Privacy Policy

Who We Are (Data Controller)

Kalmanas ("we", "our", "us") is a Vedic astrology engine that computes birth charts, dasha timelines, muhurtha analysis, and other Jyotish calculations. The data controller for the personal data described in this policy is Kalmanas, Kochi, Kerala, India. For any privacy matter, contact [email protected].

Information We Collect

Account Information

You can create an account using Google Sign-In, an email address (via a one-time sign-in link or verification email), or a phone number (via a one-time SMS code). Depending on the method you choose, we receive your name, email address, phone number, and, for Google, your profile photo. We never store your Google password.

Birth Chart Data

To generate your Vedic birth chart, we collect the date, time, and place of birth you provide, for yourself and for any other people whose charts you add. This data is stored securely in Firebase Firestore and associated with your account (or, for guests, kept in your own browser's local storage). Birth data can reveal aspects of your identity and beliefs; we process it only because you provide it for the astrological reading you request, and never for advertising.

Questions You Ask

If you use question-based readings (such as Ask the Stars or the chat), the text of your questions is stored with your account so your answers can be generated and re-read.

Usage Data

We use cookie-free analytics (Umami and Vercel Analytics) for basic, anonymous usage statistics. In addition, and only with your consent where consent is required (EU/UK visitors see a consent banner), we use Google Analytics, Google Ads, Meta (Facebook) Pixel, and Microsoft Clarity for analytics, session replay, and advertising measurement. These consent-gated tools set cookies and similar identifiers. If you decline, they are never loaded.

How We Use Your Data (Lawful Bases)

• Performing our contract with you: computing and displaying your birth chart, dashas, yogas, and reports; saving your profiles; delivering purchased reports and receipts.
• Your consent: analytics and advertising cookies for EU/UK visitors; the weekly digest email; processing the birth details you choose to submit for a reading. You can withdraw consent at any time.
• Legitimate interests: cookie-free aggregate analytics, service security, fraud prevention, and improving our calculations.
• Legal obligations: keeping payment ledgers for tax and accounting.

Data Storage & Security

Your data is stored in Google Firebase (Firestore) with security rules that ensure only you can access your own birth chart profiles. All data transmission uses HTTPS encryption. We do not sell or rent your personal data. We share it only with the service providers listed below, who process it strictly on our behalf.

Email Communications

We send two kinds of email:

• Transactional emails, which are essential to the service and tied to your own actions: sign-in and verification links, payment receipts, and subscription renewal notices.
• The weekly cosmic digest, a once-weekly email with your personalized transits, dasha, panchang, and a Jyotish insight. Every weekly email includes a one-click unsubscribe link, and you can opt out at any time without affecting your account or your transactional emails.

Email is delivered through Amazon Simple Email Service (SES), which processes the recipient address and message content solely to deliver the message on our behalf.

Third-Party Services

We do not sell or rent your personal data. We share it only with the service providers below, who process it on our behalf to operate the service:

• Firebase Authentication: secure sign-in via Google, email, or phone
• Firebase Firestore: storing your saved profiles and chart data
• Amazon Web Services (SES): sending transactional and weekly emails
• Vercel: application hosting, content delivery, and cookie-free analytics
• Railway: hosting for our calculation backend
• Umami Analytics: cookie-free, privacy-focused usage analytics
• Google Analytics & Google Ads (consent-gated in the EU/UK): usage analytics and advertising measurement
• Meta (Facebook) (consent-gated in the EU/UK): advertising measurement via the Meta Pixel and Conversions API; purchase events may include your hashed email and IP address unless you decline tracking
• Microsoft Clarity (consent-gated in the EU/UK): heatmaps and session replay
• Razorpay: processing payments in India (we do not store card details)
• PayPal: processing international payments (we do not store card details)

International Data Transfers

We are based in India, and several of our providers (Google, Amazon, Vercel, Meta, Microsoft, PayPal) store data in the United States and other countries. Where data of EU/UK visitors is transferred outside the EEA/UK, it is protected by the providers' standard contractual clauses and, where applicable, the EU-US Data Privacy Framework.

Your Rights

You can exercise these rights directly in the app (Profile → Account → Privacy & data) or by emailing [email protected]:

• Access & portability: download everything we hold about you as JSON with the "Download my data" button
• Erasure: delete your account and all associated data with the "Delete account & data" button (payment ledgers are retained in anonymized form for accounting)
• Rectification: correct your birth details and profile information at any time in the app
• Objection & restriction: object to or ask us to restrict any processing based on legitimate interests
• Withdraw consent: decline or later withdraw tracking consent with the reset button on the cookie policy page, and unsubscribe from the digest in any email
• Complain: lodge a complaint with your local data protection supervisory authority
• Use the app without creating an account (limited features)

Data Retention

We retain your data for as long as your account is active. If you delete your account, all associated birth chart profiles, chats, and personal data are permanently removed within 30 days; payment records are kept in anonymized form (no name, email, or phone) as required for accounting.

Children's Privacy

Kalmanas is not directed at children. You must be at least 13 years old to use the service, and at least 16 (or the age of digital consent in your country) where you are in the EU/UK. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date. Continued use of the app after changes constitutes acceptance of the new policy.

Contact

If you have questions about this privacy policy or your data, please contact us at [email protected] or visit our support page.