Privacy Policy
How AstroSat collects, uses and protects your information.
Last updated: 17 June 2026
AstroSat (“AstroSat”, “we”, “us”) is a satellite-tracking web app operated by smartflux. This policy explains what information we collect when you use AstroSat at astrosat.app, how we use it, and the choices you have. If you have any questions, contact us at christian.smartflux@gmail.com.
1. Information we collect
You can browse the globe, sky and solar system without an account. We collect information in the following ways:
- Account information — if you choose to sign in with Google or with an email address, we receive your name, email address and (for Google) profile photo. This lets us create your account and save your data.
- Content you create — the satellites you track and the custom constellations you build are saved to your account so they sync across your devices.
- Location — if you grant location permission, your device location is used in your browser to work out what is overhead and when satellites pass. For free features, it never leaves your device. If you use Mission Control (the Pro AI chat), your approximate location is included in the context sent to our AI backend so it can answer situated questions such as “what’s overhead right now?”. It is processed per-request to produce the reply and is not stored.
- Usage & device data — we use analytics to understand how the app is used (pages/features viewed, device and browser type, approximate region derived from your IP address, and anonymous identifiers). This helps us improve AstroSat.
- Local storage on your device — we store preferences (such as dark mode), a cache of public orbital data, and your sign-in session in your browser's local storage / IndexedDB.
2. How we use your information
- To provide and maintain the service and your account;
- To save and sync your tracked satellites and constellations;
- To generate AI satellite briefings if you use Pro features (see section 3);
- To understand usage and improve performance, reliability and features;
- To keep the service secure and prevent abuse;
- To comply with legal obligations.
Our legal bases (GDPR) are performance of our agreement with you (providing the app), your consent (e.g. location, optional analytics), and our legitimate interests in operating and improving a secure service.
3. AI features (Mission Control)
AstroSat Pro includes two AI features:
- Per-satellite AI Briefing — only the satellite’s name and NORAD catalogue number are sent to our automation backend and AI provider (OpenAI) to generate a short description, which we then cache publicly. No personal data, account details or location are sent.
- Mission Control chat — to answer situated questions (“what’s overhead right now?”, “is there aurora tonight?”), each message is sent together with a context snapshot that includes your approximate location, current sky conditions, the satellites you track and what is overhead. This context is sent to our automation backend and to OpenAI to generate the reply. It is not stored beyond the conversation history (which contains only the message text, not the context). Only the text of your messages and the AI’s replies are saved to your account.
AI-generated content is produced by large language models and may be inaccurate or incomplete — it is for general interest only and should not be relied upon for critical decisions.
4. Service providers we use
We rely on the following providers to operate AstroSat. They process data only as needed to provide their service to us:
| Provider | Purpose |
|---|---|
| Google Firebase / Google Cloud | Authentication, database, file storage, hosting and analytics |
| OpenAI | Generating AI satellite descriptions (no personal data sent) |
| Microsoft Azure | Hosting our automation backend (n8n) |
| CelesTrak / Space-Track | Public orbital (TLE) data source — no personal data involved |
5. Storage, international transfers & security
Your data is held by the providers above, whose servers may be located in the European Union and/or the United States. Where data is transferred outside the European Economic Area, it is protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses. We protect data with encryption in transit (TLS/HTTPS) and encryption at rest provided by our infrastructure providers, together with access controls and multi-factor authentication on our administrative accounts.
In the event of a personal-data breach that is likely to affect you, we will notify the relevant supervisory authority and, where required, affected users without undue delay.
6. Data retention & deletion
We keep your account information and saved content for as long as your account is active. You can sign out at any time, and you can request access to, export of, or deletion of your account and data by emailing christian.smartflux@gmail.com. We will delete your data unless we are required to retain it by law.
7. Your rights
Subject to applicable law, you have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time. You also have the right to lodge a complaint with your local data-protection supervisory authority. To exercise any of these rights, contact us at the email above.
8. Cookies & similar technologies
AstroSat does not use advertising cookies. We use your browser’s local storage for app preferences and your sign-in session, and analytics identifiers to measure usage. You can clear this data through your browser settings at any time.
9. Children
AstroSat is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.
10. Changes to this policy
We may update this policy from time to time. When we do, we will revise the “Last updated” date above. Significant changes will be highlighted in the app where appropriate.
11. Contact
AstroSat is operated by smartflux. For any privacy questions or requests, contact christian.smartflux@gmail.com. This policy is governed by the laws of the Netherlands.