Effective Date: March 4, 2026
This Privacy Policy explains how Astra ("Astra," "we," "us," or "our") collects, uses, and shares information collected from or about you when you use, access, or interact with our services, including any application, website, feature, product, or other service that provides a link to this Privacy Policy (collectively, the "Services").
We may collect information from you both directly and automatically when you use or visit the Services, and sometimes from third parties. Some of this information may be considered "personal information" or "personal data," and some may be considered "sensitive" data, under various applicable laws.
Note that we may de-identify or pseudonymize personal data so that it is non-personal. We will treat de-identified or pseudonymized data as non-personal to the fullest extent allowed by applicable law.
| Data Category | Description |
|---|---|
| Account Data | Phone number, email address, and date of birth. |
| Profile Data | Name, age, location/geolocation, occupation, education, and conversational answers to profile prompts. |
| Content | Photos, videos, audio, text, and other content you provide. |
| AI Interaction Data | The full text of your conversational inputs to our AI and the AI-generated responses. |
| Customer Support Data | Information you provide when contacting us. |
| Data Category | Description |
|---|---|
| Usage Data | Activity on the Services (e.g., when you logged in, features used, actions taken, time spent). |
| Technical Data | IP address, device ID and type, browser, operating system, and identifiers associated with cookies or other technologies. |
| Approximate Location Data | We may infer your approximate location based on your IP address. |
Cookies and Local Storage. Cookies and local storage are text files placed within a browser on a device when it is used to visit the Services. We may use cookies and similar technologies to help keep your use of the Services more secure, to study traffic patterns, to measure the performance of the Services, and to personalize your experience. Most browsers provide you with the ability to disable, decline, or clear cookies; please check your browser's settings. However, if you disable cookies, you may find this affects your ability to use certain parts of the Services. For more information, please visit aboutcookies.org.
Pixel Tags. Small graphic images or other web programming code may be included in our web pages and email messages. These may be used for purposes including counting visitors, monitoring how users navigate the Services, and counting how many email messages were opened.
Embedded Scripts. An embedded script is programming code designed to collect data about your interactions with the Services. The code is temporarily used while you browse the Services and is deactivated or deleted when you disconnect.
Session Replay Technology. Astra may record your interactions with the Services, such as what pages you visit, how long you visit, and any links you click. We use this data for internal business purposes, such as website analytics and improving the Services.
Geolocation Data. We may provide you with a tool that allows you to use your current location. We use this data to determine what geographic area is relevant to you when we provide the Services.
Our Services may integrate with third-party platforms, and as a result, we receive certain data from them when you use our Services. We may also provide you with the ability to interact with, login through, or otherwise connect your accounts with other third party platforms.
The data we collect is subject to this Privacy Policy. The data collected and stored by the third party remains subject to the third party's privacy practices.
If you choose to post information to a third-party platform, that information may be public.
The primary reason we process your data is to provide and improve our Services, which includes offering personalized, AI-generated coaching and suggestions.
| Purpose for Processing | Key Data Categories Used |
|---|---|
| To Provide Core Services | Account, Profile, Content, AI Interaction, Usage. |
| AI Coaching | Profile, AI Interaction, Usage. |
| Service Improvement & AI Training | Profile, Content, AI Interaction, Usage, Technical. |
| Safety & Security | Account, Profile, Content, Customer Support, Technical. |
| Marketing & Advertising | Account, Profile, Usage, Technical. |
| Administrative and Legal Compliance | All data categories. |
Your Profile Data, Content, and AI Interactions may be shared with certain third-party AI partners in order to provide the core functionality of our Services, such as generating personalized and contextual coaching responses.
We disclose any of the categories of personal data described in this policy to our service providers for business purposes performed on our behalf. For example, we use third parties to assist us with data hosting, analytics, customer care, payment processing, and security operations.
We reserve the right to use or disclose any information as needed to satisfy any law, regulation, or legal request; to protect the integrity of the Services; to fulfill your requests; to cooperate in a law enforcement investigation; to protect and defend the legal rights and/or property of Astra; or, in an emergency, to protect the health and safety of users or the general public.
In the event we undergo a business transition, such as a merger with or acquisition by another company, or sale of all or a portion of its assets, we may transfer your personal information to the successor organization. By providing your personal information, you agree that we may transfer such information in such a transaction without your further consent.
We will retain all categories of your personal data for as long as it is reasonably necessary for the purposes set out in this Privacy Policy, considering the time period reasonably necessary to: provide the Services to you; comply with our contractual obligations; enforce our Terms of Service; and comply with legal and regulatory requirements. We retain your personal data while you have an account with us, or while you are using our Services.
Our Services are restricted to individuals who are 18 years of age or older. We do not permit individuals under the age of 18 on our platform.
To the extent allowed by applicable law, we reserve the right to change this Privacy Policy at any time. We will inform you by posting a notice on the Services. Your continued use of the Services after the effective date of the revised Privacy Policy will constitute your consent to those changes. Note that you may no longer be able to use certain or any features of the Services if you do not consent to the revised Privacy Policy.
We are a US-based company, so if you are located outside of the United States, please be aware that the information that we collect from you will be transferred to, and stored at, a destination outside of your country. By using our Services or providing us with any information, you fully understand and consent to this transfer to, and processing, usage, sharing, and storage of your information in the United States and other jurisdictions, which may have different or less protective privacy laws than those in your country.
If you are a Canadian resident and would like to submit a request to access, correct, or update your personal information, or to withdraw consent to the processing of your personal information, please email contact@astra.ai.
Your Personal Information is protected in the EEA by the General Data Protection Regulation (GDPR) and in the United Kingdom by the UK GDPR. If you have any concerns about how your Personal Information is handled, please reach out to us via the Contact Us section of this policy.
We process personal data on the following legal bases: (1) with your consent; (2) as necessary to perform our agreement with you; (3) compliance with our legal obligations; and (4) as necessary for our legitimate interests in providing the Service where those interests do not override your fundamental rights and freedoms.
Astra is a U.S.-based company. By using our website or engaging with our Services, you acknowledge and agree that your personal data may be transferred, stored, and processed in the United States. Transfers of personal data to a third country without an adequacy decision are required to be subject to appropriate safeguards such as standard contractual clauses.
You have certain rights under the GDPR, including:
To submit a data privacy request, please reach out to us via the Contact Us section of this policy.
You have the right, in certain circumstances, not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects on you.
For UK data subjects, if you consider our use of your Personal Information to be unlawful, you have the right to lodge a complaint with the ICO at www.ico.org.uk.
For residents of other EU member countries, please visit the data protection authority of your specific country. The list can be found at edpb.europa.eu.
In certain jurisdictions with relevant data protection laws, we may require your consent or authorization to use or share your Personal Data. By providing your Personal Data to us, you expressly provide such consent or authorization to the extent it is required.
You may have additional privacy rights under the law of your country of residence, typically including the rights to access, correct, delete, or object to further processing of your Personal Data.
If you have questions about this Privacy Policy, please contact us at contact@astra.ai.