Privacy Policy

This Privacy Policy describes how Cosmic Jellyfish, LLC ("Company," "we," "us," or "our") collects, uses, shares, and protects your personal information when you use the Nakshatra web application, mobile application, and related services (collectively, the "Service"). By using the Service, you consent to the practices described in this policy.

1. Information We Collect

Information You Provide

• Account information — email address and authentication credentials when you sign up via Google, Apple Sign In, or email and password.
• Birth data — date of birth, time of birth (optional), and place of birth (including geographic coordinates), used to calculate your Vedic birth chart.
• Compatibility profiles — birth data of other individuals you voluntarily add for chart comparison features.
• Private web friend connections — each person enters their own birth details. We store the chosen names, invitation and approval status, and the limited chart snapshots each person agrees to share.

Information Collected Automatically

• Device information — device type, operating system version, browser, and unique session identifiers.
• Usage data — with your permission, pseudonymous feature usage, page categories, reading completion, and subscription events to improve the Service.
• Purchase information — subscription status and transaction identifiers, managed securely through Stripe (web) or Apple's in-app purchase system (iOS).

Information We Do Not Collect

We do not collect precise real-time location data, contacts, photos, health data, financial account information, or browsing history outside the Service. Essential browser storage keeps you signed in and saves your preferences. Optional analytics storage is used only after you choose Allow analytics.

Optional web analytics

When you allow analytics, Mixpanel receives a random device identifier and, when signed in, your account UUID to connect activity across visits. With this permission, we also send your verified account email to create a Mixpanel profile so we can find your account and understand your product activity. Your email is a profile property, not an event property or your tracking identifier. Events may include browser/device type, page category, reading type and load time, and subscription amount/currency. We do not send Mixpanel your birth details, chart placements, reading text, form values, or full page URLs. Session recording and automatic click capture are disabled. IP-based location enrichment is disabled; network providers still receive an IP address when a connection is made.

You can decline without losing features, or change your choice using Analytics preferences in the footer. For signed-in users, the choice also controls optional server-side subscription events. Withdrawal stops future collection and profile updates and cancels pending events; it does not automatically erase previously collected events or profile information. Contact us to request deletion. Users who accepted an earlier analytics notice without email sharing are asked again before we send their email. Mixpanel data for this project is processed in the United States.

2. How We Use Your Information

We use personal information solely to provide and improve the Service:

• Calculate your birth star, chart, life chapters, and current sky positions.
• Generate personal AI-assisted readings for paying members.
• Authenticate your account and sync data across devices.
• Process and manage subscriptions through Stripe or Apple.
• Send the optional Monday letter and transactional account emails.
• Analyze aggregated usage patterns to improve the Service.
• Comply with legal obligations and enforce our Terms of Service.

Free birth details are processed to return a chart without saving a profile. When you choose Continue to save, unsaved details may be held in this browser across tabs while you sign in. Drafts expire after one day and are cleared after a successful save. Saved profiles are associated with your account. Birth details are not included in share links.

3. AI-Powered Readings

Private web friend readings use editorial templates and do not send your shared chart to an AI provider. A chosen name identifies an invitation or request; chart comparisons open only after both participants agree. The shared snapshot includes birth-star possibilities and Moon, Mercury and Mars signs, with uncertainty, but not birth dates, times, places or individual readings. Either participant can close the connection, which removes the shared chart snapshots and closes access. Copies someone has already made cannot be recalled. Updating your own saved chart does not silently replace a previously approved snapshot.

Nakshatra uses a configured third-party AI provider (DeepSeek or Moonshot AI’s Kimi) to generate written interpretations of your panchanga and chart context. When you request a reading:

• Only chart-derived data (planetary positions, signs, and houses) is sent to the AI provider — never your raw birth date or PII.
• The AI provider processes data solely to fulfill the request and does not retain it after the response is generated.
• Your data is not used to train, fine-tune, or improve AI models.
• AI-generated readings are framed as practitioner-style guidance, not predictions, and should not be relied upon as professional advice.

4. Data Storage & Security

Your data is stored using Supabase, an enterprise-grade cloud infrastructure platform. We implement:

• Encryption at rest (AES-256) and in transit (TLS 1.2+).
• Row-level security (RLS) policies ensuring users can only access their own data.
• Secure authentication via Supabase Auth with support for Google, Apple Sign In, and email/password.
• Regular security monitoring and infrastructure updates.

While we employ commercially reasonable measures to protect your data, no method of electronic transmission or storage is 100% secure.

5. Sharing & Disclosure

We do not sell, rent, or trade your personal information. We share data only in these limited circumstances:

• Service providers — trusted third parties contractually obligated to protect your data:
  • Supabase — database and authentication.
  • Stripe — web subscription payment processing.
  • Apple — iOS in-app purchase processing.
  • Mixpanel — optional product analytics, with your permission.
  • Resend — weekly member email delivery.
  • DeepSeek or Moonshot AI — paid AI reading generation, depending on the configured provider.
• Legal requirements — when required by law, subpoena, court order, or governmental request.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to the acquirer honoring this Policy.

6. International Data Transfers

Your information may be processed outside your country by the hosting, authentication, payment, email, and AI providers described above. Processing locations depend on the configured providers.

7. Data Retention

• Your personal data will be permanently deleted within 30 days of account deletion.
• Unconfirmed friend invitations expire after seven days. Scheduled cleanup closes expired invitations and removes both shared chart snapshots on its next successful run. Active connections remain until a participant closes them or deletes their account. Chosen names and closed-connection metadata remain until account deletion.
• Optional analytics events are retained under our Mixpanel project’s retention settings. Pending delivery payloads expire after seven days; minimal delivery identifiers remain to prevent duplicate counting. You can request deletion of analytics associated with your account.
• Data required to be retained by law (e.g., transaction records) will be kept for the legally required period.

8. Your Rights & Choices

Depending on your jurisdiction, you may have the following rights:

• Access — request a copy of the personal data we hold about you.
• Correction — update or correct inaccurate personal data.
• Deletion — request deletion of your account and all associated personal data.
• Portability — request an export of your data in a structured, machine-readable format.
• Withdrawal of consent — withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at support@getnakshatra.com. We will respond within 30 days.

9. California Residents (CCPA/CPRA)

California residents have additional rights under the CCPA/CPRA, including the right to know, delete, opt out of sale, and non-discrimination. We do not sell your personal information.

10. Children's Privacy

The Service is not directed to children under 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you. The "Effective" date at the top will be updated. Continued use after the effective date constitutes acceptance.

12. Contact Us

Cosmic Jellyfish, LLC
Email: support@getnakshatra.com

Nakshatra — Cosmic Jellyfish, LLC · Terms