Privacy Policy

Who We Are

Nostra is a general partnership registered in Ontario, Canada (“Nostra”, “we”, “us”). We make the Nostra app for iPhone and, when available, its Apple Watch app (together, the “App”), and run this website, nostrasky.com. This policy explains how we handle personal information in the App, in the services behind it, and on this website. Nostra’s partners are responsible for our compliance with this policy and with applicable privacy law, including Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

Where the EU or UK General Data Protection Regulation applies, Nostra is the controller of the personal data described here.

What We Collect

Your account

• When you sign up with an email address: your email, a username, an optional display name and a password. We never store your password itself, only a salted cryptographic hash of it.
• When you sign in with Apple or Google: a unique identifier for your account with that provider and the email address it shares with us. Sign in with Apple may also give us your name the first time you sign in, and lets you hide your real email behind a relay address.
• Account details such as when your account was created and last used, and whether you are on the free plan or Nostra Plus.

Your birth data and charts

To cast your natal chart we ask for your date of birth and, optionally, your birth time, birthplace and a name for the chart. We store the date, time, place name, the place’s coordinates and time-zone offset, your choice of zodiac (tropical or sidereal) and house system, and the chart computed from them. We also store your device’s current time-zone offset so readings are prepared for your local day.

Things you create

• Journal entries: the title, text, mood and prompt you choose, the moment the entry is about, and the positions of the planets at that moment. When you save a moment from the Sky tab, its place name and coordinates are saved with it.
• Community posts you write in the sign communities, and an automatic post that announces when you join one.
• Readings you share with friends, and the friend requests you send.
• Oracle conversations: the messages you write and the Oracle’s replies. If you attach a photo, a PDF or a sky snapshot, the attachment is sent to the AI service to be read, but we do not keep the file; we keep only its type, its file name and, for a sky snapshot, its time, place name and label.
• Messages you send us through the Contact page in the App: your name, email, subject and message.

Your settings and connections

Your privacy settings (whether to show your Sun sign, your Sun, Moon and rising signs, and whether friends may see your chart), the communities you join and your friend connections.

Purchases

Nostra Plus is sold through Apple’s App Store. Apple handles payment, and we never receive your card or bank details. We receive and store your subscription’s status: the product, the store, whether it is a trial, when it was bought and when it renews or expires, whether you have turned off auto-renew, and any billing issue, together with the records our subscription provider sends us when that status changes. Your subscription is linked to your Nostra account by your account’s internal identifier, not by your email.

Technical information

• Sign-in session tokens, which we store only in hashed form, and their expiry.
• A count of how many AI requests your account makes each day, so we can apply daily limits. If a request is made without signing in, we record the IP address it came from instead.
• Our servers keep technical logs, such as error messages and timings, to keep the service running.

Location

The iPhone app does not access your device’s location. Places in the App are the ones you type or pick, such as your birthplace or a place for the sky. When you choose a place for the sky right now, its coordinates are sent to our servers to compute the chart and are not stored unless you save the moment to your journal.

The Apple Watch app, if you use it, can use your watch’s location, with your permission, to place the Ascendant and houses for where you are. That location is used only on the watch to compute the chart. It is not sent to us or to anyone else.

Information that stays on your device

Some things are kept only on your iPhone or Apple Watch and never sent to us: your profile photo and background images, your display preferences (theme, text size, backgrounds), your notification preferences, the place you last used for the sky, and copies of recent readings and journal entries kept so the App opens quickly. Signing out removes your session and birth data from the device; deleting the App removes the rest.

This website

nostrasky.com sets no cookies, runs no analytics and loads nothing from other companies: its fonts and images are served from our own server. Like any web server, our hosting provider records technical information about each request, such as your IP address, the page requested and your browser, for security and operation.

How We Use It

• To provide Nostra: to cast your chart, prepare your daily reading, compute the sky for any moment and place, run the journal, the communities and the Oracle, and keep your account signed in.
• To manage Nostra Plus: to know which features your plan includes and to keep that in step with the App Store.
• To keep Nostra safe and fair: to apply daily limits to AI features, prevent abuse, and investigate problems.
• To help you: to answer messages you send us.
• To meet legal obligations: for example, keeping purchase records where the law requires it.

We do not use your information for advertising, we do not sell it or share it for cross-context behavioural advertising, and we do not make decisions about you that have legal or similarly significant effects by automated means.

Where the GDPR applies, we rely on these legal bases: performing our contract with you (providing the App and Nostra Plus); your consent (for example, location on the Apple Watch, which you can withdraw in Settings); our legitimate interests in keeping the service secure and working; and compliance with legal obligations.

AI Features

Two features use AI models provided by Anthropic, PBC, which processes the data on our behalf.

• The written part of your daily reading. We compute the day’s sky and its contacts to your chart ourselves, then send Anthropic a summary to write the text from: the date, your Sun, Moon and rising signs and the emphasis of your chart, the day’s transits and the houses they fall in, the Moon’s phase and retrogrades, your zodiac and house system, and the previous day’s headline. We do not send your name, your birth date, your birthplace or anything that identifies your account. Readings are prepared in advance for people with a saved chart, so they are ready when you open the App.
• The Oracle (Nostra Plus). To answer you, we send Anthropic your recent messages in the conversation; your display name; your natal chart, including your birth date, birth time and birthplace; any photo, PDF or sky snapshot you attach (with its time and place); and, when you ask for tarot, the cards that correspond to your chart. If you mention a friend for a synastry reading, and that friend allows friends to see their chart, we also send their display name, username and natal chart, including their birth date, time and place.

Under Anthropic’s commercial terms, data sent through its API is not used to train its models. AI-generated text can be wrong, incomplete or unsuitable, and it is not professional advice (see our Terms of Service). Please do not put information in Oracle messages or attachments that you do not want processed this way, including other people’s personal information without their permission.

What Other People Can See

Your birth date, birth time and birthplace are not displayed on your profile, in communities or to friends, and your journal is private to you. What others can see:

• Any signed-in member who searches for your username can see your username and display name. Posts you write in a community can be read by any signed-in member.
• Members of a sign community can see which of your planets and chart points fall in that community’s sign, including your rising sign or Midheaven if they do, when you joined, and, depending on your privacy settings, your Sun sign or your Sun, Moon and rising signs. When you join, an automatic post in that community announces it and lists your placements in that sign.
• Friends who have accepted your request can see the signs and degrees of your planets, your rising sign and your Midheaven, if your settings let friends see your chart. With the same setting on, they can ask the Oracle for a synastry reading with you. That reading is generated from your full chart, including your birth date, time and place (see AI Features), and the Oracle’s reply to your friend may mention details from it. Turn off chart sharing in Profile to prevent this.
• A friend you share a reading with receives the reading you send.

You can change your privacy settings in Profile at any time.

Service Providers

We share personal information only with providers that help us run Nostra, under contracts that limit their use of it to providing their service to us, and as the law requires.

We may also disclose information when we believe in good faith that the law requires it, to protect the rights, safety or property of our users, Nostra or others, or as part of a merger, sale or reorganization of our business, in which case this policy will continue to apply to your information.

Where Data Is Processed

Nostra is based in Canada. Our servers and most of our providers are in the United States, so your information is transferred to, stored and processed in the United States and other countries whose laws may differ from those where you live, and may be accessible to their authorities. Where the GDPR or UK GDPR applies, we rely on appropriate safeguards for these transfers, such as the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework where the provider participates in it.

How Long We Keep It

• Your account, birth data, journal, posts, conversations and shared readings are kept while your account exists, or until you delete them where the App lets you.
• When you ask us to delete your account, we delete your account and the data linked to it, including your birth data, journal, posts, Oracle conversations and messages you sent us, within 30 days of confirming the request.
• Purchase records may be kept for as long as tax, accounting or consumer-protection law requires, after which they are deleted.
• Usage counts and IP addresses recorded for daily limits are kept only as long as needed to enforce those limits and prevent abuse.
• Backups may hold copies of deleted data for a limited period until they are overwritten.

Your Choices and Rights

In the App

• Change your birth data in Charts or Profile, and your privacy settings in Profile.
• Edit or delete journal entries, and leave communities.
• Turn off location for the Apple Watch app in the watch’s Settings.
• Manage or cancel Nostra Plus in your Apple ID settings.

By asking us

Depending on where you live, you have the right to ask us for access to your personal information, to correct it, to delete it, to receive a copy in a portable format, to restrict or object to certain processing, and to withdraw consent. To delete your account or exercise any of these rights, email info@nostrasky.com from the email address on your account, or use the Contact page in the App. We may ask you to confirm the request from your account’s email before we act on it, and we answer within 30 days. See Deleting Your Account for what happens to a subscription.

We will not treat you differently for exercising your rights.

Complaints

If you are unhappy with how we have handled your information, please tell us first. You may also complain to a regulator: in Canada, the Office of the Privacy Commissioner of Canada; in the EU or UK, the data protection authority where you live or work.

California residents

In the past 12 months we have collected the categories of personal information described in What We Collect (identifiers, customer records, commercial information about purchases, internet activity, approximate location you provide, and the content you create) for the purposes in How We Use It, and disclosed them to the service providers in Service Providers. We do not sell or share personal information, and we do not use sensitive personal information for purposes that would give you a right to limit it. You may ask us to tell you what we collect, to delete it and to correct it, and you may use an authorized agent to do so.

Children

Nostra is not directed to children under 13, and you must be at least 13 to use it (or older, if your country sets a higher age for consenting to the processing of personal data). We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we will delete it.

Security

We protect your information with measures appropriate to its sensitivity, including encryption in transit between the App and our servers, passwords and session tokens stored only as cryptographic hashes, and access to production systems limited to the people who run Nostra. No system is perfectly secure, so we cannot guarantee the security of your information. If you find a security problem, please tell us at info@nostrasky.com.

Changes to This Policy

We will update this policy when our practices change. We will post the new version here with a new “last updated” date, and if a change is significant we will tell you in the App or by email before it takes effect.

Contact Us

Nostra, a general partnership registered in Ontario, Canada
Email: info@nostrasky.com