LEGAL
Privacy notice
How Prashna collects, uses, shares, protects and deletes personal data, including your rights under India’s Digital Personal Data Protection Act, 2023.
Last updated: 11 October 2026
Who is responsible
Prashna is the Data Fiduciary for personal data processed through this service. Privacy and grievance requests can be sent to privacy@prashna.guru.
Data we collect
- Account data: name, email address, verified phone number and sign-in method.
- Birth and profile data: name, date, exact time, place, coordinates, time zone, gender, relationships and optional life context.
- Service content: questions, conversations, chart calculations, readings, reports and feedback.
- Transaction data: wallet activity, payment status and invoices. We do not store full card or UPI credentials.
- Security data: session identifiers, IP address, browser/device user agent and authentication audit records.
If you add another person, you confirm that you are authorised to provide their details and to use them for the requested reading.
Why we use it
We process data to create your account, calculate charts, personalise readings, maintain conversation context, deliver purchases and invoices, prevent fraud, secure the service, answer support requests, and meet legal obligations. We ask for consent before creating an account and provide a clear notice before collecting optional profile information.
Astrology output may reveal or infer personal matters. It is used to provide the feature you request, not to make decisions about employment, credit, insurance, healthcare or access to essential services.
Processors and transfers
Data is shared only as needed with infrastructure, email/SMS, payments, location, astrology-calculation and AI providers acting for the service. The minimum necessary fields are sent for each task. Some providers may process data outside India; contractual and security safeguards are used where required. We do not sell personal data or share it for behavioural advertising.
Retention and security
Account and reading data is kept while your account is active, then erased or anonymised when no longer needed. Expired authentication challenges and security records are removed on scheduled retention cycles. Invoices and transaction records may be retained for the period required by tax, accounting, fraud-prevention or dispute law even after account deletion.
Controls include encrypted transport, access-controlled databases, hashed credentials, HttpOnly session cookies, log redaction, rate limits and restricted administrative access. No internet service can guarantee absolute security; we will notify affected people and authorities when the law requires it.
Your DPDP rights
You may ask for a summary and copy of your personal data, correction or completion of inaccurate data, erasure where retention is not legally required, withdrawal of consent, and grievance redressal. You may also nominate another person to exercise your rights in the event of death or incapacity.
Use the privacy controls in your account or email us from your registered address. We may verify identity before acting. Withdrawing consent does not affect processing already lawfully completed, but it may prevent us from continuing services that need the data.
If our response does not resolve your grievance, you may escalate it to the Data Protection Board of India through its officially notified channel.
Children
The service is intended for people aged 18 or older. Do not create an account for a child or submit a child’s data. Contact us if you believe a child’s data was provided.
Cookies and changes
See our Cookie notice. We may update this notice as the service or law changes. Material changes will be shown in the service and, where required, fresh consent will be requested.