Privacy Policy
Effective 21 October 2026 路 Version 2026-10-21
- As a guest, your birth details are calculated on your own device and are never sent to us.
- We keep a visitor log of the name you type (no birth details) for 12 months.
- Accounts need only a username and a passkey: no email, no password, no phone number.
- Research sharing is off unless you tick the box, never includes your name, birth date, time or place, and can be withdrawn.
- No advertising, no trackers, no analytics cookies, and we never sell or share personal information.
1. Who we are
Janam Kundli is a free, non-commercial personal project published under the name ADVIKA Magnus from San Diego, California, USA ("we", "us"). It is not a business and makes no money. We are responsible for your data as the data controller under the EU and UK GDPR and the Data Fiduciary under India's Digital Personal Data Protection Act 2023 ("DPDP Act"). The California Consumer Privacy Act applies to businesses above certain size thresholds, which this project is not; we nevertheless follow its principles and honour the rights described in section 8.
Contact for privacy questions, requests and grievances (including as Grievance Officer under the DPDP Act): [email protected].
We are not established in the EU or UK. Because our processing is occasional, small in scale and low-risk, we have not appointed an EU or UK representative (GDPR Art. 27(2)); please contact us directly.
2. What we collect, why, and for how long
| Data | When | Purpose | Legal basis | Kept for |
|---|---|---|---|---|
| Birth date, time and place you enter | Every chart | Calculating your chart. This happens in your browser; nothing is sent to us unless you save the chart to an account. | Not collected by us | Not stored |
| The name you enter, your country (from your network), a one-way salted hash of your IP address, time | Every chart | Visitor statistics and preventing abuse (rate limiting) | Legitimate interests (GDPR Art. 6(1)(f)); for India, the purpose for which you voluntarily provide it (DPDP Act s.7(a)) | 12 months |
| Username, passkey public key and ID, account creation and last sign-in times, terms version accepted | If you create an account | Providing your account and signing you in securely | Contract (GDPR Art. 6(1)(b)); consent (DPDP Act s.6) | Until you delete your account |
| Saved charts: name, birth date, time, place, coordinates, UTC offset | Only when you press "Save to my account" | Showing you your charts again | Contract; consent | Until you delete the chart or your account |
| Session cookie (a random token; we store only its hash) | While signed in | Keeping you signed in | Strictly necessary; contract | 30 days or until you sign out |
| Research data: see section 4 | Only if you tick the research box | Improving readings and building future models | Consent (GDPR Art. 6(1)(a); DPDP Act s.6) | Up to 3 years, or until you withdraw |
We do not ask for, and ask you not to provide, email addresses, phone numbers, government IDs, health information, religion or caste, or other sensitive information.
3. Cookies and storage on your device
We use one cookie, only when you are signed in, to keep you signed in. It is strictly necessary, so no cookie banner is needed. Your browser's local storage keeps your chart-style preference and, if you opted in to research, the random IDs of your research contributions (so you can withdraw them). This stays on your device. We use no analytics, advertising or tracking cookies, no social-media pixels, and no third-party scripts or fonts: everything is served from this site.
4. Research sharing and model training (opt-in)
If, and only if, you tick "help improve future readings", we receive a pseudonymous chart pattern under a random ID that is not linked to your name, account or IP address:
- the signs, houses, dignities and retrograde status of the nine planets; your ascendant, Moon sign and nakshatra; the current dasha periods; the yogas and life-area ratings shown to you;
- an age band (such as 25-34), never your birth date, time or place;
- any 馃憤 / 馃憥 feedback you give on parts of the reading, and any question you choose to send us.
How we use it: to measure which readings people find accurate, improve our texts, and design, evaluate and train future versions of our service, including statistical and AI models that generate astrology readings. We use only our own original content and data you have chosen to contribute; we do not scrape or use other people's copyrighted material. Research data is never sold, never used for advertising, and never used to make decisions about you.
Children: research sharing is not available for charts of anyone under 18; the form disables it and our server rejects it.
Withdrawing: use the button below on each device where you contributed, or email us. Because contributions are deliberately not linked to you, we cannot find them without their random IDs, which only your device holds. Withdrawal does not affect use already made, such as a model already trained, but your data will not be used in any future training.
5. AI
The free version uses no AI: readings are produced by fixed rules and texts we wrote. If we later add AI-generated answers (for example in a paid tier), we will label AI-generated content as such, list any AI provider we use in section 6, and update this policy before that feature launches.
6. Who receives data
We are based in the United States, so data we hold is processed there. Our only service provider (processor) is Cloudflare, Inc., which hosts the site and database and protects it from attacks. Cloudflare processes data on our instructions, and its network may process requests in the United States and other countries. Transfers from the EU, UK and Switzerland rely on Cloudflare's certification under the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) and on Standard Contractual Clauses. Transfers from India to the United States are permitted under the DPDP Act unless restricted by government notification.
We do not sell personal information, do not "share" it for cross-context behavioural advertising (as those terms are defined in the CCPA), and do not disclose it to anyone else unless required by law, or to protect the rights and safety of users or the public.
7. Security
All traffic is encrypted (HTTPS with HSTS). Sign-in uses passkeys, which are resistant to phishing and mean we hold no passwords. Session tokens and IP addresses are stored only as hashes. The site uses a strict Content Security Policy and rate limits. Access to stored data is limited to the operator. No system is perfectly secure; if a breach affects you, we will notify you and the relevant authorities as the law requires.
8. Your rights
Everyone
You can see, download and delete your account data yourself on the account page, withdraw research data with the button above, or email us at [email protected]. We will reply within one month (45 days for California requests) and may ask for proof that the account is yours, for example by signing in.
EU, EEA, UK and Switzerland
You have the right to access, rectify, erase, restrict and port your data, to object to processing based on legitimate interests, and to withdraw consent at any time. You may complain to your local data protection authority. We do not make decisions about you based solely on automated processing.
India
Under the DPDP Act you may obtain a summary of your data and its processing, have it corrected, completed, updated or erased, withdraw consent as easily as you gave it, nominate another person to exercise your rights, and seek redress from our Grievance Officer at [email protected]. If unresolved, you may complain to the Data Protection Board of India.
California and other U.S. states
California residents have the right to know what personal information we collect, use and disclose; to delete and correct it; to opt out of its sale or sharing (we do neither); to limit use of sensitive personal information (we use none beyond what is needed to provide the service); and not to be discriminated against for exercising these rights. Categories collected in the last 12 months: identifiers (name you enter, username, hashed IP address), approximate location (country), characteristics you provide (birth details of saved charts), and inferences limited to the chart reading shown to you. We honour Global Privacy Control signals as an opt-out of sale and sharing, though we do neither. Residents of other U.S. states with privacy laws have similar rights; contact us to exercise them.
9. Children
The service is not directed to children under 13, and accounts are for people 18 or older. Parents may create a chart for their child as a guest, which is processed only on their own device, or save it in their own account as the child's parent or guardian. We do not knowingly collect personal data from children; if you believe we have, email us and we will delete it.
10. Changes
We will post any changes here with a new effective date. If a change materially affects how we use data you have already given us, we will ask for your consent again where the law requires.
11. Contact
ADVIKA Magnus 路 [email protected] 路 San Diego, California, USA