PRIVACY POLICY

1. Who we are

Janma Labs Private Limited operates the Janma mobile application and website at janma.ai. For applicable data-protection purposes, the Company determines the purposes and means of processing personal data collected through the Service, subject to the law in force at the relevant time.

2. Scope

This Privacy Policy applies to personal data processed through Janma, including the mobile application, your account, the astrology features and your communications with the Company. It also applies to the website at janma.ai, which is an information site with one interactive page: the self-service account-deletion form at janma.ai/delete-account.html, described in Section 4. This Policy does not govern an independent third party’s privacy practices where you contract directly with that third party.

3. Current legal position and DPDP transition

Janma maintains this Policy with regard to the Indian legal framework presently applicable to the Service. The DPDP Act and DPDP Rules have been notified, but the principal operational provisions on notice, consent, rights, child data and grievance redressal are scheduled to commence on 13 May 2027. Janma is implementing the corresponding product architecture in advance. This means the user-facing Consent Notice is presently an additional transparency and consent document and is intended to become the statutory DPDP notice when the relevant provisions commence.

4. Personal data we collect

Janma does not collect contact lists, SMS contents, call records, biometric data, photographs, voice recordings or device location. Your place of birth and current location are stored as precise coordinates because chart and almanac calculations require them; they come from the place name you type, not from your device’s location services, and Janma does not track your location. Janma does not use analytics, advertising or crash-reporting software in the app. The daily energy check is a single self-reported value and is not a health record; Janma does not infer anything about your health from it.

5. Purposes and lawful basis

Janma processes personal data only for the purposes stated in Section 4. Under the DPDP architecture Janma is adopting in advance, your consent at sign-up covers the processing of your birth particulars, profile details, current location and daily energy check to provide the Service. Processing of your phone number, activity data, technical data and consent records is necessary to operate the account you have asked for and to keep the Service secure. Janma does not carry out any optional processing that requires a separate consent. If Janma introduces such processing in future, it will ask for that consent separately and will not bundle it with the core Service.

6. AI processing

Janma uses an AI language model provided by Anthropic to write the wording of certain readings. Each night Janma generates this content once for each zodiac sign; every user of that sign receives the same wording, and your name is applied to it inside Janma after generation. No personal data about you — not your name, birth particulars, location or any other detail — is sent to Anthropic. Janma’s contract with Anthropic provides that content supplied by Janma is not used to train its models.

Janma does not currently offer a conversational AI feature. If one is introduced, this Policy will be updated before launch to describe what is processed, by whom, and for how long.

7. Sharing and disclosure

Janma shares personal data only with the service providers listed in Schedule B, each acting on Janma’s instructions and only to the extent needed to operate the Service. Janma applies contractual and technical measures appropriate to the role and risk of each provider.

Personal data may also be disclosed where required by law, court or regulatory order, to law-enforcement authorities acting under lawful authority, to protect life or safety, to investigate fraud or security incidents, or to establish, exercise or defend legal claims.

In a merger, acquisition, reorganisation or transfer of the business, relevant personal data may be transferred to the successor as part of that transaction, subject to applicable law and appropriate confidentiality and data-protection safeguards.

Janma does not sell or rent personal data and does not share it with advertisers. Janma does not use analytics or advertising software in the app.

8. International processing

Janma’s servers and database are hosted by DigitalOcean in Bangalore, India. Some providers may process data outside India: Firebase Authentication (Google) may hold your phone number and account identifier on Google infrastructure outside India; AstrologyAPI.com and Google Maps Platform may process the birth and place details sent to them outside India; Google reCAPTCHA Enterprise may process the website account-deletion page’s request signals outside India. Anthropic receives no personal data. Where international processing occurs, Janma applies contractual, technical and organisational safeguards appropriate to the service and complies with any Indian legal restriction or condition applicable to the transfer.

9. Cookies and similar technologies

The Janma website at janma.ai uses no analytics or advertising technologies. Its account-deletion page loads Google reCAPTCHA Enterprise, which is strictly necessary to stop automated abuse of a form that sends SMS and deletes accounts; reCAPTCHA sets its own cookies and receives your IP address and browser signals in order to score the request. No other page sets a non-essential cookie. The mobile application does not use analytics, advertising-measurement or crash-reporting software. If Janma introduces any such technology, it will update this Policy and obtain any consent required before it is enabled.

10. Retention and deletion

You can delete your account from within the app or at janma.ai/delete-account.html; deletion is confirmed by a one-time code sent to your phone. For 30 days after that, your account is suspended but recoverable: signing in during that period restores it in full. After 30 days, Janma permanently deletes your account record, your birth particulars, your energy checks, any compatibility results you created, and your sign-in identity, and retains only what law, security, fraud prevention or dispute resolution requires, such as consent records and security logs for the periods above. Any birth particulars of other people that you entered are deleted with your account.

11. Security safeguards

Janma maintains reasonable security safeguards proportionate to the nature and risk of the processing, which may include encryption in transit and at rest, access controls, authentication, logging, least-privilege access, vendor controls, backups, security monitoring and incident-response procedures. No electronic system is completely secure.

12. Personal data breaches

Janma maintains incident-response procedures for unauthorised access, disclosure, loss, alteration or destruction of personal data. Where an incident triggers a reporting obligation, Janma will notify the competent authority and affected persons within the time and manner required by the law then in force. Cybersecurity incidents falling within CERT-In reporting requirements will be handled in accordance with the applicable CERT-In directions, including the applicable six-hour reporting requirement for reportable incidents.

13. Your rights and choices

Depending on the law applicable at the relevant time, you may have rights to obtain information about processing, request correction or update, request deletion where applicable, withdraw consent where processing is consent-based, opt out of optional processing, and raise grievances. You can update your name, gender, relationship status and email in the app, and delete your account from the app. For anything else, contact support@janma.ai. When the substantive DPDP rights provisions commence, Janma intends to provide the statutory access, correction/erasure, consent withdrawal, grievance redressal and nomination mechanisms required by the DPDP Act and Rules.

For future DPDP rights, Janma intends to provide mechanisms for access, correction/erasure, withdrawal of consent, grievance redressal and nomination in accordance with the DPDP Act and Rules when the relevant provisions commence.

14. Children

Janma is intended for adults and does not knowingly permit a child to create an account. Where a parent or lawful guardian submits a child’s birth particulars, the parent or guardian must be authorised to do so. Janma will not knowingly use child data for behavioural advertising, targeted advertising or harmful profiling. When the DPDP child-data provisions commence, Janma will apply the prescribed verifiable-consent and processing restrictions.

15. Service communications

Janma sends you SMS one-time codes to sign in and to confirm account deletion, and may send essential account messages. Janma does not send promotional communications and does not currently send push notifications. If Janma introduces either, it will ask for your separate choice first and you will be able to withdraw it without closing your account.

16. Third-party links and services

The Service may contain links or integrations to third-party services. Their independent privacy practices may differ from this Policy. Review the applicable third party’s terms and privacy notices before sharing information directly with them.

17. Changes to this Policy

Janma may update this Policy to reflect changes in the Service, vendors, law or security practices. The version and last-updated date will be shown at the top. Where a change materially alters the purposes or manner of processing and a notice or fresh consent is required, Janma will provide the required notice or obtain the required consent before relying on the new purpose.

18. Grievance redressal

Privacy and data-protection concerns may be sent to grievance@janma.ai or support@janma.ai. Consumer/service complaints may be sent to support@janma.ai. Janma will publish and keep current the name and contact particulars of its designated Grievance Officer before launch. Consumer grievances will be acknowledged within 48 hours and ordinarily redressed within one month where the applicable e-commerce rules require those timelines. The future DPDP grievance and Board process will be implemented when the relevant provisions commence.

Grievance Officer: Designated Grievance Officer, Janma Labs Private Limited. Before publication, the Company will publish the officer’s name together with the grievance email and registered office address.

19. Governing law

This Policy is governed by the laws of India, subject to mandatory rights and remedies available under applicable consumer, data-protection, cybersecurity and other laws.

Schedule A — Data and purposes

Schedule B — Processor categories

Schedule C — Version control