Privacy Policy

How AstroDristi collects, uses and protects your data

This Privacy Policy explains what personal data AstroDristi collects, why we use it, who we share it with, how long we keep it and what choices you have.

[Legal entity name] is the “Data Fiduciary” for your personal data under the Digital Personal Data Protection Act, 2023 (“DPDP Act”), and we also follow the Information Technology Act, 2000 and the rules under it, as applicable.

In short: we use your birth details to calculate your chart and daily guidance. We do not sell your personal data, and we do not show advertising.

1. At a glance

Here is a short summary of the personal data we handle. Each item is explained in more detail later in this policy.

2. Information we collect

2.1 Information you give us

• Account information: your name and email address (and profile photo, if provided) from your Google account when you sign in.
• Birth details: date, time (optional) and place of birth.
• Preferences: the tradition for your remedies (Vedic North Indian, Vedic South Indian, Lal Kitab or Jain), language and notification choices.
• Residence location: your current city, or precise location if you allow it, to calculate local timings.
• Remedy activity and feedback: remedies you mark as done, your streak, and any evening reflection or feedback you submit.
• Drishti conversations: the questions you ask and the answers you receive.
• Support messages: anything you send to our support team.

2.2 Information collected automatically

• Device and app information: device model, operating system and version, app version, language, and time zone.
• Usage and diagnostics: which screens and features you use, performance data and crash reports.
• Network data: IP address and request logs for security and abuse prevention.
• Secure tokens: sign-in tokens stored in your device’s secure storage (Android Keystore / iOS Keychain) so you stay signed in.

2.3 Information we create for you

Using your birth details we calculate your birth chart, planetary positions, Dasha timeline, daily briefs, lucky colour/number and chart narratives. This calculated information is also your personal data and is covered by this policy.

2.4 Things to know

• Choosing a tradition (for example, Jain) may indirectly indicate religious practice. It is optional and we use it only to select remedies for you.
• We do not ask for government ID numbers, and we do not access your contacts, photos, microphone or messages.
• We do not collect your card or bank details in the App. When paid plans launch, payments are handled by our payment partners or the app store.

3. How we use your information

We use your personal data for the purposes below. The legal basis under the DPDP Act is shown for each.

• Create your account and sign you in — your consent.
• Calculate your chart, Dasha and daily brief, and provide Muhurta, remedies and Drishti — your consent.
• Show timings for your location — your consent (location permission).
• Send service messages and, if you allow, push notifications such as your morning brief — your consent; service messages are a legitimate use.
• Keep the Services secure, prevent fraud and abuse, and enforce our Terms — legitimate use / legal obligation.
• Fix bugs and improve the App using usage and crash data — your consent / legitimate use.
• Understand overall usage using aggregated or de-identified data — legitimate use.
• Comply with law, respond to lawful requests and handle disputes — legal obligation.

We do not use your personal data to build advertising profiles and we do not make decisions about you that have legal effect solely by automated means.

4. Consent

We ask for your consent when you sign up and separately for optional things such as precise location and notifications. We explain what each is for.

You can withdraw consent at any time in your device settings or the App, or by writing to [privacy email]. Withdrawal does not affect what we did before, but some features may stop working (for example, your chart cannot be calculated without birth details).

Under the DPDP Act you may also manage consent through a registered Consent Manager, when available.

5. How Drishti AI uses your information

When you ask Drishti a question, we send your question, your chart snapshot, current Dasha, today’s brief and recent messages from that session to an AI service provider that we engage ([provider name, e.g. OpenAI or Anthropic — confirm]) to generate the reply.

We instruct the provider to use the data only to provide the response, and [not to train its models on your data — confirm contractual setting].

Conversation history is shown in the App for 7 days and then expires.

AI answers can be wrong. Please do not enter highly sensitive information in the chat.

6. Who we share information with

We do not sell your personal data. We share it only with the following, and only so they can provide their service to us:

• Google: sign-in and authentication.
• Cloud hosting and infrastructure providers: host our servers and databases that store your account and chart data. [Hosting provider, region]
• AI service provider: generate Drishti answers (see section 5).
• Place-search and geocoding services (for example, OpenStreetMap Nominatim): turn the place name you type, or your coordinates, into latitude, longitude and time zone.
• Payment partners and app stores (when paid plans launch): process payments and manage subscriptions. We receive plan status, not full card numbers.
• Push-notification services (Google Firebase, Apple): deliver notifications you have enabled.
• Analytics and crash-reporting providers: [confirm] understand performance and fix problems.
• Professional advisers: lawyers, auditors and insurers, under confidentiality duties.
• Authorities: where required by law, court order or to protect rights, safety and security.
• Successors: in a merger, acquisition or sale of assets, subject to this policy.

Service providers act on our instructions and may use your data only to provide their service to us.

7. Transfers outside India

Some of our providers (for example, AI, hosting or notification services) may process data on servers outside India. We transfer data only to countries and providers permitted under the DPDP Act and use contracts and security measures to protect it.

8. How long we keep your information

We keep your personal data only as long as we need it for the purposes in this policy:

• Account, birth details, chart and preferences: until you delete your account. After a deletion request we remove or anonymise them within [30] days, except where the law requires us to keep something.
• Daily briefs and cached calculations: regenerated daily; older entries are deleted after [30] days.
• Drishti conversations: 7 days in your history, then they expire.
• Device, usage and crash logs: up to [90] days.
• Payment and invoice records: as long as required by tax, accounting and other applicable laws.
• Backups: deleted data is removed from backups within [90] days.

9. How we protect your information

Data is encrypted in transit (HTTPS/TLS), and birth details and other personal data are encrypted at rest [confirm].

Sign-in uses short-lived access tokens (about 60 minutes) with refresh tokens; tokens are stored in your device’s secure storage.

Access to personal data is limited to staff who need it, and staff actions on the admin panel are logged.

No system is completely secure. If a personal data breach affects you, we will notify you and the authorities as required by law.

10. Your rights

Under the DPDP Act you have the right to:

• Access: a summary of the personal data we process about you and who we shared it with;
• Correct or complete your data, for example, use in the App;
• Erase your data: delete your account from the Profile screen or write to us;
• Withdraw consent at any time;
• Grievance redressal: contact our Grievance Officer (section 16); and
• Nominate another person to exercise your rights if you die or become incapacitated.

To exercise a right, use the App or email [privacy email]. We may need to verify your identity, and we respond within [30] days.

11. Children

AstroDristi is for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has given us data, please write to [privacy email] and we will delete it.

12. Cookies and similar technologies

The App does not use browser cookies; it uses secure device storage for sign-in tokens and settings. Our marketing website uses only essential browser storage needed for features such as the chat assistant, and no advertising cookies [confirm]. If this changes we will update this policy and ask for consent where required.

13. Notifications and communications

We send service messages (such as security or policy notices). We send push notifications and any promotional messages only if you have opted in. You can opt out at any time in your device settings or the App.

14. Third-party links and services

The App and website may link to third-party sites and services. This policy does not cover them; please read their privacy policies.

15. Changes to this policy

We may update this policy. For material changes we will notify you in the App or by email before they take effect, and show the new effective date above.