Aster Privacy Policy

Last Updated: July 8, 2026  ·  Contact: buildingaster@gmail.com

The short version

This Privacy Notice for Aster Health, Inc. ("Aster," "we," "us," or "our") describes how and why we access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

We take the privacy of your health information seriously. Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you have any questions or concerns, please contact us at buildingaster@gmail.com.

Our Core Privacy Commitments

Because Aster handles sensitive health and reproductive data, we hold ourselves to the following commitments:

Medical Disclaimer

IMPORTANT: The Aster app, including its AI-powered chatbot and all wellness insights, is intended for general informational and educational purposes only. Nothing in this app constitutes medical advice, medical diagnosis, treatment recommendations, or a substitute for professional medical advice from a licensed healthcare provider. The information provided by Aster, including cycle predictions, nutritional guidance, mood tracking summaries, and AI-generated insights, is educational wellness information only and should not be relied upon for medical decisions.

Always seek the advice of a qualified healthcare professional with any questions you may have regarding a medical condition, medication, or health concern. Never disregard professional medical advice or delay seeking it because of something you have read or received through this app. If you believe you are experiencing a medical emergency, contact emergency services immediately.

Children and Teens (Users Under 18)

In Short: Aster is intended for users aged 13 and older. It is not for children under 13, and teen users should use Aster with a parent or guardian.

Aster is intended for users who are at least 13 years old. Aster is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If we learn that we have collected personal information from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us at buildingaster@gmail.com so we can remove it.

If you are between 13 and 17 years old, please read this Privacy Notice together with a parent or guardian and use Aster with their involvement and permission. Because Aster processes sensitive health information, including reproductive and menstrual health data, we encourage teen users and their parents or guardians to make an informed decision together, especially before enabling optional AI features.

Some optional AI features rely on third-party AI providers whose own terms may set a minimum age or require parental consent. Please review and follow those requirements before enabling AI features. A parent or guardian who wishes to review, correct, or delete a teen's information can contact us at buildingaster@gmail.com, or delete the account and its data directly in the app (see Section 10).

Summary of Key Points

What personal information do we process? When you use our Services, we process the personal information you provide (such as account details and the health, cycle, mood, and nutrition data you choose to log) and limited technical information needed to run and improve the app.

Do we process sensitive personal information? Yes. Aster is a health app, so we process health and reproductive health data that you choose to enter. We process this sensitive information only to provide the features you request, and only with your consent or as otherwise permitted by applicable law.

Do we collect information from third parties? We do not collect personal information about you from third parties.

Do we sell your data or use it for advertising? No. We do not sell your personal information, we do not show ads, and we do not use your health data for advertising or data mining.

How do we process your information? To provide, personalize, maintain, and improve the Services, to communicate with you, for security and fraud prevention, and to comply with law. Optional AI features process your data only with your consent.

With whom do we share personal information? Only with a small set of service providers that help us operate the app (such as analytics, AI processing, nutrition lookup, and subscription management), strictly as needed to provide the Services.

How do we keep your information safe? We use appropriate organizational and technical safeguards. However, no method of transmission or storage can be guaranteed 100% secure.

What are your rights? Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to withdraw consent. You can delete your account and associated data directly in the app.

How do you exercise your rights? In the app (Settings > Account), by submitting a data subject access request at this link, or by contacting us at buildingaster@gmail.com.

Table of Contents

1. What Information Do We Collect?

Personal information you disclose to us

In Short: We collect the personal information that you provide to us.

We collect personal information that you voluntarily provide when you register for the Services, use app features, contact us, or otherwise interact with us.

Personal Information Provided by You. Depending on how you use Aster, this may include:

Sensitive Information. Aster is a health app, so with your consent (or as otherwise permitted by law) we process the following categories of sensitive information that you choose to provide:

We process sensitive information only to provide the features you request. We do not process sensitive personal information for advertising, for sale, or to infer characteristics about you for marketing.

Payment and Subscription Data. If you purchase a subscription, the payment itself is processed by the Apple App Store (in-app purchase) and/or our subscription management provider, RevenueCat. We do not collect or store your full payment card number. We receive limited subscription status information (such as whether your subscription is active) to unlock paid features. RevenueCat's privacy notice is available at revenuecat.com/privacy.

Application Data. If you use our application, we may also collect the following if you choose to grant access or permission. You can change or revoke any of these permissions at any time in your device settings.

Information automatically collected

In Short: Some limited technical information is collected automatically to run, secure, and improve the Services.

When you use the Services we automatically collect service-related, diagnostic, usage, and performance information, such as your IP address, device characteristics, operating system, app version, and information about how you interact with the app (for example, which screens or features you use and crash or error reports). This information is used to operate, secure, and improve the Services, and is not used for advertising.

Google API

If you sign in with Google, our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

2. App-Specific Data We Collect

In Short: This section describes, specifically and transparently, the categories of data collected through your direct use of Aster's core features.

Food Logs and Meal Entries

Cycle Tracking Entries

Optional Chatbot Messages

Device and App Analytics

This data is collected only to operate, maintain, and improve the features of the Aster app. You control whether your data is used for AI processing and analytics through the Settings menu, as described in Section 9.

3. Health Data

In Short: We treat your health data with special care. We never use it for advertising, never sell it, and only share it as strictly necessary to provide features you have requested.

Aster processes health-related data that you voluntarily enter (such as cycle, symptom, mood, and nutrition data) to provide the app's core features, including period predictions, nutritional summaries, symptom and mood pattern visualizations, and your personal wellness dashboard.

Your health data is processed on our secure servers and is used only to provide the features you request. It is not sold, not used for advertising or data mining, and not shared with third parties except the limited service providers described in Section 8 (for example, optional AI processing that you have turned on), and never for advertising.

Aster does not currently integrate with Apple Health (HealthKit) or Google Fit. If we add such an integration in the future, we will update this Privacy Notice first, and any connection will be optional and will require your permission.

4. How Do We Process Your Information?

In Short: We process your information to provide, personalize, maintain, and improve the Services, to communicate with you, for security and fraud prevention, and to comply with law.

We do not process your information to deliver third-party advertising, and we do not sell your information.

5. How Do We Use Your Data in the App?

In Short: The data you enter into Aster is used only to provide the features you request, generate optional AI-powered insights (with your consent), keep the app reliable, and measure feature usage to improve the app.

Provide Cycle, Nutrition, and Wellness Features

Your cycle tracking entries, food logs, and wellness logs are used to power Aster's core features, including period predictions, nutritional summaries, mood and symptom pattern visualizations, and your personal wellness dashboard. This data is processed on our secure servers and is not shared with third parties except as described in Section 8, and never for advertising.

Generate AI-Based Wellness Insights (Optional, Consent-Based)

When you have enabled AI processing (see Section 9), Aster uses your logged data (such as cycle entries, food logs, meal photos, mood logs, and chatbot messages) to generate personalized, AI-powered wellness insights and chatbot responses via the third-party AI processing services listed in Section 8. These insights are educational wellness information only and do not constitute medical advice. See the Medical Disclaimer above. If you do not enable AI processing, your data is not sent to these AI services.

Improve Reliability, Performance, and Measure Feature Usage

App and device analytics data (feature usage events, session data, crash reports, and diagnostics) is used to identify and fix bugs, improve performance, and understand which features are valuable. This data is processed in part via PostHog, our analytics provider, as described in Section 8, and is never used for advertising.

6. What Legal Bases Do We Rely On to Process Your Information?

In Short: We only process your personal information when we have a valid legal reason to do so.

If you are located in the EU or UK, the GDPR and UK GDPR require us to explain the legal bases we rely on. We may rely on:

If you are located in Canada, we process your information based on your express or implied consent, which you may withdraw at any time. In limited cases we may process information without consent where permitted by law (for example, fraud detection or legal proceedings).

7. When and With Whom Do We Share Your Personal Information?

In Short: We share personal information only in the limited situations described here. We do not sell your data and we do not share it for advertising.

We do not sell your personal information, we do not share it for cross-context behavioral or targeted advertising, and we do not display third-party ads.

8. Third-Party Data Processing

In Short: Aster uses a limited set of trusted service providers to power specific features. Data is shared only as strictly necessary, and never for advertising.

PostHog (Product Analytics)

We share app usage and device analytics data (such as feature usage events, session data, and crash diagnostics) with PostHog to understand how the app is used, identify issues, and improve performance. PostHog processes this data on our behalf and does not use it for its own advertising purposes. Privacy information: posthog.com/privacy

AI Processing Services (Optional Wellness Insights and Chatbot)

When you have enabled AI processing (see Section 9), limited personal data (such as food entries, cycle data, symptoms, meal photos, or chatbot messages) is transmitted through secure, server-side processing to third-party AI providers to generate your personalized wellness insights and chatbot responses. These providers include Google Cloud AI (Vertex/Gemini), Anthropic, OpenAI, Amazon Web Services (AWS) AI, and Speechify (for optional text-to-speech). Under our agreements and these providers' API terms, your data is used solely to generate responses to you; it is not used to train their models and is not used for advertising. If you do not enable AI processing, no data is sent to these providers. You can disable AI processing at any time in Settings.

Open Food Facts (Nutrition Lookup)

When you use the barcode scanner, the barcode number is sent to Open Food Facts, a free and open-source food product database, to retrieve nutritional information. Only the barcode value is transmitted; no personal identifying information is sent to Open Food Facts. Privacy information: world.openfoodfacts.org/privacy

RevenueCat and the App Store (Subscriptions)

Subscription purchases are processed by the Apple App Store and managed by RevenueCat. We do not collect or store your full payment card number. We receive limited subscription status information to unlock paid features. Privacy information: revenuecat.com/privacy

We share data with each provider above only as needed to provide the specific feature described, and never for advertising or any additional commercial purpose.

9. User Controls and Consent

In Short: You are in control of how your data is used for AI insights and analytics. You can enable or disable these at any time in Settings.

AI Processing and Analytics Controls

You can enable or disable AI processing and analytics data sharing directly within the app at any time: Settings > Data & AI Processing

AI features and the processing of your sensitive health data for AI insights are optional and based on your consent. We ask for your consent before using your personal data for AI features, and you can change your choice at any time without penalty. Disabling AI processing does not affect your access to Aster's core cycle tracking and nutrition logging features.

Withdrawing Consent

Where we rely on your consent, you can withdraw it at any time by updating Settings > Data & AI Processing in the app, contacting us at buildingaster@gmail.com, or submitting a data subject access request. Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal.

Opting Out of Marketing Communications

We only send marketing, reminder, or promotional messages by push notification or email where you have opted in. You can opt out at any time by using the unsubscribe link in an email, turning off notifications in your device settings, or contacting us at buildingaster@gmail.com. You may still receive non-marketing service messages necessary to administer your account.

10. How Can You Delete Your Account and Data?

In Short: You can delete your account and associated personal data at any time, directly within the app.

You can permanently delete your Aster account and the personal data associated with it from within the app: Settings > Account > Delete Account

When you delete your account, we delete or anonymize your personal information from our active systems. You may also request deletion by contacting us at buildingaster@gmail.com or by submitting a data subject access request.

We may retain limited information where required to comply with legal obligations, resolve disputes, prevent fraud, or enforce our agreements, and only for as long as necessary for those purposes. Where personal information is stored in backup archives, we will isolate it from further processing until deletion is possible. See Section 15 for retention details.

11. Do We Offer Artificial Intelligence-Based Products?

In Short: We offer optional features powered by artificial intelligence, which you control.

As part of our Services, we offer optional products and features powered by artificial intelligence, machine learning, or similar technologies (collectively, "AI Products"), designed to provide educational wellness information. Your use of the AI Products is governed by this Privacy Notice.

Use of AI Technologies

We provide AI Products through third-party service providers ("AI Service Providers"), including Google Cloud AI (Vertex/Gemini), Anthropic, OpenAI, Amazon Web Services (AWS) AI, and Speechify. Your input, output, and related personal information are shared with and processed by these AI Service Providers to enable the AI Products, only when you have enabled AI processing in Settings. Under our agreements and these providers' API terms, your data is used only to generate responses to you, is not used to train their models, and is not used for advertising. You must not use the AI Products in any way that violates the terms or policies of any AI Service Provider.

Our AI Products are designed for the following functions:

Important Limitation: AI-generated wellness insights and chatbot responses are educational wellness information only. They do not constitute medical advice, diagnosis, or treatment. See the Medical Disclaimer above.

How to Opt Out

Go to Settings > Data & AI Processing and disable the setting, or contact us at buildingaster@gmail.com.

12. How Do We Handle Social Logins?

In Short: If you choose to register or log in using a third-party account (such as Sign in with Apple or Google), we receive limited profile information.

Our Services may offer you the ability to register or log in using a third-party account such as Sign in with Apple or your Google account. If you choose to do so, we receive limited profile information from that provider, such as your name and email address (or a private relay email, if you use Sign in with Apple). We use this information only for the purposes described in this Privacy Notice. We do not control, and are not responsible for, other uses of your information by the third-party provider, and we recommend you review their privacy notice.

13. What Is Our Stance on Third-Party Websites?

In Short: We are not responsible for the privacy practices of third parties we may link to.

The Services may link to third-party websites or services that are not affiliated with us (for example, a provider's privacy policy). We do not guarantee, and are not responsible for, the practices of such third parties, and this Privacy Notice does not cover any data they collect. We recommend you review the privacy notice of any third party before providing information to it.

14. Do We Use Cookies and Other Tracking Technologies?

In Short: On our website we use only essential and analytics cookies. We do not use cookies for advertising, and the Aster mobile app does not use third-party advertising trackers.

On our website (https://aster.fit) we may use cookies and similar technologies to keep the site secure and functioning and to understand site usage so we can improve it. We do not use advertising or cross-site tracking cookies.

The Aster mobile app does not include third-party advertising SDKs and does not track you across other companies' apps or websites for advertising.

Global Privacy Control: We recognize and honor Global Privacy Control (GPC) signals. If your browser or extension supports GPC, we treat it as a valid request to opt out of any sale or sharing of personal information for targeted advertising under applicable state privacy laws. (Note: we do not sell or share personal information for targeted advertising in any case.)

15. How Long Do We Keep Your Information?

In Short: We keep your information only as long as necessary for the purposes in this Privacy Notice, unless a longer period is required by law.

We keep your personal information only for as long as necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us to keep your personal information for longer than twelve (12) months past the termination of your account.

When we no longer have a legitimate need to process your personal information, we will delete or anonymize it, or, if that is not possible (for example, because it is stored in backup archives), we will securely store it and isolate it from further processing until deletion is possible.

16. How Do We Keep Your Information Safe?

In Short: We use organizational and technical measures to protect your information.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect your personal information, including encryption in transit and access controls. However, no method of electronic transmission or storage can be guaranteed 100% secure. Although we work to protect your information, transmission to and from our Services is at your own risk, and you should access the Services within a secure environment.

17. What Are Your Privacy Rights?

In Short: Depending on where you live, you have rights that allow you greater access to and control over your personal information.

In some regions (such as the EEA, UK, Switzerland, and Canada), you have rights under applicable data protection laws, which may include the right (i) to request access to and a copy of your personal information; (ii) to request rectification or erasure; (iii) to restrict processing; (iv) where applicable, to data portability; (v) to withdraw consent; and (vi) not to be subject to solely automated decision-making that produces legal or similarly significant effects. If such a decision is ever made, we will inform you, explain the main factors, and offer a way to request human review.

To exercise these rights, use the in-app controls, submit a data subject access request, or contact us at buildingaster@gmail.com. You can also delete your account and data directly in the app (see Section 10).

If you are in the EEA or UK and believe we are unlawfully processing your personal information, you have the right to complain to your local data protection authority. In Switzerland, you may contact the Federal Data Protection and Information Commissioner.

18. Controls for Do-Not-Track Features

Most browsers and some mobile operating systems include a Do-Not-Track ("DNT") setting. Because no uniform industry or legal standard for recognizing DNT signals has been finalized, we do not currently respond to DNT browser signals. We do, however, honor Global Privacy Control (GPC) signals as described in Section 14. Note that Aster does not track users for advertising in any case.

19. Do United States Residents Have Specific Privacy Rights?

In Short: If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have specific privacy rights.

We do not sell personal information or share it for targeted (cross-context behavioral) advertising, and we do not use sensitive personal information to infer characteristics for advertising. We collect sensitive personal information (such as the health, reproductive, cycle, and nutrition data you log, and your account credentials) only to provide the features you request, with your consent or as permitted by law. You have the right to limit our use of sensitive personal information.

Your rights may include:

How to exercise your rights: use the in-app controls (including account deletion), submit a data subject access request, email buildingaster@gmail.com, or visit aster.fit/contact. We honor Global Privacy Control (GPC) opt-out signals. We will verify your identity before fulfilling a request. If we decline to act, you may appeal by emailing buildingaster@gmail.com; if your appeal is denied, you may contact your state attorney general.

20. Do Other Regions Have Specific Privacy Rights?

Australia and New Zealand

We collect and process your personal information under Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020. If you believe we are unlawfully processing your personal information, you may complain to the Office of the Australian Information Commissioner or the Office of the New Zealand Privacy Commissioner.

Republic of South Africa

You have the right to request access to or correction of your personal information at any time. If you are unsatisfied with how we address a complaint, you can contact the Information Regulator (South Africa) at enquiries@inforegulator.org.za or POPIAComplaints@inforegulator.org.za.

21. Do We Make Updates to This Notice?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Last Updated" date at the top. If we make material changes, we will notify you by prominently posting a notice or by sending a direct notification. We encourage you to review this Privacy Notice frequently.

22. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, you may contact us:

Email: buildingaster@gmail.com
Phone: 772-275-1666

Aster Health, Inc.
4411 Shady Terrace Ln, Apt 309
Tampa, FL 33613
United States

23. How Can You Review, Update, or Delete the Data We Collect From You?

Based on the applicable laws of your country or state of residence, you may have the right to request access to the personal information we collect, details about how we process it, to correct inaccuracies, or to delete your personal information. You may also have the right to withdraw consent. You can delete your account and data directly in the app (Settings > Account > Delete Account).

To request to review, update, or delete your personal information, submit a data subject access request, or contact us directly at buildingaster@gmail.com.