Privacy Policy

At Celestial Digits ('we', 'us', 'our'), we are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our numerology, astrology, and related services through our website (celestialdigits.org) and mobile applications ('Services'). By using our Services, you consent to the practices described in this policy.

1. Information We Collect

We collect the following types of information to provide our Services: (a) Personal Information: • Full name (as provided by you) • Email address (required for account creation) • Date of birth (including day, month, and year) • Time of birth (if applicable) • Place of birth including city, country, and coordinates (if applicable) • Contact information (phone number if provided) • Profile information (relationship type, notes) (b) Authentication Information: • Account credentials (password stored in encrypted/hashed form) • Google Sign-In data (when using Google authentication): Google ID, email, and profile information from your Google account • Authentication tokens (stored securely on your device) (c) Payment Information: When you make a purchase, we collect payment information through our secure, PCI-DSS compliant payment gateway providers. We do not store your complete credit card, debit card, or banking details on our servers. (d) Location Information: With your permission, our mobile app may collect: • Current location (when using the location picker for birth place selection) • City, country, and geographic coordinates for astrological calculations (e) Technical and Device Information: • Device information (model, operating system, unique device identifiers) • IP address and browser type • App version and usage data • Cookies and similar tracking technologies (f) Analytics Data (Mobile App): We use Firebase Analytics (Google) in our mobile application to collect: • Screen views and navigation patterns • Feature usage (chart generation, horoscope views, numerology reports) • App performance data • Crash reports Analytics collection is enabled only in release builds and disabled during development. (g) User-Submitted Information: Any information you voluntarily provide when contacting us or using our Services. We collect only the minimum information necessary to provide accurate numerological and astrological analyses.

2. How We Use Your Information

We use your information for the following purposes: (a) Service Delivery: To calculate numerology numbers, generate astrological charts, create personalized reports and insights, and deliver digital products (PDF reports, charts, etc.). (b) Payment Processing: To process payments securely through our trusted payment gateway providers, verify transactions, prevent fraud, and issue receipts and invoices. (c) Communication: To send order confirmations, deliver purchased reports, respond to inquiries and support requests, and send important service updates (with your consent, we may send promotional communications which you can opt-out of at any time). (d) Service Improvement: To analyze usage patterns, improve our algorithms and calculations, enhance user experience, and conduct research (using anonymized data). (e) Legal Compliance: To comply with applicable laws and regulations, prevent fraud and unauthorized transactions, protect our rights and property, and respond to legal requests. We do NOT use your personal information for: Selling or renting to third parties, unsolicited marketing without consent, or making decisions that significantly affect you without human review.

3. Information Sharing and Disclosure

We do not sell your personal information. When you enable personal AI readings, relevant birth details, calculated charts, questions, recent conversation and saved personal context are sent to Google Gemini. This covers Astra, chat memory, personal insights, yearly readings, chart roast and Time Machine. Calculated charts remain available without AI. Updated apps and the website ask for permission before personal AI requests; automatic personal insights require recorded permission. Older app versions may use their existing on-device permission flow until upgraded. A recorded withdrawal applies across clients. Hosting, email, sign-in, location search, analytics and payment services process the information needed for those features. Journal comments and your display name become public after moderation. Reports, blocks and notification choices are private.

4. Data Security

We take data security seriously and implement industry-standard security measures: (a) Technical Measures: SSL/TLS encryption for data transmission, encrypted storage of personal information, secure authentication mechanisms, regular security audits and vulnerability assessments, firewall protection and intrusion detection systems, and secure payment processing through PCI-DSS compliant payment gateways. (b) Organizational Measures: Access controls limiting employee access to personal data, staff training on data protection and privacy, regular security policy reviews and updates, and incident response procedures. (c) Payment Security: We do not store complete credit/debit card information. All payment data is handled by our trusted payment processors using bank-grade security and encryption. Payment pages are secured with SSL encryption. We comply with international payment security standards and applicable regulations. However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

5. Data Retention

Permanent deletion removes associated personal data from live application storage, including profiles, chat history and memory, saved readings, public shares, Journal comments and notification preferences. Sign in with Apple tokens are revoked. Failed steps are retried automatically; account access is disabled while deletion is pending. Minimal transaction references, amounts and statuses may remain after contact and report details are removed. A minimal internal deletion marker prevents late background writes from recreating erased data. Historical anonymous activity that cannot be safely linked to an account may require a separate request to [email protected]. Deletion does not recall emails or copies already received by other people or requests already sent to external providers.

6. Your Rights and Choices

Use Account > AI Privacy to review data sharing or turn off new personal AI processing. Existing readings remain until removed. Use Account > Permanently delete account on the website, or Account Settings > Delete Account in the updated mobile app, for irreversible deletion. Older Apple accounts may need fresh authorization in the iOS app so their Apple connection can be revoked. You can delete conversations, clear profile chat memory, revoke public shares, and manage blocked Journal readers and article notification preferences. For access, correction, copies of your data, historical anonymous activity or a privacy concern, contact [email protected]. Do not send passwords or payment credentials.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to: Maintain user sessions and preferences, analyze website usage and performance, improve user experience, and prevent fraud and enhance security. You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our Services.

8. Third-Party Services and SDKs

Google Gemini processes the chart and conversation data needed for enabled personal AI readings. Google Sign-In and Sign in with Apple authenticate social accounts. Google Maps/Places supports location search. Firebase Analytics measures mobile app usage in release builds. Website analytics and hosting services measure and serve the website. Email services deliver requested messages, and payment processors handle purchases. Personal chat inputs and outputs are not exported to Langfuse by the updated backend. External providers have their own privacy policies, including Google: https://policies.google.com/privacy and Apple: https://www.apple.com/legal/privacy/.

9. Children's Privacy

Our Services are intended for users aged 18 and above. If you are under 18, you may use our Services only with the involvement and consent of a parent or legal guardian. We do not knowingly collect personal information from children under 13 without parental consent. If we become aware that we have collected such information, we will take steps to delete it promptly.

10. International Users

Our Services are operated from India and comply with Indian data protection laws including the Information Technology Act, 2000 and associated rules. If you access our Services from outside India, please be aware that your information may be transferred to, stored, and processed in India. By using our Services, you consent to this transfer and processing.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes: We will update the 'Last Updated' date at the top of this policy. For material changes, we will notify you via email or prominent notice on our website. Your continued use of our Services after changes constitutes acceptance of the updated policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: Email: [email protected] Website: https://celestialdigits.org Business Address: Celestial Digits Mumbai, Maharashtra, India We will respond to your inquiry within 30 days. For complaints or concerns about how we handle your data, you may also contact the relevant data protection authority in your jurisdiction.

13. Legal Compliance and Cooperation

We are committed to operating our Services in full compliance with: Indian Information Technology Act, 2000 and IT Rules, RBI (Reserve Bank of India) guidelines for payment processing, PCI-DSS standards for payment security, applicable consumer protection laws, and other relevant regulations. We cooperate with law enforcement and regulatory authorities when required by law or to protect our users and Services from fraudulent or illegal activities.