Privacy Policy
Last updated: August 28th, 2026
The short version
- Your health data is read from Apple Health, scored on your iPhone, and stays there. It is never sent to us, because there is no account and no server to send it to.
- Astrea has no analytics, no advertising, no crash reporting and no tracking of any kind. Nothing is sold or shared for anyone else's purposes.
- One thing does leave your iPhone: your purchase, handled by Apple and by RevenueCat, our payment layer. It carries an anonymous identifier and no health data.
- This website is a set of static pages on Cloudflare. It runs no analytics script and sets no cookies of its own.
- Where you do give us an email address, by joining the Founding Member list, by writing to us, or on the feature-suggestion form, we use it to answer you and for nothing else.
The rest of this page is the same statement in full, because a summary is not a policy.
Who we are
Astrea is published by amazeing GmbH, Schützenplatz 10, 01067 Dresden, Germany. We are the controller for the personal data described on this page, in the sense of Article 4(7) of the General Data Protection Regulation. Full company details are on the imprint page. You can reach us at info@astrea.fit.
We have not appointed a data protection officer. We are two people, and neither the scale nor the nature of what we process requires one under Article 37.
This policy covers the Astrea iPhone app and this website, astrea.fit. Both are ours. It does not cover Apple, or any site we link to.
In the app
Your health data
Astrea reads from Apple Health, with the permissions you grant on your iPhone. What it reads is: heart rate variability and resting heart rate, breathing rate, wrist temperature, sleep, workouts and activity including steps, VO2 Max, the entries you log including how you felt, and the date of birth and biological sex on your Health profile. If you choose Regular cycle in your Physiological Profile, it also reads when your period starts. If you do not, it does not.
All of it is read, scored and drawn on your iPhone. None of it is transmitted to us or to anyone else. We do not receive it, cannot request it, and could not produce it if we were asked to: there is no account, no login, no server and no backup.
That is also why we do not act as controller over your health data in the sense of Article 4(7). Apple Health holds it under your control on hardware you own, and Astrea is software you run against it. We set out what the app touches anyway, because you deserve to read that before you grant it.
Raw health samples are never written to the app's own storage. What Astrea keeps between launches is derived: a baseline, a computed score, your settings and preferences. If you delete the app, that goes with it. What Apple Health holds is yours and stays where it is, and you can review or revoke Astrea's access at any time in Health → Sharing → Apps. Read access, once granted, cannot be handed back by an app: turning a setting off in Astrea stops it querying, but Astrea stays listed in Health with the access you gave it until you remove it there.
What Astrea writes back to Apple Health
When you log something in the Journal — a symptom, a drink, a glass of water, a supplement, how a moment felt — Astrea saves it to Apple Health as an ordinary sample and reads it back from there. It asks for permission for each type at the moment you first log it, so the permission sheet stays as small as your use of the app. Nothing else is written, and what is written does not leave your iPhone.
The morning notification
If you turn it on, Astrea asks iOS for a short window each morning, reads Apple Health, computes your score and schedules one local notification. Nothing is stored and nothing is sent. The notification carries a band word, a score and one sentence. All three are derived values, and no raw measurement reaches it.
Once scheduled, that text is held by the system notification store rather than by Astrea, and iOS may mirror it to a paired Apple Watch or, through iPhone Mirroring, to a Mac. That is Apple carrying a notification you asked for; Astrea sends nothing. We name it here anyway, because "nothing leaves your iPhone" should not quietly cover it. Two controls are yours: Hide the score on the lock screen in Preferences replaces both halves with a line carrying no reading at all, and turning the notification off stops it entirely.
Your purchase
Astrea Pro is a one-time purchase, sold by Apple through the App Store. Apple processes the payment and holds your payment details. We never see your card, your name or your Apple Account. Apple's handling of the transaction is covered by Apple's privacy policy.
To know whether you have bought it, the app uses RevenueCat, a purchase infrastructure provider. It is the only third-party component in the app and the only thing the app talks to over the network. What it is given:
- An anonymous identifier that RevenueCat generates per install. Nothing derived from an email address, a name or a health figure goes into it, and there is no login to attach it to.
- Your purchase history for this app, so a restore on a new iPhone works. That is what our privacy manifest declares to Apple: purchase history, not linked to your identity, not used for tracking, for app functionality.
- No attributes of any kind. No cohort, no campaign, nothing from your Physiological Profile, and no health figure on any purchase record. The only question the rest of the app asks the payment layer is whether you have bought it.
Two things we did not choose to send are worth naming, because they are real traffic. On each launch RevenueCat's SDK sends its own diagnostic and paywall events, and once per install it posts Apple's AdServices attribution token, the value an app exchanges with Apple to learn whether an install followed an ad campaign. We run no ad campaigns, the SDK offers no switch for either, and neither carries health data. See RevenueCat's privacy policy.
Links that leave the app
Some rows in Profile hand a web address to your browser and stop there: this site's own pages, the blog, the App Store review sheet, and a Google-hosted form for feature suggestions. Astrea posts nothing when it opens one, and puts no figure of yours in a web address. Once a page is open you are on that page, and whoever runs it sees what a browser normally sends plus whatever you type.
The Support row is different: it composes an email to us with your Astrea version and build, your iOS version and your device model already in the body. Three facts about the software. You can delete them before sending, and nothing is sent until you press send. What reaches us when you do send is under When you write to us, along with what the feature-suggestion form passes on.
The app contains no analytics, no crash reporting and no advertising SDK, and it never asks for permission to track.
On this website
Hosting
astrea.fit is a set of static files served by Cloudflare. To deliver a page and to defend the site against attack, Cloudflare processes what any web server processes: your IP address, the page requested, the time, your browser's user agent and referrer. Cloudflare gives us aggregate traffic counts drawn from its own server logs. We have not added an analytics script to this site, and there is no plan to. See Cloudflare's privacy policy.
Fonts, cookies and trackers
Fonts are served from this site, not from a font CDN, so loading a page tells no third party you were here. This site sets no cookies of its own, runs no advertising or analytics tags, and builds no profile of you.
The Founding Member list
The waitlist form is provided by Tally. Its embed script loads on the pages that carry a waitlist button, so that pressing the button can open the form. If you fill the form in and submit it, Tally receives what you typed — your email address, and anything else the form asks — and passes it to us. If you never open the form, you never give either of us anything. See Tally's privacy policy.
We use that address for one thing: to tell you when Astrea is ready and what Founding Member pricing is. Every email we send carries an unsubscribe link, and you can ask us to remove you at any time by writing to info@astrea.fit. We do not sell the list, rent it, or hand it to anyone for their own purposes.
When you write to us
Besides the Founding Member list above, there are two ways to reach us, and both can hand us your email address. Both end with one of us reading it, rather than a ticket queue.
The Support row in the app, and the address on the contact page, both open a message to info@astrea.fit. We receive the address you send from, whatever you wrote, and, if you used the Support row and left them in, your Astrea version and build, your iOS version and your device model. We use all of it to answer you and to work out what went wrong.
The feature-suggestion form
Suggest a feature in the app opens a form hosted by Google. It asks three questions about what you were trying to do and what would help, and it has one more field, marked optional, for your email address. Google holds the responses for us, under Google's privacy policy; we read them and decide what to build.
If you fill in the address, we can write back with a question or tell you when the thing you asked for lands. If you leave it blank, we cannot, and your suggestion counts exactly as much. Nothing in that form asks for a health figure, and you should not put one in it.
What we do not do with it
An address you gave us in an email or on the suggestion form is not added to the Founding Member list, and we do not write to you about anything other than the thing you contacted us about. We do not sell it, rent it, or pass it to anyone for their own purposes. Ask us to delete your message and the address that came with it, and we will.
Why we are allowed to, and for how long
Under Article 6 of the GDPR, each thing above rests on one of these:
- Your consent, Article 6(1)(a), for the Founding Member list. You give it by submitting the form and withdraw it by unsubscribing or writing to us. Withdrawing does not affect what was lawful before you did. We keep your address until you withdraw, or until the list has served its purpose and we close it.
- Performing a contract, Article 6(1)(b), for your purchase and for restoring it on another device. Records of a purchase are kept as long as the entitlement needs to be honoured; Apple keeps its own transaction records under its own terms, and German commercial and tax law sets retention periods for invoices that we cannot shorten.
- Our legitimate interest, Article 6(1)(f), in serving this website and keeping it up and secure. We build nothing from Cloudflare's logs beyond aggregate counts, and how long Cloudflare itself keeps them is set out in its own policy.
- Our legitimate interest, Article 6(1)(f), in answering the people who write to us and in learning what to build next. That covers your email, the feature-suggestion form, and any address you chose to leave on either. Where your message is about a purchase, it is Article 6(1)(b) instead. We keep correspondence for as long as answering you and any follow-up needs. A suggestion is kept while it is still worth reading against what we are building, and the address on it goes when the conversation it belonged to is over.
- Your consent, given to Apple Health, for what the app reads from your iPhone. It is processing you control, on hardware you own, and you can withdraw it in Health at any time.
Where your data is processed
Your health data is processed on your iPhone, wherever you happen to be. It crosses no border because it does not move.
The services named above — Apple, Cloudflare, RevenueCat, Tally, and Google for the feature-suggestion form — are or may be based outside the European Economic Area, or may process data outside it. Where they do, the transfer rests on the European Commission's Standard Contractual Clauses or an adequacy decision, as set out in each provider's own policy, linked where it is named.
Your rights
Under the GDPR you can ask us for a copy of the personal data we hold about you (Article 15), to correct it (16), to erase it (17), to restrict what we do with it (18), to receive it in a portable form (20), and to object to processing based on legitimate interest (21). Where processing rests on consent, you can withdraw it at any time (7(3)).
In practice, for most readers, the honest answer to a request is short: unless you have joined the Founding Member list, emailed us, or left an address on the feature-suggestion form, we hold nothing about you at all. Your health data is not ours to send you, because we have never had it. It is in Apple Health on your iPhone, and Apple's own export tools will give it to you.
Write to info@astrea.fit and one of us will answer within a month. If you think we have handled your data badly, you can complain to a supervisory authority — the data protection authority for Saxony, where we are based, or the one where you live or work.
Children
Astrea is not intended for children, and its App Store age rating says so. We do not knowingly collect anything from anyone under 16. If you believe a child has given us something, write to us and we will delete it.
Changes to this policy
If what the app or this site does with data changes, this page changes in the same release, and the date at the top moves. We will not quietly widen what we collect and leave the page behind. Where a change is significant, we will say so wherever we can reach you: in the app, and by email if you are on the Founding Member list.
Questions
Write to info@astrea.fit. Martin or Marina will answer, as ourselves. Company details are on the imprint page, and the terms cover what you may do with the app.
Astrea is a recovery and readiness app. It does not provide medical advice, diagnosis, or treatment.