Privacy Policy

The short version

• There is no sign-up. We never learn your name, email address or phone number unless you write to us.
• Boards, photos, voice recordings, 369 entries and finished stories are stored on your phone only.
• When you create a story or affirmations, the areas and sentences you selected are sent to our server, which passes them to Anthropic (to write the script) and OpenAI (to voice it). Our server keeps no copy of that text or of the audio.
• Neither provider uses this data to train its models. Each keeps API data for a limited time for abuse monitoring, as described below.
• Payments go through Apple. RevenueCat tells the app whether you have Pro. TelemetryDeck counts anonymous events and never sees your words.
• Settings → Delete all data erases everything on your phone and deletes your install's records on our server, apart from two anonymous counters that stop the free story and the monthly allowance from being reset.

Who is responsible

Aster is published by TECHNINN SOLUTIONS BİLİŞİM TEKNOLOJİLERİ A.Ş., İnkılap Mah. Sokullu Cad. No:5 Ümraniye / İstanbul, Türkiye ("TechInn Solutions", "we", "us"). For the EU and UK General Data Protection Regulation (GDPR) and Türkiye's Personal Data Protection Law No. 6698 (KVKK), we are the data controller for the processing described here.

Contact: support@techinn.solutions.

What stays on your phone

• Your boards: the images you place, the area you assign to each one, and the sentences you write.
• Photos: Aster uses the system photo picker, so it only receives the photos you pick. Copies are kept in the app's private storage.
• Voice recordings: recorded with the microphone only while you press record, and kept on the phone.
• Stories: the script and the audio of every story you create are saved in the app and play offline.
• 369 entries, journal notes and settings.

This data can be part of your phone's own iCloud or computer backup, which Apple and you control. We cannot access it. Deleting the app, or using Delete all data, removes it from the phone.

What is sent when you create a story

Creating a story or a set of affirmations needs an internet connection. The app sends, over an encrypted connection:

• the life areas you selected and the sentences you wrote for them (and any optional details);
• the length, moment (morning, daytime or sleep), narrator and language you chose;
• any feedback you pick for a new version, such as "calmer" or "shorter".
• Your photos and voice recordings are never sent.

This goes to our server, which runs on Cloudflare Workers. The server checks the request for safety (for example, signs of a crisis, in which case it shows helpline numbers instead of writing a story), then sends the text to our AI providers:

• Anthropic, PBC (USA) writes the story script and the affirmations, and runs the safety check. Under Anthropic's commercial terms, API inputs and outputs are not used to train its models. Anthropic deletes them from its systems within 30 days, unless they are flagged by its safety systems for a usage-policy review (then kept for up to 2 years) or the law requires longer retention.
• OpenAI, L.L.C. (USA) turns the script into speech. OpenAI does not use API data to train its models. The speech endpoint keeps no stored application data; requests may be kept in abuse-monitoring logs for up to 30 days, unless the law requires longer.

We send the providers only the text needed for the task. We do not send your install ID, your Apple transaction or anything else that identifies you. The script comes back to your phone and the audio is streamed straight to it; our server saves neither the text nor the audio. Our server logs contain counts and timings, never your words.

Please don't write things on your board that you would not want processed this way, such as health details or other people's full names.

What our server keeps

Because there is no account, the server needs a few technical records to give out one free story per phone, count Pro minutes and stop abuse:

• Install ID: a random identifier the app creates and stores in your phone's Keychain (so it survives reinstalling). It is sent with each request.
• App Attest key: Apple's App Attest lets our server check that requests come from the genuine Aster app on a real device. We store the public key Apple's system generated for your install and a counter.
• Free story marker: a one-way hash showing that the free story for this install has been used.
• Pro usage: minutes of story used this month, stored against a one-way hash of your Apple subscription's original transaction ID. To prove that you have Pro, the app sends Apple's signed transaction, which the server verifies with Apple's certificates and does not store.
• Operational statistics with no identifier: language, length, outcome, token counts and duration of each story request.

Our server runs on Cloudflare (Workers, with the D1 database and KV storage). Cloudflare, which also hosts this website, processes IP addresses to deliver requests and protect against attacks. We do not store IP addresses in our database.

Purchases

Subscriptions are sold by Apple. We never see your card or your Apple ID.

We use RevenueCat, Inc. (USA) to manage subscriptions. RevenueCat receives an anonymous app user ID it generates, your purchase and subscription history, your App Store country and basic device information such as the iOS version. It does not receive your board or stories.

Analytics

We use TelemetryDeck GmbH (Germany) to count events such as "story finished" or "widget added", so we know which parts of the app work. TelemetryDeck receives a salted, hashed identifier that cannot be traced back to you, the app and iOS version, and your language and region. It never receives board text, story text, photos or recordings.

Permissions and notifications

• Photos: optional. Through the system picker you share only the photos you choose.
• Microphone: optional, used only to record your own affirmations. Recordings stay on the phone.
• Notifications: optional. Affirmation and 369 reminders and the reminder before a trial ends are scheduled on your phone.

If you use iOS Personal Voice to hear affirmations in your own voice, that voice is created and used on the device by iOS; Aster never receives it.

Why we may process this data

• To provide the service you ask for (writing and voicing your stories, managing your subscription): performance of a contract, GDPR Art. 6(1)(b), KVKK Art. 5(2)(c).
• To prevent abuse and keep the service secure (App Attest, the free story marker, IP processing by Cloudflare): our legitimate interests, GDPR Art. 6(1)(f), KVKK Art. 5(2)(f).
• Anonymous analytics: our legitimate interest in improving the app, GDPR Art. 6(1)(f), KVKK Art. 5(2)(f).
• Photos, microphone and notifications: only with the permission you give in iOS, which you can withdraw in Settings at any time.

International transfers

Cloudflare, Anthropic, OpenAI and RevenueCat process data in the United States and other countries. Where the law requires it, these transfers rely on the EU–US Data Privacy Framework where the provider is certified, on the European Commission's Standard Contractual Clauses, and for transfers from Türkiye on the safeguards in KVKK Art. 9, including standard contracts.

How long data is kept

• On your phone: until you delete it, use Delete all data, or delete the app.
• Story and affirmation text at our server: not stored. It exists only while your request is processed.
• At Anthropic: up to 30 days, longer only after a safety flag (up to 2 years) or where the law requires.
• At OpenAI: up to 30 days in abuse-monitoring logs, longer only where the law requires.
• Install ID and App Attest key: until you use Delete all data.
• Pro minute counters: kept, including after Delete all data, so the monthly allowance cannot be reset. They are keyed by a hash of your App Store transaction ID and hold no content and no direct identifier.
• Free story marker: kept, because it exists to stop the free story being claimed again. It is a hash and cannot identify you.
• Operational statistics: contain no identifier and no content.

Deleting your data

In Aster, open Settings and tap Delete all data. This erases your boards, stories, recordings and settings on the phone and deletes every record our server holds for your install and App Attest key. Two anonymous, hashed counters are kept to prevent abuse: the free-story marker and the monthly minutes counter keyed by a hash of your App Store transaction ID. They contain no story text, no board content and no direct identifier.

Purchase records held by Apple and RevenueCat are needed for billing and tax. To ask about them, write to us and we will pass the request on, or contact Apple directly.

Children

Aster is not for children under 13, and we do not knowingly process data from them. If you believe a child under 13 has used Aster, write to us and we will delete what we can link to their install.

Your rights

Under the GDPR you can ask for access to your data, correction, deletion, restriction of processing and a portable copy, and you can object to processing based on legitimate interests. Under KVKK Article 11 you have the right to learn whether your data is processed, to request information, to learn the purpose and the recipients, to request correction or deletion, to object to a result that arises only from automated analysis, and to claim compensation for damage caused by unlawful processing.

Because we hold almost nothing that identifies you, we may need your help to find your records. Write to support@techinn.solutions; we answer within 30 days. You can also complain to your local data protection authority, or in Türkiye to the Personal Data Protection Authority (KVKK).

This website

This site sets no cookies, runs no analytics and loads nothing from third parties; fonts are served from our own domain. Cloudflare, which hosts it, processes IP addresses in its server logs to deliver the pages and keep them secure.

Changes to this policy

If we change how Aster handles data, we will update this page and the date at the top before the change takes effect. If a change is significant, we will also tell you in the app.