Privacy

Your birth data, your account, your rules.

Vidhata is a Vedic astrology app. To compute your kundali we need your date, time and place of birth. That data sits in your account and powers your chart, your dasha periods, and your AI Acharya answers. We do not sell it, do not share it with astrologer marketplaces, and never send you SMS. This page explains what we collect, where it lives, and how to delete it.

20 October 2026

The short version

  • Birth data (date, time, place) is stored in managed Postgres in Mumbai, India. Used to compute your kundali. Not sold, not shared.
  • You can sign up with an email address, with Google, or with a mobile number. If you use a mobile number we store it so you can sign in again, and it is used only to send your one-time code. No marketing SMS, ever.
  • AI Acharya queries go to an external language model provider. Which one depends on availability and the language you asked in, and all of them are named below. Your conversation history is yours, deletable any time.
  • No retargeting pixels, no Facebook Pixel, and we do not let Google use what you do here to show you ads anywhere else. We use Google Analytics, and since September 2026 we also measure Google Ads, because we pay for some of the visits here and need to know which of them were worth paying for. On the website both load only after you accept, never on the privacy, terms, feedback or sign-in pages. In the Android app, Google's measurement also reads your phone's advertising ID so we can tell whether an install came from one of our ads. You can reset or delete that ID in your phone's settings.
  • Charts you save (yours and family vault) are protected by row-level security. No one else can read them.
  • Delete your account any time from Settings. Deletion is immediate and irreversible: your data is gone the moment you confirm, with no grace period and nothing to restore.

What we collect

Only what we need to give you a working kundali and a useful AI Acharya. Nothing else.

Birth data

Date, time and place of birth. Used to compute your Lagna, Moon nakshatra, planetary positions and dasha periods. We geocode the place name to latitude and longitude and store the coordinates against your chart.

Email and display name

For sign-up, sign-in and to send you account notices. Display name is whatever you type, no verification.

Chart history

Every kundali you generate is saved against your account so you can come back to it. You can delete any chart from Settings.

AI Acharya conversations

Questions you ask Acharya and the answers it gives back. Stored so you can scroll back and re-read. You can clear your history any time.

Family vault (optional)

If you add charts for family members, the same fields apply (birth date, time, place). Only you can see them. They sit under your user_id with row-level security.

What we do not collect

Things most astrology apps grab that we will not.

  • Your name, unless you type one in yourself. Nothing is imported from the account you sign in with beyond the email address or mobile number you used.
  • Payment card data. If you buy something later, Cashfree handles checkout and we never see your card.
  • Your device location, and your IP address as something we profile you by. Geocoding for birth place uses your typed city name, not your device location. We do record the IP of four specific actions as a security and audit record: registering a device for notifications, sending feedback, recording a family member's consent, and asking us to delete your account. Those exist to stop abuse and to prove a consent was given. They are never used to build a picture of you or to target you.
  • Browsing history outside Vidhata.
  • Your contacts, photos, calendar or any other phone data.

How we use your data

Compute and display your kundali

Birth date, time and place feed our Swiss-grade ephemeris with Lahiri ayanamsa. Output goes back to your chart screen.

Power AI Acharya

When you ask Acharya a question, your chart positions (Lagna, planet placements, current dasha) are sent to the language model provider as context. The answer comes back, gets logged in your chat history, and is shown to you.

Account notices, only

Things like password resets, security alerts and any major change to this policy. We do not send marketing emails by default. If we ever launch a newsletter, you opt in.

Where your data lives

Vidhata runs on Linode servers in Mumbai, India, with a managed Postgres database in the same city. Your data does not leave that region for storage. Backups are encrypted and stay in the same region.

Every row in our database is protected by Postgres row-level security. The policy is simple: a row is readable only by the user_id it belongs to. Our own staff cannot read your charts in normal operation. Engineering access for incident response is logged and limited to senior engineers.

Who we share data with

Nobody, in the sense that we do not sell or rent your data to anyone. We do use a small set of vendors to run the app. Each one is a data processor: they handle data on our instructions, not theirs.

Anthropic (Claude API)

Powers AI Acharya. Receives your chart context plus your question. Per Anthropic's API terms they do not train on this data.

Linode (Akamai)

Hosts our servers and our Postgres database, both in Mumbai. Your data sits here, and the website is served from here.

MSG91

Delivers the one-time code by SMS if you sign in with a mobile number. Receives that number and the code, nothing else. If you sign in by email or with Google, MSG91 gets nothing.

Google Places API

Used to convert a typed birth-place name to latitude and longitude. Called from our own server so Google never sees your IP.

Cashfree (only if you buy something)

Handles checkout. They take card and UPI details; we get a payment reference and whether it succeeded. If you never buy anything, Cashfree gets nothing.

Google Analytics and Google Ads

Measures which pages and campaigns bring people to Vidhata, so we know where to spend effort and whether advertising we paid for was worth it. On the website they load only after you accept cookies, and they are switched off entirely on the privacy, terms, feedback, sign-in and sign-up pages, and whenever your browser sends a Do Not Track signal. IP anonymisation is on. In the mobile app, Google Analytics for Firebase records the screens you open and a few milestones: opening the app for the first time, signing up, generating a kundali, viewing the panchang, getting an answer from Acharya, and coming back after a day away. With those it receives a random app ID, a rough location (city or region) that Google works out from a shortened form of your IP address, and on Android your phone's advertising ID. Google Ads uses this to tell us whether an install came from one of our ads. The app has no cookie banner yet, so this runs without that consent step. You can reset or delete your advertising ID at any time under Ads in your phone's Google or privacy settings, after which Google can no longer link the app to it. Ad personalisation is switched off on the website and in the app, so your use of Vidhata is never used to target you with ads elsewhere. We never send them your birth details, your chart, or anything you asked Acharya.

Sentry

Collects crash reports and errors from the app and the website so we can fix what breaks. Receives a random user id and the error itself. It does not receive your name, your email, your birth details or your chart.

PostHog

Measures which screens people use inside the app, so we know what to improve. Receives a random user id and the actions you took. It does not receive your name, your email, your birth details, your chart, or anything you asked Acharya.

AI providers that may see your birth data

AI Acharya runs on a large language model. Depending on availability and the language you ask in, your chart context (planet positions, current dasha, birth date and place) plus your question may be sent to one of the providers below. Pick a free-tier provider in your settings to control which one sees your data. Anthropic is the default for paid plans.

  • Anthropic Claude. Default for paid plans. Receives chart context and question. Per Anthropic API terms, traffic is not used for training. Prompt caching is short-lived per request.
  • OpenAI GPT. Used as a fallback. We send `store: false` and a workspace tag so the request does not enter the model-improvement data pool. Per OpenAI API terms, traffic is not used for training by default.
  • Groq (Llama family). Used as a fallback. Inference only, no retention of request bodies on the Groq platform.
  • Google Gemini. Used as a fallback for free-tier traffic. The consumer Gemini API does not expose a zero-retention flag. If this is a concern, switch to Anthropic or OpenAI in your account settings.

Your rights

Whether you are in India (DPDP Act) or the EU (GDPR) or anywhere else, the same rights apply.

Access

See everything we have on you. Email support@vidhata.app and we will send a JSON export within 7 days.

Correction

Edit your birth details, email or display name from Settings any time.

Deletion

Delete any single chart, your AI Acharya history, or your full account from Settings. Account deletion is immediate and irreversible: your profile, birth data, saved charts, family vault, Acharya history, notifications, push tokens, streaks, mantra sessions, reports, referral codes, subscription record and the Agree, Maybe or Disagree marks you left on predictions are all purged the moment you confirm. There is no waiting period and no way to bring the account back. Three things stay behind on purpose. First, a small audit row (your user id, email, and deletion date) is kept for legal and abuse enquiries. Second, any message you sent us through the feedback form stays, but the link back to your account is cut at the same moment, so the message can no longer be traced to you. We keep it because it tells us what to fix. If you typed an email address into that form yourself, that address stays in the message you wrote. Third, shared content-keyed caches like daily horoscopes are read by everyone with that birth-sign combination, so deleting your account does not wipe rows that were never personal to you in the first place.

Export

Download your charts as JSON or PDF from Settings. Same for AI Acharya transcripts.

Withdraw consent

Stop using Vidhata at any time and delete your account from Settings. Deletion runs at once, not on a delayed schedule, so there is no window in which we still hold your chart. The only things we keep afterwards are the deletion audit row and your unlinked feedback, both described under Deletion above.

Cookies

Two cookies are essential and are always set. NEXT_LOCALE remembers the language you picked. The Supabase session cookie keeps you signed in.

The rest are optional and are set only after you press Accept on the cookie banner. vidhata-utm records how you first arrived (the campaign tags in the link you clicked, the site that referred you, and the page you landed on) and lasts 30 days. Accepting also lets Google Analytics and Google Ads set their own measurement cookies in this site's name, which is how we tell whether an advertisement we paid for brought someone who actually wanted what we do. We do not allow Google to use your visit to personalise ads to you anywhere else.

If you press Reject, none of those are written, and anything held while the banner was open is discarded. Your browser does still tell Google that a visit happened. That signal carries no cookie, no account, no advertising click id and nothing that identifies you, and Google uses only the total count of such signals to estimate what we would otherwise be unable to measure. If you would rather not send even that, switch on Do Not Track in your browser and we will not load Google's script at all.

We keep your banner choice in your browser's local storage under vidhata-consent so we do not ask again on every page. We set no third-party cookies that track you across other sites.

Children

Vidhata is not intended for users under 13. We do not knowingly collect data from minors. If you believe a child has signed up, write to support@vidhata.app and we will delete the account.

Changes to this policy

If we change anything material (a new vendor, a new data type, a change to how AI Acharya works), we will email every active user and post a banner on the site for 30 days. Small clarifications get a date bump on this page and nothing more. The 2026-08-03 update was a correction, not a new collection: it describes analytics and the attribution cookie as they were already running, and it made the attribution cookie wait for your consent.

Contact

Questions, deletion requests, or anything else: write to support@vidhata.app. We reply within 7 days, usually faster. Our DPO is reachable at the same address.

Jurisdiction: India (DPDP Act applies). For users in the European Union, we follow GDPR practices for data subject rights, transfer protections, and breach notification.