Privacy

Your birth data, your account, your rules.

Vidhata is a Vedic astrology app. To compute your kundali we need your date, time and place of birth. That data sits in your account and powers your chart, your dasha periods, and your AI Acharya answers. We do not sell it, do not share it with astrologer marketplaces, and never send you SMS. This page explains what we collect, where it lives, and how to delete it.

Last updated: 2026-08-03

The short version

  • Birth data (date, time, place) is stored in the Mumbai (ap-south-1) region, in managed Postgres. Used to compute your kundali. Not sold, not shared.
  • We use email-only sign-up. No phone numbers. No SMS spam, ever.
  • AI Acharya queries go to Anthropic Claude. Anthropic does not train on API data. Your conversation history is yours, deletable any time.
  • No advertising trackers, no retargeting pixels, no Facebook Pixel, and nothing that follows you to other sites. We do use Google Analytics, and it loads only after you accept cookies, never on the privacy, terms, feedback or sign-in pages. Vercel Analytics counts page views without setting a cookie.
  • Charts you save (yours and family vault) are protected by row-level security. No one else can read them.
  • Delete your account any time from Settings. Deletion is immediate and irreversible: your data is gone the moment you confirm, with no grace period and nothing to restore.

What we collect

Only what we need to give you a working kundali and a useful AI Acharya. Nothing else.

Birth data

Date, time and place of birth. Used to compute your Lagna, Moon nakshatra, planetary positions and dasha periods. We geocode the place name to latitude and longitude and store the coordinates against your chart.

Email and display name

For sign-up, sign-in and to send you account notices. Display name is whatever you type, no verification.

Chart history

Every kundali you generate is saved against your account so you can come back to it. You can delete any chart from Settings.

AI Acharya conversations

Questions you ask Acharya and the answers it gives back. Stored so you can scroll back and re-read. You can clear your history any time.

Family vault (optional)

If you add charts for family members, the same fields apply (birth date, time, place). Only you can see them. They sit under your user_id with row-level security.

What we do not collect

Things most astrology apps grab that we will not.

  • Phone numbers. We use email-only auth.
  • Payment card data. If you upgrade later, Stripe handles checkout and we never see your card.
  • Your IP address or device location as something we store or profile you by. Geocoding for birth place uses your typed city name, not your device location. Our analytics vendors read the IP of a request in passing to work out a coarse country and to block bots, then discard it; neither we nor they keep it against your account.
  • Browsing history outside Vidhata.
  • Your contacts, photos, calendar or any other phone data.

How we use your data

Compute and display your kundali

Birth date, time and place feed our Swiss-grade ephemeris with Lahiri ayanamsa. Output goes back to your chart screen.

Power AI Acharya

When you ask Acharya a question, your chart positions (Lagna, planet placements, current dasha) are sent to Anthropic Claude as context. The answer comes back, gets logged in your chat history, and is shown to you.

Account notices, only

Things like password resets, security alerts and any major change to this policy. We do not send marketing emails by default. If we ever launch a newsletter, you opt in.

Where your data lives

Vidhata runs on Supabase (managed Postgres) pinned to the Mumbai (ap-south-1) region. Your data does not leave that region for storage. Backups are encrypted and stay in the same region.

Every row in our database is protected by Postgres row-level security. The policy is simple: a row is readable only by the user_id it belongs to. Our own staff cannot read your charts in normal operation. Engineering access for incident response is logged and limited to senior engineers.

Who we share data with

Nobody, in the sense that we do not sell or rent your data to anyone. We do use a small set of vendors to run the app. Each one is a data processor: they handle data on our instructions, not theirs.

Anthropic (Claude API)

Powers AI Acharya. Receives your chart context plus your question. Per Anthropic's API terms they do not train on this data.

Supabase

Hosts our Postgres database and authentication. Your data sits here.

Vercel

Serves the website. Vercel Analytics counts page views and Core Web Vitals in aggregate, sets no cookie, and assigns no persistent identifier, so it cannot follow you across sites or sessions.

Google Places API

Used to convert a typed birth-place name to latitude and longitude. Called via our Supabase edge function so Google never sees your IP.

Stripe (only if you upgrade)

Handles checkout for paid plans. They take card data; we get a customer ID and a subscription status. If you stay on the free tier, Stripe gets nothing.

Google Analytics

Measures which pages and campaigns bring people to Vidhata, so we know where to spend effort. It loads only if you accept cookies, and it is switched off entirely on the privacy, terms, feedback, sign-in and sign-up pages, and whenever your browser sends a Do Not Track signal. IP anonymisation is on. We never send it your birth details, your chart, or anything you asked Acharya.

AI providers that may see your birth data

AI Acharya runs on a large language model. Depending on availability and the language you ask in, your chart context (planet positions, current dasha, birth date and place) plus your question may be sent to one of the providers below. Pick a free-tier provider in your settings to control which one sees your data. Anthropic is the default for paid plans.

  • Anthropic Claude. Default for paid plans. Receives chart context and question. Per Anthropic API terms, traffic is not used for training. Prompt caching is short-lived per request.
  • OpenAI GPT. Used as a fallback. We send `store: false` and a workspace tag so the request does not enter the model-improvement data pool. Per OpenAI API terms, traffic is not used for training by default.
  • Groq (Llama family). Used as a fallback. Inference only, no retention of request bodies on the Groq platform.
  • Google Gemini. Used as a fallback for free-tier traffic. The consumer Gemini API does not expose a zero-retention flag. If this is a concern, switch to Anthropic or OpenAI in your account settings.

Your rights

Whether you are in India (DPDP Act) or the EU (GDPR) or anywhere else, the same rights apply.

Access

See everything we have on you. Email support@vidhata.app and we will send a JSON export within 7 days.

Correction

Edit your birth details, email or display name from Settings any time.

Deletion

Delete any single chart, your AI Acharya history, or your full account from Settings. Account deletion is immediate and irreversible: your profile, birth data, saved charts, family vault, Acharya history, notifications, push tokens, streaks, mantra sessions, reports, referral codes, subscription record and the Agree, Maybe or Disagree marks you left on predictions are all purged the moment you confirm. There is no waiting period and no way to bring the account back. Three things stay behind on purpose. First, a small audit row (your user id, email, and deletion date) is kept for legal and abuse enquiries. Second, any message you sent us through the feedback form stays, but the link back to your account is cut at the same moment, so the message can no longer be traced to you. We keep it because it tells us what to fix. If you typed an email address into that form yourself, that address stays in the message you wrote. Third, shared content-keyed caches like daily horoscopes are read by everyone with that birth-sign combination, so deleting your account does not wipe rows that were never personal to you in the first place.

Export

Download your charts as JSON or PDF from Settings. Same for AI Acharya transcripts.

Withdraw consent

Stop using Vidhata at any time and delete your account from Settings. Deletion runs at once, not on a delayed schedule, so there is no window in which we still hold your chart. The only things we keep afterwards are the deletion audit row and your unlinked feedback, both described under Deletion above.

Cookies

Two cookies are essential and are always set. NEXT_LOCALE remembers the language you picked. The Supabase session cookie keeps you signed in.

One cookie is optional and is set only after you press Accept on the cookie banner. vidhata-utm records how you first arrived (the campaign tags in the link you clicked, the site that referred you, and the page you landed on) and lasts 30 days. It tells us which channels actually work. If you press Reject, it is never written, and anything held while the banner was open is discarded. Accepting also lets Google Analytics set its own measurement cookies.

We keep your banner choice in your browser's local storage under vidhata-consent so we do not ask again on every page. No ad cookies, and no third-party cookies that track you across other sites.

Children

Vidhata is not intended for users under 13. We do not knowingly collect data from minors. If you believe a child has signed up, write to support@vidhata.app and we will delete the account.

Changes to this policy

If we change anything material (a new vendor, a new data type, a change to how AI Acharya works), we will email every active user and post a banner on the site for 30 days. Small clarifications get a date bump on this page and nothing more. The 2026-08-03 update was a correction, not a new collection: it describes analytics and the attribution cookie as they were already running, and it made the attribution cookie wait for your consent.

Contact

Questions, deletion requests, or anything else: write to support@vidhata.app. We reply within 7 days, usually faster. Our DPO is reachable at the same address.

Jurisdiction: India (DPDP Act applies). For users in the European Union, we follow GDPR practices for data subject rights, transfer protections, and breach notification.