Privacy

Shoonya ("we", "us") is operated from Bengaluru, India. We act as the Data Fiduciary for personal data you share with the Service, as defined under the DPDP Act, 2023.

• Account data: name, email address, account password (stored hashed).
• Birth details (optional): date, time and place of birth — used only to compute your astrological chart.
• Conversation data: messages you send to Shoonya and the AI's replies.
• Memories: short summaries Shoonya extracts to keep context.
• Payment metadata: Razorpay order ID, plan and billing period. We do not store your card or UPI details.
• Usage data: approximate timestamps, feature usage counts, device type for security and analytics.

• To provide personalised readings, compatibility and chat features.
• To remember context across conversations so Shoonya feels continuous.
• To process payments and prevent fraud.
• To send service-related emails (password resets, billing receipts, important policy changes).
• To improve the Service in aggregate, anonymised form.

By signing up you consent to processing for these purposes. You may withdraw consent at any time (see Section 6).

We do not sell your data to advertisers or data brokers, and we do not use your private conversations to train external AI models. We share data only with the following processors:

• Lovable Cloud — hosting and database (encrypted).
• Google & OpenAI (via the Lovable AI Gateway) — to generate chat and reading responses. Not used to train base models.
• Prokerala — to compute your Vedic chart from birth details.
• Razorpay — to securely process payments.

Stored on secure managed infrastructure with encryption at rest (AES-256) and in transit (TLS 1.2+). Row-level access controls ensure only your account can read your messages, memories and birth chart. Some processors may store data outside India in jurisdictions notified as permissible under the DPDP Act, 2023.

Under the DPDP Act, 2023 you have the right to:

• Access a copy of the personal data we hold about you.
• Correct or update inaccurate data.
• Withdraw consent and request deletion — available from Profile → Delete account.
• Nominate another individual to exercise your rights in case of incapacity.
• Lodge a grievance with our Grievance Officer (see Section 9).

We retain personal data only as long as needed for the purposes above or as required by law. After account deletion, profile, memories and conversation history are erased within 30 days. Payment records required under tax law may be retained for up to 8 years in encrypted form.

The Service is intended for users 18+. We do not knowingly collect data from children under 18 without verifiable parental consent.

We will notify you in-app and by email at least 14 days before any material changes take effect.

Privacy questions: privacy@shoonyai.com