1. Who we are
ISHARA (the app and website) is operated by Piyush Jindal, an individual, at 232, Sector 38, near Bakhtawar Chowk, Medicity, Gurugram, Haryana, India (“we”, “us”). For India’s Digital Personal Data Protection Act, 2023 we are the Data Fiduciary for the personal data described here. Contact: cosmicgod1111@gmail.com.
2. What we collect
- Access and account data. When you enter an access code we create an account with a random id. We do not store the code itself, only a one-way fingerprint of it. We keep session records (when a session started and was last used) so you stay signed in, and so logging out ends a session for good.
- Birth details for you and for anyone you add (family members, partner): name, date, time and place of birth (as coordinates and time zone), and optionally gender and the city where the person lives now. These are needed to calculate charts and forecasts. They are stored encrypted.
- TARA chats. Your questions to TARA and her answers, saved per person so you can return to them. Stored encrypted.
- Mood check-ins. The 1-to-5 ratings you give in “Is it working for you?”, used to compare forecasts with how your days felt.
- Notifications, only if you turn them on. Your browser’s notification address for that device (stored encrypted), which notifications you chose, your quiet hours and time zone, and which of the day’s notifications were already sent.
- Usage counts and credits. How many TARA questions an account used each day, its wallet credits and their history.
- Payments. If payments are switched on: order and payment ids, pack, amount and status. Card, UPI and bank details go directly to Razorpay and never reach us.
- Consent records. What you agreed to (Terms and Privacy Policy, cookie choices), which version, and when.
- Messages you send us through the contact form: name, email, subject and message. Stored encrypted.
- App launch list: if you ask to be told when the app launches, your email address. Stored encrypted.
- Page visits (only if you allow Analytics). Which pages of the app an account opened, and when. See the Cookie Policy.
- Technical data. Your IP address is used briefly to limit requests and block abuse. Our hosting providers keep short-lived server logs (such as IP address, time and page requested) for security and troubleshooting.
3. Why we use it
- To provide ISHARA: calculate charts, daily scores, timings and matches, and answer your questions through TARA.
- To run your account: keep you signed in, apply daily question limits, keep credits and chats.
- To process payments and keep the records the law requires.
- To send the daily notifications you turned on, at the times you chose.
- To keep the service secure and prevent abuse (rate limits, fraud checks).
- To improve the app, using page-visit statistics only if you allowed Analytics.
- To meet legal obligations and respond to your requests.
We rely on your consent, which you give when you agree to this policy and when you make cookie choices. You can withdraw it at any time (see section 9). Where the GDPR applies, we also rely on what is needed to provide the service you asked for, and on our legitimate interest in keeping it secure.
4. TARA and OpenAI
When you ask TARA a question, we send your question, the last few turns of that chat, and a compact summary of the relevant chart (including the person’s name and birth data needed for the answer) to OpenAI, which generates the answer. OpenAI acts as our service provider. Under its API terms, OpenAI does not use this data to train its models by default and may keep it for up to 30 days for abuse monitoring and to continue the conversation. Please do not share passwords, bank details or health records with TARA.
5. Who helps us (service providers)
- Vercel hosts the website (servers in Singapore).
- Render hosts the chart engine (Singapore).
- Neon hosts the database (Amazon Web Services, Singapore).
- OpenAI generates TARA’s answers (United States).
- Razorpay processes payments, when switched on (India).
- Upstash, if enabled, keeps short-lived rate-limit counters.
- Open-Meteo powers city search; it receives only the city name you type.
- Your browser’s push service (for example Google, Apple or Mozilla) delivers notifications you turned on. The message is encrypted, so it sees only when to deliver it, not what it says.
- Resend, if enabled, delivers contact-form messages to our inbox (United States).
They process data only to provide their service to us. We may also disclose data if the law requires it. We never sell personal data.
6. Where your data is stored
Your data is stored and processed outside India, mainly in Singapore, and in the United States for TARA’s answers. The DPDP Act allows such transfers except to countries the Government of India restricts; we will follow any such restriction.
7. How long we keep it
- Birth details, chats and check-ins: while your account is in use, until you remove the person or ask us to delete your account.
- Sessions: they stop working after 30 days without use (180 days at most) or when you log out.
- Page visits: 12 months.
- Notification settings: until you turn notifications off, your browser ends the subscription, or you delete your account.
- Contact messages: up to 24 months after the conversation ends.
- App launch list: until we send the launch email, or until you ask us to remove you.
- Consent records: as long as needed to show what you agreed to.
- Payment records: as long as Indian tax and accounting law requires.
8. How we protect it, and who can see it
Only the operator can open the protected admin panel, which is checked on the server for every request. It shows, per account: the account owner’s name and date of birth, the people saved, when the account signed up and was last active, logins, page visits (only if Analytics was allowed), the text of TARA questions (not TARA’s answers), consent records, credits and payments, plus contact messages and the app launch list. We use it to support you, handle your requests, prevent abuse and improve ISHARA, and for nothing else.
Birth details and chats are encrypted in the database (AES-256-GCM). All traffic uses HTTPS. The sign-in cookie cannot be read by page scripts, every request is checked on the server, and access to the database and keys is limited to us. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.
9. Your choices and rights
- Access and correction: you can see and edit every person’s details in the app, or ask us for a summary of the data we hold about your account.
- Erasure: you can remove family members and partners in the app, and delete your whole account yourself: open the menu under your name and choose Delete my account. Everything is removed at once, except payment records we must keep by law. You can also email cosmicgod1111@gmail.com with the person’s name and date of birth, and we will delete the account within 30 days.
- Withdraw consent: change cookie choices any time with Cookie Settings in the footer. To withdraw consent for everything else, ask us to delete your account.
- Notifications: turn them on or off, choose which ones and set quiet hours any time: open the menu under your name and choose Notifications.
- Nominate: under the DPDP Act you can nominate someone to exercise your rights if you die or cannot act.
- Grievances: contact our Grievance Officer (below). If you are not satisfied, you can complain to the Data Protection Board of India. If you are in the EU or UK, you also have GDPR rights (including objection, restriction and portability) and can complain to your local data protection authority.
10. People you add, and children
ISHARA is for adults (18 and over). When you add another person, you confirm that they agreed, or that you are their parent or lawful guardian. For a child under 18, only a parent or lawful guardian may add their details.
11. Cookies
We use one essential sign-in cookie, one cookie that remembers your consent, and optional preference storage. Details and choices are in the Cookie Policy.
12. Changes to this policy
If we change this policy in a way that matters, we will update the date above and ask you to agree again in the app. This is version 2026-10-07.
13. Contact and Grievance Officer
Piyush Jindal, 232, Sector 38, near Bakhtawar Chowk, Medicity, Gurugram, Haryana, India. Email: cosmicgod1111@gmail.com. We aim to reply within 7 days and to resolve grievances within 30 days.