Privacy Policy

Effective date:

This Privacy Policy explains what information Ami collects, how we use it, who we share it with, and the rights you have over it. We’ve written this in plain language because we want you to actually read it.

1. Who We Are

Ami is operated by Esoterican Inc., an Ontario corporation (“Esoterican,” “we,” “us,” or “our”), based in Toronto, Ontario, Canada. You can reach us at support@astroami.com.

We are the “controller” of your personal information for the purposes of Canadian (PIPEDA), European (GDPR), and California (CCPA) privacy laws.

2. Information We Collect

Information you provide directly

• Birth data — date, time, and location of birth. Used solely to calculate your astrological chart.
• Name (or the name you choose to be called) — used to personalize your reading experience and to display your posts in the community.
• Email address — used for account creation, magic-link sign-in, and service communications.
• Charts you save for other people — if you choose to save birth data for friends, family, or partners (for synastry or relationship readings), we store that data the same way we store yours. You are responsible for the consent of those individuals; please don’t save anyone’s birth data without their permission.
• Conversations with Ami (chat messages) — stored locally on your device by default, and synced to our servers if you are signed in, so you can access your history across devices.
• Posts in The Observatory — observations and replies you submit to the community board, plus reactions (“resonances”) you give to other people’s posts.

Information we generate

• Calculated chart data — planetary positions, house cusps, and aspects, derived from your birth data using astronomical software.
• AI-generated readings — the interpretive text Ami produces from your chart.
• Usage records — how many readings you’ve requested in a given billing period, used to enforce fair-use limits on each subscription tier.

Information we DO NOT collect

• No payment card data — payments are handled entirely by Stripe (web) or Apple In-App Purchase (iOS); we never see your card details.
• No biometric data.
• No device location tracking — you type your birth city manually.
• No device fingerprinting or advertising trackers.
• No third-party advertising or analytics tied to your identity.

3. Birth Data Is Sensitive — How We Treat It

The combination of your birth date, birth time, and birth location is, in practice, identifying information. We treat birth data accordingly:

• Stored encrypted at rest in a database hosted in Central Canada (Montreal).
• Accessible only to your account. Row-level security policies prevent any other user from reading your birth data.
• Never shared with advertisers, brokers, or any third party beyond the strictly necessary processors named in Section 5 below.
• Retained only while your account is active. When you delete your account, your birth data is deleted along with it.
• Deletable on demand — you can delete your birth data at any time by deleting your account or by emailing us at support@astroami.com.

4. How We Use Your Information

We use the information you provide and generate solely to:

• Calculate your astrological chart and produce readings personalized to it.
• Provide The Observatory community experience — show your posts, reactions, and replies to other community members.
• Enforce subscription tier limits and prevent abuse.
• Communicate with you about service changes, security alerts, and support requests.
• Improve Ami over time, in the limited ways described in Section 6 (Research and Product Improvement).

We do not use your personal information for advertising. We do not sell or rent your personal information to anyone, ever.

5. Service Providers We Share Information With

To operate Ami, we rely on a small number of third-party service providers. Each one only receives the data strictly necessary for the service it provides, and each is bound by its own privacy commitments.

• Anthropic, PBC — processes your chat messages and chart context to generate AI-powered readings via the Claude API. See Anthropic’s Privacy Policy.
• Supabase — provides authentication, the PostgreSQL database, and real-time messaging infrastructure. The Ami database is provisioned in the Central Canada region (Montreal). See Supabase’s Privacy Policy.
• Vercel — hosts the Ami web application and serverless API endpoints. See Vercel’s Privacy Policy.
• Stripe — processes web subscription payments. We never see your card details; Stripe handles them entirely. See Stripe’s Privacy Policy.
• Apple Inc. — processes iOS in-app subscription purchases when you subscribe through the iOS app. See Apple’s Privacy Policy.

We may also disclose information when required by law (e.g., a valid court order) or to protect against fraud or harm. If we are ever asked to disclose information for any other reason, we will notify you first unless legally prohibited from doing so.

6. Research and Product Improvement

We may use anonymized, aggregated chart and interaction data for internal research — including studying how astrological precision relates to reading accuracy, and improving Ami’s interpretive engine over time.

Before any data enters research storage, your name, email, and account ID are stripped, and your birth location is approximated to a regional level rather than your exact city or coordinates.

We keep birth time exact, because birth time is the part of a chart that moves fastest — the rising sign and house cusps shift roughly every two hours — so fuzzing it would destroy the accuracy of any research the data could support, which would defeat the point of doing the research at all.

Research data lives in a separate database with no link back to your account. You can opt out of research data use at any time in Settings, and if you do, no further data from your charts or readings will enter research storage from that point on.

7. Where Your Data Is Stored and Processed

Your account data, charts, and conversations with Ami are stored in Supabase’s Central Canada (Montreal) region. The Ami web application and serverless API endpoints are hosted by Vercel, with edge servers worldwide; the application code runs in those edge servers but persistent data resides in Canada.

AI processing of your messages is performed by Anthropic, PBC in the United States. By using Ami, you consent to your messages being processed by Anthropic for the purpose of generating your readings.

If you are located in the European Union, the United Kingdom, or another jurisdiction with data transfer requirements, we rely on the Standard Contractual Clauses or equivalent legal mechanisms with our processors to ensure your data is protected when transferred outside your home jurisdiction.

8. How Long We Keep Your Information

• While your account is active: we retain the information described in Section 2 for as long as needed to provide the Service.
• If you delete your account: we delete your personal information from our active systems within 30 days. Backup copies may persist for a further period (typically up to 90 days) before being purged from backup storage.
• Research data: if you have opted in, anonymized research records may be retained indefinitely because they contain no personal identifiers and cannot be traced back to you. If you opt out, no further records are added; previously contributed records remain anonymized and intact.
• Legal obligations: we may retain certain information longer if required to comply with tax, accounting, or other legal obligations.

9. Your Rights

Regardless of where you live, we honour the following rights over your personal information:

• Access — you can request a copy of the personal information we hold about you.
• Correction — you can correct any information that is inaccurate or out of date.
• Deletion — you can delete your account at any time, which deletes your personal information from our active systems.
• Portability — you can request an export of your charts and account data in a machine-readable format.
• Opt-out of research — you can disable research data use at any time in Settings.
• Withdraw consent — you can withdraw consent for any optional processing at any time.

To exercise any of these rights, email support@astroami.com. We aim to respond within 30 days.

If you live in the European Union or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority. If you live in Canada, you may complain to the Office of the Privacy Commissioner of Canada. If you live in California, you have additional rights under the CCPA, including the right to know what personal information we have collected, the right to delete it, and the right not to be discriminated against for exercising your rights.

10. Cookies and Local Storage

Ami uses your browser’s local storage (not third-party cookies) to keep you signed in across visits and to cache your readings on your own device for speed. Ami does not use third-party advertising or analytics cookies. Authentication tokens issued by Supabase are stored locally so you don’t have to sign in every visit.

You can clear your browser’s local storage at any time through your browser settings; doing so will sign you out and remove cached readings.

11. Children’s Privacy

Ami is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will delete that information promptly. If you believe we have such information, please contact us at support@astroami.com.

If you are between 13 and the age of majority in your jurisdiction, please use Ami only with the consent of your parent or legal guardian.

12. Data Security

We use industry-standard security measures to protect your information, including encryption in transit (HTTPS/TLS) and at rest, row-level security policies on the database, and least-privilege access controls. No system is perfectly secure, however, and we cannot guarantee the absolute security of your information. If we ever experience a data breach affecting your personal information, we will notify you and the relevant authorities as required by law.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page and, for material changes, notify you by email or through an in-app notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

14. Controlling Language

Ami is offered in multiple languages, and this Privacy Policy may be made available in translation as a convenience. The English version is the legally controlling version. If there is any conflict or inconsistency between the English version and a translation, the English version governs.

15. Contact

Questions about this Privacy Policy, or about how we handle your information? Email us at support@astroami.com.

Esoterican Inc.
Toronto, Ontario, Canada

Emails

We only send emails you ask for: sign-in codes today, and optional updates or daily readings only if you opt in later. Every optional email will include a working unsubscribe link, in line with Canada's anti-spam legislation (CASL). We never send marketing email without your express consent.

For insight and entertainment

Ami is for insight and entertainment. She reads what astrology says, not certainties, and she can be wrong sometimes. Ami is not a therapist, doctor, lawyer, or financial advisor, and nothing in the app is professional advice of any kind.