YANYour Astro Navigator

Privacy policy

Effective from 16 October 2026. In case of differences the Polish version prevails.

1. Controller

The controller of personal data is Yan Loza, Nowe Miasto-Folwark 69o, 09-120 Nowe Miasto, Poland, tax ID (NIP) 7122921638 ("YAN", "we"). Contact for all data matters: kontakt@yanastro.com.

2. Scope

This policy covers the YAN app for phones and tablets, the YAN software running on your device (e.g. a Raspberry Pi) and the website and services at yanastro.com (account, licences, trial, demo).

3. The app and your YAN device

The app connects directly to your YAN device on the local network or through its own Wi-Fi. Photos, equipment settings, session plans and the observing site are stored on your device and are not sent to us.

  • Location: with your permission (system setting) the app reads the phone's position to set the observing site (latitude and longitude) needed for astronomical calculations. The position goes only to your YAN device, not to us. You can also enter it manually
  • The phone's time and time zone are sent to your device so photo dates are correct
  • The app has no ads, analytics or tracking

4. Licences, trial and account

To start the trial, activate a licence or use the account, the app and the website send us:

  • your e-mail address (trial, account, purchase), to which we send confirmation codes and licence keys
  • the licence key, device number (Raspberry Pi processor serial or a system identifier) and device name (e.g. YAN-3F2A), to assign the licence to one device
  • the licence history: dates of issue, activation, moves and revocation
  • when signing in: a description of the browser or phone and the session's IP address

Sign-in codes are stored only as a cryptographic hash and expire after 10 minutes. We do not use passwords. The app also downloads the list of revoked licences from our server, without sending personal data other than the IP address.

5. Demo

The "Try without a device" button connects the app to a public demo device at demo.yanastro.com. Data entered in the demo (e.g. observing site, device name in the list of signed-in devices, IP address) is stored on that device and deleted regularly. Do not enter data there you do not want to share.

6. Server logs

The server keeps technical request logs (IP address, time, request address) for security, abuse prevention (e.g. sign-in attempt limits) and troubleshooting. Logs are kept for up to 30 days.

7. Purposes and legal bases

  • issuing and handling licences, the account and the trial: performance of a contract (Art. 6(1)(b) GDPR)
  • security, abuse prevention (one trial per address and device), logs: legitimate interest (Art. 6(1)(f) GDPR)
  • accounting for purchases: legal obligation (Art. 6(1)(c) GDPR)

8. Recipients

We use providers that process data on our behalf under data processing agreements:

  • netcup GmbH (Germany): the server running yanastro.com
  • Brevo (Sendinblue SAS) (France): sending e-mails with codes and licences
  • Cloudflare, Inc. (USA): domain name service (DNS). Transfers outside the EEA rely on the EU adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses

Once sales start, payments will be handled by Paddle (Paddle.com Market Ltd, United Kingdom) as the merchant of record, a separate controller of payment data. The Android app is distributed through Google Play under Google's terms.

9. Retention

  • account and licences: while you use the services, and purchase data for the period required by tax law
  • sign-in sessions: until sign-out or 90 days without use
  • database backups: up to 7 days
  • server logs: up to 30 days

10. Your rights

You have the right to access, rectify and erase your data, restrict processing, data portability and to object to processing based on legitimate interest. Write to kontakt@yanastro.com. You may also lodge a complaint with the Polish supervisory authority (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa) or the authority in your country.

11. Children

YAN services are not directed at persons under 16.

12. Changes

We will announce material changes to this policy on this page and, for account holders, by e-mail.