Privacy Policy
Detailed information about data, privacy, AI-assisted processing and your controls
Last updated: 11 November 2026 · Version 2026-11-11-v2.2
1. Scope, operator and precedence
This Policy describes the personal data processed when you use the AstroVarana app, account, calculation, explanation, image-analysis, family-profile, report, notification, purchase or support features. It applies together with any feature-specific notice presented when you provide data. If a feature notice describes a narrower purpose or data flow, that notice applies to that feature to the extent of the difference; mandatory law always prevails.
2. Data controller / fiduciary and contact details
AstroVarana is operated by Navneet Sharma. Privacy and grievance contact: sharmanavneet5557@gmail.com. Support: sharmanavneet5557@gmail.com. Postal address: V.P.O. Gehri Devi Nagar, Bathinda, Punjab, India PIN 151001.
3. Information you provide
Depending on the feature, you may provide your name, email address, phone number, language, birth date, birth time, birth place, selected location, profile attributes, family-member details, questions, preferences, uploaded images or files, support messages, feedback, and information needed to verify or resolve a privacy request. The main account holder’s date of birth is used to check the 18-year minimum age and may also be used for the account holder’s own calculations. Please provide only information needed for the feature and do not submit another person’s data unless you have authority to do so.
4. Calculation inputs and outputs
To provide selected features, we process birth date, time and place; selected date and location; coordinates and time zone; and resulting astronomical or astrology values, such as planetary positions, chart factors, Panchang values, periods and timing windows. Outputs depend on the inputs, calculation method, conventions, time-zone and source data used. A result is a computational output under those inputs and conventions; it is not a verified fact about a person or a guaranteed event.
5. Family-profile information
An adult account holder may create profiles for family members or other persons only when authorised to provide that information. Family profiles may contain names, relationships, birth information, location context and calculated astrology results. The account holder is responsible for having an appropriate basis or permission to submit another person’s information.
6. Images and files you choose to upload
Certain features, such as Palmistry or Vastu-related analysis, may allow you to capture or upload photographs, images, diagrams or other files. We process those files to provide the requested feature, generate analysis, maintain report history where applicable, prevent abuse, troubleshoot failures and comply with legal or security obligations. Do not upload images or documents that you are not authorised to provide.
7. AI-assisted processing
Some explanations, translations, summaries, chat responses, report narratives or image-assisted readings may be produced using Google Gemini Developer API. A feature request may include your prompt or question, selected language, relevant profile or calculation context, and an image you submit for analysis. Gemini API Free-tier requests may be used by Google to improve products; Google retains abuse-monitoring data for up to 55 days. Gemini Paid-tier prompts and responses are not used to improve Google products under the Paid Services terms. Current providers, purposes and processing locations: AstroVarana uses Supabase Auth and Database for accounts, profiles, reports and related records; Hostinger VPS infrastructure in Mumbai, India for the API, calculation services, private job queue and runtime; Google Gemini Developer API for selected AI reports, chat, explanations and image-assisted analysis; Cloudflare Turnstile for bot and abuse checks; Google AdMob and Google UMP for ads and consent signals; Expo Push Notifications with Google FCM and Apple APNs for notification delivery; and Google Play for app distribution and purchases. Supabase data is stored in the region selected for the project. Google, Cloudflare and Expo may process data in the regions used for their global services. Some provider processing may occur outside India. Gemini receives feature-specific prompts, selected language, relevant profile/calculation context and, when requested, uploaded images.
8. Sensitive credentials and prompt content
Do not submit passwords, one-time passcodes, bank PINs, card verification values, payment credentials, authentication tokens or confidential documents to chat, AI features, uploads or support. We do not ask you to provide these credentials for an astrology calculation or explanation. If you include sensitive information voluntarily, it may be processed as part of your request and should be treated as disclosed to the relevant service providers.
9. Location information
Location may be used to calculate timezone-sensitive or place-sensitive features such as Panchang, sunrise/sunset, Muhurat, local festival or eclipse visibility, and other location-dependent astrology information. Where possible, AstroVarana may allow you to search for or manually select a place instead of granting continuous device location access. Device permission choices remain under your operating system controls.
10. Account, authentication and security information
We process authentication identifiers, session information, verification status, login events, account-security events, device or request identifiers and related technical information needed to create accounts, authenticate users, prevent abuse, detect suspicious activity, investigate errors and protect AstroVarana and its users.
11. Purchases, subscriptions and entitlements
For subscriptions, paid reports, Astro Stars or other digital purchases, AstroVarana may receive transaction identifiers, product identifiers, purchase status, entitlement status, renewal or expiry information, refund or revocation status, store country/region and other information required to validate and administer purchases. Full payment-card details are generally handled by Google Play, Apple or another authorised payment provider rather than by AstroVarana.
12. Advertising and consent information
The app uses Google AdMob for ads and Google UMP for consent choices. These services may process device or advertising identifiers, consent status, technical information and ad events to deliver, measure, limit or personalise ads as permitted by your choices and applicable law. AstroVarana does not provide birth details, chart content, private family-profile data, private prompts, uploaded palm/Vastu images or paid report text to ad partners for ad targeting. You can manage available privacy choices in the app and your device settings.
13. Analytics, diagnostics and crash information
AstroVarana may process app version, device type, operating-system information, performance metrics, crash traces, network/error diagnostics, feature events and similar technical information to maintain reliability, identify bugs, prevent abuse and improve the service. Diagnostic data should be minimised and must not intentionally include unnecessary private astrology or account content.
14. Notifications
If you enable notifications, AstroVarana or its notification provider may process a device push token, notification preferences and delivery information to send reminders, account notices, purchase information and selected daily guidance. You can usually control optional notifications in the app and in your device settings.
15. Support and grievance records
When you contact support or raise a privacy grievance, we may keep the message, account contact details, attachments you provide, transaction references, troubleshooting information and the actions taken to resolve the matter. Do not send passwords, card CVVs, bank PINs or one-time passwords to support.
16. Purposes and legal basis
We process data only on a ground permitted by the law that applies, for purposes that include providing the feature you request, maintaining your account, administering purchases, delivering notifications you enable, answering support requests, protecting the service, complying with legal duties and establishing or defending legal claims. Where consent is the required ground, we will obtain a specific, informed and affirmative choice before processing and provide a way to withdraw it. Accepting these Terms is not consent to unrelated optional processing.
17. Personalisation
AstroVarana may use information you provide, calculated astrology context, selected family profile, language, saved preferences and previous feature context to personalise your experience. Personalisation is intended to make content relevant to the profile you selected. You should verify that the correct person and birth details are selected before relying on a personalised report.
18. Recipients and service providers
The service uses Supabase for authentication and database functions; Hostinger for the VPS that runs the API and calculation services; Google Gemini Developer API for selected AI features; Cloudflare Turnstile for bot and abuse checks; Google AdMob and UMP for ads and consent; Expo Push Notifications with Google FCM and Apple APNs for notification delivery; and Google Play for app distribution and purchases. The VPS is hosted in Mumbai, India. Supabase data is stored in the region selected for the project. Other providers may process data in the regions used for their global services; some processing may occur outside India. Provider-specific data handling is described in this Policy and each provider’s published terms.
19. Google Play and Apple
If you install AstroVarana or make an in-app purchase through Google Play or Apple, those platforms process information under their own terms and privacy practices. AstroVarana may receive store-generated transaction and entitlement information required to provide, restore, refund or revoke digital access.
20. Legal disclosures
We may disclose information when reasonably necessary to comply with applicable law, valid legal process, regulatory obligations, tax or accounting requirements, or to protect the rights, safety and security of users, AstroVarana or others. We may also disclose information in connection with a merger, acquisition, reorganisation or sale of relevant assets, subject to appropriate legal safeguards.
21. Advertising, sale and sharing
We do not sell private birth details, family-profile information, private prompts, uploaded images or paid report text as a standalone data product. This statement does not mean that no data is disclosed: information may be shared with service providers and, if enabled, advertising or analytics providers as described above. Any sharing that applicable law treats as a sale, targeted-advertising disclosure or other regulated activity will be handled with the required notice, consent or opt-out controls.
22. Data minimisation
We aim to collect and process information that is reasonably necessary for the feature you choose to use, security, payments, support and legal compliance. You may choose not to provide optional information, although some personalised features cannot work without the relevant birth, location or uploaded-image data.
23. Security
AstroVarana uses safeguards intended to protect information, including encrypted connections, restricted system access and protection of service credentials. No internet service can guarantee absolute security, and you should use a unique password and protect access to your device and account.
24. Retention and deletion schedule
Retention depends on the data category, service purpose, account status, operational configuration and applicable legal duties. Some records do not currently have an automatic expiry configured. Account/profile data, birth and family data, prompts and chat history, uploaded images, reports, purchase records, support records, security logs and consent records may have different periods. Current verified live-system retention schedule: Account, birth-profile and family-profile data are kept while the account is active and removed from active systems after a verified account-deletion request is processed, subject to stated exceptions. Saved reports, prompts, chat history and uploaded files follow the account history and deletion flow; there is no separate automatic expiry period currently configured for these records. AI usage telemetry stores a call identifier, time, provider/model, token counts and estimated cost; it does not store the prompt, response or account user ID, and has no automatic deletion period configured. Completed Redis queue jobs expire after one day or when the 2,000-record limit is reached; failed jobs expire after seven days or when the 5,000-record limit is reached. Minimal payment facts may be retained for payment disputes, fraud/security and applicable accounting or tax duties. Where Income-tax Rule 46 applies, required accounting records are retained for seven tax years from the end of the relevant tax year; this period does not apply to all profile, report or AI data. Support and security records are retained only as needed for the request, security investigation or applicable legal duty; no fixed automatic expiry is currently configured for every such record.
25. Backups and provider copies
Deletion from the active service may not immediately remove data from protected backups, fraud/security logs or a provider’s systems. Verified backup and provider deletion periods: After a verified deletion request, active account data are removed through the account-deletion flow and relevant processors are instructed to delete data where applicable. Hostinger weekly snapshots and any provider-held copies may persist until their own rotation or deletion schedule; no exact end date is guaranteed. Supabase Free has no scheduled automatic database backups, and Supabase does not provide AstroVarana a per-record backup purge date for provider-held copies. For Gemini Developer API Free-tier requests, Google may use submitted prompts/responses to improve products and retains content for abuse monitoring for up to 55 days; handling differs when a Paid service tier is active. Expo retains message content until handoff to FCM/APNs and clears push receipts after 24 hours; push-token lifetime is controlled by the notification ecosystem. Other providers apply their own published retention and deletion schedules, which may not be immediate. Restored backups must not be used to reinstate a completed deletion except where legally required, and deletion markers must be re-applied after recovery.
26. Account deletion
You can initiate account deletion in AstroVarana under Settings → Account → Delete Account. If you cannot access the app, use https://astrovarana.com/delete-account or contact the privacy channel. The authenticated deletion flow removes the account and associated active profile data; limited transaction facts may remain for accounting, payment disputes, security or legal duties. Details about deletion timing and provider-held copies are in sections 24 and 25.
27. Subscription cancellation is separate from account deletion
Deleting an AstroVarana account does not cancel an active subscription billed by Google Play or Apple. Cancel the subscription using the store controls to stop future billing. Account deletion and store cancellation are separate actions; neither removes refund or consumer rights that apply by law.
28. Your privacy rights and grievances
You may exercise the rights available under the law that applies to you, which may include access to information about your data, correction, completion, updating, erasure, withdrawal of consent, nomination and grievance redressal. Contact sharmanavneet5557@gmail.com. We will verify requests proportionately, respond within statutory timelines and explain any lawful refusal or retention exception. No term in this Policy waives a right that cannot lawfully be waived.
29. Consent and withdrawal
Where processing is based on consent, consent must be specific to the stated purpose and given through a clear affirmative action. You may withdraw it as easily as it was given, subject to the applicable law and service dependencies. Withdrawal does not invalidate processing lawfully completed before withdrawal, but may disable the feature that needs the data. Device permission, optional advertising consent, account terms and feature-specific data consent are separate choices.
30. Children and family profiles
Account registration is intended for adults aged 18 or older. A parent or lawful guardian may submit a child’s information only where permitted and after completing any verifiable parental consent or other safeguards required by applicable law. We will not knowingly use a child’s data for behavioural monitoring or targeted advertising where prohibited. The child’s data must be limited to the requested feature and must not be used to infer sensitive traits or make consequential decisions.
31. International processing
Some service providers may process information in countries other than the country where you live. Where cross-border processing occurs, AstroVarana will seek to use appropriate contractual, technical and legal safeguards required for the relevant processing and provider.
32. Automated processing and AI-assisted text
The app may combine deterministic calculations, rules, reference material and AI-assisted explanations. AI-assisted text is probabilistic and can be inaccurate, incomplete, biased or unrelated to the selected profile; it is not a factual finding about you. Where the service makes a solely automated decision with legal or similarly significant effects, the operator must separately assess and meet any applicable legal requirements. AstroVarana outputs are not a medical, legal or financial determination and do not guarantee future events.
33. Changes to this Privacy Policy
We may update this Privacy Policy when features, providers, data practices, legal requirements or store rules change. Material changes may be highlighted in the app, on the public policy page or through another reasonable notice. The effective date shown in the policy should be updated when a revised version becomes active.
34. Contact and grievance escalation
Data-protection / privacy grievance: sharmanavneet5557@gmail.com. Support: sharmanavneet5557@gmail.com. Postal address: V.P.O. Gehri Devi Nagar, Bathinda, Punjab, India PIN 151001. You may also contact the competent authority or seek any remedy available under applicable law. Do not include passwords, payment secrets or unnecessary third-party data in a request.