Effective date: 2026-10-03
App: Astra (Android app, package biz.bruh.astra)
Developer: Bruh Biz
Contact: privacy@bruh.biz
Astra is a personal AI agent you chat with from your phone. This policy explains what data the app processes, why, and where it goes.
1. Account. To sign in we process your email address and an account identifier. They are used only to authenticate you and to keep your conversations tied to your account.
2. Messages and conversations. The messages you send, and the agent's replies and progress steps, are sent to the Astra service and stored there so your history is available across sessions and devices. A recent copy is cached on your phone so you can read it offline.
3. Voice, only when you use it. When you hold the voice button, the app records audio for the duration of that dictation and sends it to the Astra service to be transcribed. The audio is not kept after transcription. The app does not record in the background.
4. Files and documents the agent produces. Artifacts created for you are stored on the Astra service so you can open and download them. Your approval decisions are stored with the job they belong to.
5. Notifications. To deliver notifications the app registers a push token with the Astra service and with Google Firebase Cloud Messaging. Notifications are only wake-ups; the app loads the real state from the service when you open it. You can decline notification permission in Android settings.
The app also uses permissions Android grants without asking: internet access, vibration (haptic feedback), foreground services (to keep a running job connected in the background and to play spoken audio), and the wake-lock, network-state, start-at-boot and push-receive permissions that Firebase Cloud Messaging and Android WorkManager need to deliver notifications and send a queued approval decision. The app does not request location, camera, photos, media or storage.
To produce replies and transcripts, the Astra service sends message content and voice audio to a language model provider and a speech-to-text service that process it on our behalf for that purpose only. Google Firebase Cloud Messaging delivers push notifications. We do not sell your data and do not share it for advertising.
All traffic between the app and the Astra service uses HTTPS. Sign-in tokens are stored on your device in app-private storage, encrypted with a key held in the Android Keystore, and are excluded from Android backup and device-to-device transfer, as is the on-device message cache.
Conversations and artifacts are kept until you ask for them to be deleted. To request deletion of your account and its data, email privacy@bruh.biz. Clearing the app's storage in Android settings removes the on-device copy.
Astra is not directed to children under 13.
If this policy changes, the effective date above is updated and the new version is published at the same address.