Privacy Policy

This Privacy Policy explains how Bistriy Sp. z o.o. (“Bistriy”, “we”, “us”), as the controller of your personal data, collects, uses, shares and protects your personal data when you use our applications, whether in a web browser or as a mobile app, and our websites (together, the “Services”). It applies across all of our applications; where a particular application collects data specific to its purpose, that is described in section 3.

1. Who we are (data controller)

The controller of your personal data is:

You can contact us about this policy, your data, or your privacy rights at support@bistriy.com. We have not appointed a Data Protection Officer; all data-protection matters are handled at that address.

2. Information we collect

The following applies across our Apps. Not every App collects every item - we collect only what a given App needs for its features.

Information you give us

• Account: your email address (used to sign in via a one-time link or code).
• Profile: the nickname(s), preferences and settings you create in an App.
• Content & messages: content you create and the messages you send to other users within an App.
• Support: information you provide when you contact us.

Information collected automatically

• Device & technical data: browser or app version, device type and operating system, a push notification token (if you enable push notifications), and basic diagnostic/log data which may include an IP address.
• Subscription status: whether you have an active paid subscription in an App.

Information from third parties

• Stripe: when you buy a subscription in the web application, the payment is processed by Stripe through Link, Stripe’s merchant-of-record service. Stripe tells us whether the payment succeeded and when your subscription renews or ends. If you buy through an app store, Apple or Google provides the receipt or validation needed to confirm your purchase and manage renewals instead. In either case we do not receive your full payment card details.

3. Information specific to particular Apps

Some Apps collect additional information because of what they do. Where they do, it is explained in the App and summarised here.

Synastria (astrology-based matchmaking)

• Birth data: your date of birth, time of birth and place of birth (which we convert to coordinates and a time zone) - used solely to compute your natal chart and assess compatibility.
• Matching profile: the connection types you enable (friendship, partner, body-doubling) and related preferences such as your gender, the gender you’re looking for, age preferences and the activities you select.

Your birth data and the natal chart we derive from it are treated as your private personal data: they are never shown to other users, and they are not used for advertising. Astrological compatibility is provided for personal insight and entertainment and is not professional, medical, psychological, financial or relationship advice.

As we add Apps, we will describe any App-specific data here or in a dedicated in-App notice.

4. Sensitive information (special categories)

Some features can involve “special categories” of personal data under the GDPR. For example, in Synastria we ask which gender(s) you are looking for; combined with your own gender, this can reveal information about your sexual orientation. Where an App processes such data, we do so only to provide the feature you ask for, and only on the basis of your explicit consent (GDPR Art. 9(2)(a)), which you give by enabling that feature and setting the relevant preferences. You can withdraw this consent at any time by disabling the feature or deleting your account, after which we stop the related processing. We do not use this information for advertising, and other users see it only to the limited extent described in section 8.

5. How we use your information

• Create and secure your account and sign you in by email.
• Provide each App’s features (for example, in Synastria, computing your natal chart and matching you with compatible users).
• Enable messaging and connections between users where an App offers them.
• Provide, maintain, and improve the Services and fix problems.
• Manage paid subscriptions and confirm purchases with Stripe or, for app-store purchases, with Apple or Google.
• Send you push and/or email notifications you have enabled.
• Keep the Services safe - detect, prevent and respond to fraud, abuse and violations of our Terms.
• Comply with legal obligations and enforce our agreements.

6. Legal bases for processing

Where the GDPR (and, for UK users, the UK GDPR) applies, we rely on the following legal bases:

• Performance of a contract - to provide the Services you sign up for (accounts, App features, messaging, subscriptions).
• Consent - for optional features such as push/email notifications, and where you choose to provide data (such as birth data in Synastria) to receive an App’s features. You can withdraw consent at any time.
• Explicit consent - for special-category data such as data that may reveal your sexual orientation, as described in section 4 (GDPR Art. 9(2)(a)).
• Legitimate interests - to keep the Services secure, prevent abuse, and improve our products, balanced against your rights.
• Legal obligation - to comply with applicable laws, including Polish tax and accounting law.

7. How we share information

We do not sell your personal data. We share information only as described here:

• With other users - limited profile information, as described in section 8, in Apps that have social or matching features.
• Service providers (processors) - companies that host our servers, deliver push notifications, send email, and provide diagnostics, acting on our instructions under written data-processing agreements and confidentiality obligations.
• Stripe (including Link, its merchant-of-record service) - for processing payments and managing subscriptions bought in the web application; Apple and Google - for subscription purchases made through the App Store or Google Play.
• Legal and safety - when required by law, to enforce our Terms, or to protect the rights, safety and security of our users or the public.
• Business transfers - if Bistriy is involved in a merger, acquisition or sale of assets, your information may be transferred, subject to this policy.

8. What other users can see

In Apps with social or matching features (such as Synastria), other users can see only the information you’ve chosen to present - typically your nickname and the details relevant to that feature (for example, the activities you selected for body-doubling). Other users cannot see your email address, and in Synastria they cannot see your exact birth date, time or place, or your natal chart. You decide whether and when to share your real name or contact details within a chat.

9. Data retention

We keep your personal data for as long as your account is active. When you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must retain certain records to comply with legal, tax or accounting obligations (for example, purchase and invoicing records kept for the periods required by Polish tax law), to resolve disputes, or to prevent abuse. Backup copies are deleted on a rolling schedule.

10. Your rights and how to complain

Under the GDPR you have the right to access, rectify, erase, or receive a portable copy of your personal data; to restrict or object to certain processing; and to withdraw any consent you have given, without affecting processing already carried out. You can edit your profile and preferences, and manage notifications, directly in each App’s Profile and Settings. To make any other request, email us at support@bistriy.com; we respond within the time limits set by law (generally one month).

If you believe we have handled your data unlawfully, you have the right to lodge a complaint with a supervisory authority. In Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland - uodo.gov.pl. If you live elsewhere in the EEA, you may complain to your local authority.

California residents: we do not sell or “share” personal information as those terms are defined under the CCPA/CPRA, and we will not discriminate against you for exercising your privacy rights.

11. Deleting your account

You can permanently delete your account at any time from Profile → Delete account in the App. For your security, deletion is confirmed with a link or code sent to your email. Deleting your account removes your profile, content and messages from the Service, subject to the limited retention described in section 9.

12. Security

We use technical and organisational measures designed to protect your information, including encryption in transit. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please keep access to your email account secure, since it is used to sign in.

13. Children

Our Apps are for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.

14. International transfers

We aim to process your personal data within the European Economic Area (EEA). Where a service provider processes data outside the EEA, or where your information is otherwise transferred internationally, we use appropriate safeguards (such as the European Commission’s standard contractual clauses) as required by applicable law. You can request details of these safeguards using the contact details above. Google may process the statistics of our website outside the EEA, including in the United States, under the EU-U.S. Data Privacy Framework or the standard contractual clauses. Stripe may process payment data in the United States under the same safeguards.

15. Cookies and our websites

Our website synastria.pro counts visits with Google Analytics: its home page loads the Google Analytics script from Google’s servers. To display correctly, the website also loads a small number of technical resources (styling and fonts) from third-party content-delivery networks, which necessarily receive your IP address in order to serve those files. The website has no advertising.

The website asks whether Google Analytics may use cookies. Until you accept, and after you reject, it sets no cookies: Google Analytics counts the visit without cookies or other identifiers. If you accept, it sets two cookies:

• _ga - tells one visitor from another; kept for up to two years after your last visit.
• _ga_<ID> - keeps the state of your visit; kept for up to two years after your last visit.

Your answer is kept in your browser’s local storage for one year; after that the website asks again. You can change the answer at any time with “Cookie settings” at the bottom of the home page. When you reject, the website deletes the cookies of Google Analytics. You can also block or delete cookies, and block the Google Analytics script, in the settings of your browser; the website works without them.

The web application app.synastria.pro uses no analytics and sets no cookies of its own. To keep you signed in, it stores a browser identifier and a sign-in key in your browser’s local storage (localStorage and IndexedDB). They are strictly necessary for signing in and are not used for tracking. The key is removed when you sign out; the identifier stays until you clear the site’s data in your browser. When you open the payment form, the web application loads Stripe’s script from Stripe’s servers, and Stripe sets its own cookies to process the payment and prevent fraud.

16. Changes to this policy

We may update this Privacy Policy from time to time. We will revise the “Last updated” date above and, where appropriate, notify you in the App. Your continued use of the Services after changes take effect means you accept the updated policy.

17. Contact us

Questions or requests about this policy or your data? Email support@bistriy.com, or write to us at the operator address in section 1.