Privacy Policy

Last updated: 12 August 2026 · Applies to kpstellarastro.com and the KP Stellar Astro app

Who this is about

KP Stellar Astro ("we", "the app") is operated as an individual proprietorship by the site's developer. This policy explains what personal data we collect from visitors and account holders, why, how long we keep it, and how you can access, correct, or delete it — consistent with India's Digital Personal Data Protection Act, 2023 (DPDP Act).

What we collect & why

Data	Purpose	Retention
Phone number, email, name, password (hashed)	Account creation & sign-in	Until you delete your account
Birth details you enter (date/time/place) for charts you generate	Computing your astrology chart — processed statelessly, only stored if you click "Save chart"	Guest use: not stored. Saved charts: until you delete them or your account
Saved charts, clients, rectification sessions	Letting you reload your own saved work	Until you delete them or your account
Your phone number or email, if you claimed a free welcome-credit offer (signup bonus, or the astrologer-registration bonus)	Preventing the same offer being claimed repeatedly by deleting and re-registering an account	Retained indefinitely — not removed when you delete your account, since its only purpose is recognising that phone/email if it registers again. Holds no other profile data
Payment records (Razorpay order/payment IDs, amount, status)	Crediting your purchase, refunds, accounting	Retained indefinitely per Indian tax/accounting record-keeping law, but de-linked from your identity if you delete your account
Usage logs (which feature you used, when)	Abuse prevention, support, product improvement	180 days, then automatically purged
Contact Us / feedback submissions (name, email, message)	Responding to your query	180 days, then automatically purged
AI Explanation question history (your questions & the AI's answers about your own charts)	Letting you revisit a past answer from AI Explanation > Previous questions without spending another question	180 days, then automatically purged, or immediately if you delete your account
The text of questions you ask a chart (Horary and AI Explanation), stored separately from your account under a one-way tag rather than your name, phone or email	Improving how accurately the engine works out which KP house a question belongs to — real wordings are the only way to find questions it reads wrongly. Reviewed in aggregate; the admin sees the question and the domain it matched, not who asked it	180 days, then automatically purged, or immediately if you delete your account
Predictions you choose to track, and what you later report actually happened (signed-in users only)	Building your own track record on your saved charts, and letting us measure honestly how often our predictions are right. Reviewed in aggregate only — the accuracy figures we look at are counts, and never include your question text, your account, or which chart it came from	Until you delete the tracked prediction or your account. Unlike question history, these are not purged after 180 days — a track record with a hole in it would be worthless, and the whole point is checking a prediction against what happened years later
IP address (rate-limiting only)	Preventing abuse of sign-up/OTP/AI endpoints	Purged once the associated rate-limit window is stale (within 180 days)
Aggregate page-view counts, with an approximate city/country derived from your IP address at the moment of the visit	Traffic monitoring (e.g. which regions we're reaching)	Your IP address itself is never stored — only the resulting city/country and a same-day count are kept, aggregated with other visitors, indefinitely
A random, anonymous ID stored in your browser's local storage (not a cookie, not linked to your account, name, or IP)	Distinguishing "unique visitors" from repeat page views in aggregate traffic statistics	Kept in your browser until you clear site data; server-side, only how many distinct anonymous IDs were seen per day is kept, aggregated with other visitors, indefinitely

Who else sees it

Razorpay — processes your payment; we never see or store your card/UPI credentials.
Firebase / Google — if you sign in with Google or phone OTP via Firebase Authentication.
Anthropic or OpenAI (whichever the admin has configured) — if you use the paid "AI Explanation" feature, your question and the relevant chart data are sent to generate a plain-language explanation. The AI provider is not told who you are — no name, phone, or email is included in that request.
Plausible Analytics — cookie-less, privacy-friendly page-view analytics on the marketing site.

We do not sell your personal data to anyone.

Your rights

As a data principal under the DPDP Act, you can:

Access your data — from Account & Settings, use Download my data to get a copy of everything we hold about you (profile, saved charts, usage log, payment history) as a JSON file.
Correct your data — update your name/email any time from Account & Settings.
Delete your account — from Account & Settings, use Delete my account. This permanently removes your profile, saved charts, clients, rectification sessions, usage logs, your AI Explanation history, and the questions you asked while signed in (including those held under the one-way tag described above). Questions asked while signed out carry no tag, so there is nothing linking them to you and nothing to delete; they expire on the same 180-day schedule. If you claimed a free welcome-credit offer, your phone/email is kept so the same offer cannot be claimed again by re-registering — this is the one exception to full deletion, and it holds nothing beyond that identifier. Payment records are kept (as required by accounting law) but are anonymized and no longer linked to your identity. This action cannot be undone.
Withdraw consent — stop using the service and delete your account at any time; withdrawal doesn't affect the lawfulness of anything already done.

Grievance Officer

If you have a complaint about how your personal data is handled, contact:

Email: kpstellarastro2026@gmail.com

We aim to acknowledge grievances within 7 days and resolve them within 30 days.

Security

Passwords are hashed, never stored in plain text. Payment card/UPI details are handled entirely by Razorpay — they never reach our servers. Admin credentials and API keys are kept server-side only.

Changes to this policy

If this policy changes materially, we'll update the "Last updated" date above. Continued use of the app after a change means you accept the revised policy.