What we collect, why, and what rights you have over it
If anything here is unclear, contact us at hello@astrodu.com or on WhatsApp at +2348125008097 — we'll answer directly rather than pointing you back to this page.
AstroDu (astrodu.com) is operated by Iyanda, a practising astrologer based in Ibadan, Oyo State, Nigeria. [Registered business name and CAC RC number to be inserted once incorporation is complete.] For the purposes of the NDPA, AstroDu is the data controller for the information described below.
We don't collect data speculatively — everything below exists because a specific feature needs it.
To create your account: your name, email address, WhatsApp number, and a password (stored hashed, never in plain text).
To calculate your chart and readings: your date of birth, and — if you provide it — your time and place of birth. AstroDu's core reading method uses your Sun sign as the first house, so a birth time is not required for house placement in the core AstroDu method. Birth time and place may still be used by features that require additional astronomical timing or location information. Birth data is sensitive personal information once connected to an identifiable account, and we treat it accordingly.
To process payment: a transaction reference from Paystack or Flutterwave. We do not receive or store your card number, CVV, or bank login details — those stay with our payment processors, who are PCI-DSS compliant in their own right. Where a saved-card subscription is involved (currently, Prayer Mountain Plus), the card is tokenized by Flutterwave and the token — not the card — is what we hold, encrypted at rest.
To run the Superstar Network (affiliate programme): your referral link activity, who you've referred, and — only if you request a payout — the bank account details needed to pay you. Bank details are verified before any payout is released and are not used for anything else.
To keep you signed in and improve the product: a session cookie, and basic usage data (which pages you visit, which readings you generate) so we can see what's working and what isn't. We don't run third-party ad-tracking scripts.
Support conversations: if you message us on WhatsApp or email, we keep that conversation to resolve your issue and to have a record if a dispute arises later (for example, a refund request under our 48-hour window).
We do not sell your data. We do not share your birth data, your readings, or your account information with advertisers, data brokers, or any third party for marketing purposes. The only parties who ever see any of your data are:
Your AstroDu account data and reading history are kept while your AstroDu account remains active so that saved readings and documents remain available to you. If you permanently delete your AstroDu account, AstroDu-owned readings, saved documents, preferences, entitlements and other AstroDu product data are permanently removed or anonymised as applicable. Limited transaction, security, fraud-prevention, tax or financial records may be retained where required by law or necessary to establish or defend legal claims, and only for the applicable retention period.
AstroDu, Prayer Mountain and Ready2Marry are separate products. Deleting your AstroDu account does not automatically delete data belonging to Prayer Mountain or Ready2Marry. Where a shared sign-in identity is required to preserve access to a separate product you use, that shared identity may remain after AstroDu product data is deleted. Requests concerning another product can be made separately.
Some infrastructure we use may process data on servers located outside Nigeria. Where that's the case, we rely on the data processor's own security and contractual safeguards, consistent with NDPA's cross-border transfer requirements.
As a Nigerian data subject, you have the right to:
To exercise any of these, message us at hello@astrodu.com or WhatsApp +2348125008097. We aim to respond within a reasonable timeframe as required under the NDPA. We may need to verify your identity before actioning a request that involves deleting or exporting sensitive data like your birth chart.
AstroDu is not intended for anyone under 18. We don't knowingly collect data from minors. If you believe a minor has created an account, contact us and we'll close it.
We take reasonable technical and organisational steps to protect your data — encrypted connections, hashed passwords, tokenized payment details. No system is perfectly secure, and we can't guarantee against every possible breach, but we don't treat that as an excuse: if something goes wrong, we'll tell you.
If we materially change how we handle your data, we'll update this page and note the new "last updated" date. Continued use of AstroDu after a change means you accept the update. For significant changes — for example, if we ever began sharing data with a new category of third party — we'll notify active users directly.
This policy is governed by the laws of the Federal Republic of Nigeria, with reference to the Nigeria Data Protection Act 2023.