Privacy Policy

a) Account and contact details — When you sign up we collect your name, your email address and/or WhatsApp phone number, and the language you prefer. Sign-in normally works with a one-time code sent to WhatsApp or email; if you choose to set a password, our authentication provider (Supabase) stores only a salted hash of it — we never see it. You may add a profile photo (avatar); avatars are stored in a bucket whose files can be viewed by anyone who has the link, so they can appear beside your community posts.

b) Birth details — To compute a Vedic chart we need your date of birth, time of birth, place of birth and gender. When you type a place name we look it up (section 8) and store the place’s name, coordinates and time zone. We also store chart preferences such as the ayanamsa and horoscope system you choose. Birth details are the heart of the Service: every reading, horoscope, dasha and compatibility report is calculated from them.

c) Family and friends’ charts — You can save the birth details of other people to read their charts and compare compatibility. Before saving a new person you must confirm that you have their permission to store their birth details on MyPanditji; you are responsible for that permission. A chart saved for someone under 18 is treated with extra care: readings about a minor are limited to soft, supportive guidance, with no marriage timing and no fixed predictions (section 14).

d) Photos — If you use palm reading, face reading or Vastu, you may take or upload photos of your palms, your face or a room. Palm and face photos are sensitive personal data. We ask for your explicit permission before any photo is sent to an AI provider (section 7). A copy of each reading photo is kept in a private, owner-only storage bucket so that the reading can be shown again in your history. The “scan a QR code with your phone” hand-off uploads the photo the same way, and the hand-off link itself expires after 15 minutes.

e) Questions, conversations and readings — We store the questions you ask Panditji and the replies you receive, in every chat mode — Normal, Deep Research, Max Council, Prediction, Vastu — and in the feature chats (tarot, numerology, dreams, remedies, palm, face and others). If you use Verify Your Pandit, we store the transcript you paste so that it can be graded. Your conversations and saved readings are kept so that you can return to them; deleting your account removes them all (section 11).

f) Voice — If you tap the microphone to dictate a question, the audio clip is sent to a speech-to-text model (Google Gemini) and transcribed; the clip is discarded as soon as the text comes back and is never kept. If you start a voice call with Panditji (a Max feature), your voice is streamed to ElevenLabs, which turns speech into text and text into speech while our AI answers; your name and a short summary of your chart are shared with the call so that Panditji can answer in context.

g) Journal, practices and streak — Journal entries, moods, saved readings, daily practices and your streak are stored with your account so that we can show them back to you and grant streak rewards.

h) Community — If you post, comment, upvote or report in the Community, we store what you posted, when, and the identity mode you chose — your real name, a display name, or anonymous. Posts are visible to other people (section 17).

i) Payments — Purchases are made through the Apple App Store or Google Play (managed for us by RevenueCat) or through Stripe on the web. We receive confirmation of what you bought, when, for how much, the status of your subscription or credits, and an identifier that lets us match the purchase to your account. We never receive or store your full card number.

j) Support, grievances and feedback — When you write to support@mypanditji.io, report a post, appeal a decision or send a grievance, we keep the correspondence so that we can respond and keep a record of how it was resolved.

k) Referral codes and the clipboard — When you share your referral code or enter someone else’s, we record who referred whom so that rewards can be granted. On the mobile sign-up screen the app may check your clipboard once for a MyPanditji referral code so that you do not have to type it; nothing else on the clipboard is read or stored.

l) Newsletter and daily-horoscope emails — If you subscribe from the website without an account, we store your email address and the sign you chose so that we can send the daily horoscope and newsletter until you unsubscribe.

a) Product analytics — We use PostHog to understand which features are used and whether they complete — for example “a tarot reading was started” or “a kundli was generated”. In the mobile app these events are keyed to a random device identifier that is not your name, account or birth details, and that identifier is reset when you sign out. The text of your questions and readings, your contact details, your birth details and your photos are never sent to analytics. Analytics runs only with your consent in the EEA/UK and can be turned off anywhere in Settings → Privacy & data (section 12).

b) Error and crash reports — When something breaks on the website or in our server functions, an error report — the error message, a stack trace, the function that failed and, where available, your user ID — is sent to Sentry so that we can fix it. On the website this loads only with analytics consent. The mobile app does not currently send crash reports to a third party.

c) Website measurement and advertising analytics — On the website only, and only with the same consent as analytics, we load Google Analytics 4 (page and event counts), Microsoft Clarity (anonymised session replays and heatmaps; the text you type is masked before anything is recorded) and the Meta Pixel (which of our own Instagram and Facebook ad campaigns brought you here). Separately, when you create an account, reach the guest message limit, or complete a purchase, our server reports that single event to Meta’s Conversions API with your email address or phone number hashed (SHA-256), so that Meta can attribute it to our own advertising. Your birth details, chats, photos and readings are never included. We do not run third-party advertising inside the app or the website, and we do not allow other ad networks to place cookies.

d) Device and app information — Device type, operating system, app version, language, time zone and screen size; on mobile, a push notification token if you allow notifications. We use your time zone to decide which consent rules apply to you, to compute the day’s Panchang, and to send morning notifications at the right hour.

e) How you found us — On the website we record the first way you arrived — the referring site, the landing page and any campaign tags in the link (utm_*). This stays in your browser until you sign up and is then attached to your account so that we know which campaigns work.

f) Logs and usage records — Our infrastructure keeps short-lived request logs (IP address, timestamps and request metadata) for security, abuse prevention and debugging. For every AI request we record which model was used, how many tokens it consumed and what it cost us — never the content — to enforce fair-use limits and control spending.

g) Interest topics — From the questions you ask we may derive a simple profile of the topics you are interested in (for example career, relationships or health) so that MyPanditji can show you more relevant content. Messages about crisis, legal, medical or similarly sensitive matters are filtered out before this profile is built. The profile is never used to make a decision with legal or similarly significant effect on you, and it is deleted with your account.

h) Cookies and local storage — The website uses cookies and browser storage to keep you signed in, remember your preferences and cache the day’s horoscope. The full list is in our Cookie Policy. The mobile app sets no cookies.

a) Hosting, database, authentication and storage — Supabase, which runs on Amazon Web Services infrastructure, hosts our database, authentication, file storage and server functions. Everything in your account lives here, protected by row-level security so that only you can read your rows.

b) Astronomical calculations — Our own astro engine, hosted on Fly.io, receives the date, time and coordinates of birth — never a name — and returns planetary positions. Where possible we calculate on your device or reuse a cached result instead.

c) AI providers — Google (Vertex AI), OpenAI and Anthropic, as described in section 7. Google Gemini also transcribes voice notes, and ElevenLabs powers voice calls with Panditji.

d) Google services — Google Places looks up the birth place you type. If you choose to sync festivals or muhurats to Google Calendar on the website, Google receives the events you add and tells us which account is connected; the access token stays in your browser and we never store it. In the mobile app, festivals you choose are written to your device’s calendar app with its permission.

e) Payments — The Apple App Store and Google Play process in-app purchases; RevenueCat manages those subscriptions and tells us what you are entitled to. Stripe processes web payments, in Indian Rupees. Each handles your payment details under its own privacy policy.

f) Messaging and notifications — Resend sends our emails (daily horoscope, transit alerts, newsletter, product and offer emails). Meta’s WhatsApp Business Platform carries messages between you and Panditji on WhatsApp, including login codes. Expo’s push service, Firebase Cloud Messaging (Android), the Apple Push Notification service (iOS) and your browser’s push service deliver push notifications.

g) Analytics and measurement — PostHog (product analytics), Sentry (error reports), Google Analytics 4, Microsoft Clarity and Meta (Pixel and Conversions API), exactly as described in section 4 and nothing more.

h) Other people — Community posts are visible to other users under the identity mode you chose. A reading you share by link can be opened by anyone who has the link until it expires or you revoke it. Saving a family member’s chart does not give that person access to your account.

i) Legal, safety and business transfers — We may disclose personal data when the law requires it, to respond to a valid legal request, to protect the rights, safety or property of MyPanditji or others, or to a successor if MyPanditji is acquired or merged — in which case this policy continues to apply.

j) What we never do — We do not sell your personal data, and we do not share it with data brokers or advertising networks. Our providers act on our instructions under data-processing agreements and may not use your data for their own purposes.

a) See and export your data — Settings → Your data → Export gives you a copy of your profile, charts, conversations, journal, readings and preferences — as a PDF in the app, and as JSON or PDF on the website. You can also ask us by email.

b) Correct it — Update your name, contact details, language and preferences in Settings, and your birth details from your profile or chart page.

c) Delete it — Settings → Your data → Delete everything removes your account and all of its data. On WhatsApp, reply DELETE to the Panditji number. Or email support@mypanditji.io. Deletion is irreversible.

d) Withdraw consent — AI processing: Settings → Privacy & data. Analytics: the same screen, or the consent controls on the website. Notifications: Settings → Notifications, or your device settings. Marketing email: the unsubscribe link in any email. WhatsApp: reply STOP. Google Calendar: disconnect from the calendar page or from your Google account. Withdrawing consent does not affect processing that already happened lawfully.

e) Object, restrict or port — If the GDPR applies to you, you can object to processing based on legitimate interests (including any direct marketing), ask us to restrict processing while a dispute is resolved, and receive your data in a machine-readable format.

f) Nominate someone — If the DPDP Act applies to you, you can nominate a person to exercise these rights for you in the event of your death or incapacity. Write to us to record a nomination.

g) Complain — You can complain to our Grievance Officer (section 20), to the Data Protection Board of India, to your EEA data-protection authority, or to the UK Information Commissioner’s Office.

h) How we handle requests — We may need to verify that you are the account holder before acting — usually by asking you to write from the email address or WhatsApp number on the account. We answer within 30 days, or sooner where the law requires. Requests are free unless they are repetitive or manifestly unfounded.