Legal
Privacy Policy
Guruji respects the personal nature of birth details, questions and guidance history. This policy explains what we process, why we process it, the providers involved and the choices available to you.
1. Data we process
Account and authentication
We process your email address, an internal account identifier and authentication/session information. Password and email-code verification are handled through Supabase authentication. Resend delivers transactional verification email. Never send us your password or one-time verification code.
Birth and profile information
If you create a profile, we process the name you provide, date of birth, birth time or time-accuracy choice, birthplace, derived coordinates and historical timezone. These details are used to calculate and retrieve your astrological profile and personalized guidance. Birthplace search queries may be processed through Google Maps Platform.
Questions, predictions and usage
We process questions you submit to Ask Guruji, generated answers, Daily Guruji results, evidence references, language choice and history needed to show the service and enforce plan allowances. Same-day Daily guidance is stored and reused instead of repeatedly generating a paid result.
Notifications and devices
If you enable morning notifications, we process a Firebase Cloud Messaging device token, device association, timezone, preferred notification time, delivery state and local prediction date. A push token identifies an app installation for delivery; it is not used as authentication.
Subscriptions
Google Play processes purchase and payment details. Guruji and RevenueCat receive product, entitlement, transaction-state and renewal information needed to verify access and allowances. Guruji does not receive your full card number.
Operational data
Our hosting and API providers may process IP address, request path, timestamp, device/browser characteristics, response status and bounded security diagnostics. Guruji does not currently include a separate advertising, product-analytics or mobile crash-reporting SDK.
Palm features
Palm processing is disabled in the current production launch configuration. Palm evidence is not used in Daily Guruji, and the launch app does not offer production palm-photo processing. Development research and consented testing are isolated from the production feature path. We will update this policy and obtain appropriate consent before enabling any production palm feature.
2. How we use data
- create and secure your account;
- calculate your chart and provide personalized Daily Guruji and Ask Guruji experiences;
- save your preferences, history and immutable same-day guidance;
- deliver notifications you choose to enable;
- verify subscription entitlements and enforce plan allowances;
- prevent fraud, abusive automation and duplicate paid processing;
- diagnose failures and maintain security; and
- comply with legal obligations and enforce our Terms.
3. AI processing
For Ask Guruji, the backend may send your question and the minimum relevant calculated/evidence context to an API-based AI provider, currently OpenAI, to classify the request and produce a bounded explanation. Deterministic calculations and reviewed evidence remain separate from the language layer. We do not place private provider credentials in the mobile app.
API providers may retain and review request data under their own abuse-monitoring and data-processing terms. Guruji uses provider settings intended to limit unnecessary application-state retention, but does not claim Zero Data Retention unless it has been expressly enabled and verified for the production project.
4. Service providers
- Supabase: authentication, database and account ownership controls.
- Google Cloud and Firebase: API hosting, secret management, scheduling, static website hosting and push notifications.
- Google Maps Platform: birthplace lookup and coordinate/timezone support.
- OpenAI: API-based classification and explanation for supported AI features.
- RevenueCat and Google Play: subscription products, transaction state, entitlement verification and purchase management.
- Resend: transactional authentication email and support email delivery/receipt.
Providers process data under their own terms and may process it in countries other than yours. We use only the data and provider access needed for their stated function.
5. Retention and deletion
Account, profile, birth, prediction, question and preference records are generally retained while your account is active so the service can restore your profile and history. Device tokens are removed or invalidated when you sign out, change accounts, delete the account or when the provider reports that a token is no longer valid. Billing and security records may be retained where necessary for fraud prevention, disputes, accounting or law.
You can permanently delete your account in Guruji under Settings → Delete account, or use our web account-deletion request. The implemented deletion path removes the active Guruji account and associated application data. Limited copies may remain temporarily in protected backups or provider/security logs until normal expiry, and information required by law or legitimate fraud-prevention needs may be retained. We do not promise a deletion period that the relevant backup or service-provider system does not substantiate.
6. Security practices
Guruji uses HTTPS, authenticated API access, server-side entitlement and quota checks, database ownership controls, rate limits, idempotency protection and cloud secret storage. Private OpenAI, AstrologyAPI, Resend, database and Supabase service-role credentials belong only in backend/private configuration. No security measure can guarantee absolute protection.
7. Your choices and rights
You may update profile and language choices, disable notifications, delete prediction history, sign out or delete your account. Depending on applicable law, you may also ask for access, correction, deletion, restriction or information about our processing. Contact support@appguruji.com from your account email. Do not include passwords or OTP codes.
8. Children
Guruji is intended for adults aged 18 or older. We do not knowingly offer accounts to children. Contact us if you believe a child has provided personal information.
9. Changes
We may update this policy when the service, providers or law changes. The current version and effective date will remain published here. Material changes will be communicated where required.
10. Contact
For privacy or data questions, contact support@appguruji.com or visit Guruji Support.