Privacy policy

Account. Your email address and a hashed form of your password (bcrypt; the password itself is never stored or logged), your role, and when the account was created. Used to sign you in.

Birth profiles. For each chart you add: a name, gender, date and time of birth, the place with its coordinates and time zone, and how exact the time is. This is the input to every calculation. Birth data is sensitive: it identifies a person and is used for religious or philosophical belief-related content, so we treat it as such and process it only to show you the charts and readings you asked for.

What the app works out. The calculated chart, matched rules, daily readings, good dates and the results of the life-event and accuracy tools are cached so pages open quickly. They are derived from your profiles and deleted with them.

Things you type. Life events and notes, questions to “Ask a question”, chat messages to “Ask my chart”, and settings. Used only to answer you and to show your history.

Written readings. Your full report, chat answers and daily readings are stored so you can reread them without writing them again, with a record of their size for fair-use limits.

Usage and security records. A count of written readings per account per day (for fair-use limits), a short audit trail of sign-ups, sign-ins and password changes with their time, and a temporary log of failed sign-in attempts by email and network address (to block password guessing; kept for minutes to hours, then discarded).

Cookies. One sign-in cookie that keeps you signed in for up to 30 days, and your light or dark theme choice in your browser’s local storage. No advertising or tracking cookies.

• Google, only when you use a written reading (the full report, “Ask my chart” or “Read my day”): the calculated facts of the chart (positions, periods, matched rules) and your question are sent to a Google service that prepares the text. We do not send your email or password. Google processes that data under its own service terms; do not put anything in a question that you would not want to leave the app.
• Hosting providers chosen by the operator for the servers and the database. They store the data on the operator’s behalf and do not use it for their own purposes.
• The operator can see account emails, sign-up and usage counts, feature settings and notes in an admin panel, to run the service. The operator does not read your profiles, chats or reports unless you ask for help with a problem.
• Nobody else. We do not sell, rent or share your data, and we show no advertising.

• No third-party analytics, advertising pixels or social-media trackers.
• No profiling for marketing, and no automated decisions with legal or similar effects on you.
• No use of your charts, events or chats to train any software or service.

• Account and profile data: until you delete it, or delete your account.
• Cached calculations and written readings: until the profile they belong to is deleted, or the calculation changes and the cache is rebuilt.
• Failed sign-in records: minutes to a few hours.
• Audit entries (sign-in, sign-up, password change): until the account is deleted.
• Database backups held by the hosting provider may keep deleted data for a limited time before they are rotated out.

• See and change your profiles, events and settings in the app at any time.
• Delete everything: Settings has “Delete all my data” (profiles, charts, reports, chats, events; the account stays) and “Delete my account” (everything, including the email and password). Both are immediate and permanent.
• Export a copy of your data, or ask any other question about it, by writing to the Jyotiva team. If you are in a region with data-protection law (such as the EU, the UK or India’s DPDP Act), you also have the rights that law gives you, and the same contact handles them.
• Children. The app is for adults (18 and over). We do not knowingly keep accounts of minors; a parent who finds one can have it removed.

Passwords are hashed with bcrypt; sign-in is rate-limited against guessing; the sign-in cookie is marked secure on HTTPS; every feature checks on the server that you are allowed to use it; and the app talks only to its own backend. No system is perfectly secure, so if you believe your account has been accessed by someone else, change your password (which signs out every other device) and tell the operator.

When this policy changes, the date at the top is updated and material changes are announced in the app. The terms and conditions incorporate this policy.

For anything about your data: the Jyotiva team.