Privacy Policy

1. Information We Collect

We collect only what is needed to run the Service:

• Account data — name, email address, mobile number (if used for login), profile photo (optional), language preference, and authentication identifiers (including Google Sign-In ID if you choose that method). Passwords are hashed with scrypt; we never store plain-text passwords.
• Birth & astrology profile data — full name, date of birth, time of birth, place of birth (city/coordinates), gender, and saved family profiles. This is required to compute Vedic kundli, dashas, compatibility, muhurat, and personalised reports.
• User-generated & computed content — kundli charts, dasha timelines, dosha reports, numerology inputs, compatibility (Kundli Milan) parameters, Jyotish Q&A history, AstroVastu / Business Vastu scan inputs, Face Reading photos (front/left/right selfies), floor-plan and room photos, generated PDF reports, and items saved to “My Reports” on your device.
• Payment & transaction data — order ID, product/plan purchased, amount (INR), payment status, and timestamps. Card numbers, UPI PINs, CVVs, and full bank account numbers are processed only by our payment partner; we do not store them.
• Device & technical data — device model, operating system, app version, language, time zone, IP address (for security and fraud prevention), crash logs, and anonymous usage metrics to fix bugs and improve performance.
• Communications — emails or in-app messages you send to support, and optional push-notification tokens if you enable notifications.

2. How We Use Your Information

• Create and maintain your account and saved profiles.
• Compute and display astrological, numerological, Vastu, Panchang, Muhurat, and related reports you request.
• Process one-time purchases and subscription payments through Cashfree.
• Deliver digital reports (including PDF downloads) and restore entitlements after payment.
• Enforce fair-use limits (e.g. daily Jyotish question quotas by plan).
• Send optional reminders (horoscope, Panchang, Muhurat) if you opt in — you can disable notifications in device or app settings.
• Detect fraud, abuse, and security incidents; comply with law and valid government requests.
• Improve the Service through aggregated, non-identifying analytics.

3. Legal Bases (India & General)

We process personal data based on: (a) your consent when you sign up and use features that need birth data or photos; (b) performance of our contract with you to provide the Service; (c) legitimate interests such as security and product improvement, where not overridden by your rights; and (d) legal obligations (e.g. tax and payment records).

4. Third-Party Service Providers

We share the minimum necessary data with trusted processors who help us operate the Service:

• Google Sign-In / Google Play services — authentication and app distribution (subject to Google's policies).
• Cashfree Payments India Pvt. Ltd. — payment collection via UPI, cards, and net banking (PCI-DSS compliant).
• Cloud hosting & database providers — encrypted storage of account and report data, primarily in India where practicable.
• Expo / push notification infrastructure — delivery of notification tokens only; message content is composed by us.
• Cloud computation providers — encrypted hosting and processing of chart data and report generation; no sale of your identity to advertisers.

Each provider is bound by contract to protect data and use it only for the stated purpose. Their own privacy policies also apply.

5. Photos, Biometrics & Sensitive Data

Face Reading and Vastu features require you to upload photos. These are used solely to generate your requested report. We do not use Face Reading photos for unrelated advertising or sale to third parties. Face geometry may be analysed algorithmically; we do not claim government-ID-level biometric verification.

6. Data Retention

We keep your account and profile data while your account is active. If you request account deletion, we delete or anonymise personal data within 30 days, except where we must retain records for legal, tax, or dispute resolution (e.g. payment invoices up to 7 years under Indian law). Server logs and backups may persist briefly before rotation.

Reports saved locally in “My Reports” on your device remain under your control until you delete the app or clear app data.

7. Security

• TLS encryption for data in transit.
• Hashed passwords and per-user API keys for authenticated requests.
• Restricted access to production systems for authorised personnel only.

No method of transmission over the Internet is 100% secure; we cannot guarantee absolute security.

8. Your Rights

Subject to applicable law, you may:

• Access and review personal data we hold about you.
• Correct inaccurate birth or profile information in the app.
• Withdraw consent for optional processing (e.g. notifications).
• Request deletion of your account and associated server-side data.
• Lodge a complaint with the Data Protection Board of India if you believe your rights are violated.

Contact us at supportcosmiclens@gmail.com to exercise these rights. We respond within 30 days.

9. Children

The Service is not directed to children under 13. We do not knowingly collect data from children under 13. Users aged 13–17 should use the Service only with parent or guardian consent. Contact us if you believe a child has provided data without consent.

10. International Transfers

The Service is operated from India. If you access it from outside India, your data may be processed in India or where our subprocessors operate, under safeguards consistent with this Policy.

11. Changes to This Policy

We may update this Policy from time to time. The “Last updated” date will change accordingly. Material changes will be notified in-app or by email where required.

12. Contact & Grievance Officer

• Email: supportcosmiclens@gmail.com
• Website: https://cosmiclens.app
• Grievance Officer — Cosmic Lens: contact supportcosmiclens@gmail.com. We acknowledge privacy complaints within 30 days and work to resolve them promptly.