Privacy Policy

Effective Date: October 22, 2026

Last updated: October 27, 2026

1. Introduction

Navagraha ("we", "us", "our") operates the Navagraha application, available on the web at app.navagraha.app and as a mobile app (together, the "App"), and the website navagraha.app. This Privacy Policy explains how we collect, use, store, share and protect your personal data, and the rights you have over it. We are the "Data Fiduciary" under India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the "controller" under laws such as the GDPR.

Before you enter any personal data, the App asks you to read this policy and our Terms of Service and to agree to the processing described here, including the AI processing in section 5. You can withdraw that consent at any time (section 6).

2. Information We Collect

Account information: your name and email address. Your password is handled by our authentication provider and stored only as a salted hash.
Birth details: date of birth, time of birth (or that you chose a sunrise chart), and place of birth including latitude, longitude and time zone.
Chat messages: questions you type or speak to the AI Pandit, and its replies.
Pandit Ji's notes: short notes made from your conversations (facts you share, current concerns, one-line summaries), explained in section 4A.
Other people's details: birth details you enter for another person. (a) If you add a family member (spouse or fiancé(e), parent, child, sibling) to People, we store their name or nickname, relationship, date, time and place of birth in your account, visible only to you. You can delete them at any time. Deleting your account deletes them. (b) If you share someone else's details in a chat, they are kept with that one conversation only and deleted when you delete the conversation. (c) Neither is added to Pandit Ji's notes (section 4A), used in notifications or emails, or sent to analytics. A compatibility reading you generate may also be kept on your device for the day. Enter details only if you have the right to do so.
Computed data: planetary positions, charts, dasha periods and readings derived from your birth details.
Consent record: the version of these terms you agreed to and when (recorded by our server).
Mood check-ins: the mood you choose and any note you add when you use the mood check-in. These are stored with your account and are not sent to the AI services.
Preferences: alert types, notification time and display settings.
Browser notifications: if you turn on browser notifications on the web, we store your browser's push address and keys, your time zone, the times you choose, your browser name, and whether delivery worked. No message text is stored there. Turning notifications off, or deleting your account, removes it.
Purchases: subscription status and receipts from the app store through which you subscribed and our subscription-management provider. We never see your card or UPI details.
Reports: if you report an AI reply, the reply text (an excerpt), the reason you chose and the app version.
Diagnostics: crash reports without IP address or personal identifiers.
Support emails: if you write to us, we keep the correspondence so we can help you.
Voice: voice input is turned into text by your device's speech recognition service (see section 5). Navagraha does not record, store or upload your audio.

We do not collect device identifiers, advertising identifiers, contacts, photos or location data beyond the birth place you provide yourself.

3. How We Use Your Information

To compute your Vedic birth chart (Kundli) and provide astrological insights.
To generate readings and AI Pandit answers with third-party AI services (see section 5).
To keep short notes that make readings feel personal, and to let you see, remove or switch them off (section 4A).
To send scheduled notifications (daily readings, transit alerts, muhurat reminders) according to your preferences.
To create and manage your account, authenticate you, and send password-reset emails you request.
To check that you are 18 or over, using the date of birth you give for yourself (the App is for adults only; see section 8).
To read AI Pandit replies aloud (text-to-speech) and accept spoken questions (speech-to-text).
To manage your subscription, review reported AI content, respond to support and grievance requests, and fix crashes.
To understand how the App is used and improve it, via first-party, privacy-preserving product analytics (see section 10).
To comply with law and to protect the App and its users from abuse and fraud.

Our legal grounds are your consent (given on the consent screen), performing our contract with you (providing the App), legal obligations, and, where the law allows, legitimate interests such as security and fixing faults.

We do not use your data for advertising, do not sell it, and do not use it for profiling beyond app functionality.

4. Data Storage & Security

Cloud storage: account information, birth details, chat messages, readings and computed chart data are stored with our cloud database provider (hosted on a major cloud platform), encrypted at rest and in transit, and restricted to your own account by row-level security.
On your device: the notification inbox is kept in an AES-256 encrypted local database whose key is held in your device's secure keystore (Android Keystore / iOS Keychain). Preferences and cached copies of your profile, chart and today's readings (so the app opens quickly and works offline) are kept in the app's private storage and removed when you sign out.
Audio: Navagraha never stores or uploads voice recordings.

We take reasonable technical and organisational measures to protect your data. No system is completely secure, however, and we cannot guarantee absolute security. If a personal data breach affects you, we will notify you and the relevant authority as the law requires.

4A. What Pandit Ji Remembers

To make readings feel personal, Pandit Ji keeps short notes about you. This section explains what is noted, what is not, where it is kept and how you control it.

What is noted: a few short facts you share while chatting (for example your life stage, whether you work or study, what you are working towards), the things currently on your mind with the date you mentioned them, and a one-line summary of each conversation. We make these notes automatically a few minutes after a conversation ends, using the same kind of third-party AI service described in section 5.
What is never kept: other people's details. If you share someone else's birth details or ask about another person's chart in a chat, that is used only to answer you in that one conversation. We do not keep their name, birth details or anything about them in Pandit Ji's notes; at most we note that you asked about a relationship. Health, mental health, sexuality, abuse and similar sensitive details are not kept as such: they are reduced to a general note like "going through a hard time", or not kept at all. We also do not keep phone numbers, email addresses, links or dates of birth in these notes.
How the notes are used: your chart still leads every reading. The notes only help Pandit Ji sound like someone who knows you, in chat and in the deep-dive and mood replies you open in the App. They are sent to the AI service together with your question, as described in section 5. We do not use them for advertising or to profile you for any other purpose.
Notifications and emails: push notifications and email subjects, headlines and opening lines never include anything from these notes. The in-app daily message, which is also what the daily email carries, can at most reflect a general theme such as work or studies, with no names, dates or details.
Where they are kept: in our database, with your account, protected in the same way as your other account data (section 4). Only your own account can read them.
How long: until you remove them, turn memory off, or delete your account. A concern you have not mentioned for about six weeks stops being used.
Your control: in Profile, open "What Pandit Ji remembers" to read everything, remove a single note, clear everything, or turn memory off. Turning it off stops new notes and stops Pandit Ji using the ones saved; clearing removes what is saved. Deleting your account deletes the notes with it (section 7).
Your agreement: Pandit Ji starts keeping notes only after you have agreed to this version of the policy (effective October 22, 2026).

5. Third-Party Services & AI Processing

We share personal data only with service providers that help us run the App, described here by category. They process data to provide their service to us, under their own terms and privacy policies. We do not name AI model providers because they can change; what matters is what is sent and why.

A third-party AI model provider (and the model hosts it uses) receives your name, birth details, the chart computed from them, the questions you ask the AI Pandit with recent conversation context, and birth details you enter for compatibility readings, to generate readings and answers. If memory is on, it also receives a short selection of Pandit Ji's notes about you with your questions, and the text of a finished conversation so the notes can be made (section 4A). Requests go through our servers; your email address and password are never sent.
A cloud text-to-speech provider receives the text of AI Pandit replies to read them aloud.
Your device's speech recognition service (built into your phone's operating system) converts your voice to text when you use voice input, and may process the audio on its provider's servers under that provider's privacy policy.
A cloud database and authentication provider stores your account and App data and sends password-reset emails.
A geocoding and time-zone lookup service receives the place name you type, or coordinates you enter manually, for birth-place search and time zone. No account data is sent.
A subscription-management provider handles in-app subscription entitlements; it receives an anonymous app user ID and purchase/receipt data. Payments themselves are processed by Apple or Google through their stores.
A website hosting and network provider serves the App and this website, and stores the anonymous sign-up and free-tool counts described in section 10. It works out the country from your connection; we do not store your IP address with those counts.
A crash-reporting service receives crash and error diagnostics, configured not to collect IP addresses or personal identifiers.
Authorities and advisers: we may disclose data where required by law, court order or a lawful government request, or to protect rights and safety.

AI Pandit replies are generated automatically and can be wrong (see our Terms). We do not sell, rent, or share your personal data with any other third parties.

6. Your Rights

Under the DPDP Act and, where they apply to you, other laws such as the GDPR, you have these rights:

Access: view your stored data at any time in the App's Profile screen (including Pandit Ji's notes under "What Pandit Ji remembers"), or ask us for a summary of the personal data we hold about you and the processing we do.
Correction and updating: edit your birth details at any time in Profile settings, or ask us to correct or complete other data.
Erasure: remove single notes, clear all of Pandit Ji's notes, or turn memory off in Profile, or permanently delete your account and all associated data using "Delete Account" in the Profile screen, or by request. See how to delete your account. This is irreversible.
Withdraw consent: you can withdraw consent as easily as you gave it. Turn off notifications in App or device settings at any time. AI processing is essential to the App's readings; to withdraw consent to it, stop using the App and delete your account, which erases your data. Withdrawal does not affect processing done before it.
Grievance redressal: raise any concern about your data with our Grievance Officer (section 12).
Nominate: you may nominate another person to exercise your rights if you die or become unable to act. Email us with the nominee's name and contact details and we will record the nomination and act on it as the law requires.
Portability and objection: request an export of your data, or object to or ask us to restrict processing, by emailing support@navagraha.app.

To use a right, email support@navagraha.app from the address registered to your account. We may need to verify your identity. We do not charge a fee for reasonable requests and answer within the timelines in section 12.

If you are in India and are not satisfied with our response, you may complain to the Data Protection Board of India as provided under the DPDP Act, after first using our grievance process. If you are in the European Economic Area or UK, we process your data based on your consent, contractual necessity, and legitimate interests, and you may lodge a complaint with your local supervisory authority. If you are a California resident: we do not sell or share your personal information.

7. Data Retention & Deletion

While your account is active: we keep your account data. Chat messages are kept until you delete a conversation or your account.
If you delete your account in the App: your account and the data in our database (profile, birth details, charts, readings, chat history, Pandit Ji's notes, browser notification subscriptions, mood check-ins, notification content, preferences, usage records, subscription status, analytics events and AI-reply reports) are deleted immediately. Copies in backups and logs are overwritten or purged within 30 days.
If you ask us to delete by email: we verify the request and delete within 7 days, then confirm by email.
Anonymous deletion log: when an account is deleted we keep one record with only the date, app version and platform. It contains no identifier and cannot be linked back to you.
Pandit Ji's notes: kept until you remove them, turn memory off, or delete your account. Clearing them in Profile removes the notes immediately; we keep only a marker that a conversation has already been read, so removed notes are not made again from the same chat.
Notification content: items older than 30 days are removed automatically.
Browser notifications: removed when you turn them off or delete your account.
On your device: cached data is removed when you sign out.
Store and payment records: Apple, Google and our subscription-management provider keep purchase records under their own policies and legal duties; deleting your Navagraha account does not delete those and does not cancel a subscription (cancel it in the store first).
Legal requirements: we may keep limited data for as long as the law requires, for example to resolve a dispute or comply with a legal obligation.

Signing out without deleting your account leaves your data in place for your next sign-in.

8. Children's Privacy

Navagraha is for adults aged 18 and over. Under the Digital Personal Data Protection Act, 2023 anyone under 18 is a child, and we do not offer the App to children, with or without a parent's consent. The App asks for your own date of birth before an account is created. If it shows you are under 18, no account is created, nothing you entered is sent to us, the answers saved on your device are removed, and no analytics are recorded from then on (the anonymous sign-up counts in section 10 sent before the date was entered cannot be linked to anyone). If we learn that an existing account belongs to someone under 18, we close it and delete its personal data in the same way as an account deletion (section 7); the App also lets the account holder delete it straight away. We do not show advertising, track children or monitor behaviour for profiling. A parent or guardian who believes a child has given us personal data can contact support@navagraha.app to have it deleted.

9. International Data Transfers

Your data may be processed and stored on servers outside your country of residence, including those of our cloud database provider, cloud and AI providers listed in section 5, in the United States, Europe, India or other countries. We use appropriate safeguards, including Standard Contractual Clauses where required. Transfers outside India are made only to countries and providers permitted under the DPDP Act and its rules.

10. Cookies, Analytics, Crash Reporting & Tracking

Navagraha does not use advertising trackers, does not engage in cross-app or cross-site tracking, does not collect advertising identifiers, and does not use behavioural analytics that profile you across other apps or websites. The web version of the App stores your sign-in session and preferences in your browser's local storage, which is strictly necessary for it to work. We do not use advertising, tracking or analytics cookies. We never sell or share analytics or crash data with third parties for advertising.

We use four first-party, privacy-preserving tools:

Product analytics: we record which screens and features you use, whether actions succeed (e.g. a chart finished computing, a purchase completed), and simple timing and error-type information, so we can see what is working and fix what is not. These events never include your name, email, birth details, chart contents, or chat/reading text, only event names, non-identifying counters/timings, your app version and platform. Events are stored in our own database, protected the same way as your other account data (section 4), and are deleted when you delete your account.
Sign-up counts: so we can see where people stop while setting up the App (for example, at which onboarding step, or why a sign-up failed), the App sends small anonymous signals to our own web server: the event and onboarding step, the kind of error if one happened, the page or source you arrived from, platform, app version, network type (for example 4G), the country (from your connection; your IP address is not stored) and timings. After you accept this policy they also carry a random visit code, made fresh on each visit, kept only in memory and never linked to your account, so the steps of one visit can be counted together. Before you accept, only plain counts are sent, with no visit code: that the App opened and how long it took to load, and that you declined this policy. They never include your name, email, birth details or anything you type. They are kept by our hosting provider apart from your account data and deleted automatically within three months. Because they cannot be linked to you, there is nothing to delete with your account.
Free-tool counts: when you open one of the free calculators on navagraha.app, submit it, get a result or tap a question for Pandit Ji, the page sends the same kind of anonymous count to our own web server: which calculator, whether a birth time was given, which question was tapped, the page and source you came from, network type and the country (from your connection; your IP address is not stored). The calculators work out your chart in your browser, so these counts never include your birth details, name or anything you type, and they carry no visit code. They are kept and deleted in the same way as the sign-up counts.
Crash diagnostics: used solely to detect and fix technical faults. It is configured to exclude your IP address and personal identifiers, and any text captured in error reports (e.g. breadcrumbs) is filtered to strip anything that looks like an email address, birth detail, or chat/reading content before it leaves your device.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the Effective Date above, and the App will ask you to review and agree to the updated terms before you continue using it. Clarifications that do not change what we collect or why, such as clearer wording, change only the Last Updated date and do not ask you to agree again.

12. Grievance Redressal & Contact

Questions, concerns, complaints or requests about this policy or your data, including any exercise of the rights in section 6, can be sent to our Grievance Officer at support@navagraha.app with the subject "Grievance". Please include your registered email address and a description of the issue.

We acknowledge every grievance within 48 hours of receiving it.
We aim to resolve it, and tell you the outcome, within 30 days (one month) of receiving it.
If you are not satisfied, you may escalate to the authorities named in section 6 or approach the consumer forum with jurisdiction.