of Astrobit, our users, or others.

6. International Data Transfers

Astrobit is headquartered in the United States. If you reside outside the U.S., your information will be transferred to and stored in the U.S. and potentially other countries. For EEA/UK data, we rely on Standard Contractual Clauses or an adequacy decision to ensure an equivalent level of protection.

7. Data Retention

• Active Data: Retained as long as your account is active or as needed to provide the Service.
• Deleted Entries: Soft-deleted in the UI but removable upon request; backups may persist ≤ 30 days.
• Legal & Accounting Records: Retained per statutory requirements (typically 7 years).

8. Your Rights & Choices

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Rectify inaccuracies.
• Delete your data (right to erasure).
• Restrict or object to processing.
• Port your data to another service.
• Opt-out of marketing communications at any time.

To exercise these rights, email pablo@goastrobit.com. We will respond within 30 days (or the timeframe required by law).

California Residents (CCPA/CPRA)

Astrobit does not sell personal information. You have the right to know, delete, and correct your personal information, and to limit use of sensitive information. Submit requests via pablo@goastrobit.com.

9. Security Measures

We implement administrative, technical, and physical safeguards, including:

• TLS/HTTPS encryption in transit;
• Encryption at rest for sensitive fields;
• Role-based access controls;
• Regular vulnerability scanning and penetration testing;
• Daily encrypted backups.

Despite efforts, no method of transmission or storage is 100% secure. You use the Service at your own risk.

10. Children's Privacy

The Service is not directed to children under 13 (or under 16 in certain jurisdictions). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact pablo@goastrobit.com and we will delete it.

11. Third-Party Links & Services

The Service may contain links to third-party sites or use third-party integrations (e.g., Google OAuth). We are not responsible for the privacy practices of those parties. Review their policies before providing data.

12. Cookies & Tracking Technologies

Our public website may use cookies or similar technologies to remember preferences and compile aggregated analytics. Browser settings allow you to control cookies. The Yournaly extension stores local data on your device to operate (e.g., session tokens, Ink balance).

13. Changes to This Policy

We may update this Policy periodically. If changes are material, we will notify you via email at least 30 days before they take effect. Continued use after the effective date constitutes acceptance.

14. Contact Us

Questions or concerns?

Thank you for trusting Yournaly by Astrobit to support your language-learning journey.