Skip to content

Privacy Policy

Last updated: 23 August 2026

This policy explains how we collect, use, and protect your information. We collect only what is needed to compute and deliver your kundli report, and to keep the service secure.

What we collect

  • • Birth details (date, time, place): to compute the chart.
  • • Your WhatsApp number (E.164) and email: to deliver the report.
  • • A record of your consent and its timestamp.
  • • Source page / UTM data: to understand how you reached us.
  • • Technical data on every request: IP address, request path, referrer, and browser user-agent string. Used to serve the page, prevent abuse, and produce aggregate visitor counts. This is described in more detail under "Cookies, analytics and page-view logging" below.

Data controller

  • • The data controller for this website and service is Aktai Ltd (registered in England & Wales, company number 17199439, ICO registration number ZC151787), the owner and operator of Nakshara. Registered address: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.
  • • EU establishment: the operator of Aktai Ltd carries out effective and real activity from Germany (operator base of Aktai Ltd). On that basis Aktai Ltd is treated as established in the EU for GDPR purposes and does not appoint a separate representative under GDPR Article 27.
  • • Contact for data-protection questions: Data Protection Contact, Aktai Ltd, [email protected]. We are not required to appoint a Data Protection Officer under GDPR Article 37 or DPDP §10, because our processing is not large-scale monitoring, does not involve special-category or sensitive personal data at scale, and we are not currently notified as a Significant Data Fiduciary. If that changes, this notice will be updated first.

Purposes and lawful basis

  • • Aktai Ltd processes your personal data for the following purposes and on the following lawful bases:
  • • WhatsApp messages: we send them only with your explicit opt-in. The consent checkbox is unticked by default; you tick it yourself. Lawful basis: UK/EU GDPR Art. 6(1)(a); DPDP Act 2023 §6.
  • • Delivering the paid report and processing your payment: performance of a contract with you (GDPR Art. 6(1)(b); DPDP §7(a) — lawful use for the specified purpose you agreed to).
  • • Keeping the service secure, preventing abuse and fraud, enforcing our Terms, and defending or bringing legal claims (server logs, IP-based rate-limiting, chargeback and fraud investigations): our legitimate interest in operating a service that does not fall over, get abused, or be used to harm us or our users (GDPR Art. 6(1)(f); DPDP §7(g)).
  • • Improving and developing the service, including analytics, quality assurance, debugging, and training or evaluating models on aggregated and anonymised data derived from usage: our legitimate interest in maintaining and evolving the product (GDPR Art. 6(1)(f)). Aggregated and anonymised data does not identify you and is no longer personal data.
  • • Marketing our own similar products and services to existing customers: our legitimate interest in retaining and re-engaging customers, subject to your right to opt out at any time by replying "STOP" on WhatsApp or unsubscribing by email (GDPR Art. 6(1)(f); UK PECR reg. 22(3) soft-opt-in).
  • • Complying with tax, accounting, consumer-protection and other legal record-keeping obligations: our legal obligations under UK company and tax law (GDPR Art. 6(1)(c)).

Opting out of WhatsApp

  • • You can stop messages any time by sending "STOP" on WhatsApp.
  • • We honour and record your request.

Sharing and processors

  • • Aktai Ltd does not sell your personal data. We share it only in the circumstances set out here.
  • • Within our group: with other companies controlled by or under common control with Aktai Ltd (the Aktai group), acting as joint controllers or processors, so that shared functions (billing, customer support, security, analytics, product development) can be run once for the group.
  • • Corporate transactions: in connection with a proposed or actual merger, acquisition, financing, corporate reorganisation, sale of assets or insolvency, personal data may be transferred to the counterparty as part of the transaction, subject to appropriate confidentiality obligations.
  • • Legal: where Aktai Ltd reasonably believes disclosure is required by law, court order, regulator or law-enforcement request, or is necessary to establish, exercise or defend legal claims, or to protect the rights, safety or property of Aktai Ltd, its users, or the public.
  • • Service partners, only to deliver the service:
  • • Payment processors: Razorpay Software Private Limited (India) for INR payments, under Standard Contractual Clauses; and Stripe (Stripe Payments Europe Limited, Ireland; Stripe Inc., United States) for other currencies, under Standard Contractual Clauses for onward transfers to the United States. They handle your card details directly; we never store your full card number.
  • • Messaging provider: reports and daily messages are delivered via the Meta WhatsApp Cloud API (Meta Platforms Ireland Limited, with onward processing by Meta Platforms, Inc. in the United States under Standard Contractual Clauses).
  • • AI chat: the Sakhi assistant uses the Anthropic API (Anthropic UK Ltd, with onward processing by Anthropic PBC in the United States under Standard Contractual Clauses). Only the conversation text and your birth details (needed for astrological context) are sent; no payment or contact data is shared with Anthropic.
  • • Hosting: our server runs on Hetzner Online GmbH, in Germany (EU), under a GDPR Article 28 data-processing agreement.
  • • Observability: server logs, including request path and IP, are shipped to Grafana Labs (Grafana Cloud, EU region) for security monitoring and debugging. Retention is bounded by the "Data retention" section below.
  • • Cross-site page-view counter: the website sends the visited path, referrer and browser user-agent to Aktai Ltd’s own analytics endpoint at api.aktai.app so that Nakshara traffic appears alongside other Aktai properties in one internal dashboard. This is a transfer between two systems of the same controller, not to a third party, and no cookies are set.
  • • Where data goes to a processor outside the UK/EEA, we rely on adequacy decisions where they exist and Standard Contractual Clauses (with a transfer risk assessment) otherwise.

Cookies, analytics and page-view logging

  • • We do not set analytics or advertising cookies. See the separate Cookies Policy for details.
  • • Every page you visit sends a small beacon to our funnel API (the path, and the referring URL). Our funnel API records the source IP address of that request. This is what lets us count visitors, spot outages and block abuse without a third-party analytics product.
  • • The same page load also sends the path, referrer and your browser’s user-agent string to Aktai Ltd’s internal page-view counter at api.aktai.app. That endpoint does not set cookies and does not build a persistent visitor profile; the aggregate counts feed an internal dashboard shared with Aktai’s other properties.
  • • None of this data is sold, shared with advertisers, or used to build a marketing profile of you.

Data retention

  • • Aktai Ltd retains personal data for as long as reasonably necessary for the purposes set out above, and in any case at least for the periods below.
  • • Birth details, consent records and generated reports: until you successfully request deletion, or until the account or contact record has been inactive for 36 months, whichever comes first.
  • • Payment and invoice records: for 6 years after the end of the financial year, as required of a England & Wales company under HMRC rules and the Companies Act 2006, kept separately from your birth-chart data.
  • • Server logs (including IP address) and the internal page-view records: retained for up to 90 days for security, debugging and abuse investigation, then deleted or aggregated so they no longer identify individual visitors.
  • • Aggregated and anonymised data derived from usage: retained indefinitely, because once it no longer identifies you it is no longer personal data.

Android app: account and sign-in

  • • The Nakshara Android app lets you sign in with your email address using a one-time link, no password. The link is single-use and expires after 15 minutes.
  • • Once you sign in, we issue a signed session token stored on your device. It expires automatically after 30 days; there is nothing further to revoke on our side beyond deleting your account.
  • • We store your email address and the date your account was created. We never store a password, because there is not one to store.
  • • This applies to the Android app only. The website has no accounts; see "What we collect" above for what it collects instead.

Android app: push notifications

  • • Push notifications are planned but not live yet. Once shipped, enabling notifications in the app registers a Firebase Cloud Messaging (FCM) device token to your account.
  • • We will use that token only to deliver the daily rashifal, panchang, and muhurat alerts you have opted into. It is not shared for advertising.
  • • This section will be updated with retention detail once the feature ships. It does not apply to the website.

Android app: analytics

  • • The app does not currently use analytics or crash reporting. If we add this, we will describe exactly what is collected here first.

Children and minors

  • • Nakshara is intended for users aged 18 and over.
  • • A chart can be computed for a minor (for example, a child’s naming chart) only where the person entering the details is a parent or legal guardian, or has the guardian’s consent. Under India’s DPDP Act 2023 §9 this counts as processing children’s personal data on the basis of verifiable parental consent, and we rely on your representation that you hold that consent.
  • • We do not knowingly track, profile or advertise to children. If you believe a child’s data has been submitted without proper consent, email us and we will delete it.

Your rights

  • • You may request access to, correction of, or deletion of the personal data we hold about you. You may also object to processing, ask us to restrict it, or ask for a portable copy of what you provided.
  • • Where processing is based on your consent, you may withdraw that consent at any time. Withdrawing consent does not undo processing already done on the previous consent.
  • • You have the right to nominate another individual to exercise these rights on your behalf if you die or become incapacitated (India’s DPDP Act 2023 §14). Email us with the nominee’s name and contact details and we will record the nomination.
  • • Write to [email protected]; we will respond within 30 days.
  • • If you are not satisfied with our response, you may lodge a complaint with the UK's Information Commissioner's Office (ico.org.uk), your local EU supervisory authority (a list is at edpb.europa.eu), or India's Data Protection Board.

Android app: account deletion

  • • To delete your Nakshara account, email [email protected] from the address you signed in with and ask us to delete your account.
  • • We delete your email address and account record. Deleting the account also ends any signed-in session immediately, since a session is only valid for an account that still exists.
  • • This request is handled manually today, the same way as the data deletion requests described on our Data Deletion page; there is no in-app "delete account" button yet.

Grievance officer

  • • Grievance Officer: Aaradhya M, Aktai Ltd. Email: [email protected]. Phone: +44 7367 051009. Address: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.
  • • This complies with India’s Consumer Protection (E-Commerce) Rules 2020 rule 4(5). We acknowledge grievances within 48 hours and aim to resolve them within one month.

Changes to this notice

  • • Aktai Ltd may amend this notice at any time at its sole discretion. Amendments take effect when posted; the date above always reflects the current version. Your continued use of the service after that date constitutes acceptance of the amended notice. Where an amendment materially affects rights over data we already hold about you, we will make reasonable efforts to notify affected users on the contact channel they used to reach us.

Contact