Your data is yours. Always.

01. Introduction

We believe privacy is fundamental to trust. This policy is written to be genuinely readable — not to confuse you with legalese. If anything here is unclear, write to us at privacy@jyotishguide.com and we’ll explain.

By creating an account or using our Services, you confirm that you’ve read and understood this policy. You can stop using Jyotish Guide at any time, and you can delete your data at any time — explained in Section 9.

02. Who we are

Data Fiduciary: Jyotish Guide Technologies Private Limited

Registered office: Indore, Madhya Pradesh, India

CIN: [Corporate Identification Number to be inserted upon registration]

Primary contact: privacy@jyotishguide.com

Grievance Officer: See Section 15 for contact details.

03. Information we collect

We collect only what we need to deliver our services. Here’s the complete list:

3.1 Information you give us directly

• Account details: phone number (required for OTP login), name, email address (optional), preferred language.
• Astrological details: date of birth, time of birth, place of birth, gender. These are needed to generate your Kundli accurately.
• Family member details: if you use Family Kundli (Gold plan), birth details of up to 5 family members you add yourself.
• Payment information: when you make a purchase, payment is processed by our payment partner (Razorpay). We do not store your card number, CVV, or UPI PIN — only the transaction ID and amount.
• Communications: content of your chats with astrologers, voice/video call recordings, messages to customer support, and feedback or reviews you submit.

3.2 Information collected automatically

• Device & usage data: device model, operating system version, app version, unique device identifier, crash logs, and pages/features you use within the app.
• Location: approximate location via GPS (with your permission) or IP-based geolocation. Used to show accurate Panchang, local Shubh Muhurat, and Rahu Kaal for your city.
• Log data: IP address, access timestamps, referrer URLs, and error reports.

3.3 Information from third parties

• Login providers: if you sign in via Google or Apple, we receive your verified email address and name (with your consent).
• Referrals: if someone referred you, we may receive their referral code and the fact that you joined via their link.

04. How we use your information

Every piece of information we collect maps to a specific purpose:

05. Legal basis for processing

Under the DPDPA 2023, we process your personal data on these legal grounds:

• Consent: you provide explicit consent when you create an account, submit birth details, enable location access, or initiate a consultation.
• Legitimate use: for security, fraud prevention, legal compliance, and service maintenance as permitted under Section 7 of the DPDPA.
• Performance of service: processing needed to deliver the consultation, puja, or product you’ve purchased.

You can withdraw consent at any time by adjusting your preferences in Settings or by contacting us. Withdrawing consent may limit some app functionality.

06. Sharing with others

We share your personal data only when necessary and only with these limited categories of recipients:

6.1 With astrologers during consultations

The astrologer you consult sees: your display name, your Kundli (if you’ve shared it in the chat), and the conversation content. They do not see your phone number, email, full address, or payment details.

6.2 With service providers

• Razorpay for payment processing
• Amazon Web Services / Google Cloud (Indian regions) for hosting
• Firebase for real-time chat and push notifications
• Courier partners (for AstroMall deliveries; they see only your shipping address)

All service providers are bound by data processing agreements and are prohibited from using your data for their own purposes.

6.3 Legal and safety disclosures

We may disclose your data only when required by a valid court order, law enforcement request under due process, or to protect our rights and the safety of users.

07. Data retention

We keep personal data only as long as needed for the purposes listed in Section 4:

• Account data: kept until you delete your account. Deletion removes everything within 30 days, except what we must retain for legal compliance.
• Birth details & Kundli: kept while your account is active; deleted when you delete your account.
• Session recordings: retained for 90 days from session date (to support the 24-hour dispute window plus buffer). Automatically deleted afterwards unless an active dispute is under review.
• Chat transcripts: retained in your session history as long as your account is active.
• Payment records: retained for 8 years as required by the Income Tax Act, 1961 and GST law.
• Dispute records: retained for 3 years after resolution for audit purposes.

08. Security measures

We protect your data using industry-standard safeguards:

• Encryption in transit: TLS 1.3 for all client-server communication.
• Encryption at rest: AES-256 for sensitive data including birth details, chat logs, and session recordings.
• Access controls: role-based access; only authorized personnel can access user data, and all access is logged.
• Secure infrastructure: data hosted on ISO 27001 certified cloud infrastructure in Indian regions.
• Regular audits: annual third-party security audits and ongoing vulnerability scanning.
• Breach notification: in the event of a personal data breach, we will notify the Data Protection Board of India and affected users within the timeframe required by the DPDPA.

09. Your rights

Under the DPDPA 2023, you have the following rights regarding your personal data:

• Right to access: request a summary of the personal data we process about you.
• Right to correction: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of your data when no longer needed.
• Right to data portability: download your Kundli, chat history, and profile data in machine-readable format (JSON/PDF).
• Right to withdraw consent: withdraw consent for specific uses without affecting processing done before withdrawal.
• Right to grievance redressal: contact our Grievance Officer (see Section 15).
• Right to nominate: designate another person to exercise your rights in case of your death or incapacity.

How to exercise your rights

Most rights can be exercised directly from the app: Settings → Privacy & Data → choose from Download My Data, Correct Details, or Delete My Account.

Alternatively, email privacy@jyotishguide.com with your registered phone number and the specific request. We will respond within 30 days.

10. Children’s privacy

Jyotish Guide is intended for users 18 years and older. We do not knowingly collect data from children below 18 without verifiable parental consent as required by Section 9 of the DPDPA.

If you are a parent and believe your child has created an account without your consent, please contact us immediately at privacy@jyotishguide.com and we will delete the account and associated data promptly.

Baby Kundli: when you generate a Kundli for a child, you are providing the child’s birth details as the parent/guardian. We treat this as parental consent and never allow independent account creation by the child.

11. Cookies & tracking technologies

Our website uses a minimal set of cookies:

• Essential cookies: for login sessions and security. These cannot be disabled.
• Preference cookies: to remember your language, location, and display settings.
• Analytics cookies: we use privacy-respecting analytics (Plausible, self-hosted) to measure aggregated usage. No individual tracking, no third-party cookies.

The mobile app does not use cookies but relies on a secure session token. It also does not embed any third-party ad tracking SDKs.

12. Third-party services

When you interact with third-party services through Jyotish Guide, their own privacy policies apply:

• Razorpay (payments): razorpay.com/privacy
• Google Play Services / Apple App Store: respective platform policies
• External links (e.g., blog references): governed by their own policies. We are not responsible for third-party site practices.

13. International data transfers

Your personal data is primarily stored on servers located in India. In limited cases, certain service providers may process data outside India (e.g., Firebase push notification delivery). When this happens:

• We transfer only to countries that meet adequacy standards or where appropriate contractual safeguards (Standard Contractual Clauses) are in place.
• We do not transfer data to any country restricted by the Central Government under Section 16 of the DPDPA.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we do:

• We’ll update the “Last updated” date at the top of this page.
• For material changes, we’ll notify you via email or an in-app banner at least 30 days before the changes take effect.
• Continued use of the Services after the effective date constitutes acceptance of the updated policy.

Prior versions are archived and available on request from privacy@jyotishguide.com.

15. Grievance Officer

In accordance with Rule 3(11) of the IT Rules, 2011 and the DPDPA 2023, the details of our Grievance Officer are:

If you are not satisfied with the Grievance Officer’s response, you may escalate to the Data Protection Board of India (once operational under the DPDPA).

16. Contact us

Questions, feedback, or concerns about this policy? We’re genuinely available and respond to everything.