Privacy Policy

Last updated: 15 October 2026

Who we are. Aster Hills LLC (“Aster Hills”, “we”, “us”) makes apps for iPhone and Android — Aviato, Skinsight, Arc Plan, MyMeal AI, RoomGlow, Habit Flow, Ease Meditations and RemindMe — as well as interactive story games, and runs the website asterhills.co (together, the “Services”). This Policy explains what we collect, how we use it, and your choices.

Controller: Aster Hills LLC, 16192 Coastal Highway, Lewes, DE 19958, USA. Mailing address: 2093 Philadelphia Pike #1117, Claymont, DE 19703, USA. Contact: contact@asterhills.co

1) Scope

• This Policy covers our iOS and Android apps, our games when they launch, and our website asterhills.co.
• If a feature links to a third party (for example the App Store, Google Play or Apple Health), that company’s privacy terms apply to its own processing.
• Not every app uses every service listed here. Each app’s App Store privacy label and Google Play Data safety section show what that app collects.

2) Data we collect

2.1 Data you give us

• Messages to us: when you use the contact form or email us, we receive your name, email address, which app it’s about and your message.
• App content: entries you save in our apps (for example habits, schedules, trips, meals, notes, supplements, skincare products, routines, meditation preferences and affirmations). This is stored on your device or in your own iCloud.
• AI inputs: text, images and prompts you send to an AI feature. See section 6.

2.2 Data we receive automatically

• App usage and identifiers: in-app events (such as opening the app or finishing onboarding), app version, device and OS, and an advertising or device identifier where you allow it.
• Purchase status: subscription and receipt status from Apple or Google. We never see your payment card details.
• Diagnostics: crash logs and performance information, where enabled.
• Website: our host keeps standard server logs (such as IP address, browser type and pages requested) to run and protect the site. Our website does not use advertising or analytics cookies.

Sensitive note: entries like sleep, mood, skin observations, supplements or meals can be health-related. Treat anything you record as private, and use the apps in private spaces as you prefer.

3) How we use data

• Provide and operate features (logging, reminders, plans, progress, meditations, nutrition estimates, room designs).
• Personalize content (for example meditation scripts, affirmations and plans), improve accuracy and fix problems.
• Answer your messages and send service updates you need.
• Advertising and measurement, where enabled and allowed: show ads and measure how well our own ads perform.

Legal bases (EEA/UK): Contract (to deliver the Services); Legitimate interests (to improve and secure them); Consent (AI features, personalized ads and tracking identifiers, and marketing where required).

4) Service providers we use

We only share data with service providers that work under contracts limiting their use to our instructions. These are the ones we currently use and what they do.

Developer tools we use to build our apps (such as Swift Package Manager and CocoaPods) do not receive your data.

5) Ads, identifiers and consent

• On iPhone we respect App Tracking Transparency (ATT): we only access the advertising identifier (IDFA) and enable personalized ads or attribution if you allow it.
• If you decline tracking, we limit our SDKs to non-personalized ads and aggregated measurement (such as Apple’s SKAdNetwork).
• On Android you can delete or reset your advertising ID, or opt out of personalized ads, in your device’s settings.
• Our website does not use advertising or analytics cookies.

US (CPRA) disclosure: we do not sell your personal information for money. When we use Meta or Google for ads and measurement, that may count as “sharing for cross-context behavioral advertising.” You can opt out by (i) declining tracking or using the in-app controls where available, (ii) your device settings, or (iii) emailing contact@asterhills.co.

6) AI features and our AI providers

Several of our apps use AI to power features you choose to use. Our AI provider is OpenAI. Requests usually pass through our own secure relay on Google Firebase, so our keys never sit inside the app. The following applies to all of our AI features.

• We ask first. Before anything is sent to an AI provider, the app explains what will be sent and asks your permission. You can withdraw it at any time in that app’s settings. Until you agree, nothing is sent.
• What we send: only what you type or photograph inside a feature you choose to use, plus, where an app needs it, a short summary of what you’ve logged in that app so the answer is relevant.
• What we never send: your identity. Our apps have no accounts, so no name, email or user ID is sent. Personal photos you keep for your own records, such as Skinsight progress photos, are never sent; only images you explicitly choose to scan or transform are.
• How it’s used: only to create the response you asked for. It is not used for advertising or profiling, and it is not sold.
• Provider protection: our AI providers are contractually required to protect this data to the standard described in this Policy. Data sent through OpenAI’s API is not used to train its models.
• Retention: we do not store your AI conversations on our servers; they live on your device. AI providers may keep API data for a short period for abuse monitoring before deleting it, under their own data policies.
• Accuracy: AI responses can be wrong or incomplete. They are general information, not professional advice (see section 13).
• Withdrawing consent: turn the AI feature off in that app’s settings. Nothing further is sent, and the rest of the app keeps working.

What each app sends

• Skinsight — the messages you type to your Skin Coach; a short summary of what you’ve logged (your goals, routine and recent check-ins) so replies are relevant; and photos of product packaging or ingredient labels, only the ones you choose to scan. Your face and progress photos are never sent (see section 7).
• MyMeal AI — photos of meals you choose to scan, the food descriptions you type or edit, supplement labels you choose to scan, and the messages you send to the nutrition coach.
• Arc Plan — the goal you describe, your schedule and preferences, and how your days are going, used to create and adjust your plan.
• Ease Meditations — how you tell us you’re feeling and what you’d like your meditation to be about.
• RemindMe — how you say you’re feeling, what’s going on for you, how you want to feel, and anything else you type in the Affirmation Studio, used to create your affirmations.
• Aviato — your flight and trip details, your current adjustment plan, and the messages you send to the coach about adapting to a new time zone, including when to eat and sleep.
• RoomGlow — the photos of rooms you choose to redesign and the style or tool you pick, used by OpenAI to create your redesigned image.

Habit Flow does not use AI features.

7) Photos of your skin

Photos you take of your skin in Skinsight are stored only on your device, inside the app’s private storage. They are never uploaded to us, never sent to any third party, and never used to identify you. Any reading of a photo (for example how bright or even it looks) happens entirely on your iPhone. We do not perform face recognition, face matching, face detection or any biometric analysis, and we never create a faceprint. Because these photos never leave your iPhone, we hold no copy and keep nothing. You can delete any photo at any time, and Your Profile → Delete everything permanently erases all of them from your device. Deleting the app also deletes them.

8) How long we keep data

We keep personal data only as long as we need it for the purposes above, then delete or de-identify it. Messages you send us are kept as long as needed to answer you and keep a record of the conversation. AI inputs are kept by our providers only as long as necessary to return results and protect the service, as described in section 6.

9) Security

We use industry-standard safeguards, such as encryption in transit and access controls. No method is 100% secure, so please keep your device, Apple ID and Google account secure too.

10) International transfers

Some of our providers are outside your region. Where that happens, we rely on lawful transfer mechanisms such as the EU Standard Contractual Clauses.

11) Your rights

Depending on where you live, you can ask to access, correct, delete or move your data, object to or restrict its use, and opt out of marketing or personalized ads. Write to contact@asterhills.co. Because our apps have no accounts, most app data stays on your device, and you can delete it by using the app’s delete options or deleting the app. Purchases are managed in your Apple or Google account settings.

12) Children

Our Services are not directed to children under 13 (or under 16 in the EEA/UK), and we don’t knowingly collect their data. If you believe a child has sent us personal data, contact us and we will delete it.

13) Not medical advice

Our apps are wellness and information tools, not medical devices. Nutrition values, skin observations and AI responses are estimates or self-reported. Ask a qualified professional before making medical or dietary decisions.

14) Changes

We’ll update this Policy from time to time. The date at the top shows the latest version. We’ll announce material changes in the apps or on our website.

15) Contact

Aster Hills LLC, 16192 Coastal Highway, Lewes, DE 19958, USA
Mailing address: 2093 Philadelphia Pike #1117, Claymont, DE 19703, USA
contact@asterhills.co