Privacy Policy

RK ASTRO VEDA AI is operated by RK Gattani at https://www.rkastroveda.com/. For privacy questions, grievances, access, correction or account/data deletion requests, email rkastrovedaai@gmail.com. Privacy text restored and revised on 22 October 2026.

Email/password registration processes your email and authentication credentials through Lovable Cloud authentication. Optional Google OAuth sign-in processes the account identifiers and profile information returned by Google. We also process account preferences, consent records and service activity needed to manage your account.

You can create basic guest Kundlis without signing in. Guest birth profiles use temporary, tab-scoped sessionStorage with a random guest-session identifier; they are moved to an account only after your explicit confirmation. Closing the tab normally clears this storage, although browser session restoration can preserve it. Separate browser storage may persist sign-in sessions, language and practice preferences, visitor identifiers and guest payment/account references. Closing a tab does not erase payment or server records.

We process the name or label, birth date, birth time and its accuracy, birth place, coordinates and timezone you supply, and any optional relationship or profile details. The local astrology engine calculates Kundli placements from these inputs. Account-saved birth profiles and reports are stored in Lovable Cloud; some services also validate or recompute chart data on the server.

For astrology AI interpretations, compacted Kundli placements, relevant birth/profile context and your questions or conversation context are transmitted to Lovable AI Gateway. Different services may need different portions of this information. AI interprets chart data; it does not replace the canonical astrology calculation engine. Avoid providing another person's personal information without appropriate permission.

Face and palm readings send the photos you choose and the reading prompt to Lovable AI Gateway after the required consent. The app does not intentionally save those submitted photos as reading-image files; provider processing, temporary handling and logs are not the same as permanent app image storage. Saved reading results can remain in your account.

When you activate voice features, recorded audio is sent for transcription through the AI gateway. Text is sent for speech generation when you request spoken answers. Microphone or camera/gallery access depends on the feature and your permission. Spiritual Guru conversations use their separate guidance service and do not receive your Kundli data.

AI processing involves the gateway and its underlying model providers. This policy does not promise that provider logs are absent, that processing remains in India, or that provider retention/training settings have been independently verified. Do not submit card secrets, passwords or unnecessary sensitive information in questions, photos or recordings.

Razorpay is the primary gateway configured for new payments. Cashfree remains for historical orders and reconciliation. Your checkout or order identifies its payment provider; naming a provider does not mean a particular payment will succeed.

The app keeps order/payment references, amounts, status, wallet transactions and records needed for reconciliation, security, support and accounting. Checkout/contact details are processed where needed by the payment provider. The app does not collect or store card numbers, CVVs, UPI PINs or banking passwords. Payment verification and wallet credit occur server-side; please never send payment secrets to support.

Lovable Cloud and its hosting/Edge runtime provide authentication, database, storage and server processing. Lovable AI Gateway and its model providers process the AI inputs described above. Google OAuth is used only when you choose Google sign-in; Google-hosted fonts may also receive normal web requests.

Open-Meteo geocoding receives location search text to find places and coordinates. Enter place names, not personal secrets. Exotel integrations support telephone-call setup and status where configured and can process telephone/contact details and call metadata. Their existence is not confirmation that every call service is enabled.

ZEGOCLOUD integration includes authenticated participant/session checks and preview-token functionality for private call preparation. Tokens alone do not establish a connected call. If calling is enabled and used, media and connection metadata are handled by that provider; paid operation and real-device verification remain separate deployment requirements.

Telegram Bot API processes the linked chat identifier and daily-guidance messages for users who link Telegram and opt into delivery; users can stop delivery. These services have their own privacy practices. External social and other links take you to independent services. Public professional listings may display information the professional explicitly elects to publish; account birth charts and private readings are not public directory content.

The app records first-party page visits, session/visitor identifiers, device category, referrer/source and edge-provided country/city to understand usage and detect abuse. It uses localStorage for a persistent random visitor ID and sessionStorage for a session ID. Signed-in activity can be associated with an account, so these records are not described as fully anonymous.

The homepage visitor counter hashes the request IP and visitor identifier; security-event handling masks IP information. Hashed or masked identifiers reduce direct exposure but do not make all processing anonymous. Hosting and service providers can receive the original IP and technical request information to serve and secure the site.

No Google Analytics, Firebase analytics, Meta advertising pixel or advertising SDK was identified in the app configuration reviewed for this restoration. This does not mean there is no first-party analytics or diagnostic reporting: the app reports runtime errors through its platform error-reporting integration, and infrastructure/providers may keep operational logs. Advertising links/referrers may identify a traffic source without an advertising SDK in the app. Third-party provider configuration and retention are not independently certified by this review.

We process data to provide requested charts, AI and communication services, manage accounts and consent, verify payments, deliver opted-in guidance, support users, maintain security and understand site usage. Data needed for those purposes is processed by relevant providers and authorized operators; lawful requests and fraud prevention may require disclosure. We do not promise that personal data is never shared, because providing these services requires provider processing.

Access controls and server-side authorization protect account records and money movements. Connections use HTTPS on the public site. No system is completely secure; protect your credentials and contact us if you suspect unauthorized access. Permissions for optional features can be managed in your browser/device settings.

Guest charts are temporary as described above. Account profiles, saved readings, payment records, consent, support and security records may remain while needed to deliver services, investigate issues or satisfy applicable legal/accounting obligations. There is no independently verified, uniform retention period for all app and provider records, and this policy does not invent one.

You can request deletion of your account and personal data from Profile → Privacy & Data Controls, or email rkastrovedaai@gmail.com, including if you cannot sign in. Requests require appropriate identity verification; do not email your password. The in-app action submits a request for review, not instant automated deletion. Records legally required for payments, accounting, fraud/security or disputes may be retained, and backups/provider copies may not disappear immediately. Ask the operator for the scope and status of your request.

Signed-in users can open Profile → Privacy & Data Controls to download a JSON export of the supported account datasets and submit access, correction, deletion, consent-withdrawal, payment or grievance requests. The current JSON export covers birth profiles, saved-report records, payments, subscriptions, report purchases, consent and data-request records; it is not a claim to export every dataset or provider log. Contact us for additional applicable access requests.

You may stop optional Telegram delivery, revoke device permissions, clear browser storage, or request withdrawal of consent. Clearing device storage does not delete server records. Withdrawal can prevent services that need that processing, without removing records required by law. Applicable privacy rights and lawful exceptions depend on your circumstances; contact the privacy/grievance address to exercise them.

Accounts and purchases are intended for adults aged at least 18 or the applicable age of majority, consistent with the Terms. The current Terms permit younger use only with a parent or guardian's involvement and consent; the app does not independently verify age or guarantee a technical block on minors. Parents or guardians should contact the privacy address if a child has submitted personal information. This disclosure is not a claim that Google Play age or child-safety requirements have been satisfied.

Material changes should be disclosed through the app and consent requested where required. The operator's privacy and grievance contact is RK Gattani, rkastrovedaai@gmail.com. Include a concise description and your account email or relevant order reference, not payment secrets. We will review requests under applicable law; this policy does not invent a response deadline, business address or statutory registration detail.