Chiral turns a description into an app on your phone. To do that it has to read what you ask for, so this page says plainly what we collect, what we do with it, who else handles it, how long we keep it, and how to delete it. Chiral is run by AstralTier LLC, a Delaware limited liability company (“we”). Questions: support@astraltier.com.
The short version
- We keep your account details, what you ask Chiral for, and the conversations about it.
- During the beta we read your prompts and conversations to fix and improve Chiral, and may copy them into another Chiral app to do it (details).
- Your requests are processed by AI (Anthropic's Claude), which does not use them to train its models. If an app you ask for would send sensitive personal information to AI, we ask you first.
- We don't sell your data, show ads, or use analytics or tracking cookies.
- You can delete your account any time; your data goes within the hour.
What we collect
Your account
- From Google or Apple sign-in: your name, email address, and (Google) profile picture link, plus the sign-in tokens they issue. With Apple, if you choose “Hide My Email”, we ask for the email your iPhone uses for the App Store, because TestFlight invitations need it.
- Your invite code, your sign-up, and which phone you use (Android or iPhone).
- For each signed-in session: when it expires, and the IP address and browser or app it came from.
- If you pay: your subscription status and Stripe's customer reference. Card details go to Stripe, never to us.
- If you join the waitlist or use the contact form: your name, email, and what you write.
What you make
- Prompts and conversations: what you ask for, your messages during a build, the replies, and the assistant's notes on what it did.
- Attachments: photos and files you send with a request.
- Your answers when you start (who you make apps for, what you're into, the look you like), so the assistant can suit apps to you. You can skip them.
- Build records: when each build ran, its progress, its result, and what it cost us.
- Consent records: if we asked you to confirm an app that sends sensitive information to AI, what we asked, your answer, and when.
- AI usage counts: how many times this week your apps used the built-in AI, and how many tokens. Not what was said.
- Your app's code, in a private repository we run, and the app built from it.
- Who you've shared an app with, and any public link you've turned on for a mini app.
We don't collect your contacts, location, or anything else from your phone. The apps Chiral builds ask for phone permissions (camera, photos and so on) only when they need them; what they collect on your phone stays on your phone unless the app sends it to the built-in AI (below).
Your prompts and conversations are beta feedback
Chiral is in beta, and what you ask for is how we learn what to fix. So, while you're a beta tester:
- People at Chiral read your prompts, conversations and attachments, and look at the apps built from them, to debug failures and improve Chiral.
- We may copy an app together with its conversation into another Chiral app, usually our own test app, to reproduce a problem or try a fix. The copy is a separate record, kept for that work.
- We may use what we learn, and short excerpts, as test cases to improve the assistant. We don't publish your prompts with your name on them, and we don't sell them.
You agree to this when you sign up. If you're not comfortable with it, please don't join the beta yet.
AI: what goes to Claude
Chiral uses Anthropic's Claude models in three places:
- The assistant you talk to before a build reads your request, attached images, the previous turn of the conversation, your messages, and a summary of your answers when you started.
- The builder that writes your app reads the same, plus the conversation so far, and works on a GitHub-hosted build machine.
- The built-in AI in your apps. An app that offers AI features (reading a photo, answering a question) sends what you give it, through Chiral, to Claude. There is a weekly limit, and we count only the number of uses, not their content. Visitors to a mini app's public link can never use it.
Sensitive information asks first. If an app you ask for would send bills or statements, ID documents, health information, photos of children, account numbers or home addresses to AI, the assistant explains what would be sent and why, and builds only if you say yes. The builder is told to send only that, for that purpose. Information an app keeps on your phone needs no such step.
Not used for training. Anthropic does not use Chiral users' prompts, conversations or app data to train its models.
AI makes mistakes. Don't rely on what an app's AI tells you for anything important without checking it.
Who else handles your data
We use these services to run Chiral. Each gets only what its job needs.
- Anthropic (Claude): the AI described above. Not used to train its models.
- GitHub: your app's code lives in a private repository, and builds run on GitHub's machines. Build logs include your request; they are deleted when your account is.
- Fly.io (hosting; its server logs are below) and Neon (our database, including attachments), in the United States.
- Google Play and Apple TestFlight / App Store Connect: to deliver your app we add your Google email (Android), or your Apple ID email and name (iPhone), to the app's tester list.
- Google and Apple sign-in: to sign you in.
- Resend: sends our emails (welcome, your app is ready, account closed).
- Stripe: payments, if you subscribe.
- Cloudflare: our domain name. (It also stores our website's images, none of them yours.)
- Telegram: our team's private operations channel gets a note when someone signs up, closes their account, or a build needs attention.
- Domi-knows (our own game service): only if you use a mini app built on it, such as the domino pip counter. The photos and game details go there; your email doesn't.
We may also disclose information if the law requires it, or to protect someone's safety. If AstralTier is ever sold or merged, this policy goes with your data.
Sharing and public links
- When you share an app with someone, they get the app. If you let them edit it, they also see its conversation.
- A mini app's public link is off until you turn it on. It shows only the app itself, not your name, account or conversations. You can turn it off any time.
Cookies
We use only what the site needs: a sign-in cookie, a short-lived cookie while you sign up (30 minutes), and Google or Apple's cookies during sign-in. Your light/dark choice is kept in your browser. No analytics, advertising or tracking cookies.
How long we keep it
- Attachments: deleted 30 days after the build they were sent with last changed; an upload never sent with a request goes after a day.
- Sign-in sessions: expire after 30 days without use.
- Server logs: our hosting provider, Fly.io, keeps them for 7 days and offers no setting to change that; we don't copy them anywhere else. Email addresses in them are shortened (a…@example.com).
- Build logs on GitHub, which include your requests: until you delete your account.
- Everything else (account, conversations, prompts, build records, answers) stays while your account is open, so your apps and their history keep working, until you delete your account.
Deleting your account
How to delete your account: from your account page, from inside the app, or by emailing us. You're signed out everywhere at once, taken off your app's tester list, and within the hour (or once a build that's running finishes) we delete:
- your account, sessions, sign-in links and sign-up;
- your conversations, prompts, messages, the assistant's replies and notes, attachments, and your starting answers;
- AI usage counts, shares (given and received), public links, and your place on any beta list;
- your app's GitHub build logs, which include your requests;
- contact-form messages, and your subscription record.
What we keep, and why:
- An anonymous record that each build happened (when, which app slot, what it cost us), with your email, prompt, replies and the consent wording removed. We need it for our costs and so app version numbers are never reused. Nothing left identifies you.
- A record that we sent you an email, with your address removed, so we never send it twice.
- Your app slot itself, emptied and reused for someone else. A mini-app repository is archived instead, without your account attached: its code stays, and so do its short change notes, which can quote the start of a request.
Outside what deletion reaches, so we're telling you:
- Copies made under beta feedback above, and apps you shared that someone already received (those become theirs).
- Google Play's and Apple's own records of your tester status and the builds they delivered; Stripe's payment records, which it must keep; our team's Telegram notes; and up to 7 days of server logs (above).
If you want any of those removed too, email support@astraltier.com and we'll do what we can.
Your choices and rights
You can see most of what we hold in your account and your app, and delete all of it as above. To get a copy of your data, correct something, or ask anything else about it, email support@astraltier.com. Depending on where you live (for example California, the EU or the UK) you may have further rights, such as to object or to complain to a regulator; we honor them for everyone.
Security
Data is encrypted in transit, your app's repository is private, and only the few people running Chiralcan see your data. No system is perfectly secure; if something goes wrong that affects you, we'll tell you.
Children
Chiral is not for children under 13, and we don't knowingly collect their information. If you think a child under 13 has an account, email support@astraltier.com and we'll delete it.
Where your data is
AstralTier is in the United States, and so are our servers. If you use Chiral from elsewhere, your data is processed in the US.
Changes
If we change this policy in a way that matters, we'll email you or tell you when you next sign in, before it takes effect. The date at the top says when it last changed.
Contact
AstralTier LLC, support@astraltier.com. See also our terms.