Skip to content

Privacy Policy

Last updated: 31 October 2026

This policy explains how we collect, use, and protect your information. We collect only what is needed to compute and deliver your kundli report, and to keep the service secure.

What we collect

  • • Birth details (date, time, place): to compute the chart.
  • • Your WhatsApp number (E.164) and email: to deliver the report.
  • • A record of your consent and its timestamp.
  • • Source page / UTM data: to understand how you reached us.
  • • Technical data on every request: IP address, request path, referrer, and browser user-agent string. Used to serve the page, prevent abuse, and produce aggregate visitor counts. This is described in more detail under "Cookies, analytics and page-view logging" below.
  • • Chat with Aanya, our AI assistant (website, apps and WhatsApp): the messages you send, the replies, the page you opened the chat from, an approximate country derived from your IP address (to show prices in the right currency), and the email address and phone number you give us to keep chatting. See "Aanya chat" below.
  • • Pandit consultations: your name, email, phone number, the time slot you choose, your question for the pandit, and the payment record.
  • • Sign-in: your email address. If you choose "Sign in with Google", Google tells us your verified email address; we do not receive your Google password, contacts or any other Google data.

Data controller

  • • The data controller for this website and service is Aktai Ltd (registered in England & Wales, company number 17199439, ICO registration number ZC151787), the owner and operator of Nakshara. Registered address: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.
  • • EU establishment: the operator of Aktai Ltd carries out effective and real activity from Germany (operator base of Aktai Ltd). On that basis Aktai Ltd is treated as established in the EU for GDPR purposes and does not appoint a separate representative under GDPR Article 27.
  • • Contact for data-protection questions: Data Protection Contact, Aktai Ltd, [email protected]. We are not required to appoint a Data Protection Officer under GDPR Article 37 or DPDP §10, because our processing is not large-scale monitoring, does not involve special-category or sensitive personal data at scale, and we are not currently notified as a Significant Data Fiduciary. If that changes, this notice will be updated first.

Purposes and lawful basis

  • • Aktai Ltd processes your personal data for the following purposes and on the following lawful bases:
  • • WhatsApp messages: we send them only with your explicit opt-in. The consent checkbox is unticked by default; you tick it yourself. Lawful basis: UK/EU GDPR Art. 6(1)(a); DPDP Act 2023 §6.
  • • Delivering the paid report and processing your payment: performance of a contract with you (GDPR Art. 6(1)(b); DPDP §7(a), lawful use for the specified purpose you agreed to).
  • • Keeping the service secure, preventing abuse and fraud, enforcing our Terms, and defending or bringing legal claims (server logs, IP-based rate-limiting, chargeback and fraud investigations): our legitimate interest in operating a service that does not fall over, get abused, or be used to harm us or our users (GDPR Art. 6(1)(f); DPDP §7(g)).
  • • Improving and developing the service, including analytics, quality assurance, debugging, and training or evaluating models on aggregated and anonymised data derived from usage: our legitimate interest in maintaining and evolving the product (GDPR Art. 6(1)(f)). Aggregated and anonymised data does not identify you and is no longer personal data.
  • • Marketing our own similar products and services to existing customers: our legitimate interest in retaining and re-engaging customers, subject to your right to opt out at any time by replying "STOP" on WhatsApp or unsubscribing by email (GDPR Art. 6(1)(f); UK PECR reg. 22(3) soft-opt-in).
  • • Complying with tax, accounting, consumer-protection and other legal record-keeping obligations: our legal obligations under UK company and tax law (GDPR Art. 6(1)(c)).
  • • Running the Aanya chat, including storing your conversation so it can continue across pages and devices, and following up on your question by email or WhatsApp: performance of a contract with you, or steps you asked us to take before entering one (GDPR Art. 6(1)(b); DPDP §7(a)).
  • • Reviewing chat conversations, by our staff and with automated tools, to check answer quality, catch errors, enforce our Terms and prevent misuse, and improving Aanya and the service from what we learn: our legitimate interest in running a safe and accurate assistant (GDPR Art. 6(1)(f); DPDP §7(g)).

Opting out of WhatsApp

  • • You can stop messages any time by sending "STOP" on WhatsApp.
  • • We honour and record your request.

Sharing and processors

  • • Aktai Ltd does not sell your personal data. We share it only in the circumstances set out here.
  • • Within our group: with other companies controlled by or under common control with Aktai Ltd (the Aktai group), acting as joint controllers or processors, so that shared functions (billing, customer support, security, analytics, product development) can be run once for the group.
  • • Corporate transactions: in connection with a proposed or actual merger, acquisition, financing, corporate reorganisation, sale of assets or insolvency, personal data may be transferred to the counterparty as part of the transaction, subject to appropriate confidentiality obligations.
  • • Legal: where Aktai Ltd reasonably believes disclosure is required by law, court order, regulator or law-enforcement request, or is necessary to establish, exercise or defend legal claims, or to protect the rights, safety or property of Aktai Ltd, its users, or the public.
  • • Service partners, only to deliver the service:
  • • Payment processors: Razorpay Software Private Limited (India) for INR payments, under Standard Contractual Clauses; and Stripe (Stripe Payments Europe Limited, Ireland; Stripe Inc., United States) for other currencies, under Standard Contractual Clauses for onward transfers to the United States. They handle your card details directly; we never store your full card number.
  • • Messaging provider: reports and daily messages are delivered via the Meta WhatsApp Cloud API (Meta Platforms Ireland Limited, with onward processing by Meta Platforms, Inc. in the United States under Standard Contractual Clauses).
  • • AI chat: the Aanya assistant uses the Anthropic API (Anthropic UK Ltd, with onward processing by Anthropic PBC in the United States under Standard Contractual Clauses). Only the conversation text and your birth details (needed for astrological context) are sent; no payment or contact data is shared with Anthropic.
  • • Pandit consultations: when you book a consultation, we send the pandit your name, email, phone number, the booked slot, your question and the most recent messages of your Aanya chat, so the pandit can prepare and call you. The pandit is an independent practitioner engaged by us and may use this information only to deliver your consultation.
  • • App store purchases: if you buy inside the iOS app, Apple (Apple Distribution International Ltd, Ireland, with onward processing by Apple Inc. in the United States) processes the payment as an independent controller under its own privacy policy. Apple sends us a signed record of the purchase (product, transaction ID, date and price), not your card or Apple account details.
  • • Sign-in with Google: Google (Google Ireland Limited / Google LLC) authenticates you and returns your verified email address to us. Google’s privacy policy governs what Google itself processes.
  • • Bot protection: forms and the chat on the website use Cloudflare Turnstile (Cloudflare, Inc.) to check that a visitor is not an automated bot. Turnstile processes your IP address and browser signals for that check only.
  • • Hosting: our server runs on Hetzner Online GmbH, in Germany (EU), under a GDPR Article 28 data-processing agreement.
  • • Observability: server logs, including request path and IP, are shipped to Grafana Labs (Grafana Cloud, EU region) for security monitoring and debugging. Retention is bounded by the "Data retention" section below.
  • • Cross-site page-view counter: the website sends the visited path, referrer and browser user-agent to Aktai Ltd’s own analytics endpoint at api.aktai.app so that Nakshara traffic appears alongside other Aktai properties in one internal dashboard. This is a transfer between two systems of the same controller, not to a third party, and no cookies are set.
  • • Advertising measurement, only if you press Accept on the consent banner: Google (Google Ireland Limited, with onward processing by Google LLC in the United States) and Microsoft (Microsoft Ireland Operations Limited, with onward processing by Microsoft Corporation in the United States) receive a record that a page was viewed on nakshara.app and, after a paid order, that a purchase happened, with its value, currency and our order number. They do not receive your name, email, phone number or birth details. If you reject, or never choose, none of this is sent. Each company’s own privacy policy applies to what it does next.
  • • Where data goes to a processor outside the UK/EEA, we rely on adequacy decisions where they exist and Standard Contractual Clauses (with a transfer risk assessment) otherwise.

Cookies, analytics and page-view logging

  • • Nothing from Google, Microsoft or any other advertiser loads, and no advertising cookie is set, unless you press Accept on the consent banner. Accept and Reject have equal weight, and you can change your choice at any time from Cookie settings in the footer. See the separate Cookies Policy for details.
  • • Every page you visit sends a small beacon to our funnel API (the path, and the referring URL). Our funnel API records the source IP address of that request. This is what lets us count visitors, spot outages and block abuse without a third-party analytics product.
  • • The same page load also sends the path, referrer and your browser’s user-agent string to Aktai Ltd’s internal page-view counter at api.aktai.app. That endpoint does not set cookies and does not build a persistent visitor profile; the aggregate counts feed an internal dashboard shared with Aktai’s other properties.
  • • The two page-view beacons above are not affected by your banner choice. They are not sold, not shared with advertisers, and not used to build a marketing profile of you. The only data that reaches an advertising company is the Google measurement described under "Sharing and processors", and only if you accept.

Data retention

  • • Aktai Ltd retains personal data for as long as reasonably necessary for the purposes set out above, and in any case at least for the periods below.
  • • Birth details, consent records and generated reports: until you successfully request deletion, or until the account or contact record has been inactive for 36 months, whichever comes first.
  • • Orders you start but never pay for, including the birth details entered: deleted 90 days after the last change.
  • • Payment and invoice records: for 6 years after the end of the financial year, as required of a England & Wales company under HMRC rules and the Companies Act 2006, kept separately from your birth-chart data.
  • • Server logs (including IP address) and the internal page-view records: retained for up to 90 days for security, debugging and abuse investigation, then deleted or aggregated so they no longer identify individual visitors.
  • • Aggregated and anonymised data derived from usage: retained indefinitely, because once it no longer identifies you it is no longer personal data.
  • • Aanya chat conversations and the contact details given in the chat: kept while they are needed for the purposes above (continuing your conversation, following up, quality review, safety and legal claims), and deleted 24 months after your last message, or sooner if you ask us to.
  • • Consultation bookings: kept with your payment record for the period above.

Aanya chat

  • • Aanya is an AI assistant, not a person. Her replies are written automatically by an AI model from your messages and from our own calculators.
  • • We store every chat conversation. Our staff may read conversations to check that Aanya is giving correct, safe answers, to look into complaints, and to improve the service. Please do not share health details, financial or account numbers, government ID numbers, passwords or anything about other people that you would not want stored and read.
  • • To keep chatting on the website we ask for your email address and phone number. Signed-in users are not asked again. We use these to follow up on your question and, unless you opt out, to tell you about related Nakshara reports and offers. Reply "STOP" on WhatsApp or use the unsubscribe link in any email to opt out.
  • • Anthropic processes the conversation text to generate replies, as described under "Sharing and processors". Under its commercial terms, Anthropic does not use API conversations to train its models.

Accounts and sign-in

  • • You can sign in to Nakshara on the website and in the Android and iOS apps with your email address using a one-time link, no password, or with your Google account. The link is single-use and expires after 15 minutes. Signing in is optional.
  • • Once you sign in, we issue a signed session token stored on your device. It expires automatically after 30 days.
  • • We store your email address, the date your account was created and, if you set them, your notification preferences (time zone, moon sign, preferred hour). We never store a password, because there is not one to store.

Apps: push notifications

  • • If you allow notifications in the Android or iOS app, the app registers a Firebase Cloud Messaging (FCM) device token with us. If you are signed in it is linked to your account, otherwise to a random install ID created on your device.
  • • We use that token only to send the festival, vrat, daily rashifal and Rahu Kaal reminders the app offers. It is not used for advertising.
  • • The token is deleted when you delete your account, and removed automatically once FCM reports it is no longer valid (for example after you uninstall the app or turn notifications off).

Apps: analytics

  • • The Android and iOS apps use Google Firebase Analytics to count installs, app opens and the screens people view, so we know which features are used. It works with an app instance ID, not your name or email.
  • • We do not use this data for advertising and do not sell it.

Children and minors

  • • Nakshara is intended for users aged 18 and over.
  • • A chart can be computed for a minor (for example, a child’s naming chart) only where the person entering the details is a parent or legal guardian, or has the guardian’s consent. Under India’s DPDP Act 2023 §9 this counts as processing children’s personal data on the basis of verifiable parental consent, and we rely on your representation that you hold that consent.
  • • We do not knowingly track, profile or advertise to children. If you believe a child’s data has been submitted without proper consent, email us and we will delete it.

Your rights

  • • You may request access to, correction of, or deletion of the personal data we hold about you. You may also object to processing, ask us to restrict it, or ask for a portable copy of what you provided.
  • • Where processing is based on your consent, you may withdraw that consent at any time. Withdrawing consent does not undo processing already done on the previous consent.
  • • You have the right to nominate another individual to exercise these rights on your behalf if you die or become incapacitated (India’s DPDP Act 2023 §14). Email us with the nominee’s name and contact details and we will record the nomination.
  • • Write to [email protected]; we will respond within 30 days.
  • • If you are not satisfied with our response, you may lodge a complaint with the UK's Information Commissioner's Office (ico.org.uk), your local EU supervisory authority (a list is at edpb.europa.eu), or India's Data Protection Board.

Deleting your account

  • • Sign in, open your Account page and choose "Delete my account". This works on the website and in both apps.
  • • We delete your email address, account record, notification preferences and the push tokens linked to your account. Every signed-in session ends immediately, since a session is only valid for an account that still exists.
  • • Payment records for past orders are kept as described on our Data Deletion page. If you cannot sign in, email [email protected] from the address you used and we will delete the account for you.

Grievance officer

  • • Grievance Officer: Aaradhya M, Aktai Ltd. Email: [email protected]. Phone: +44 7367 051009. Address: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.
  • • This complies with India’s Consumer Protection (E-Commerce) Rules 2020 rule 4(5). We acknowledge grievances within 48 hours and aim to resolve them within one month.

Changes to this notice

  • • Aktai Ltd may amend this notice at any time at its sole discretion. Amendments take effect when posted; the date above always reflects the current version. Your continued use of the service after that date constitutes acceptance of the amended notice. Where an amendment materially affects rights over data we already hold about you, we will make reasonable efforts to notify affected users on the contact channel they used to reach us.

Contact