Your financial information stays under your control.

Data Astra can access

When you choose to connect or use a source, Astra can process:

• Gmail messages returned under Google’s read-only Gmail scope, including metadata and bodies needed to identify likely transactions;
• CSV statements, Android text shares, pasted alerts, notifications you explicitly permit, and transactions you enter;
• financial facts such as budgets, balances, income, bills, subscriptions, liabilities, household assumptions, and goals; and
• questions and companion actions you submit inside Astra.

Every source is optional. Astra does not request bank or mailbox passwords, PINs, OTPs, contact access, direct SMS inbox access, screen capture, or accessibility control.

Notification capture

Optional notification capture starts only after you save the disclosed capture mode and enable Android notification access. You can use all apps with exclusions or selected apps only. Astra excludes its own notifications and processes the text Android exposes to propose reviewable financial transactions.

Accepted proposals retain the notification text and available context in encrypted app-private storage. Rejected notification text is not stored. Revoking notification access removes pending notification proposals and evidence under the app’s revocation flow; confirmed records remain until you delete them.

What is stored on your device

Astra stores normalized transaction records, review evidence, budgets, planning facts, obligations, goals, companion history, category choices, and Gmail synchronization metadata in encrypted app-private storage. Gmail metadata may include the connected account email and name, a derived mailbox identifier, an opaque connection generation, a Gmail History cursor, status, and timestamps.

OAuth access tokens and raw Gmail message bodies are used transiently and are not written to Astra’s finance store. Optional local model files are kept in app-private no-backup storage.

Processing and sharing

Transaction parsing, deduplication, budgeting, planning calculations, and optional local-model inference run on the device. Astra contacts Google only when you authorize Gmail access, read permitted Gmail data, reconcile Gmail History, or revoke that permission. It contacts a pinned model host only when you explicitly download an optional model.

If you explicitly connect an external AI provider, Astra sends the disclosed conversation or notification fields needed for that request to the provider. Suggestions remain reviewable and cannot confirm transactions or move money. Provider processing is governed by that provider’s terms and your provider account settings.

Astra has no advertising, analytics, crash-reporting, account backend, or data-sale integration. Android, Google, connected providers, model hosts, and the app store may independently process platform or network metadata under their own terms.

Retention and deletion

Local data remains until you edit it, delete records, choose Erase Astra, clear app storage, or uninstall the app. Erase Astra removes local finance state, conversation, outgoing review notifications, Gmail sync configuration, and scheduled Gmail work.

Disconnecting Gmail invalidates Astra’s local session and cancels scheduled work, then asks Google to revoke the authorization. If remote revocation fails, Astra remains locally disconnected and directs you to complete revocation in your Google Account. Disconnecting never deletes mail from Gmail.

Astra excludes finance state, keys, and optional models from Android backup and device transfer.

Security

Astra encrypts serialized finance state with AES-GCM using a non-exportable Android Keystore key. Its network configuration rejects cleartext HTTP, and sensitive release screens block screenshots and Recents previews. No security measure eliminates all risk, so keep your device and Google account protected with current software and a screen lock.

Automated analysis and financial information

Astra’s planning results are informational estimates based on confirmed facts and assumptions available on your device. It keeps currencies separate and reports missing inputs instead of inventing exchange rates, prices, balances, income, or loan terms. Astra does not execute payments, transfers, trades, loans, or other real-money actions and does not provide legal, tax, investment, credit, or regulated financial advice.

Your choices and rights

You can avoid optional sources, review proposals before recording them, change notification capture settings, disconnect Gmail or AI providers, delete individual records, or erase all Astra data from within the app.

The publisher does not operate an Astra account backend and therefore cannot access or remotely delete data that exists only on your device. For privacy questions or jurisdiction-specific requests, contact aarconcepcion@gmail.com. We will explain whether any publisher-held information exists and respond as required by applicable Philippine law.

Children

Astra is intended for adults and is not designed for children under 18.

Changes to this notice

We may update this notice when Astra’s data access, remote services, retention, or sharing changes. Material changes will be reflected here and, where appropriate, in renewed in-app disclosures.

Contact

A-Ar Andrew Concepcion
Philippines
aarconcepcion@gmail.com