Privacy at Kaalam.

Who is responsible for your data

Kaalam is operated by Equiti Ventures LLC, a limited liability company registered in the United States, which is the data controller for the purposes of the UK GDPR, the EU GDPR, and comparable laws. All privacy correspondence goes to privacy@astrokaalam.com.

What Kaalam collects

• Account: your email address and an encrypted password (or, if you use Sign in with Apple or Google, the identifier that service returns). Passwords are hashed by our authentication provider and are never visible to us.
• Name: your name, and optionally its Devanagari and IAST forms, used to address you and to compose traditional invocations.
• Birth details: date, time, and place of birth, including the coordinates and timezone of that place. These are mathematically required to compute a chart — without them Kaalam cannot produce a reading.
• Sex, and optionally gotra and regional observance: recorded because certain classical calculations and traditional invocations differ on these. Providing gotra and observance is optional. See the sensitive-data section below.
• Details of other people, if you enter them: if you buy a reading for a family member, we store the name, relationship label, and birth details you provide for that person. See “Readings for other people” below.
• Chart and reading history: the computed chart and every reading generated for you, stored so you can re-open what you paid for.
• Your current location (mobile app): Panchang timings depend on local sunrise and sunset, so the app may ask for your current location. This is a different thing from your birthplace and is used only to compute the timings you are looking at. You can refuse and choose a city instead; the app works either way.
• Purchases: what you bought, when, in which currency, and on which platform. Payment card details are handled entirely by Apple, Google, or our payment processor and are never sent to or stored by Kaalam.
• Product analytics: page views and feature-usage events, used to understand which parts of the product need work.
• Technical data: device type, operating system version, app version, and IP address, processed to deliver the service, keep it secure, and diagnose faults.

Sensitive information — read this part

Some of what Kaalam needs is treated as sensitive or “special category” data under privacy laws including the GDPR. Specifically:

• Sex is required because some classical calculations differ on it.
• Gotra and regional observance are optional, and because they can indicate religious or community affiliation, they are treated as special-category data.
• Your use of Kaalam may itself suggest a philosophical or religious interest. We treat the fact of your account accordingly.

Where the law requires a specific basis for handling this information, we rely on your explicit consent, given when you enter these details. You can withdraw that consent at any time by deleting the optional fields or your account. Kaalam does not use any of this information for advertising, profiling for marketing, or any automated decision producing a legal or similarly significant effect about you.

Readings for other people

Kaalam lets you buy a reading for someone else — a partner, child, or parent — which means entering their name and birth details. That person’s data is subject to this policy exactly as yours is.

Only enter another person’s details if they have agreed. By entering them you confirm you have that person’s consent, or, for your own minor child, that you are entitled to consent on their behalf. If someone tells us their details were entered without their agreement, we will delete them on request to privacy@astrokaalam.com.

What Kaalam does NOT collect

• Government identifiers, postal address, or phone number.
• Contacts, calendar, photos, camera, or microphone.
• Health records, biometrics, or the contents of your messages.
• Your payment card number, which never reaches our servers.
• Background or continuous location. The app asks for your location only while you are using it.

Why Kaalam is allowed to use your data

• To perform our contract with you: computing your chart, generating readings, delivering purchases, and providing support.
• With your consent: sensitive details described above, current location, optional analytics, and push notifications.
• Our legitimate interests in keeping the service secure, preventing abuse, and improving the product — balanced against your rights, and never extending to selling your data.
• Legal obligations, such as retaining tax and transaction records.

Kaalam does not sell, rent, or share your personal information with advertisers or data brokers. We do not engage in “sharing” for cross-context behavioural advertising as that term is defined under California law. We have never sold personal information and have no plans to.

Who else processes your data

Kaalam relies on a small number of service providers, each handling data only on our instructions:

• Supabase — account, chart, and reading storage.
• RevenueCat, Apple, and Google — subscription and purchase processing.
• DigitalOcean, Vercel, and Cloudflare — hosting, delivery, and document storage.
• PostHog — product analytics.
• Resend — transactional email such as receipts and delivery notices.
• An AI language service — used only to phrase readings into fluent prose from content the Kaalam engine has already determined. What a reading says is decided by Kaalam’s own deterministic calculations, not by the language service. Your account identity and contact details are not sent to it, and your data is not used to train anyone else’s models.

Where your data is held, and for how long

Kaalam is operated from the United States and your information is processed there and in other countries where our providers operate. Where data leaves the UK or European Economic Area, we rely on standard contractual clauses or equivalent safeguards. Data is encrypted in transit and at rest.

We keep your account, chart, and readings for as long as your account exists, because a reading you paid for should still be there when you return. After you delete your account we erase this data within 30 days, except records we must keep for tax and accounting purposes, which are retained for the period the law requires and used for nothing else. Backups are purged on their normal rotation.

Your rights and how to use them

Depending on where you live, you may have the right to access, correct, delete, port, or restrict our use of your data, to object to processing, and to withdraw consent. Residents of California, Colorado, Connecticut, Virginia and other US states with privacy statutes have comparable rights, including the right not to be discriminated against for exercising them.

• Delete your account: in the app or website account settings, or email privacy@astrokaalam.com from your account address.
• Get a copy of your data: email the same address and we will send a machine-readable export.
• Correct something: birth details and name can be edited directly in your account.
• Turn off analytics, location, or notifications: analytics has an in-product toggle; location and notifications are controlled by your device settings and can be refused or revoked at any time without losing access to what you have paid for.

We respond within 30 days. You will not be charged, and you do not need to give a reason. If you are in the UK or EEA and are unhappy with our response, you may complain to your local data protection authority.

Security

Access to production data is restricted and authenticated, traffic is encrypted with TLS, documents are served through short-lived links that expire, and payment credentials never reach our systems. No service can promise perfect security, and we do not. If a breach affects your data and the law requires it, we will tell you and the relevant regulator without undue delay.

Children

Kaalam is not intended for children under 16, and we do not knowingly collect data from them. A parent or guardian may enter a child’s birth details to obtain a reading about that child; in that case the parent is responsible for the child’s information and may have it deleted at any time. If you believe a child has created an account, email privacy@astrokaalam.com and we will remove it.

Changes to this policy

Material changes are announced by email to registered users at least 14 days before taking effect. Non-material clarifications update the “Last updated” date above.