Privacy Policy
Last updated: May 2026
1. Controller Identification
Aster ("we", "our", "Platform") accessible at getaster.co.
For privacy and data protection inquiries, contact us at [email protected].
This Privacy Policy describes how we collect, use, store, share, and protect your personal data in compliance with applicable data protection laws.
2. Data We Collect
We collect only the data necessary to provide the service.
2.1. Data provided directly by you
| Category | Examples | Purpose |
|---|---|---|
| Identification | Full name, email | Account management |
| Contact | Sending reminders | |
| Reminders & Finances* | Message, amount, time, expense category | Notification scheduling & expense categorization |
| Payment | Token via Stripe | Subscription |
2.2. Data collected automatically
- Browsing data: IP address, browser type, operating system.
- Usage data: Pages visited, access times.
- Cookies: Session identifiers and analytics.
2.3. Data we do not collect
We do not intentionally collect full medical records or data from individuals under 18 years old.
3. Legal Basis for Processing
- Contract performance: Dispatching reminders and account management.
- Consent: For marketing communications and specific preferences.
- Legitimate interest: Service security and feature improvements.
- Legal obligation: Tax invoices and court compliance.
4. How We Use Your Data
- Providing the reminder service;
- Account management and authentication;
- Payment processing via Stripe;
- Customer support and troubleshooting;
- Security and fraud prevention;
- Transactional and marketing communications.
5. Reminders & Financial Data — Reinforced Care
Your reminder messages and expense logs are collected exclusively to fulfill the service and are processed strictly for sending alerts and categorizing spending.
5.1. Explicit data owner consent.
5.2. Never shared with commercial third parties.
5.3. End-to-end encryption in transit and at rest.
5.4. Swift deletion upon user request.
6. Data Sharing
Stripe
Payment processing (tokenized)
Meta / WhatsApp
WhatsApp message delivery
Supabase
Secure cloud hosting
Analytics
Anonymized usage analytics
7. International Data Transfers
Providers such as Stripe and Meta may process data internationally under standard contractual clauses and security certifications.
8. Cookies
Used to maintain login sessions, remember preferences, and analyze performance. You may disable cookies in your browser settings.
9. Data Retention
- Active account: Duration of active account.
- Reminders & Finances: Active account duration + 30 days.
- Payment records: 5 years (legal obligation).
10. Your Rights as Data Subject
Under applicable privacy laws, you have the right to:
- Data access & inspection
- Data correction & updates
- Deletion or anonymization
- Data portability
- Revocation of consent
- Objection to processing
Request via email: [email protected]
11. Security
TLS encryption, restricted access protocols, monitoring logs, and rate limiting.
12. Minors
Not intended for minors under 18. Data from minors will be promptly deleted if identified.
13. External Links
This privacy policy applies solely to Aster.
14. Policy Updates
We will notify users 15 days in advance regarding significant policy changes.
15. Data Protection Authorities
Right to lodge a complaint with your local Data Protection Authority.
16. Contact & DPO
Privacy questions? Email us at [email protected]
By using Aster, you acknowledge that you have read and understood this Privacy Policy.