Astro Alice privacy policy

Effective date: 2026-09-27

Astro Alice is provided by Longrifle AI LLC in the United States. For privacy questions or requests, contact contact@longrifle.ai or visit our account-deletion help.

Astro Alice is for adults aged 18 and older. Its initial iPhone launch is planned for the United States, Canada, Australia and New Zealand. Apple age-range evidence is used to decide access. Entering an adult birth date in a profile does not replace that check. If age admission is unavailable or restricted, the app still offers its local-data and privacy-help routes.

Information and choices

Profiles, diary and local play

Your device stores your character, companion, home, game progress, birth profile and saved people's profiles. It can also store diary pages and drafts, check-ins, conversations and memories you choose to keep. Profiles can include a name, relationship and birth date, time and place.

Local editing does not automatically upload a cloud backup. Connected calculations and questions are separate uses described below. Removing local information does not change an earlier backup, an exported file or information already sent in a request.

Readings, place searches and sky pointing

Place lookup and birth-time resolution send the entered place, date and time to our calculation service, including the repeated-time choice when one is needed. Planet calculations send the calculated instant and a request identifier. Authenticated requests also carry the session information needed to authorize access and apply usage limits.

Our configured calculation service uses a locally hosted GeoNames place index and time-zone data. It does not send these searches to an external geocoding API. A place that you save in a profile can include precise coordinates, which are included if you later back up that profile.

When you request device location for the sky view, the app uses the observer location and pointing information locally to project the sky. That view's current planet-position request sends the instant and a request identifier, rather than the device coordinates. This does not mean that saved birthplace information or place-search requests stay on the device.

AI questions

Before sending a question, the app asks for AI-processing permission. With your permission, it sends the question, conversation context, selected names and chart placements to Longrifle's service for self-hosted AI processing. Selected diary text and kept memories are included when you choose to include them. Membership and AI-processing permission are separate requirements.

Incognito leaves diary and memory context out and does not add the new conversation to this app's local history. The current question and chart context are still processed. Incognito does not erase earlier requests, saved conversations, exports or backups.

You can decline or revoke AI permission in Settings, Your data. Revocation stops future AI questions; it cannot recall a request already sent and does not delete your existing profiles or diary. Signing in or restoring a backup does not grant AI-processing permission.

Information about other people

The app does not automatically invite or message people you add. Consider using an alias, and avoid entering their contact details or unnecessary private information. An alias does not guarantee anonymity.

Information about another person can leave your device through birth calculations, selected-person questions and optional backups. Both backup scopes include all saved profiles, not just the person selected for a reading. Diary-inclusive backups can also contain information about other people in free text. Your permission to use AI or save a backup does not establish another person's consent.

Where New Zealand law requires notice to someone whose information we receive from another person, we take reasonable steps to give that notice unless an applicable exception applies. For example, notice may not be reasonably practicable when we have no usable contact details. We do not seek extra contact details solely to send a notice. We consider the circumstances, including privacy and safety, before deciding whether and how to notify someone.

If you believe we hold information about you, you can ask Longrifle AI LLC at contact@longrifle.ai for access or correction even if you do not use Astro Alice. We verify your identity and assess information involving more than one person before responding. Knowing a name or birth date does not give someone access to another person's account or whole diary. We consider the applicable access rights and legal grounds for withholding particular information.

Guest accounts and Apple sign-in

Connected guest access creates an Astro Alice account and installation/session identifiers. It is not anonymous access. Apple App Attest helps our service verify the app and its installation. Account credentials are kept in secure device storage separately from ordinary village saves.

Optional Sign in with Apple links Apple's verified account identifier so you can recover your Astro Alice account. Apple processes the sign-in under its own terms. Astro Alice does not receive your Apple password and does not use an email address as proof that two accounts belong to the same person. A guest without linked sign-in cannot recover access just by supplying a matching name or email address.

To handle an interrupted Apple sign-in safely, our service can retain encrypted attempt records and Apple's signed response, including an email claim if Apple supplied one. These records support account verification and required Apple cleanup, not marketing. Some incomplete cleanup can remain pending separately from the live account.

Optional cloud backup

Cloud backup is manual and requires a linked account. Signing in does not enable it automatically. You choose one of two scopes:

• Village and profiles: your character, companion, home, game progress, your profile and all saved people's profiles.
• Also include diary and conversations: the same information plus diary pages and drafts, check-ins, saved conversations and memories.

The service holds one current snapshot per account. Downloading a preview does not replace your device's save. Replacement requires a separate confirmation and keeps a local recovery copy of the prior save. Restoring a village-only snapshot replaces the active diary with an empty diary; the previous diary can still exist in the local recovery copy.

Backup encryption uses server-managed keys. Our authenticated service can decrypt the backup, so this is not end-to-end encryption. Snapshots exclude account credentials, payment proofs, paid ownership and AI permissions. A restored furniture layout does not itself grant a paid item.

Purchases and service records

Apple handles App Store payment information. For membership verification, Astro Alice supplies Apple with an identifier specific to your Astro Alice account. The app sends transaction information to our authenticated service, which checks the purchase with Apple and keeps encrypted membership transaction references linked to the account and product. StoreKit also supplies verified product and transaction information for permanent furniture ownership and restoration.

Deleting an Astro Alice account does not cancel an Apple subscription, erase Apple's records or make a permanent purchase disappear. Manage subscriptions through Apple. Earned in-game coins have no cash value and are separate from App Store purchases.

We also process limited account/installation identifiers, request outcomes, usage counts and timing information to operate the service, control access, investigate failures and prevent abuse. These records can remain linked to an account or installation even when they do not contain diary or question text. We do not use app or account information for targeted advertising, share it with data brokers or combine it with other companies' data for advertising.

Hosting and support

Our application API runs on DigitalOcean infrastructure in the United States. Longrifle's computers that perform chart and self-hosted AI processing and hold encrypted off-server recovery copies are also in the United States. Requests use encrypted connections and an authenticated private connection between our API and processing computer. These locations do not mean every provider operation or copy is confined to the United States.

Vercel hosts the separate brochure website through its distributed network. Visiting it sends request information to that infrastructure, such as an IP address and browser/request metadata. The current site is static. We have not enabled Vercel Web Analytics, and no project log drain was configured in the reviewed deployment. Those facts do not mean Vercel keeps no security or delivery records.

Support email is handled through Proton Mail. Support messages include the text and attachments you send, and email delivery also involves your email provider. Proton describes mail storage in Switzerland, Germany and Norway and encrypted offline backups retained for up to 30 days. Those provider backups are separate from our live support-case records and any independent copies.

Deletion and retention

Use Settings, Account and backup for the cloud/account actions and Settings, Your data for local deletion. If a local storage operation fails or is interrupted, the app can require a retry. Uninstalling is not an account-deletion request, and account deletion does not cancel Apple renewal.

We retain limited deletion, installation and backup-version information to prevent stale credentials or recovered backups from reviving retired data. This is not a diary backup. A live deletion is not a promise of immediate physical erasure from every journal or operational copy.

Our retention schedule is:

These periods do not set an expiry date for an active account, your current cloud snapshot or data you keep on your device. Their deletion controls are described above. Restoring an operational backup must not make a deleted account or deleted cloud snapshot available again. Copies you control, such as exports and device backups, and records independently held by Apple or other providers follow their separate controls and retention rules.

Some limited records need a different rule. Apple credential revocation material remains until revocation succeeds. Interrupted Apple sign-in records, including encrypted signed responses and any incidental claims within them, remain while needed for verified recovery or cleanup. We remove the active cleanup record through a supported, verified resolution. An unresolved outcome is not treated as success simply because time has passed. Other retained copies are handled separately.

We also retain minimal purchase and revocation facts while needed to restore permanent purchases or prevent revoked ownership from being granted again. Minimal deletion, installation and backup-version records remain while old credentials, signed receipts, stale operations or recoverable snapshots could otherwise revive retired data. These records can still be linked to an account or installation; they are not described as anonymous. We remove account links that are no longer needed and retire these records only when it is verified safe to do so.

For a specific retention exception, we record why the limited information is still needed, who is responsible, the next action and review date, and the verified outcome. We review it when due and at least annually. An exception for one record does not automatically extend every support message, attachment or backup. These exceptions do not permit reuse of the information for marketing or unrelated purposes.

Requests and policy updates

You can request help with access, correction or deletion at contact@longrifle.ai or through account-deletion help, including if you no longer have the app. Do not email passwords, verification codes, Apple credentials or full payment details. Email alone is not proof of ownership of an Astro Alice account. An unlinked guest who has lost access may not be recoverable.

You may contact us to request access to information about you, correction of inaccurate information, deletion, or help withdrawing an optional processing choice. The available rights, exceptions and response deadlines depend on the law that applies to your request. We will assess your request, verify authority without asking for your passwords, and explain the outcome. If we cannot fulfill all of it, we will explain the applicable reason and how to raise a concern. We assess information involving more than one person and apply any lawful limits before responding.

Send requests and privacy complaints to contact@longrifle.ai. If our response does not resolve your concern, you can contact the privacy regulator that applies to you. For example, Canada has federal and provincial privacy authorities, Australia has the Office of the Australian Information Commissioner, and New Zealand has the Office of the Privacy Commissioner. In the United States, privacy protections and complaint routes include federal and state authorities. These examples do not limit any rights or remedies you have.

Information may be processed outside your country in the locations described above. Laws in those countries may permit courts, law-enforcement agencies or other public authorities to obtain information under lawful process. Selecting a cloud region is not a guarantee that every provider operation or backup remains there. Contact us for information about our processing arrangements. Agreeing to use Astro Alice does not waive rights that cannot lawfully be waived.

For New Zealand access and correction requests, we normally give our decision within 20 New Zealand working days. If a lawful extension is needed, we tell you why and when to expect our decision. Information we agree to provide follows without undue delay. If we decline a correction, you can ask us to attach a statement of the correction you seek. We explain a refusal and your complaint options. You can also complain to the New Zealand Privacy Commissioner.

We may update this policy. We will publish the revised policy on this page with its effective date and describe material changes here. Updating the policy does not, by itself, change your AI-processing or cloud-backup choices.

If a proposed change requires additional permission, we will explain the changed processing and ask for that permission before starting it. You can decline optional AI processing or choose not to make a cloud backup. You can turn off AI-processing permission on this device in Settings, Your data. Cloud backups remain a separate choice in Settings, Account and backup. Signing in or restoring a backup does not create a new AI-processing permission.

For other questions, see Support.