Privacy policy

Who is responsible

The data controller is FULLXP (simplified joint-stock company, SIREN 130 061 450, 6 rue Lucien Martin, 13600 La Ciotat, France). Contact for any question or request: wearefullxp@gmail.com, or +33 6 82 46 91 09.

The principle

We collect the strict minimum, and we sell nothing to anyone. No ad network, no advertising tracker, no embedded social network.

What stays on your phone

Your birth date, time and place, those of the people close to you, your journal, your conversations with Astrée, your profile photo and your trips are stored on your device. All astronomical computations (chart, transits, world map) happen on your phone.

What goes to the artificial intelligence — with your consent

To write your readings and answer your questions, and only after your consent (requested in the app, withdrawable at any time in Settings), we send to Google (United States), which provides the Gemini AI — and, as a fallback if Gemini is unavailable, to Anthropic (United States), which provides the Claude AI:

• the computed description of your chart (positions, aspects, houses, lines of your world map);
• today's sky and the events of the coming weeks;
• your first name, your questions, your previous exchanges with Astrée, your recent readings and the notes in her notebook;
• for your duos: the aspects between your charts, and your first names.

What we do not send: the fields you entered — your birth date, time and place, nor those of the people close to you. What is sent is what is computed from them.

Please be aware that a natal chart describes a moment and a place precisely: these computed elements remain personal data, and would allow someone who knows how to read them to approximately recover your birth. We would rather tell you than promise you a protection that does not exist.

What these two providers do with it, according to their public terms:

• Google (Gemini, paid tier) does not use your requests or the responses to improve its products. It keeps a log of them for a limited period, for the sole purpose of detecting abuse and meeting its legal obligations; that period is not quantified in its terms.
• Anthropic (Claude, fallback) deletes API requests and responses within 30 days, and does not train its models on the data of its API customers.

These processing operations take place in the United States; the transfer is framed by the European Commission's standard contractual clauses. A copy of the safeguards framing these transfers can be obtained by writing to wearefullxp@gmail.com.

No automated decision-making. Astrée's texts are written by an artificial intelligence, but no decision producing legal effects concerning you, or significantly affecting you, is taken in an automated way (article 22 GDPR).

Duo invitations

When you create an invitation link, your first name and your birth data (date, time, place) are stored on our server so that the invited person can compare your charts. Anyone holding the link can read them as long as it has not been accepted; only share it with the person concerned. This data expires 30 days after the link is created, then 30 days after it is accepted. It never travels in the link's address. A duo's shared reading is kept for 30 days.

Waiting list

If you leave your email address on fullxp.fr/astroxp, we keep it together with your device platform (Android, iPhone or other), the page language and the date, for one purpose only: telling you when AstroXP launches. Legal basis: your consent, which you can withdraw at any time by writing to contact@fullxp.fr. The address is deleted at most 6 months after you sign up. It is neither sold nor transferred to third parties. To prevent abuse, a non-reversible fingerprint of your IP address is kept for one hour.

Identifier and purchases

An anonymous identifier (Google's Firebase Authentication service) is created on first launch to enforce usage limits. It is not associated with any name, email address or phone number. The usage-limit counters tied to this identifier are kept for 33 days at most.

Your purchases are handled by the app store; RevenueCat (United States) receives the purchase history associated with this anonymous identifier, in order to know whether your subscription is active.

Audience measurement and reports

We count events ("a screen was opened"), never people: these counters are aggregated by day, contain no identifier, and are kept for 120 days. A text you report reaches us without any identifier, with the reason you chose; it is kept for 90 days.

Calculations on the site

The chart calculation, the duo and the comparison with a celebrity work without an account. The birth dates, times and cities you enter, including those of another person, are part of the address of the result page. They are used to calculate that page, and we do not record them. They stay in your browser history and in the link if you share it, and they pass through Cloudflare, our host. For a duo, only enter another person's details with their agreement.

Hosting and technical logs

Our server is hosted by Cloudflare (United States). Technical logs (error messages and usage counters — never the content of your exchanges or the address of result pages) are used to diagnose failures. Cloudflare keeps them for 7 days at most.

Legal bases

Performance of the service you requested (chart, readings, duos); your consent for sending to the AI and for the waiting list; our legitimate interest for security, usage limits and aggregated audience measurement.

Your rights

You have a right of access, rectification, erasure, restriction, objection and portability. "Erase and start over", in Settings, deletes all your data on the device, the invitations you created or accepted on our server, and renews your anonymous identifier; the remaining counters expire on their own (33 days at most).

For any other request, including a deletion request made in writing: wearefullxp@gmail.com. You may also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).

Français