Draft for review by the client's lawyer (Digital Personal Data Protection Act 2023) before launch.
What we collect
- Account: mobile number, name, app version and a push-notification token. If you add an e-mail address for receipts, that address. If you sign in with Google, your Google account ID and e-mail address.
- Birth details you choose to share: name, date, time and place of birth, used only to prepare your consultation.
- Consultations: chat messages and photos you send in a chat, call and video-call timings (not the audio or video: we do not record calls), charges, reviews and support tickets.
- Payments: recharge amounts and the payment reference from our gateway. Card and UPI details go to the gateway directly; we never see or store them.
- Astrologers: identity (KYC) documents and bank details for payouts, stored encrypted and visible only to authorised staff, and the profile photo they publish (we remove location and camera details from it).
Why we use it
To sign you in, run consultations, bill fairly, prevent fraud, pay astrologers, handle support and meet legal duties (for example tax and accounting records).
Who else processes it
Payment gateway (Razorpay), voice and video calls (Agora), push notifications (Google Firebase), Google sign-in (Google, only if you use it), SMS for one-time passwords (MSG91), our e-mail service for receipts and our cloud host in India (DigitalOcean, Bangalore). Each gets only what it needs.
What astrologers see
Your first name and the birth details and question you choose to share. Never your phone number.
How long we keep it
Chat transcripts: [period, to confirm]. Financial records: as long as tax law requires (currently 8 years). KYC documents: for the relationship plus the legally required period. Push tokens are deleted when they stop working.
Your choices
You can correct your profile in the app, and delete your account. Contact our Grievance Officer at support@astroconsult-test.duckdns.org for access, correction or any complaint.