गोपनीयता और अस्वीकरण

2. Privacy Notice: Mobile App (iPhone and Android)

This section covers the Chanakya Astro apps for iPhone and Android. The website is covered in section 1.

In short

• The app sends the name you type, your gender at birth, and your date, time and place of birth to our server, so that the server can calculate your chart. If you allow it, the app also uses your location. We use this only to provide the features of the app.
• We keep an account ID for you, and a few small records that go with it. They are listed in 2.2.
• There is no advertising, no tracking and no analytics in the apps. We do not sell your data.
• You can delete your account inside the app at any time.

2.1 What the app sends to our server, and why

• Sign-in. The app sends the identity token from Sign in with Apple (iPhone) or Google (Android). Our server checks it with Apple or Google and keeps the user identifier they give for you. We do not ask Apple for your email address. The Google token can contain your email address, but our server does not read or keep it. On iPhone the app also sends an authorization code from Apple. Our server exchanges it for a token that it keeps, encrypted, so that we can disconnect the app from your Apple ID when you delete your account (see 2.2). Apple may give the app your name; the app uses it only to fill in a form on your phone and does not send it to us.
• Each chart. The name (or nickname) you type, gender at birth, date, time and place of birth with its coordinates, your chart settings and your language. The server uses them to calculate. It gives your phone an encrypted code (a “chart token”) that only our server can open. Your phone sends that code back with later requests, so the server can calculate again without you retyping anything. The code stops working after 30 days.
• Place search. The letters you type in the city search box are sent, without signing in, to find matching places.
• Your location. The apps send the place used for the day's times (for example the Panchangam) as coordinates rounded to about 1 km. On iPhone, the app reads your device location only when you tap “Use my location” while entering a birth place, and uses it once as that place. On Android, if you allow location access, the app also reads your device location when it opens and uses it as the place for the day's times. The apps do not read your location in the background.
• Your choices. When you agree to something or withdraw it, the app sends that choice.
• PDF reports. When you ask for a PDF, the app sends the chart token and the server builds the file (see 2.4).

2.2 What we keep, and for how long

Account records are stored in our account database.

• Account. A random account ID we create, the sign-in provider (Apple or Google), the user identifier that provider gave us for you, and the date you signed up.Kept until you delete your account.
• Sign-in sessions. An ID for each signed-in device and when it expires.Kept until it expires (60 days after it was issued or last renewed), or until you delete your account.
• Consent records. What you agreed to or withdrew (chart processing, being 18 or older, usage data), when, in which language, and which version of the wording.Kept until you delete your account.
• Chart records. For each new chart: the date, and a one-way code made from the birth date, time and coordinates. It is not your birth details, but someone who already knew those details could work out the same code. It is used to count your charts and to avoid counting the same chart twice.Kept until you delete your account.
• Chart places. Which of your 5 chart places are in use: a keyed one-way code, the date added and the date last used.Kept until you remove the chart, it is unused for 90 days, or you delete your account.
• Yearly limit record. A salted one-way code made from your sign-in identity, with the dates your charts were created. It lets the yearly chart limit work even if someone deletes an account and signs up again. It holds no name, email or birth detail.Kept for 365 days from each entry, even if you delete your account.
• PDF reports. The PDF file and a record of the request. See 2.4.Kept for up to 30 days, or until you delete your account.
• Apple sign-in token (iPhone only). The token Apple gives the app when you sign in, kept encrypted, so that we can disconnect the app from your Apple ID when you delete your account.Kept until you delete your account.

2.3 What we only process

Your name, gender at birth, birth date, time and place, your chart settings, the letters you type in city search, your device location (if you allow it) and your IP address are used to answer your request. They are not saved in your account.

• Birth details are held in the server's memory for up to 10 minutes, so that opening several sections of one chart does not recalculate it each time.
• The calculated chart (planet positions and the results made from them, without your name) may stay in the server's memory for longer, until the server restarts or the memory is needed for other charts.
• The server runs as two processes. Deleting your account or withdrawing consent to chart processing empties the memory of the process that handles your request at once. The other process empties as its own entries expire, or when the server restarts.
• Your IP address is used in the server's memory to limit abuse. It is not saved in your account.
• Logs. Like any online service, our server and its hosting provider keep logs of requests. They may include the time, the IP address, the address requested and the result. The address requested can contain a place name you typed in city search, or coordinates. We use logs to keep the service running and safe, not to identify you. How long the host keeps them is set by the host.

2.4 PDF reports

When you ask for a PDF report, our server builds the file from your chart details and keeps a copy so that you can download it. The file has your name and birth details on it. We also keep a record of the request (your account ID and a one-way code of the chart). We keep the file and the record for up to 30 days, and we delete them when you delete your account. The PDF you download is stored on your phone. Remove it under Settings > Clear downloaded PDFs.

2.5 Where your data is processed

• Our server runs on Hugging Face Spaces in the United States.
• Account records are kept in a hosted database service (Turso).
• Sign-in is checked with Apple or Google. On iPhone, Apple is also contacted when you delete your account, to disconnect the app from your Apple ID.
• Your data is therefore processed outside India. These providers run the service for us. We do not sell your data, and we do not give it to anyone else.
• Data travels over encrypted (HTTPS) connections. The chart token is encrypted.

2.6 On your phone

Your saved charts, birth profiles and preferences are kept on your phone in encrypted storage. On iPhone the key is held in the Keychain, and the database is left out of device backups. On Android the key is held in the Android Keystore, and the app is excluded from Android backups. Downloaded PDFs are kept on your phone until you remove them.

2.7 Deleting your account and changing your mind

• Delete your account: Settings > Your account > Delete account. This removes from our servers your account, sign-in link, sessions, chart records, chart places, consent records, and any PDF reports and their records. It also empties our servers' memory of your charts (see 2.3), and removes your saved charts, birth details and preferences from your phone. On iPhone it also tells Apple to disconnect the app from your Apple ID.
• What stays: the yearly limit record (see 2.2), for up to 365 days.
• Withdraw consent: Settings > Privacy on iPhone, Settings > Your data on Android. Withdrawing consent to chart processing stops new charts and clears birth details from our servers' memory. Your account is not deleted.
• If you only delete the app from your phone, your account stays. Delete the account first.

2.8 Your rights

Under India's Digital Personal Data Protection Act, 2023 you may ask us what we keep about you, ask us to correct it, ask us to erase it, withdraw your consent, and complain. You can erase your data yourself with Delete account. For the other requests, email the address in 2.10, say which right you want to use, and tell us which app and which sign-in (Apple or Google) you use. We do not hold your email address, so we may ask you for more details to find your account. We reply within 15 days.

2.9 Children

The apps are for people aged 18 and over. A parent or guardian may make a chart for a child; by doing so they give the consent for that child. We do not track or profile children and show no advertising. If you think a child has an account of their own, email us and we will delete it.

2.10 Contact and Grievance Officer

Grievance Officer: SailuKumar Jaladi
Email: jsailukumar@gmail.com
We acknowledge a complaint within 24 hours and resolve it within 15 days.

2.11 Changes

When we change this notice, we update the date at the top of this page.