Privacy policy

Astrea is run by Architech Solutions LLC. In this policy, "Astrea", "we" and "us" mean that operator.

The policy covers the astrea.work website, the Astrea web app and the Astrea iOS app. Questions go to support@astrea.work.

We collect what you put into Astrea and a little about how you use it. Many features are optional. If you never use one, we hold nothing from it.

• Account. Your name and email address. They come from signing in through Clerk with an email and password, Google or Apple. The iOS app may show the profile photo from your sign-in provider. Astrea does not store it.
• Phone number. Only if you add one. We use it only to text you a shared calendar alert through Textbelt when a push notification can't reach you.
• Your work. Tasks, projects, schedule dates, due dates, time estimates, time spent, recurring tasks, alarms (we call them nudges), focus sessions, achievements and streaks. Also the feedback you send us, your app settings and your timezone.
• People. If you use the People tracker: names, birthdays, anniversaries, gift, date and trip ideas, lists of movies, books and music, and notes and photos about people in your life. This is information about other people. Keep only what you have a reason to keep.
• Health. If you use Health: weight, calories, meals and walking or running distance, all typed in by you. Astrea does not use HealthKit or read Apple Health data.
• Shared calendar. If you link a calendar with a partner: the commitments, comments and change requests you share. Your partner sees the commitments you create, and you see theirs.
• Voice memos. Audio you record in the iOS app. The app asks for your consent before the first memo goes to the AI providers below. We delete the audio once it is transcribed. We keep the transcript and a record of what Astrea did with it, such as the tasks it created or completed. That record is what lets you undo a memo.
• Onboarding conversation. On the web, the answers you type or speak during setup and the assistant's replies. We transcribe spoken answers and then delete the audio.
• Device and usage. A push token from Expo if you turn on notifications, your timezone, and when you were last active. We use the last-active time for optional reminders after you've been away.

On the website and web app only:

• Analytics. PostHog records page views, the screens you open, clicks, when you leave a page, and errors in your browser. A click event includes the text of what you clicked, such as a button label or a task title. Once you sign in, these events are tied to your account id, email and name.
• Session recordings. PostHog also records how you use the web app, which captures what's on screen, such as your tasks and projects. Recordings leave out the Health, People and Calendar screens, calendar notifications and the Google Calendar card in Settings. Those parts show up as blank boxes, and clicks inside them are not recorded at all. Text you type into form fields is hidden, and so is the text of the short confirmation messages that pop up after you change something.
• Ad measurement. Every page of the website and web app, including signed-in pages, loads Google's ads tag. It sets cookies and tells Google which pages you visit, along with your IP address and browser. We use it to see which of our ads lead to sign-ups, and Google may use it to show our ads to past visitors. It sees page addresses, not the contents of your tasks.
• Google Calendar. If you connect it, Astrea reads your calendar list and your events from about 30 days back to 120 days ahead, and keeps a copy to show them. Astrea doesn't add or change events in your calendars. Earlier versions of Astrea copied scheduled tasks into a Google calendar. When you sync or disconnect, Astrea deletes those old task events, which is why Google asks you to let Astrea edit your calendars. Clerk holds the Google access token, not Astrea. You can disconnect in Settings.
• Payments. Subscriptions run through Clerk Billing. The one-time lifetime plan runs through Stripe. We never see your card number. We store only whether your plan is active.
• Movie and book search. When you search for a movie, show or book in People, what you type goes to OMDb for movies and TV or to Open Library for books. Picking a result sends that title's id to get its details. Your name and account don't go with either. Your browser then loads posters and covers straight from the image hosts those services point to, so those hosts see your IP address and browser, as any website does. A photo link you add for a person loads from that link's site the same way.

Astrea's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. We use your Google Calendar data only to show your events in Astrea. It doesn't go to AI providers, analytics or advertising, and we don't sell it.

Two features send your data to AI providers.

• Voice memos. We send the audio to OpenAI to transcribe it. Then we send the transcript, the names of your projects and the titles of some of your open tasks to OpenAI and TypeSafe. They decide whether the memo is a new task or one you finished, and which project it belongs to.
• Onboarding. On the web, your answers go to OpenAI and TypeSafe the same way, to set up your first projects. The screen shows a notice before you answer.

We don't attach your name, email or phone number to these requests. Your words go as you said or typed them, though. If a memo or an answer mentions a name or an email address, the request includes it.

We turn off OpenAI's storage of our text requests. OpenAI still keeps logs of them for up to 30 days to check for abuse, then deletes them. OpenAI says it keeps no such logs for transcription requests. It does not train its models on API data by default.

TypeSafe's privacy policy says it doesn't train or fine-tune models on what we send, and shares it only with its own service providers. It sets no fixed retention period. It keeps data as long as it reasonably needs to run its service and takes steps to delete it when asked.

AI output can be wrong. A memo can land in the wrong project or mark the wrong task done. Right after each memo, the app shows what it did and offers Undo.

These companies process data for us so Astrea can run. Each gets only what its job needs.

Clerk

Sign-in, accounts and subscription billing

Convex

Database and file storage

Vercel

Hosts the website and web app, and passes analytics to PostHog

OpenAI

Voice transcription, filing voice memos, onboarding assistant

TypeSafe

AI judgments for voice memos and onboarding

Expo

Push notification delivery and app updates

Apple

Sign in with Apple, and push notifications on iOS

Textbelt

Shared calendar text messages

Resend

Trial emails

PostHog

Analytics and session recordings on the website and web app

Stripe

Lifetime plan payments on the website

Google

Google sign-in, Google Calendar, and ad measurement on the website and web app

OMDb and Open Library

Movie, TV and book search. They get what you search for and the id of the title you pick.

Poster and cover image hosts

Your browser loads movie posters and book covers from them, so they see your IP address.

• We don't sell your data.
• We don't show ads inside Astrea.
• The iOS app doesn't track you across other companies' apps or websites. On the web, Google's ads tag is the only advertising tool, as described above.
• We don't share your data with data brokers.

We keep your data while your account exists.

You can delete your account in the iOS app under More > Delete account, or on the web under Settings > Account. That removes everything listed above from Astrea and deletes your sign-in account at Clerk. It can't be undone.

• We delete voice memo audio and onboarding audio as soon as transcription finishes or fails. An hourly cleanup deletes any upload that is more than an hour old and was never processed. An abandoned upload usually goes within about two hours. A backlog or a failed cleanup can delay deletion.
• We remove the copy of your Google calendar when you disconnect it or delete your account.
• If you share a calendar, deleting your account removes your commitments and comments and unlinks your partner. Your partner's own commitments stay with them.
• Deleting your account doesn't remove what other companies already hold, such as Stripe receipts, PostHog events and recordings, and the AI provider logs described above. Those follow each provider's own retention rules.

• Voice memos go to AI providers only after you agree. Turn off voice AI processing on the web under Settings > Account, or in the iOS app under More > Voice memos. This does not erase existing transcripts or tasks.
• Turn notifications off in the app or in iOS Settings.
• Disconnect Google Calendar in Settings on the web.
• Delete your account at any time.

For anything else about your data, write to support@astrea.work.

Astrea is not meant for children under 13, and we don't knowingly collect their data. If you think a child has given us data, write to us and we will delete it.

Data travels between your device and Astrea over HTTPS. Convex stores your data and Clerk stores your sign-in. Only the operator has access to the production systems. No system is perfectly secure, so we can't promise your data will never be exposed.

If we change this policy, we will post the new version here with a new effective date. Questions go to support@astrea.work.