Draft — not in force

This document has not been reviewed by a lawyer and does not yet apply to anyone. It is published here so it can be read, corrected and cited while the three astrology apps are prepared for full release. It is not the operative policy for any product, no app currently relies on it, and it may change substantially or be withdrawn.

This is the INTERNAL operational policy and it stays a draft: its own section 9 requires a named person, a named backup and response targets set by whoever will actually answer, and none of those are decided. The user-facing support page now lives at /astrology-support and publishes only what is already true — the live inbox, the target already published on /contact, and the statutory Art. 12(3) period.

Passages marked ⚠ are questions that are genuinely unresolved. They are left open on purpose rather than smoothed over, and a reviewer should not skim past them.

Internal Support Policy

The named inbox, the response-time targets, and the routes for refunds, trial disputes and data-rights requests — for three apps that are not yet released.

This document is different from the other five: it is not mostly a legal question, it is an operational commitment, and the only thing that makes it true is a person reading an inbox. The suite's monetization standard requires a support path shipped in the first phase — refunds, trial disputes, data-rights requests, a named inbox and a response-time target.

The response times below are placeholders and must be set by whoever will actually answer. A published target that is missed is worse than a longer one that is met — and for the Art. 12(3) deadline it is not merely worse, it is a breach with a date on it. Do not tighten these numbers to look responsive.

1. The inbox

What already exists, stated as fact and not as a substitute. This site publishes hello@infoash.de as the company's general contact, and /contact states a 2–3 working-day target for non-urgent enquiries. That is a real, live inbox and a real, published target. It is not yet a support path for these three apps, because it is not named in any of these documents, it has no routing for rights requests, and it carries no per-app volume. Two lawful options:

  1. Reuse it, extending the existing published target to cover these apps explicitly and adding rights-request routing behind it.
  2. Create a dedicated inbox per suite or per app.

⚠ Either is fine. What is not fine is publishing a third address nobody has created, which is what the placeholders above will become if this is not decided. Owner decision, and a launch blocker for the privacy policy and the terms.

2. Response-time targets

Request typeAcknowledgeResolveBasis
General support[the existing site says 2–3 working days]Best effortCommercial
Billing or trial dispute[PLACEHOLDER]Depends on the store — see section 4Commercial
Data-rights request (GDPR Art. 15–21)PromptlyOne month, extensible by two further months for complex requests, with the person told of the extension and the reason inside the first monthArt. 12(3) — statutory, not a target
Deletion requestPromptlySame — but the self-serve in-app route is immediate and is the one to point people atArt. 17
DPDP grievance (India)⚠ Statutory period to be confirmed against the current DPDP Rules⚠ SameDPDP 2023
Safety or child-protection concernImmediatelyImmediatelyPolicy

The distinction that matters and is routinely blurred: the commercial targets are promises we choose. The Art. 12(3) month is law. Missing the first is a bad review; missing the second is a breach, and the clock starts when the request arrives, not when someone notices it. Any inbox arrangement that can let a message sit unread for a month is not fit for purpose regardless of what this table says.

3. What support does not do — cancellation

Support never cancels a subscription, and is never the route to cancel one.

Cancellation is one tap, inside the app, through your platform's native subscription controls. The monetization standard forbids "contact support to cancel" by name; the terms commit to no retention flow.

If someone emails asking to cancel, the answer is the shortest possible route to the native control, with no offer, no discount and no "before you go". A retention pitch delivered by email is the same dark pattern as a retention screen, and it also runs into § 312k BGB, which requires a cancellation route of equivalent prominence. Support may explain where the control is. It may not stand between the user and it.

Same for deletion: point at Settings → Delete everything. Do not require an email; do not add a step.

4. Refunds

Apple and Google are the merchant of record. We cannot issue a store refund, cannot reverse a charge, and cannot see payment details.

What we do:

What we do not do: promise a refund we cannot deliver, or tell someone they are not entitled to one. Both are the store's call, and asserting either is a claim we have no standing to make.

5. Trial disputes

The three that will actually arrive, with the honest answer to each.

"I was charged and I didn't realise the trial converted."

The mechanics are: 7-day trial, payment method required up front, converts automatically unless cancelled, and a reminder on day 5 — two days before any charge. Confirm whether that reminder was actually delivered to that user. If it was not, that is our defect, and it is a support-supported refund request, not a user error.

⚠ This requires the reminder to be observable per user, not merely implemented. If delivery cannot be checked, this promise cannot be honoured and the day-5 commitment in the terms is unverifiable. A build item, not a support item.

"I already used a trial and can't get another one."

Trials are once per store account. It is a platform rule we cannot vary, it applies across multiple profiles inside the app, and deleting your data and signing up again does not reset it. This has to be said the same way here and on the deletion confirmation screen.

"I paid for the reading or report and lost it."

All three apps sell a one-time non-consumable. Restore purchases is the answer, and it must recover the entitlement end-to-end on a second device or after reinstall, on both stores — phrased behaviourally, because verifying the affordance renders is not verifying the entitlement recovers.

⚠ If restore does not work, this is a purchase the user has lost and support cannot fix it — which is precisely why it is a launch gate and not a follow-up.

6. Data-rights requests

RequestRoute we point at firstWhen support handles it
Delete everythingIn-app, Settings — immediate, unconditional, no reason neededOnly if the user cannot reach the app
Export my dataIn-app, same placeSame
Access — what do you holdEmailAlways. Verify identity proportionately, without collecting more data to do it
RectificationIn-app for profile and birth dataWhere a field is not editable
Withdraw consent (Crystal quiz, journal and mood)In-app, with the designed withdrawal consequence shown before confirmingWithdrawal must be as easy as giving it — if someone has to email, that test is already failed
Object / restrictEmailAlways
ComplaintThe supervisory authority, and we say so rather than discouraging itAlways

⚠ The anonymous-session limit applies to this table. For a Crystal user with no account, deletion works and access and portability do not, because there is no identity to authenticate. Support must not improvise a workaround — no "just tell me your device ID". The deletion policy explains the gap; the support answer is that explanation, verbatim, and an apology, not a technique.

⚠ India / DPDP: a named grievance officer with published contact details is a distinct statutory role, not a rebranded support inbox, and it is a hard blocker. Whether the same person can hold it, and what response period applies, is counsel-owed.

⚠ Whether a data protection officer is required at all is an open question raised in the Article 13 notice and is additional to the four in the privacy policy. If one is required, this table's email routes change to that person.

7. What support is not allowed to say

Support replies are user-facing copy and route through the claims gate like everything else. The gate has no support exemption, and a one-to-one email is where an unreviewed claim is most likely to be written, because it feels private and it is written under time pressure.

Macros for the recurring cases are drafted once, reviewed once through the gate, and then reused. Freehand replies are how blocked phrasing gets back in.

8. Escalation and volume

9. Before this is published

10. Contact

Infoash UG (haftungsbeschränkt) · [registered address] · [support inbox — PLACEHOLDER]

⚠ This is the document that makes the other five honest. Until the inbox exists and someone is reading it, every "contact us" in this suite is a promise nobody has made.