Privacy Policy

Effective date: 1 June 2026 · Last updated: 16 June 2026

Jyotishka ("we", "our", "us") is committed to protecting your personal data. This policy explains what we collect, why, how long we keep it, and your rights under the EU/UK GDPR, India's Digital Personal Data Protection Act 2023 (DPDP), and the California Consumer Privacy Act (CCPA).

1. Who we are

Jyotishka is operated by Samit Singh. Contact: [email protected].

2. What data we collect

Account data — email address or phone number used to create your account.

Profile data — names, dates of birth, birth places and birth times that you enter for yourself and family members.

Usage data — app version, platform (iOS/Android), crash reports (via Sentry) and basic analytics events.

Feedback — messages you send via the in-app feedback form.

Payment data — subscription status and entitlement information provided by Apple App Store or Google Play. We never see your card details.

3. What we do NOT collect

4. Legal basis for processing (EU/UK GDPR)

We process your data under Article 6(1)(b) (performance of a contract — providing the app service) and Article 6(1)(a) (consent, for optional analytics). For India's DPDP Act, processing is based on consent given at registration.

5. How long we keep your data

Account and profile data is kept until you delete your account. Crash reports are retained for 90 days. Feedback is retained for 2 years. When you delete your account, all personal data is permanently removed within 30 days.

6. Third-party services

Firebase (Google) — used for phone number authentication and push notifications. Firebase Privacy.

Sentry — crash reporting. Error reports may include device type and OS version. No personal data is included in crash reports. Sentry Privacy.

RevenueCat — subscription management. Handles App Store / Play Store receipt validation. Does not receive birth chart data. RevenueCat Privacy.

Apple App Store / Google Play — payment processing for Premium subscriptions. Subject to their own privacy policies.

7. Your rights

Under GDPR, DPDP and CCPA you have the right to access, correct, port and erase your personal data. To exercise these rights, email [email protected] or use the Delete account option in Settings → Account.

8. Data security

Data is encrypted in transit (TLS 1.3) and at rest. Passwords are hashed using bcrypt. Access tokens expire after 7 days. We use Sentry for real-time error monitoring.

9. Children

Jyotishka is for users aged 18 and above. We do not knowingly collect data from minors. Family profiles may include children's birth data, but the account holder must be 18+.

10. Changes to this policy

We will notify you of material changes by updating the "Last updated" date above and, where required, by in-app notification.

11. Contact

Email: [email protected]