Privacy Policy

Last updated: 17 June 2026

1. Who we are

Cosmic Circle is operated by Srihari R, an individual based in Chennai, Tamilnadu, India. For the purposes of India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”), we act as the Data Fiduciaryfor the personal data described below. For users in other regions, equivalent roles (e.g. “controller” under the EU/UK GDPR) apply.

2. Information we collect

We collect only what we need to run the Service. Specifically:

a. Information you give us

• Account details: full name, email address, mobile number (with country code), and a chosen username.
• Password: handled by our authentication provider; we never see or store it in plain text.
• Birth details (sensitive): your date of birth, exact time of birth, and birth place — including the latitude, longitude, and time zone resolved from that place. These are required to compute an astronomically accurate sidereal chart.
• Messages & social activity: if you use the social features, the messages you send, your connection requests, and your “Cosmic Bond” requests and consents.
• Privacy preferences: your per-field visibility settings (public / connections / private).

b. Information we derive

• A cached cosmic identity computed from your birth details — your nakshatra (and pada/lord), moon sign, ascendant, Janma Rasi, and numerology numbers. This is derived data, stored for display; the underlying calculation runs in your browser.

c. Information collected automatically

• Usage & metering: counts of AI readings you generate (to enforce fair-use limits).
• Push subscriptions: if you enable notifications, the push endpoint your browser issues.
• Technical data: standard server and security logs (e.g. IP address, device/browser type, timestamps) generated by our hosting and infrastructure providers.
• Location search queries: the place text you type when searching for a birth place, sent to a geocoding service to resolve coordinates.

We do not knowingly collect government IDs, financial account numbers, or precise device GPS location.

3. How we use your information

• To create and secure your account and authenticate you.
• To compute your astrological chart, dasha timeline, and related readings.
• To generate AI-assisted readings grounded in your chart (see §5).
• To operate the social features (connections, messaging, Cosmic Bonds) you choose to use.
• To enforce fair-use limits on AI readings.
• To send notifications you have opted into.
• To maintain security, prevent abuse, debug, and comply with law.

We do not sell your personal data, and we do not use your birth details for advertising.

4. Legal basis & consent

We process your data on the basis of the consentyou give when you sign up and use the Service, and to perform the service you request. Because birth details are sensitive, we collect them only with your knowing consent and use them solely to deliver the readings you ask for. You may withdraw consent at any time (see §8); withdrawing it may mean parts of the Service can no longer function.

5. Who we share data with

We do not sell data. We share it only with the service providers (“processors”) needed to run the Service, each bound to use it only on our instructions:

• Supabase — authentication and database hosting (stores your account, profile, messages, and preferences).
• Anthropic (Claude API)— when you request an AI reading, we send the relevant chart context (derived astrological data, not your raw identity) to generate the text. Per Anthropic’s terms, API inputs/outputs are not used to train their models.
• OpenStreetMap / Nominatim — to convert a birth-place name you type into coordinates.
• Push delivery services — your browser vendor’s push service (e.g. Google, Mozilla, Apple) if you enable notifications.
• Hosting & infrastructure providers — to serve the application and keep security logs.

We may also disclose data where required by law, to enforce our Terms, or to protect the rights and safety of users.

6. International data transfers

Some of our providers process data on servers outside India. Where we transfer personal data across borders, we rely on your consent and take reasonable steps so it remains protected consistent with this policy and applicable law.

7. How long we keep data

We keep your personal data for as long as your account is active. If you delete your account, we delete or anonymise your profile, birth details, messages, and derived identity within a reasonable period, except where we must retain limited records to comply with law, resolve disputes, or enforce our agreements. Backups and security logs age out on their own cycle.

8. Your rights & choices

Subject to applicable law, you may:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data (you can edit most of it in-app).
• Erase your data by deleting your account or contacting us.
• Withdraw consent at any time.
• Nominate another individual to exercise your rights in the event of death or incapacity (DPDP Act).
• Complain to us, and escalate to the Data Protection Board of India or your local regulator.

To exercise any of these, email us at sriharishivom@gmail.com. We respond within the timelines required by law.

9. Security

We use reasonable technical and organisational safeguards: encrypted connections (HTTPS), database row-level security so users can only access their own records, server-side secrets, and access controls. No system is perfectly secure; if a breach affecting your data occurs, we will notify you and the relevant authority as required by law.

10. Children (under 18)

The Service is intended only for users who are 18 years or older. We do not knowingly collect personal data from anyone under 18. If we learn that we have collected data from a minor, we will delete it. If you believe a minor has provided us data, contact us.

11. Cookies & local storage

We use cookies and browser local storage only for essential purposes — keeping you signed in, remembering your settings (theme, language, ayanamsa), and security. We do not use third-party advertising or cross-site tracking cookies.

12. Changes to this policy

We may update this policy as the Service evolves or the law changes. We will update the “Last updated” date above and, for material changes, give prominent notice. Continued use after changes means you accept the updated policy.

13. Contact & grievances

For any privacy question, data-rights request, or grievance, contact our Grievance Officer (designated under India’s Information Technology Rules, 2021):

We acknowledge grievances within 24 hours and aim to resolve them within 15 days, as required by law.