प्राइवेसी

Operated by Yukti Labs. Last updated: 19 October 2026.

What we collect

Only what the service needs to work:

• Sign-in details such as your phone number or Google account email when you choose that sign-in method. The saved sign-in value is stored encrypted to support account recovery; guest use does not require these details.
• Birth details (date, time, place) you enter for yourself or family members you add - required to compute Vedic charts.
• Your conversations with Pandit Ji, so readings stay consistent across sittings.
• Optional photos only when you choose to share one. Photo classification and vision reading requests are sent to Google Gemini to interpret the image. The classification endpoint does not write the image to disk. Vision reading uploads use a temporary server copy while processing; incomplete, cancelled and failed requests remove that source copy, while a completed reading retains the answer rather than the source image. A daily status-card photo is stored until you clear it or use Profile & settings > Forget my details.
• Voice audio when you use the call feature - transcribed to text to answer you.
• Payment status for seva or subscriptions, processed by Google Play, Apple App Store or Cashfree where that offer is available - we never see or store your card or UPI credentials.
• First-party usage analytics (app opens, screens, answer views, language, platform, timing, errors and a known campaign content ID) tied to your signed account or guest identifier, to improve the product. These events contain no conversation text, birth details, advertising IDs or session recordings. Temporary-chat product events are not stored.
• Crash diagnostics in app builds with reporting enabled: app version, platform, error category and technical code locations help us find and fix failures. This reporting is configured to exclude conversation text, birth details, photos, audio, account identifiers, screenshots and session recordings. We configure the crash provider not to retain IP addresses or inferred location.

How it is used

To compute your charts, answer your questions, remember your context between sittings, fulfil a seva order only when you are shown and accept a current offer, and improve the service. We do not sell personal data. The app contains no advertising SDKs.

Who processes it

For phone sign-in, the configured SMS verification provider (currently Message Central) processes your phone number and verification request to send and check the one-time code. Google verifies your identity when you choose Google sign-in. Conversation text may be processed by Google Gemini when generating replies, and submitted photos are processed by Google Gemini to interpret images. Google Gemini Live processes call audio on the selected real-time route for listening and spoken replies. OpenAI Realtime can process call audio only when the operator selects the rollback route; the app does not switch to it automatically. If real-time startup is unavailable, the classic call route may send audio to Sarvam AI for speech-to-text and speech output. Astrological readings from either route use the shared reading service; it may use Google Gemini to prepare a response or return a deterministic Jyotish result. Subscription payments are handled through RevenueCat and the relevant Google Play or Apple App Store billing system; web payments use Cashfree. Sentry processes the limited crash diagnostics described above. Each receives what its function needs.

The authorized service operator can open saved profiles and conversations for support, account handling and service-quality review. These accesses are logged. Private conversations are not published as marketing content. Public website measurement counts page responses without storing an IP address, full URL or visitor identifier.

Abuse prevention

Keyed account and network fingerprints with request timestamps are retained for up to 30 days plus two minutes to enforce usage limits, including after deletion. They contain no chat text or birth details. Token-revocation records prevent deleted credentials from working again. A keyed account identifier and deletion timestamp are retained to reject payment events that predate deletion. These replay-prevention records do not automatically expire and contain no raw account ID, payment payload, conversation, birth details or photo. Hashed deletion receipts allow confirmation retries for 180 days; expired receipts are removed during subsequent deletions. They contain no raw account ID, credential, birth details or conversation.

Retention and deletion

Saved profiles and conversations generally remain until you request deletion; remembered facts can also expire or be pruned under their memory-retention rules. Product-event history older than 90 days is eligible for bounded cleanup, while first-use and attribution anchors remain until account deletion. Unpaid booking records ordinarily expire after 90 days; paid booking records are retained for 365 days after payment confirmation. Expired booking records are eligible for bounded cleanup, rather than an immediate-erasure guarantee. Security and replay-prevention records follow the separate rules above. We promise no fixed deletion period for backup or recovery copies; residual copies may remain under backup and recovery controls until they are overwritten. In the app, open Profile & settings, choose Forget my details, and confirm. The app sends the request to the server and shows the server result; retry if the request does not complete. See data deletion. Uninstalling alone does not delete server data.

Children

Kashi Ke Panditji is for adults aged 18 or older. Children must not use the service, even with guardian consent. An adult may manage authorized family profiles; this does not permit a child to use the service.

Security

Data moves over encrypted connections (HTTPS) and access is restricted to the operation of the service.

Contact

For privacy questions, use Help & Support. The support page provides the current contact route.

Questions? Contact support. Last updated 2026.