Privacy Policy — AstroVox

Last updated: 2026-08-12

1. Who We Are

AstroVox ("we", "our", "us") is an educational mobile application that provides narrated astronomy stories and related educational content. Contact: astrogeeksoficial@gmail.com

2. Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Username
• Password (stored as a secure hash — never in plain text)
• Profile photo (optional, if uploaded)

Usage Data

We automatically collect:

• Stories listened to and progress (position in seconds)
• Quiz answers and XP earned
• Daily activity (for streak tracking)
• Device type and operating system version
• App crash reports and error logs (via Sentry)

Payment Information

Subscription purchases are processed by RevenueCat and the respective app store (Apple App Store / Google Play). We do not store credit card numbers or payment details. We only receive confirmation of subscription status.

3. How We Use Your Information

• Email — account authentication, password reset
• Username — display name in ranking
• Profile photo — display in profile screen
• Progress data — resume playback, track achievements
• Usage data — ranking, streaks, weekly challenges
• Error data — debugging and improving app stability
• Subscription status — unlock premium content

4. Legal Basis for Processing (LGPD)

We process your personal data in accordance with the Brazilian General Data Protection Law (LGPD — Law No. 13,709/2018), based on the following grounds under Article 7:

• Performance of contract: account creation, authentication, and provision of the service (including premium subscription)
• Legitimate interest: gamification (XP, ranking, streaks), account security, and fraud prevention
• Consent: optional data you provide (e.g., profile photo)
• Legal obligation: when required by applicable law

You may withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

5. Data Sharing

We share data with the following third-party services:

• Supabase (database and authentication) — supabase.com/privacy
• RevenueCat (subscription management) — revenuecat.com/privacy
• ElevenLabs (text-to-speech for story narration) — elevenlabs.io/privacy
• Sentry (error monitoring) — sentry.io/privacy

We do not use cookies or advertising trackers. We do not sell your personal data to third parties nor share it for targeted advertising.

6. International Data Transfers

Some services we use (Supabase, RevenueCat, ElevenLabs, and Sentry) may process data on servers located outside Brazil. These transfers observe the safeguards provided by the LGPD (Article 33), including contractual clauses and the providers' privacy policies, always aiming to protect your data.

7. Data Retention

Account data is retained while your account is active. You may delete your account at any time within the app; upon deletion, your data will be removed within 30 days. Copies in backups may remain for an additional period, in accordance with the infrastructure providers' policies.

8. Change of Control

If AstroVox is acquired, merged, or undergoes corporate restructuring, your data may be transferred as part of the business, and you will be notified by email before any relevant transfer, along with an update to this policy.

9. Children's Privacy

This app is not directed to children under 13, and we do not knowingly collect personal data from children under 13. Users between 13 and 18 years old must use the app with the supervision of a legal guardian. If you believe we have inadvertently collected data from a minor, please contact us: astrogeeksoficial@gmail.com

10. Security

We use industry-standard security measures including HTTPS encryption, row-level security (RLS) in our database, and hashed password storage. No method of transmission or storage is 100% secure.

11. Security Incident Notification

In the event of a security incident that may pose relevant risk or harm to you, we will notify the Brazilian National Data Protection Authority (ANPD) and the affected individuals, as required by Article 48 of the LGPD.

12. Your Rights

Under the LGPD, you may, at any time:

• Confirm whether we process your data and access it
• Correct incomplete, inaccurate, or outdated data
• Request anonymization, blocking, or deletion of unnecessary, excessive, or non-compliant data
• Request portability of your data to another service provider
• Request deletion of data processed based on consent
• Be informed about public and private entities with which we share data
• Withdraw consent

We will respond to your requests within 15 days (Article 19 of the LGPD). To exercise your rights, contact: astrogeeksoficial@gmail.com

13. Data Protection Officer

Under Article 41 of the LGPD, the data protection officer may be contacted by email: astrogeeksoficial@gmail.com

14. Changes to This Policy

We will notify users of significant changes by updating the "Last updated" date above. Continued use of the app after changes constitutes acceptance of the updated policy.

15. Contact

Email: astrogeeksoficial@gmail.com