Astral Star Privacy Policy

Last updated: October 7, 2026

This policy explains how Light Mandalas Co., Ltd. handles information in the Astral Star mobile app, including optional Premium subscriptions, activation codes and AI playlists. Basic browsing and Bluetooth control do not require an app account.

Bluetooth and content on your device

Bluetooth is used to discover, connect to and control your Mandala Astral Star light projector. Bluetooth connection information is processed on your device for this purpose. On older supported Android versions, nearby-projector discovery can require the location permission. The app uses it for Bluetooth discovery and does not send your geographic location to Light Mandalas.

Your drawings, imported pictures, custom symbols, libraries and saved playlists are processed and stored on your device. Picture tracing does not automatically upload your pictures to Light Mandalas or an AI provider. When you choose to share a library or preset, the content is sent through the app or destination you select, subject to that service's privacy practices.

Premium subscriptions

Apple handles iOS subscription payment. Google Play handles subscriptions purchased in the Google Play version of the Android app. The app uses RevenueCat to manage subscription status, purchases and restoration. RevenueCat receives purchase and subscription information, an app-assigned user identifier, and technical information such as your device type and operating-system version. We use this information to provide Premium access, restore purchases, support customers and understand subscription activity. The app does not receive your payment-card details from Apple or Google Play and does not ask for your email or name for these store purchases.

For the Android APK downloaded directly from Light Mandalas, optional card subscriptions use RevenueCat Web Billing and Stripe. Checkout asks for your email and payment information and may ask for billing details. Stripe processes payment information; Astral Star does not store your full card number. RevenueCat and Light Mandalas receive the purchase email, subscription and payment status, and related billing records needed to provide access, receipts, subscription management, recovery and support. Checkout providers may also process technical information for payment security and fraud prevention.

Activation and access verification

If you use an activation code, the app sends the code, an app-generated device identifier, device model, platform, operating-system version and app version to Light Mandalas' AppSync service. AppSync uses these details and connection information, including the IP address, to verify activation, manage device access, prevent misuse and provide support.

For subscriber AI requests, AppSync verifies the app's RevenueCat user identifier and subscription status. A public signing key, request signature, timestamp and one-time request identifier help prevent someone else from using your subscription identifier. The private signing key stays on your device.

Optional AI playlists

AI playlist generation is optional. Before sending an AI request, the app asks permission to share your request text with Light Mandalas and OpenAI. You can decline or turn off AI request sharing in Settings. Turning it off stops future requests; it does not recall a request already sent.

When you choose to generate a playlist, AppSync sends your message and requested language to OpenAI, along with the symbol-selection instructions needed to create the playlist. Your activation code, RevenueCat identifier and app device identifier are used by Light Mandalas for access verification and are not included in the message sent to OpenAI.

AppSync also receives technical details such as your app version, platform and time zone to operate the service and enforce the daily request allowance. Its AI request logging is configured to exclude your message and generated playlist text. Operational records can include request time, status, access references, IP address, duration and usage totals.

OpenAI processes the message to return a playlist. We send these requests with response storage disabled. By default, OpenAI may retain API content in abuse-monitoring logs for up to 30 days. Longer retention may apply where required by law or reasonably needed to protect its services or others from harm. OpenAI states that API data is not used for model training by default. Please avoid including private details that are unnecessary for your playlist request.

Sharing and advertising

We use RevenueCat for subscription management, Stripe for direct APK card checkout, OpenAI for optional playlist generation, and hosting providers to operate AppSync. Data sent to these services is used to provide and support the relevant feature. We do not use an advertising identifier or advertising SDK to track you across other companies' apps or websites, and we do not sell your personal information.

Retention and choices

Local content remains on your device until you remove it. App identifiers and the signing key can persist in the device's secure storage; uninstalling the app does not guarantee removal of every secure-storage entry.

AppSync's AI operational logs are subject to a 180-day cleanup period. Activation, purchase-verification and quota records are retained as needed to operate access, prevent repeated requests, resolve disputes and meet applicable obligations. RevenueCat and Stripe retain subscription and payment records under their own retention practices and applicable obligations. Service backups may persist separately from active records.

You can revoke AI sharing in Settings and manage or cancel store subscriptions through Apple or Google Play. Direct APK card subscriptions are managed using the secure subscription-management link from the purchase email or the app. If you cannot find that link, contact us for help; do not send your full card number. To request access, correction or deletion of information held by Light Mandalas, contact us below. We may need information to verify your request and may retain records required for security, purchase restoration or legal obligations. Cancelling a subscription and requesting data deletion are separate actions.

Security and international processing

We use encrypted network connections and access controls for server communication. No storage or transmission method can guarantee absolute security. Our service providers may process information in countries other than the country where you live.

Children

Astral Star is not directed to children under 13. If you believe a child has provided personal information through the service, contact us so we can investigate and take appropriate action.

Changes and contact

We may update this policy when features or practices change. The date above identifies the latest revision.

Light Mandalas Co., Ltd.
138/1 Soi 10 Moo 9, Tambon Sanpooloei, Doisaket, Chiang Mai, Thailand
Email: cservice@light-mandalas.com
Phone: +66 91 628 9936
Contact Light Mandalas

Provider information: RevenueCat Privacy Policy; Stripe Privacy Policy; OpenAI Privacy Policy; OpenAI API data controls.