Privacy

01Using the site without an account

Most of this site needs no account. Panchang, choghadiya, the dosham pages, the matching tools and the reference tables all work without signing in. When you enter birth details on those pages they travel in the page's address to our server, the chart is computed, and the answer is returned to you. Nothing about that request is written to our database, and there is no account to attach it to. The web server's own access log records page addresses like any web server; how long it keeps them is set on the server, not in this software.

02If you sign in

Signing in gives us three things from the account you sign in with: the identifier that service uses for you, your email address, and your display name. We never receive your password, and we do not read your mail, contacts or calendar. Which sign-in services are offered, and the one further permission any of them can ask for, are each set by a switch listed below.

Once you have an account you can save charts — your own and those of family members you add. Each saved chart holds the label you gave it, the relationship if you set one, and the birth details themselves. Two things are kept beside them, by id and never as text: which report you read for which saved person and on what day, so you can open it again, and any list of muhurtham dates you keep, with the event and the people it was for. Opening a report again makes it afresh from the saved chart; the report's words are never stored.

03How it is stored

Every piece of personal information in the database is encrypted before it is written: your name, your email address, your phone number if you give one, and the birth details of every saved chart. The encryption is AES-256-GCM, which detects tampering as well as hiding content, and the keys live in the server's environment rather than anywhere in our code.

Your email address is also stored a second time as a keyed hash, so that signing in can find your account without decrypting every row. The hash uses a server-held key, which means a stolen copy of the database cannot be reversed by anyone who does not also hold that key.

Sessions store a hash of the session token rather than the token, the first part of your IP address rather than the whole of it, a hash of your browser's user-agent string, and two words read from it once — the browser and the system, such as Chrome and Android — so you can tell your devices apart. That is enough to end a session that is being misused and not enough to follow you around. An account stays signed in on up to three devices; signing in on a fourth signs out the one used least recently, and each can be signed out on its own.

A session ends when you sign out, after 30 days unused, or after 90 days whatever happens.

04How long it is kept

Each purpose records how long its data may be kept after your last activity. Deleting an account on its own once every purpose has run out is being checked first: for now it only counts the accounts it would delete, and deletes none. You can erase it yourself at any time, and erasure is real deletion. Withdrawing consent for saved charts deletes them. Withdrawing consent for the account itself closes the account, because nothing would remain that we would be permitted to do.

05Other people's charts, and children's

You can work out a chart for anyone, a child included, without an account, without saving it and without giving a name. The details you type stay on this phone until you close the browser, leave them unused for 12 hours, or choose "Forget these details".

If you save someone else's chart to your account, it is kept there, encrypted, until you delete it or erase the account. Only your account can open it. Saving the chart of someone under 18 asks you to confirm that you are their parent or guardian, and the moment you confirmed it is recorded with the chart.

06Your rights

You can see what is held, correct it, and have it erased. Erasure is real deletion rather than a flag that hides a row.

07What we do not collect

There is no analytics script on this site, no advertising network, no social media pixel and no third-party tag of any kind. We do not sell or share personal information with anyone. Every cookie the site sets is listed below, with what it is for.

The cookies this site sets

startime_session

Keeps you signed in. Removed when you sign out.

startime_oauth

Carries a Google sign-in from this site to Google and back. It lasts ten minutes.

startime_birth

The birth details you typed, kept on this phone so the next page does not ask again. It ends when you close the browser, after 12 hours unused, or when you choose “Forget these details”.

startime_name

A name you typed on the numerology page, kept on this phone for that page only. It ends when you close the browser, or 12 hours after you typed it.

startime_prefs

The answers you gave in the welcome steps, on this phone, for the account that gave them. It lasts a year and is removed when you sign out.

startime_welcome

Your place in the welcome steps, so you can come back to them. It lasts a week.

startime_lang

The language you last chose, so the site opens in it next time. It lasts a year.

startime_theme

Light, dark or your device’s setting, as you chose.

startime_here

The town (and your rasi, if you chose one) you asked this phone to remember on the home page, so the day opens on your own town's times. It lasts 90 days; "Forget" on the home page removes it.

startime_zone

The clock you asked this phone to keep, such as Singapore or Toronto, so the day's times show on it with India's beside them. It lasts a year; "Forget the clock" on the home page removes it.

startime_text

Normal or large text, as you chose in More. It lasts a year.

startime_keep_declined

That you said no to saving these details, so the offer is not repeated.

startime_phone

Up to five people you asked this phone to remember, with the names you gave them. It ends after 90 days unused, or when you choose “Forget on this phone”.

startime_move_declined

Only that you chose “Not now” when, after signing in, we offered to move the people on this phone into your account. It holds no name or date, and it lasts 182 days, so the offer is not repeated on every visit.

startime_hello

That you have just signed in, so the next page says whose account it is. Read once and removed; it lasts five minutes at most.

startime_keep_flash

The name and the choice you gave when a save could not go through, for one minute, so the form can show them again.

08What the server records

For each page requested, the server notes the kind of page, the time and whether it answered. It never notes what you typed into a form, or anything after a "?" in the address. It notes the name of the site a link came from, but not the page. It notes whether the device is a phone, a computer or an automatic preview, but not which one. It keeps no network address at all. No cookie and no script is involved.

Each night these notes become totals: how many pages answered, per day. The notes themselves are deleted after 7 days. A record of a server error can hold the page address requested and the network address it came from; it is deleted after 7 days too. The totals are kept 400 days and describe no one person. Nothing in them belongs to an account.

09Switched off in this deployment

Some parts of the product exist in the code but are off unless a switch turns them on, and while they are off they collect nothing at all. Each switch is listed below. On the question page the reading comes from the engine itself. Each message you type there is checked by Anthropic's language model to keep you safe and to understand what you asked — whether it signals distress or asks something we do not answer, and what it is asking about — so that the right reply reaches you. For answers in English and Tamil, the same model then puts into words what our engine has worked out from your chart: every date, verdict and reason is the engine's, and the wording is checked against them before you see it. Nothing else you give us — your name, your birth details or the people you save — is sent with the message. If you tap the microphone on the question page, your browser's speech service turns your voice into text (in Chrome, that service is Google's), and only the text reaches us. Nothing is sent to you by email or push notification: the software has no sender for either.

What each switch turns on

• Sign-in with Google, offered only when this deployment holds Google's keys. It asks Google for "openid email profile" and nothing more.
• Sign-in with Facebook, offered only when this deployment holds Facebook's keys. It asks Facebook for "openid email public_profile" and nothing more.
• Off unless turned on: sign-in with Google also asks for your birthday, so the birth form can start from it.
• Off unless turned on: sign-in with Facebook also asks for your birthday, so the birth form can start from it.
• Off unless turned on: sign-in by a code sent to your phone. Your phone number is then stored encrypted, as your email address is.
• Off unless turned on: buying a report. While it is off nothing is sold and no payment information is taken or held. When it is on, you pay for one report at a time through Razorpay, with no wallet and no stored balance: your UPI, card and bank details go to Razorpay and never reach us, and we keep a receipt — which report, for which chart, the amount and when — for as long as tax law requires.
• Off unless turned on: the web server logs how long each call to our engine took, by its path alone, never with the details you typed.

10Contact

For anything on this page, including a request to see or erase what is held, write to contact@zivara.co.