Privacy policy

This policy explains what information this website collects, why it is collected, how long it is kept and what control you have over it. We collect only what is needed to provide the service, and we do not sell personal data. The site carries advertising and measures its own traffic through Google; what that means is set out under “Advertising and analytics” below.

What we collect

• Account details: name, email address, preferred language, default location and calculation profile. Your password is stored only as a salted scrypt hash; we cannot read it.
• Sign-in sessions: a random session token (stored only as a hash), the browser's user-agent string and a keyed hash of your IP address (the raw IP address is not stored).
• Birth details you enter for yourself or family members: name, relation, optional gender, date, time and place of birth with coordinates and time zone. They are used only to calculate the charts and reports you request.
• Reports and saved items: the inputs and results of reports you generate, saved Muhurats and reminders, and notification preferences.
• Orders and payments: order records, amounts and the payment provider's reference numbers. Card, UPI and bank details are entered on the payment provider's (for example Razorpay's) secure page; we do not receive or store full card numbers.
• Support requests: the name, email address, category, optional order or report reference and message you send us.
• Location: the city or coordinates you select, used to calculate local timings. If you use “current location”, your browser asks for permission first; the coordinates are used for that request.
• Reminders (browser notifications): if you turn on festival reminders or the daily Panchang, your browser gives us a subscription address at its push service (for example Google's, Apple's, Mozilla's or Microsoft's) and encryption keys. We store them with the city and language you chose — no name or email is needed. Reminders contain only Panchang timings, festival names, the date and your city. Tithi-birthday reminders are calculated from the birth profiles saved in your account, and saved-Muhurat reminders from your saved items; they go only to the devices on which you turned them on while signed in.

What we do not collect

• We never send your name, email address, birth details, saved profiles or reports to Google or to any other advertising or analytics service. What those services do receive is described below.
• Our own usage statistics are aggregate daily counters (for example, the number of Panchang views per city or per language). They contain no user identifiers, no IP addresses and no birth data. To see how many people come back, the site and the app each make a random number for themselves; once a day it is sent with the visit count, and we keep only a scrambled (keyed-hash) form of it with the first and last day it was used — never linked to an account or an IP address, and deleted after 400 days without use. Taps on our notifications are counted per type and day only.
• Birth details are never written to server logs. Technical error logs have sensitive fields (such as passwords, tokens and birth date/time) removed automatically.

How we use information

• To calculate and show Panchang, Muhurat, Kundli, Milan and other results you ask for.
• To run your account: sign-in, security, saved profiles, reports and reminders you set up.
• To process payments and provide purchased reports, and to keep the records required for tax and accounting.
• To answer support requests.
• To protect the service against abuse (for example rate limiting, which uses a keyed hash of the IP address held in memory for a short time).

Sharing

We share personal data only with service providers that are needed to run the site — hosting, email delivery, the payment provider and, where the operator enables optional AI-assisted text features, an AI service provider (Google Gemini) — and only to the extent needed for that purpose. Calculated positions, dates and timings are always produced by the calculation engine, never by AI. If you use “Ask about your chart”, your question (with dates, names and contact details removed) and the calculated chart facts are sent to the AI service — never your name or birth details; questions are kept for 30 days to prevent abuse and then deleted. We may disclose information if required by law. Report links you share include birth details only if you choose to include them. If you speak a question to Jyoti instead of typing it, your browser's own speech service turns your voice into text (in Chrome this is Google's); we receive only the text you choose to send, never the audio. Reminders are delivered through your browser's push service; the message is encrypted so that the service can see only that a message was sent, not its content. Advertising and analytics are not part of this: Google collects that information directly in your browser, as described above.

Advertising and analytics

This site is funded by advertising. Google AdSense provides the advertising and Google Analytics measures how the pages are used. Both are services of Google LLC, both run in your browser, and both set their own cookies or similar identifiers there.

• What Google receives is ordinary web-request information: the address of the page you are on, the page you came from, your browser and device type, and an approximate location derived from your IP address.
• Kundli, Milan and report results are built from a form you submit, so the birth details you type never appear in a page address and are never sent to Google. Nothing is passed to Google from your account either.
• Google may use what it collects to show you more relevant advertising. You can switch to non-personalised ads and turn analytics off on our ad choices page, or turn personalised advertising off for all sites in Google's Ads settings; and Google explains here what it does with data from sites that use its services.
• These cookies are listed on the cookie page alongside our own.

How long we keep data

• Account data is kept while your account exists.
• A birth profile you delete is removed from the live service immediately.
• Sign-in sessions expire after at most 30 days or when you sign out; password-reset and verification links are single-use and short-lived.
• When you delete your account, your birth profiles, saved items and locations, preferences, reminders and notifications (including WhatsApp/SMS and email subscriptions and the phone number for them), reports, life plans and family tree, practice history, invitations, API keys, sessions and sign-in tokens are deleted, and your support messages are anonymised. If you have placed orders, the order and payment records are kept as required for tax and accounting, without your personal details, and your account record is anonymised (name and email removed).
• Deleted data can remain in our encrypted database backups for up to about 8 weeks, until those backups are rotated out; backups are used only to recover from failures.
• Support messages are kept for as long as needed to resolve your request and for service records; you can ask us to delete them.
• Aggregate usage counters contain no personal data and may be kept indefinitely.
• A reminder subscription is kept until you turn all reminders off, your browser withdraws it, or your account is deleted.

Your choices and rights

• Access and export: download a copy of your data from your account.
• Correction: edit your account details and birth profiles at any time in your account.
• Deletion: delete individual birth profiles, or your whole account, from your account settings.
• Withdrawal of consent: you can stop the processing of birth details at any time by deleting them.
• Questions or complaints: contact us as described below.

Security

The site uses HTTPS with HTTP Strict Transport Security in production, salted scrypt password hashing, hashed session tokens, protection against cross-site request forgery, a strict content security policy, rate limiting, permission-based access for staff with audit logs of administrative changes, and server-side verification of every payment. No system is perfectly secure, but we work to protect your data and will act promptly on any issue.

Children

Accounts are not intended for people under 18. Birth profiles of children and other family members may be added by the account holder, who should do so only with the appropriate authority and consent.

Cookies

We set essential and functional cookies of our own, and Google sets advertising and analytics cookies. All of them are described on the cookie page.

Changes to this policy

If this policy changes, the updated version will be published on this page with a new date.