- You enter a date, time, latitude, longitude, and optionally a name.
- Values are sent to the ephemeris API as URL query parameters or POST body.
- The API computes the chart deterministically (Sūrya-Siddhānta + Kerala Tantrasaṅgraha (1501), Lahiri/MK ayanāṃśa, classical Vedic ephemeris). No identity attached.
- Result is returned as JSON to your browser session.
- The browser renders the chart.
- The raw computation itself is stateless. But if you are signed in and you save a chart or place an order, we then write a database row (Supabase) linked to your account — storing a label, your birth date, birth place, the computed payload, and a timestamp — so you can revisit it on your dashboard. Anonymous, not-signed-in computation is not saved.
- Server logs. As normal Cloud Run operational practice, IP / user-agent / request-URL access logs may be retained up to 30 days for security, debugging, and capacity planning. Auto-rotated. Never linked to identity. Never sold. Never shared.
गोप्यता-निधिः
Gopyatā-Nidhiḥ
Privacy Policy · how we collect, use, and protect your data
Bharat Ephemeris is a paid astrology service (₹499–₹33,333). To deliver readings and run your account, we collect personal data: your name, email, and (optionally) phone when you sign in with Google, and your birth details (date, time, place) when you compute or order a chart. We do not sell your data, and we do not sell anything about you. Birth data is treated with the same care as health data.
When you sign in and save or order a chart, your birth details are stored in our database (Supabase) linked to your account, and a payment record (name, email, amount, tier) is stored with our payment processor (Razorpay). We keep this data for the retention periods stated below, then delete it. You can request access, correction, or deletion at any time — see Your Rights.
The discipline of this service is computed structure only — we do not predict your future, and our readings are for guidance and reflection, NOT a substitute for medical, legal, psychological, or financial advice. Sacred labels (Kāmākhyā, Śrī Yantra, daśā lords, deity names) are cultural provenance; they are honored, but they do not change the math. KAAL Truth #5 — honesty over flattery.
The English version of this Privacy Policy is the authoritative legal text. Translations are provided for accessibility.
| Category | Collected? | Notes |
|---|---|---|
| Name, email (Google sign-in) | Yes | Collected when you sign in with Google to create or use your account. Used to run the account, deliver readings, and contact you about your order. |
| Phone number | When signed in | Optional — collected only if you provide it (e.g. for WhatsApp delivery / support). |
| Birth-chart inputs (DOB, time, lat, lon, name/label) | When signed in | Stored in our Supabase database, linked to your account, when you save a chart or place an order — so you can revisit it on your dashboard. Anonymous (not-signed-in) computation is processed and not saved. Treated as health-grade sensitive data. |
| Order & payment records (name, email, amount, tier) | Yes | Stored on payment via Razorpay (PCI-DSS Level 1 processor) and in our orders table. We never see or store your card / UPI / banking credentials. |
| Location (device GPS) | No | We do not request GPS permission. Manually type lat/lon if you want a chart for a different place. |
| Camera, microphone, photos | No | Not requested. Not used. |
| Contacts, calendar, files | No | Not requested. Not used. |
| Cookies | Essential only | Session / authentication cookies (sign-in, language preference). No third-party advertising or cross-site tracking cookies. |
| Local storage (device) | Essential only | Last-loaded chart cached for offline PWA fallback. Stored on your device only. |
| Push notifications | No | Not used yet. Any future use will be opt-in only. |
| Analytics | Essential only | Plausible — a cookieless, privacy-first analytics tool. No cookies, no cross-site tracking, no personal data, no advertising IDs. Honours your browser's Do-Not-Track setting. No Google Analytics, Mixpanel, Amplitude, or Segment. |
| Advertising IDs (IDFA / AAID) | No | Never collected. |
The Ṣaḍja drone on certain pages is never autoplayed — requires an explicit user gesture (Web Audio API policy compliant). Generated locally in your browser. No microphone access requested. We do not listen.
The paid service is intended for adults (18+). We do not knowingly collect personal data from anyone under 18, and we do not direct targeted advertising at anyone, of any age. Charts for minors should be ordered only by a parent or legal guardian. Per the DPDP Act 2023, processing a child's data requires verifiable parental consent — if you believe a minor has signed up, write to us and we will delete the account and its data.
The native shell uses @capacitor/* core plugins (splash, status-bar, haptics, share, app — all open-source MIT). The web layer uses zero third-party trackers: no Google Analytics, no Facebook Pixel, no advertising networks. Full open-source provenance at the GitHub repository.
Under the Digital Personal Data Protection Act 2023 (India) — and on a best-effort GDPR-aligned basis — you have the right to: access the data we hold about you; correct any error (e.g. a wrong birth time); request deletion of your account and birth data (subject to legal retention of payment/invoice records); withdraw consent to stop future processing; and raise a grievance. To exercise any of these, or to clear locally-cached chart data on your device, clear your browser site data or uninstall the app. For any rights request, grievance, or audit, email hello@lunarluxury.in.
We keep personal data only as long as needed for the purpose it was collected, then delete it. Our retention schedule:
| Data | Retention period |
|---|---|
| Account profile (name, email, phone via Google sign-in) | While your account is active; deleted within 30 days of account-deletion request. |
| Saved birth charts (DOB, time, place, computed payload) | Until you delete the chart or your account; auto-deleted 24 months after your last activity. |
| Order / payment records (name, email, amount, tier) | Retained 8 years to meet Indian tax & accounting law (contains no birth data). |
| Razorpay payment-processor records | Held by Razorpay per its own policy; we receive only a payment reference + confirmation. |
| Server access logs (IP, user-agent, request URL) | Auto-rotated; retained up to 30 days for security and debugging. Not linked to identity. Never sold. |
You may request earlier deletion of your account and birth data at any time (see Your Rights). Payment and invoice records that Indian tax law requires us to retain contain your name and amount paid, but not your birth data.
If you have a privacy concern or a data-rights request, contact our Grievance Officer first (details below). We will acknowledge within 7 days and resolve within 30 days. If your grievance is not resolved to your satisfaction, you may escalate to the Data Protection Board of India under the Digital Personal Data Protection Act 2023.
- Operating entity
- Lunar Luxury Store
- Proprietor: Laksha Solanki · Sole Proprietorship (GST-registered)
- GSTIN: 07HHJPS5515M1ZM
- Correspondence address
- WZ-803, Palam Village, Bata Chowk, New Delhi, South West Delhi, Delhi 110045, India
- hello@lunarluxury.in
- Phone
- +91 77899 38993
- Grievance & Data Protection Officer
- Pardeep Sehrawat
- hello@lunarluxury.in · +91 77899 38993
Escalation: if your grievance is unresolved within 30 days, you may approach the Data Protection Board of India under the Digital Personal Data Protection Act 2023.
We may update this policy from time to time. Material changes will be flagged on the homepage and the effective date at the top will be updated. Continued use of the app after a published change constitutes acceptance.
Questions, audit requests, or feedback — hello@lunarluxury.in. Source code & deposits: GitHub, Zenodo DOI, OSF DOI.