Skip to main content

Privacy Policy — How We Protect Your Data

Last updated: October 3, 2026

1. Information We Collect

We collect information that you provide directly, information generated through your use of the Service, and limited technical data collected automatically.

Account Information

When you create an account using email, we collect your email address and a password. You may optionally provide a display name. If you sign in using Google, we receive your email address, display name, and email verification status from Google. We do not receive or store your Google password. Your Google user identifier is stored to link your ModernAstro account to your Google account.

Birth Data

To generate astrological calculations, you provide birth date, birth time, and birth location (latitude/longitude). You may also provide a person's name and birth place name for display purposes. This data is stored in saved profiles and used solely for astronomical and astrological computations.

Mobile app

Sign in with Apple provides an app-specific identifier and, when authorized, your name and email address (which may be an Apple private-relay address). We do not receive your Apple password. Server-held Apple credentials are encrypted and used to manage authorization and revoke access when possible. Optional device location finds a nearby city on your device using our bundled city list. The raw location fix is not sent to us by that lookup. If you save the selected city to a profile, its name, coordinates and timezone sync to your account. The app stores sign-in credentials in protected device storage and caches profiles, preferences and calculation data locally. Signing out or deleting the account clears the app's account data; exported files outside the app remain under your control.

Mobile error diagnostics include app/build, platform, route, error details, timestamps and the signed-in account identifier when available. These are account-linked operational records, not anonymous analytics. Diagnostic files are configured for 60-day retention. The app also requests updates and calculation assets from Expo and our content delivery hosts; those hosts receive network information such as your IP address and request metadata. Update availability and hosting may vary by release.

Payment Information

Payments are processed entirely by our third-party payment provider. We do not store credit card numbers, bank account details, or other sensitive financial information on our servers. We receive only a transaction confirmation, subscription status, and payment identifiers from the provider.

Usage Data

We automatically collect technical data such as your IP address, browser type, device type, pages visited, and timestamps. This data helps us maintain service quality and diagnose issues.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • Astrological calculations: Birth data is used to compute planetary positions, chart configurations, Dasha periods, Nakshatras, and other Vedic astrology data via our astronomical computation engine.
  • Report generation: Birth data and calculation results are used to produce personalized PDF reports that you purchase.
  • Account management: Email is used for login, password resets, and essential service communications.
  • Subscription & billing: To manage your subscription status, process payments, and maintain purchase history.
  • Service improvement: Aggregated, anonymized usage patterns help us improve features and performance.
  • Support: To respond to your enquiries submitted via the contact form.

3. Data Storage & Security

Your data is stored on secured cloud infrastructure. We implement industry-standard security measures including:

  • Encryption in transit using HTTPS/TLS for all connections
  • Encryption at rest for stored data
  • Passwords hashed using modern one-way hashing algorithms (never stored in plain text)
  • Role-based access controls limiting internal access to user data
  • Regular security reviews and dependency updates

While we take reasonable precautions to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

4. Third-Party Services

We use the following categories of third-party services:

  • Payment processing: Subscription and report payments are handled by our payment provider. Your payment data is governed by their privacy policy.
  • Cloud hosting: Our servers run on managed cloud infrastructure with data centres subject to their provider's security certifications.
  • Email delivery: Transactional emails (password resets, receipts) are sent via a third-party email service.
  • Authentication (Google Sign-In): If you choose to sign in with Google, your authentication is handled by Google. During this process, Google receives confirmation that you are signing in to ModernAstro. We receive your email address, display name, and email verification status from Google. Google's use of your data is governed by the Google Privacy Policy.

AI Chat: With your permission in the mobile app, Chat sends your question, relevant conversation history and chart/profile context to OpenAI to generate an answer. This may include names, birth date/time and location details contained in that context. Pro membership alone is not permission. You can decline and keep using other tools, or withdraw permission in Settings; withdrawal stops new provider requests but cannot undo earlier processing. OpenAI processes data under its privacy policy. We do not promise zero provider retention. Website Chat also uses this provider. In-app output reports store account/conversation/message identifiers and the selected reason for review, without copying the question or answer into the report queue. Reports expire after 30 days and are purged when the review queue is accessed; account deletion also requests their removal.

We do not sell, rent, or share your personal birth data with any third party for advertising or marketing purposes.

5. Cookies & Tracking

ModernAstro uses the following types of cookies:

Cookie Purpose Lifetime Category
ma.auth Keeps you signed in 30 days Essential
__Host-ma.trust Lets this browser skip the second sign-in check after you have passed it once 30 days Essential
ma.ctx Holds the birth chart you have open Session Essential
ma.link Carries your details between Google and us while you sign in 5 minutes Essential
ma.signin, ma.apple.* Confirms a Google or Apple sign-in came back to us untampered 10–15 minutes Essential
ma.app-sign-in Lets our Android app finish a Sign in with Apple you started from the app 15 minutes Essential
ma.csrf Stops another site submitting our forms as you Session Essential
ma.flash Carries a confirmation message across one page load Seconds Essential
ma_consent Stores your cookie consent choice 1 year Essential
ma_logged_in, ma_pro, ma_admin Lets the page show the right menu before the server replies 30 days Essential
ma_signedout Tells the next page you just signed out, so it can clear birth details kept on this device 10 minutes Essential
ma.tool-use Remembers you have used a free tool 48 hours Essential
ma.share-mine, ma.share-open Share links you created or unlocked without an account 30 days Essential
g_csrf_token Google's own check for One Tap sign-in Session Essential
ma.lang Language preference (English / Hindi) 1 year Preference
ma_location Saved location for calendar pages 1 year Preference
preferred_currency Shows prices in ₹ or $ 1 year Preference
pref_cal_*, pref_tradition*, pref_hindu_school Your calendar settings (ayanamsa, day start, time format, tradition) 1 year Preference
ma.western-lens Which house system the Western pages use 180 days Preference
ma.reading-tier Remembers that you turned on “Also show readings only one text supports” 1 year Preference
ma.vid An anonymous id so we can count visits without knowing who you are 1 year Measurement
ma_geo_sync, ma_pending_event Avoids repeating a location lookup; queues one analytics event 1 hour / 60 seconds Measurement
_ga, _ga_<id> Google Analytics: tells one visitor's visits apart from another's. Only set once Analytics is allowed Up to 2 years Analytics

Essential cookies are needed for the site to work and cannot be switched off. Preference cookies remember your choices. Where your region needs cookie consent, the ones we would set on our own (language, location, currency) wait until you allow them; a setting you change by hand on a page (calendar options, the Western house system, the reading option) is saved when you change it, because that is what you asked for. Measurement cookies are first-party counters that hold no personal data and are never shared — they let us see how many people used a tool. Analytics cookies belong to Google Analytics. Turning off Analytics in the cookie banner stops Google Analytics and its cookies; it does not remove our first-party counters.

Kept in your browser (not cookies)

Some things are kept in your browser's own storage instead of a cookie. Unlike a cookie, these are never sent to our server with your requests — only the page on your screen reads them. This tab means it is gone when you close the tab; this device means it stays until it expires or you clear your browser data.

Name Purpose Kept Category
ma_ctx A short copy of who you are signed in as (name, email, plan) and whether your region needs cookie consent, so each page does not have to ask the server again This tab, up to 30 minutes Essential
ma_geo Your rough city, worked out from your internet connection, so calendar pages start near you. Only when you have not saved a location This tab Essential
chatFabDismissed, chatStripDismissed You closed the chat button or chat strip, so it stays closed This tab Essential
ma.loop.results, ma.loop.prompted Counts the results you see on this visit, so our feedback card asks at most once per visit This tab Essential
loop.quiet.<key> Cyberax Loop (our feedback card): one date so the feedback question is not shown again too soon. Holds no id and is never sent anywhere This device, until that date (max 30 days) Essential
ma_widget_*, ma_config_* Only on our widget pages: the widget's settings and today's data, so the preview loads quickly This device; settings reused for 1 hour, data only on the same day Essential
horoscope_form A draft of the name, birth date, time and place you typed on the home page. Only saved once you allow Preference cookies (where your region asks); cleared when you choose “Essential only” or sign out This device, 30 days Preference
theme, colorScheme Light or dark mode, and the colour scheme you picked This device Preference
timeFormat 12-hour or 24-hour times on your dashboard This device Preference
sbcShowAllRays Whether the Sarvatobhadra chart shows all rays This device Preference
ma_spotlight_recent The last 8 pages you opened from site search, shown when you open search again. You can clear it there This device Preference

We do not use third-party advertising cookies or cross-site tracking. All fonts are self-hosted — no requests are made to external font services. On pages with Google sign-in, Google's Identity Services script may set its own cookies to manage the sign-in prompt. This is limited to authentication pages (login and registration) and does not track you across the site.

6. Your Rights

You have the following rights regarding your personal data:

  • Access: You can view and download your stored birth data and profile information at any time from your account settings.
  • Correction: You can update or correct your birth data and profile details through your account.
  • Deletion: You can delete your account from app Settings or the authenticated account deletion page. See the deletion instructions and retained-data policy. Support is available if you need help; contacting support is not required to delete.
  • Data portability: Upon request, we can provide your personal data in a structured, commonly used, machine-readable format.
  • Withdraw consent: Where processing is based on consent, you may withdraw it at any time. This does not affect the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected].

7. Children's Privacy

ModernAstro is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided personal information to us, please contact us at [email protected] and we will promptly delete such information.

Users between 13 and 18 years of age must have a parent or guardian's consent to use the Service, as stated in our Terms of Service.

8. Data Retention

We retain your data for as long as your account is active or as needed to provide you with the Service. Specifically:

  • Account data: Retained while your account is active; removed when account deletion succeeds. Generated report files are erased during cleanup; failed file cleanup is retried.
  • Birth data & profiles: Retained while your account is active. Deleted along with your account.
  • Purchase records: Financial records, including transaction identifiers and customer name/email snapshots, are retained for tax, accounting and dispute handling after the account link and report birth-data snapshots are removed. Account deletion does not cancel an existing recurring payment mandate.
  • Usage logs: Mobile diagnostics are configured for 60 days. Website tool-usage records are configured for 425 days, with IP/city details redacted after 90 days. Operational logs, backups and provider records have separate retention; contact us for a retention request.

Deletion removes active account, birth-profile and conversation data and revokes report access. Financial records and limited operational records remain as described above. Deletion does not erase copies already exported or data previously processed by a provider.

9. International Users

ModernAstro is operated from India. If you are accessing the Service from outside India, your information may be transferred to, stored, and processed in India. By using the Service, you consent to the transfer of your information to India and acknowledge that data protection laws in India may differ from those in your jurisdiction.

If you are located in the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, you may have additional rights. Please contact us to exercise these rights.

10. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify registered users via email at least 14 days before the changes take effect. The "Last updated" date at the top of this page indicates when the policy was last revised.

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: