ApnaAstroAI
ApnaAstroAI · Legal

Privacy Policy

Last updated: 24 May 2026

Effective Date: 1 January 2025  |  Last Updated: 28 March 2026

1. Introduction

ApnaAstroAI ("we", "us", or "our") operates the website apnaastroai.com and all associated subdomains. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our services. It is prepared in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDPA).

By registering or using ApnaAstroAI, you confirm that you have read, understood, and consent to this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

  • Account details: Full name, mobile number, and email address collected during registration or OTP verification.
  • Google Sign-In: If you log in via Google, we receive your name, email address, and Google account ID from Google OAuth. We do not receive your Google password.
  • Birth details: Date of birth, time of birth, place of birth, and geographic coordinates (latitude/longitude) — required to generate Kundali and astrological readings.
  • Palm photograph: If you use our Palmistry (Hast Rekha) service, you upload a photo of your palm. This image is processed by our AI and is not shared with third parties beyond the AI model used for analysis. Palm images may be retained for up to 30 days to enable re-analysis and then permanently deleted.
  • Payment information: All payments are processed by Razorpay. We do not store your card number, CVV, or net banking credentials. Razorpay processes payments under PCI-DSS compliance.
  • Referral code: If you use or share a referral code, we record the referral relationship to award benefits.
  • Support communications: Messages sent to us via chat, email, or WhatsApp for customer support.

2.2 Automatically Collected Information

  • Device and browser data: Device type, operating system, browser type, screen resolution.
  • IP address and geolocation: Your IP address is used to auto-detect your country, state, and city (via ip-api.com) to pre-fill location fields and for fraud prevention. We do not track your real-time GPS location.
  • Usage data: Pages visited, features used, time spent, reading history, question count, and session data.
  • Analytics cookies: We use Google Analytics to understand how users interact with our platform. See our Cookie Policy for details.

2.3 Data Generated by the Service

  • Astrological readings, Kundali charts, numerology reports, and AI-generated content created based on your input.
  • Call and chat logs with our AI Pandit Ji (stored for service continuity and quality improvement).
  • Voice recordings (if you use Voice Chat mode via ElevenLabs integration) — audio is processed in real time and not permanently stored by us.

3. How We Use Your Information

  • To create and manage your account and authenticate your identity.
  • To generate personalised Kundali, palmistry, numerology, and astrological readings.
  • To process payments and maintain transaction records.
  • To send OTP messages for login/registration via SMS, WhatsApp, or email.
  • To send transactional notifications (booking confirmations, plan expiry alerts, reading delivery) via WhatsApp or email, where you have consented.
  • To process referral rewards and track programme eligibility.
  • To improve our AI models using anonymised, aggregated, non-identifiable data only.
  • To provide customer support and respond to queries and disputes.
  • To detect and prevent fraud, abuse, or security threats.
  • To comply with legal obligations under Indian law.

4. Legal Basis for Processing (DPDPA 2023)

Under the Digital Personal Data Protection Act, 2023, we process your data on the following bases:

  • Consent: For account creation, marketing communications, and optional features (palm photo upload, voice chat).
  • Contractual necessity: To deliver the services you have purchased or signed up for.
  • Legal obligation: To retain transaction records as required under Indian tax and financial laws.
  • Legitimate interest: For fraud prevention, security, and platform improvement using anonymised data.

5. Data Sharing and Disclosure

We do not sell your personal data to any third party. We share your data only as follows:

  • Razorpay / PhonePe / Paytm: Your name, mobile number, email, and transaction details are shared with our payment gateway(s) solely for payment processing. Subject to their respective privacy policies.
  • AI model providers: Your birth details and queries are sent to AI providers (which may include Anthropic, OpenAI, and Google Gemini) to generate readings. We send only the minimum data required. No name, mobile number, or payment data is shared with AI providers.
  • ElevenLabs: If you use Voice Chat, your text input is sent to ElevenLabs for text-to-speech conversion. No personal identifiers are shared.
  • OTP and WhatsApp gateway providers: Your mobile number is shared with authorised messaging providers (such as Twilio, AiSensy, WATI, or Authkey) solely for OTP delivery and transactional notifications.
  • Geolocation provider (ip-api.com): Your IP address is sent to ip-api.com at registration/login to detect your approximate location. No other data is shared.
  • Google (OAuth): If you use Google Sign-In, your login is handled through Google's OAuth service. Google may receive usage signals per their terms.
  • Pandit Ji / Astrologers: If you book a live consultation with a Pandit Ji listed on our platform, your name and booking details are shared with that Pandit Ji to fulfil the appointment.
  • Legal authorities: We may disclose your data when required by law, court order, or a government or regulatory authority.

6. Data Retention

  • Account data: Retained as long as your account is active. You may request deletion at any time.
  • Transaction records: Retained for 7 years as required under Indian financial and tax laws.
  • Astrological readings: Retained to enable you to re-read them at any time. Deleted upon account deletion.
  • Palm photographs: Retained for up to 30 days after upload, then permanently deleted.
  • OTP logs: Deleted within 24 hours of use or expiry.
  • Support chat logs: Retained for 90 days.

7. Cookies

We use essential cookies for authentication and session management, and analytics cookies to understand usage patterns. For full details, see our Cookie Policy. You can disable non-essential cookies in your browser settings.

8. Data Security

We implement industry-standard safeguards including:

  • TLS/HTTPS encryption for all data in transit.
  • AES-256 encryption for sensitive data at rest.
  • HTTP-only, secure cookies for authentication tokens.
  • OTP rate limiting and brute-force protections.
  • Admin login logging and anomaly detection.

No method of transmission over the internet is 100% secure. If you believe your account has been compromised, contact us immediately at [email protected].

9. Your Rights Under DPDPA 2023

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the right to:

  • Access: Know what personal data we hold about you and how it is used.
  • Correction: Correct inaccurate or incomplete personal data.
  • Erasure: Request deletion of your personal data, subject to legal retention requirements.
  • Withdrawal of consent: Withdraw consent for non-essential processing at any time (this may affect your ability to use certain features).
  • Nomination: Nominate another person to exercise your rights on your behalf in the event of incapacity or death.
  • Grievance redressal: Lodge a complaint with our Grievance Officer or the Data Protection Board of India.

To exercise any of these rights, email: [email protected]

10. Children's Privacy

Our services are intended for users aged 18 and above. We do not knowingly collect personal data from children. If a parent or guardian believes a minor has registered on our platform, please contact us at [email protected] and we will promptly delete that account.

11. Analytics & Ad Measurement in the Mobile App

Our Android app integrates the following third-party SDKs to measure usage, diagnose crashes, and attribute ad campaigns:

  • Google Firebase Analytics — pageviews, sessions, custom funnel events (sign-up, purchase, etc.) and an installation ID. Used for product analytics and ad campaign optimisation.
  • Google Firebase Crashlytics — crash reports and non-fatal errors. We do not include personal data in error payloads.
  • Meta (Facebook) SDK — install attribution and ad measurement via the Facebook App Events Logger. Lets us measure which ad campaigns drove a download.
  • Google Play Install Referrer — captures the campaign that drove the install on first launch (Android only).

All of the above can be disabled at any time from Settings → Preferences → Personalised ads inside the app. Turning the toggle off stops all of these SDKs from collecting data on your device.

12. Third-Party Links

Our platform may contain links to third-party websites. This Privacy Policy does not apply to those sites. We encourage you to read their privacy policies before providing any personal information.

13. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or a prominent notice on the website at least 15 days before they take effect. Continued use after the effective date constitutes acceptance of the revised policy.

14. Grievance Officer

In accordance with the Information Technology Act, 2000 and DPDPA 2023:

Grievance Officer: ApnaAstroAI
Email: [email protected]
Response time: Within 30 days of receipt of complaint

15. Contact

For privacy-related queries:
Email: [email protected]
Support: Contact Page

Questions? Contact us