Privacy policy

Who is responsible

The data controller is Jonas Rodon Teixeira, tax ID (NIF) 41550281E, contact email info@tovallons.cat. AstroCita is an online speed-dating service with astrological compatibility, for people aged 18 and over only.

Invitations

We store the link between inviter and invitee and a keyed hash (HMAC) of the IP at sign-up, only to detect abuse. The inviter only sees counts, never the invitee's identity. Basis: legitimate interest in preventing fraud, and performance of a contract.

What data we process

Account: your email and a hash of your password (never the password).

Profile: the name you choose to show and, optionally, your city.

Birth details (date, time and place): stored encrypted, never shown to other people, and used only to compute the positions of the stars. From them we keep only those positions, without the date, time or place.

Interview: the 5 pills you look for and the 5 you offer, from a closed catalogue with no sensitive categories.

Activity: your dates, your decisions (“I'd like to talk again” or “pass”), your connections, chat messages, blocks and reports.

Purchases: Stripe handles payment; we never see or store your card details.

Technical data: your IP address, only to limit attempts and protect the service.

Why, and on what legal basis

To provide the service you ask for (performance of a contract). To compute your chart from your birth details (your consent, which you can withdraw by deleting your account). To keep the service safe and moderated (legitimate interest). To meet tax obligations when payments exist (legal obligation).

Video and audio

AstroCita does not record video or audio. The connection between the two people is direct and encrypted; when a network prevents that, our own relay forwards the encrypted data without being able to see it. For that reason we cannot review what happens on a date: reports are assessed from what the reporter tells us and from history.

Who we share data with

With the other person on a date: your name, your city (if you gave one), your compatibility radar and the pills that match. Never your birth details, your email or your full list of pills.

With providers who serve us: Stripe (payments), an email delivery provider and server hosting. We do not sell your data.

How long we keep it

While you have an account. When a connection ends, the chat stops being visible to both people. If you delete your account, everything linked to it is removed; reports that other people made about you may be kept, without your profile data, to protect the community. Billing data is kept for as long as the law requires.

Your rights

From your dashboard you can download all your data and delete your account, and you can correct your profile at any time. You can also ask to restrict or object to a processing by writing to info@tovallons.cat. If you think we have not respected your rights, you can complain to the Spanish Data Protection Agency (aepd.es).

Statistics

To improve the experience we measure, in aggregate, how dates end, how many end in “want to meet again” and how many people return to events. It is not used to make decisions about you and is not shared with third parties.

Security

Birth details are encrypted at rest, passwords are stored with a secure hash function and connections are encrypted. No system is infallible: if a breach affected you, we would tell you.