What We Collect, What We Protect, What We Never Share

• Account identity. An email address or a phone number, depending on how you sign in. One person — one account, whichever sign-in method you choose.
• Birth data. Date, time of birth (when you know it), and place. Encrypted the moment it is submitted — see below.
• Optional photographs. Face, palm, or feet, if you opt in to a Sāmudrika reading. Handled gently — see below.
• Conversation history. Your questions to Acharya Vishwanath and his responses. Visible only to you; you can delete any conversation from your dashboard.
• Email preferences. Whether you receive the daily horoscope, and the sign it is keyed to.

Birth data is encrypted at the moment you submit it, using strong authenticated encryption with a key tied to your specific account. The encryption happens in your browser before the data ever leaves your device.

The consequence we care about: the server cannot read your birth data on its own. The plaintext only exists in working memory at the moment you load your chart, and it is never written to a log or kept on disk in readable form. An attacker who somehow obtained the database files alone would still not be able to read your birth details.

One practical consequence: the daily-horoscope email keys on the sign you stated when you opted in, until you load your full chart while signed in. After that, your natal moon-sign is used for the daily reading — moon-sign is more precise for daily themes.

When you share a face, palm, or feet photograph for a Sāmudrika reading, three things happen in this order:

1. Your device checks the photo. Lighting, focus, framing — all of it is reviewed locally on your phone or laptop. Only an approved frame is sent.
2. The reading is extracted. The classical indicators — the mounts and lines of the palm, the proportions of the face — are written into your reading within seconds.
3. The photograph is discarded. The image bytes are dropped once the indicators are recorded. We do not keep photographs.

Nothing with advertisers. Three named partners:

• The language model that powers the persona. Your question and the relevant facts from your chart are sent to the language model that writes Acharya Vishwanath’s replies. We use a paid arrangement with data-retention disabled — the provider does not train on our requests.
• The service that delivers your emails. When the daily horoscope is enabled, your email address and chosen sign are passed to the delivery service.
• The payment processor — only when paid tiers activate at public launch. It will see what it needs to charge you: your name, billing email, and payment method. Your birth data and readings never reach the payment processor.

• Download. Export everything we hold about you — chart, readings, conversations, preferences — as a single readable file from your account page.
• Delete. Close your account from the same page. All associated data is purged within twenty-four hours from active systems; routine backups age out per their normal retention.
• Edit. Update your name, email, phone, or daily- horoscope preferences at any time. Updating birth data re-encrypts the record under your current key.
• Unsubscribe. Every daily-horoscope email carries a one-click unsubscribe link in the footer. You do not need to be signed in.

We use one cookie — the one that remembers you are signed in. No advertising cookies, no analytics cookies, no third-party tracking pixels. If you visit without signing in and start a chart, a short- lived browser-only token lets us show you the result before you sign in; it disappears after forty-eight hours.

Material changes will appear as a notice in your dashboard with at least seven days’ warning. We will not quietly expand what we collect.