Privacy Policy

Effective date: August 15, 2026

This Privacy Policy explains what information Ami collects, how we use it, who we share it with, and the rights you have over it. We’ve written this in plain language because we want you to actually read it.

1. Who We Are

Ami is operated by Esoterican Inc., an Ontario corporation (“Esoterican,” “we,” “us,” or “our”), based in Toronto, Ontario, Canada. You can reach us at support@astroami.com.

In this Policy, the “Service” means the Ami application and website described in our Terms of Service.

We are the organization responsible for your personal information: the “controller” under the GDPR, the “organization” under PIPEDA, and the “business” under the CCPA. The person in charge of the protection of personal information is Esoterican’s Privacy Officer, reachable at support@astroami.com.

2. Information We Collect

Information you provide directly

• Birth data: date, time, and location of birth. Used solely to calculate your astrological chart.
• Name (or the name you choose to be called): used to personalize your reading experience and, when community features are available, to display your posts there.
• Email address: used for account creation, sign-in with a 6-digit email code, and service communications.
• Charts you save for other people: if you choose to save birth data for friends, family, or partners (for synastry or relationship readings), we store that data the same way we store yours. You are responsible for the consent of those individuals; please don’t save anyone’s birth data without their permission.
• Conversations with Ami (chat messages): each message you send is transmitted to our AI provider (Anthropic, in the United States) to generate Ami’s reply; the conversation history is then stored locally on your device. Content you explicitly choose to share (such as a shared reading link) is stored on our servers to make the share work, remains available while your account is active, and is removed on request to support@astroami.com or when your account is deleted.
• Posts in The Observatory (when available): if and when the community board is offered, the observations and replies you submit, plus reactions (“resonances”) you give to other people’s posts.

Information we generate

• Calculated chart data: planetary positions, house cusps, and aspects, derived from your birth data using astronomical software.
• AI-generated readings: the interpretive text Ami produces from your chart.
• Usage records: how many readings you’ve requested in a given billing period, used to enforce fair-use limits on each subscription tier.

Information we DO NOT collect

• No payment card data: payments are handled entirely by Stripe (web) or Apple In-App Purchase (iOS); we never see your card details.
• No biometric data.
• No device location tracking: you type your birth city manually.
• No device fingerprinting or advertising trackers.
• No third-party advertising or analytics tied to your identity.

3. Birth Data Is Sensitive: How We Treat It

The combination of your birth date, birth time, and birth location is, in practice, identifying information. We treat birth data accordingly:

• Processed transiently to calculate your chart whenever you use Ami, and stored encrypted at rest in a database hosted in Central Canada (Montreal) when you save a chart or sign in. If you never create an account, your birth data lives on your own device and our servers only touch it long enough to compute the chart.
• Accessible only to your account. Row-level security policies prevent any other user from reading your birth data.
• Never shared with advertisers, brokers, or any third party beyond the strictly necessary processors named in Section 5 below.
• Retained only while your account is active. When you delete your account, your birth data is deleted along with it.
• Deletable on demand: you can delete your birth data at any time by deleting your account or by emailing us at support@astroami.com.

4. How We Use Your Information

We use the information you provide and generate solely to:

• Calculate your astrological chart and produce readings personalized to it.
• Provide The Observatory community experience (when available): show your posts, reactions, and replies to other community members.
• Enforce subscription tier limits and prevent abuse.
• Communicate with you about service changes, security alerts, and support requests.
• Improve Ami over time, in the limited ways described in Section 6 (Research and Product Improvement).

We do not use your personal information for advertising. We do not sell or rent your personal information to anyone. If Esoterican merges with or is acquired by another company, personal information may be transferred to the successor, which must honour this Policy or provide you notice and choice before any material change in how your information is handled.

Marketing email (such as our newsletter) is sent only with your express consent, separately from service communications, and every marketing message includes a working unsubscribe that we honour promptly, as required by Canada’s Anti-Spam Legislation (CASL).

5. Service Providers We Share Information With

To operate Ami, we rely on a small number of third-party service providers. Each one only receives the data strictly necessary for the service it provides, and each is bound by its own privacy commitments.

• Anthropic, PBC: processes your chat messages and chart context to generate AI-powered readings via the Claude API. See Anthropic’s Privacy Policy.
• Supabase: provides authentication and the PostgreSQL database. The Ami database is provisioned in the Central Canada region (Montreal). See Supabase’s Privacy Policy.
• Vercel: hosts the Ami web application and serverless API endpoints. See Vercel’s Privacy Policy.
• Stripe: processes web subscription payments. We never see your card details; Stripe handles them entirely. See Stripe’s Privacy Policy.
• Apple Inc.: processes iOS in-app subscription purchases when you subscribe through the iOS app. See Apple’s Privacy Policy.
• RevenueCat: manages subscription entitlements for in-app purchases (which plan is active on your account). RevenueCat never sees payment details. See RevenueCat’s Privacy Policy.
• OpenStreetMap Nominatim: converts the city names you type into map coordinates for chart calculation. Only the place name you search is sent, never your identity. See the OSM Foundation’s Privacy Policy.
• Photon (Komoot GmbH, Germany): a second geocoding service used for map searches and city lookups: converts the place names you type into map coordinates. Only the place name you search is sent, never your identity. Photon does not publish a privacy policy of its own; see Komoot’s privacy policy.
• Sentry (Functional Software, Inc., USA): receives crash and error reports when something in Ami breaks, so we can fix it. Reports contain technical details of the failure and your device type; we do not send your birth data or readings to Sentry. See Sentry’s Privacy Policy.
• Brevo (Sendinblue SAS, France): delivers our transactional email, including your sign-in codes and service notices. Receives your email address for that delivery. See Brevo’s Privacy Policy.
• CARTO: serves the base map imagery behind the astrocartography map. Loading map tiles sends your IP address and the map area you are viewing to CARTO, as any map service requires. See CARTO’s Privacy Policy.

We may also disclose information when required by law (e.g., a valid court order) or to protect against fraud or harm. If we are ever asked to disclose information for any other reason, we will notify you first unless legally prohibited from doing so.

If a breach of our security safeguards ever creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as PIPEDA requires and, for Quebec residents, the Commission d'accès à l'information (CAI), and we will tell you plainly what happened and what we are doing about it.

6. Research and Product Improvement

We may use anonymized, aggregated chart and interaction data for internal research, including studying how astrological precision relates to reading accuracy, and improving Ami’s interpretive engine over time.

Before any data enters research storage, your name, email, and account ID are stripped, and your birth location is approximated to a regional level rather than your exact city or coordinates.

We keep birth time exact, because birth time is the part of a chart that moves fastest, the rising sign and house cusps shift roughly every two hours, so fuzzing it would destroy the accuracy of any research the data could support, which would defeat the point of doing the research at all.

Research data lives in a separate database with no link back to your account. You can opt out of research data use at any time by emailing support@astroami.com, and if you do, no further data from your charts or readings will enter research storage from that point on.

7. Where Your Data Is Stored and Processed

Your account data and charts are stored in Supabase’s Central Canada (Montreal) region. Conversations with Ami stay on your device; only content you explicitly choose to share is stored on our servers. The Ami web application and serverless API endpoints are hosted by Vercel, with edge servers worldwide; the application code runs in those edge servers but persistent data resides in Canada.

AI processing of your messages is performed by Anthropic, PBC in the United States. Each message you send is transmitted to Anthropic and processed there solely to generate the reply, as necessary to provide the Service.

If you are located in the European Union, the United Kingdom, or another jurisdiction with data transfer requirements, we rely on the Standard Contractual Clauses or equivalent legal mechanisms with our processors to ensure your data is protected when transferred outside your home jurisdiction.

8. How Long We Keep Your Information

• While your account is active: we retain the information described in Section 2 for as long as needed to provide the Service.
• If you delete your account: we delete your personal information from our active systems within 30 days. Backup copies may persist for a further period (typically up to 90 days) before being purged from backup storage.
• Research data: unless you have opted out, anonymized research records may be retained indefinitely because they contain no personal identifiers and cannot be traced back to you. If you opt out, no further records are added; previously contributed records remain anonymized and intact.
• Legal obligations: we may retain certain information longer if required to comply with tax, accounting, or other legal obligations.

9. Your Rights

Regardless of where you live, we honour the following rights over your personal information:

• Access: you can request a copy of the personal information we hold about you.
• Correction: you can correct any information that is inaccurate or out of date.
• Deletion: you can delete your account at any time, which deletes your personal information from our active systems.
• Portability: you can request an export of your charts and account data in a machine-readable format.
• Restriction and objection: where the GDPR or UK GDPR applies to you, you can ask us to restrict how we process your personal information and object to processing.
• Opt-out of research: you can opt out of research data use at any time by emailing support@astroami.com.
• Withdraw consent: you can withdraw consent for any optional processing at any time.

To exercise any of these rights, email support@astroami.com. We aim to respond within 30 days.

If you live in the European Union or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority. If you live in Canada, you may complain to the Office of the Privacy Commissioner of Canada. If you live in California, you have additional rights under the CCPA, including the right to know what personal information we have collected, the right to delete it, and the right not to be discriminated against for exercising your rights.

10. Cookies and Local Storage

Ami uses your browser’s local storage (not third-party cookies) to keep you signed in across visits and to cache your readings on your own device for speed. Ami does not use third-party advertising or analytics cookies. Authentication tokens issued by Supabase are stored locally so you don’t have to sign in every visit.

You can clear your browser’s local storage at any time through your browser settings; doing so will sign you out and remove cached readings.

11. Children’s Privacy

Ami is intended for adults aged 18 and older and is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If we become aware that we have done so, we will delete that information promptly. If you believe we have such information, please contact us at support@astroami.com.

12. Data Security

We use industry-standard security measures to protect your information, including encryption in transit (HTTPS/TLS) and at rest, row-level security policies on the database, and least-privilege access controls. No system is perfectly secure, however, and we cannot guarantee the absolute security of your information. If we ever experience a data breach affecting your personal information, we will notify you and the relevant authorities as required by law, including the Office of the Privacy Commissioner of Canada and, for Quebec residents, the Commission d'accès à l'information (CAI).

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page and, for material changes, notify you by email or through an in-app notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

14. Controlling Language

Ami is offered in multiple languages, and this Privacy Policy may be made available in translation as a convenience. The English version is the legally controlling version. If there is any conflict or inconsistency between the English version and a translation, the English version governs, except where the law of your place of residence requires otherwise for consumers.

15. Contact

Questions about this Privacy Policy, or about how we handle your information? Email us at support@astroami.com.

Esoterican Inc.
Toronto, Ontario, Canada