Privacy, in plain language

Who is responsible

Aster is operated by Sun State Rental Car LLC. The iOS app is currently distributed through Apple by Illia Pereviazko. For privacy questions or requests, email ilyaper9695@gmail.com. No account is required to start using the app. If you choose web billing, Sign in with Apple creates a minimal billing profile used only to connect your payment, subscription status, and credits across eligible devices.

What stays on your device

Chat history, memory and tone preferences, consent choices, and an installation-specific purchase token are stored locally by the app. You can clear chat history, turn off memory, or withdraw AI-processing consent in Settings. Removing the app removes its local history.

Information processed when you use AI

After you accept the in-app disclosure and send a request, Aster processes your prompt, the limited recent conversation context needed for a useful answer, selected task and tone, language, and app version. If you attach a photo, file, or audio recording, that attachment is processed to answer the request or transcribe the audio. Declining the disclosure sends no conversation content.

App Attest and DeviceCheck information help confirm that requests come from the genuine app and enforce free-use and abuse-prevention limits. The app stores a random starter-allowance identifier in the device Keychain and, when iCloud is available, in Apple's iCloud key-value store so the one-time allowance can be recognized on your devices. The gateway receives only that random identifier with integrity-protected device information; it does not receive your Apple Account password. Signed App Store transaction information is checked to confirm an Apple subscription. For web billing, the service verifies a Sign in with Apple token and stores a pseudonymous account identifier, Stripe customer and subscription identifiers, plan, subscription status, billing period, anti-fraud records, request counts, and credit usage. These records do not contain your conversation body.

How information is used and shared

Conversation content is sent through Aster's protected gateway to Cloudflare Workers and Cloudflare Workers AI for safety checks, response generation, image understanding, image generation or editing, and, when requested, speech transcription. The gateway disables AI response caching and content logging and does not store prompts, attachments, transcripts, generated images, or AI responses in Aster's server-side databases. Generated images are returned to the device and stored only in local chat history. Cloudflare may process limited operational and security information under its own policies.

Apple processes App Attest, DeviceCheck, Sign in with Apple, Apple Pay, and App Store purchase information. Stripe processes web checkout, card or wallet details, billing contact information, receipts, fraud prevention, and subscription events. Aster does not receive your full card number. For eligible factual requests, the app may request up to two reference-image thumbnails from Wikimedia Commons through the gateway; the search uses a short query derived from the request and does not send the full conversation. Aster does not sell personal information, serve ads, use third-party advertising or analytics SDKs, or track you across apps and websites.

Any third party with whom Aster shares personal data must provide the same or equivalent protection described in this Privacy Policy and required by applicable law and the Apple App Review Guidelines. Aster limits each provider's access to the stated purpose and reviews its applicable contractual and privacy safeguards before use.

Retention

Local history remains until you clear it or remove the app. Short-lived rate-limit records normally expire within minutes or hours. Subscription-usage records expire automatically after the applicable usage period and operational buffer, no later than 120 days after the related activity. Minimal billing and transaction records may be kept while an account is active and afterwards as required for accounting, tax, dispute, fraud-prevention, and legal obligations. The pseudonymous starter-allowance counter and DeviceCheck registration marker may be kept longer while needed to prevent the one-time free allowance from being reset by changing the date, reinstalling the app, or using another device.

Security and international processing

Network requests use HTTPS. The service validates app integrity, verifies paid access, rate limits requests, screens text prompts and text responses, and applies cost and capacity controls. Cloudflare and Apple operate internationally, so information may be processed outside your country under their applicable safeguards. No security method can guarantee absolute protection.

Your choices and rights

You can clear local history, disable memory, withdraw AI-processing consent, stop a response, or remove the app. You can request deletion of a web-billing profile, subject to required transaction-record retention, by emailing ilyaper9695@gmail.com. Depending on where you live, you may also have rights to request access, correction, deletion, restriction, or objection. Enough account or technical information may be needed to locate a pseudonymous record without exposing another user's data.

Children and policy changes

Aster is intended for people age 13 and older and is not directed to children under 13. We do not knowingly collect personal information from a child under 13. Material changes to this policy will be posted here with a new effective date and, when appropriate, explained in the app.