Privacy Policy

Last updated: 29 August 2026

The short version: Astra processes your data locally on your device. Your conversations, health data, and personal information stay on your hardware. We collect only what's needed to manage your beta access and improve the product.

1. Who We Are

Astra is developed by Astraios, based in Kent, United Kingdom. For the purposes of UK data protection law (UK GDPR and the Data Protection Act 2018), Astraios is the data controller for personal data collected through the astraios.net website and beta registration process.

Contact: hello@astraios.net

2. What Data We Collect

We collect different types of data depending on how you interact with us:

2a. Website and Registration

Data	Purpose	Basis
Name	Beta registration, communication	Consent
Email address	Beta access, updates, download links	Consent
Platform preference	Product development	Consent

Registration data is submitted via Web3Forms and delivered to us by email. Web3Forms acts as a data processor. Their privacy policy is available at web3forms.com/privacy.

2b. Astra Software (Local Processing)

Astra processes the following data entirely on your local device. This data is not transmitted to Astraios servers:

Conversations — voice input (transcribed locally) and text responses.
Memory — your preferences, conversation history, and knowledge graph, stored locally.
Health data — pain, anxiety, medication, blood oxygen, heart rate, blood pressure, sleep, exercise, and related wellness data from Apple Watch or manual input.
Calendar, email, and task data — accessed via your own accounts and processed locally.
Documents and files — created, stored, and managed on your local storage.

2c. Cloud AI Services

Astra sends conversation prompts to third-party AI services (such as Anthropic) to generate responses. These requests contain the text of your current conversation and relevant context. These services process data under their own privacy policies and data processing agreements. We select providers that do not train on user data and that delete prompts after processing.

Where possible, Astra uses local AI models running on your own hardware, with cloud services as a fallback.

2d. Website Analytics

The astraios.net website does not currently use cookies, tracking pixels, or third-party analytics. We do not track your browsing behaviour.

3. How We Use Your Data

To manage your beta registration and provide access to the software.
To send you download links, updates, and important notices about the beta programme.
To improve the software based on aggregate, anonymised feedback (never individual data).
To respond to your enquiries or support requests.

We will never sell, rent, or share your personal data with third parties for marketing purposes.

4. Health Data — Special Category

Health data processed by Astra (pain levels, anxiety, blood oxygen, heart rate, blood pressure, medication, sleep, exercise) is classified as special category data under UK GDPR. This data:

Is processed entirely on your local device.
Is never transmitted to Astraios or any third party.
Is used solely for your personal wellness tracking and is under your complete control.
Can be deleted at any time by removing the data from your local storage.

Astra does not diagnose, treat, or provide medical advice. See our Terms of Use for the full health disclaimer.

5. Data Retention

Registration data: Retained for the duration of the beta programme and for up to 12 months after the programme ends, unless you request earlier deletion.
Local Astra data: Stored on your device for as long as you choose to keep it. Uninstalling Astra and deleting its data directory removes all local data permanently.

6. Your Rights

Under UK data protection law, you have the right to:

Access the personal data we hold about you.
Rectify inaccurate personal data.
Erase your personal data ("right to be forgotten").
Restrict or object to processing of your personal data.
Data portability — receive your data in a structured, machine-readable format.
Withdraw consent at any time (this does not affect the lawfulness of processing before withdrawal).

To exercise any of these rights, email hello@astraios.net. We will respond within 30 days.

7. Data Security

We take reasonable technical and organisational measures to protect your personal data. Registration data is transmitted securely via HTTPS. Local Astra data is protected by your device's own security measures (FileVault, login password, etc.). We recommend enabling full-disk encryption on any device running Astra.

8. International Transfers

Registration data submitted via Web3Forms may be processed on servers outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements. Cloud AI services may process conversation prompts on servers outside the UK; we select providers that maintain adequate data protection standards.

9. Children

Astra is not intended for use by anyone under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at hello@astraios.net and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be notified to registered beta participants by email. The "Last updated" date at the top of this page reflects the most recent revision.

11. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
ico.org.uk/make-a-complaint
Helpline: 0303 123 1113

12. Contact

For any privacy-related questions or to exercise your rights, email hello@astraios.net.