Legal

Privacy Policy

Last updated: 22 September 2026. This policy describes the current Guruji Android service and website.

Guruji respects the personal nature of birth details, questions and guidance history. This policy explains what we process, why we process it, the providers involved and the choices available to you.

1. Data we process

Account and authentication

We process your email address, an internal account identifier and authentication/session information. Password and email-code verification are handled through Supabase authentication. Resend delivers transactional verification email. Never send us your password or one-time verification code.

Birth and profile information

If you create a profile, we process the name you provide, date of birth, birth time or time-accuracy choice, birthplace, derived coordinates and historical timezone. These details are used to calculate and retrieve your astrological profile and personalized guidance. Birthplace search queries may be processed through Google Maps Platform.

Questions, predictions and usage

We process questions you submit to Ask Guruji, generated answers, Daily Guruji results, evidence references, language choice and history needed to show the service and enforce plan allowances. Same-day Daily guidance is stored and reused instead of repeatedly generating a paid result.

Notifications and devices

If you enable morning notifications, we process a Firebase Cloud Messaging device token, device association, timezone, preferred notification time, delivery state and local prediction date. A push token identifies an app installation for delivery; it is not used as authentication.

Subscriptions

Google Play processes purchase and payment details. Guruji and RevenueCat receive product, entitlement, transaction-state and renewal information needed to verify access and allowances. Guruji does not receive your full card number.

Operational data

Our hosting and API providers may process IP address, request path, timestamp, device/browser characteristics, response status and bounded security diagnostics. Guruji does not currently include a separate advertising, product-analytics or mobile crash-reporting SDK.

Palm features

Palm processing is disabled in the current production launch configuration. Palm evidence is not used in Daily Guruji, and the launch app does not offer production palm-photo processing. Development research and consented testing are isolated from the production feature path. We will update this policy and obtain appropriate consent before enabling any production palm feature.

2. How we use data

3. AI processing

For Ask Guruji, the backend may send your question and the minimum relevant calculated/evidence context to an API-based AI provider, currently OpenAI, to classify the request and produce a bounded explanation. Deterministic calculations and reviewed evidence remain separate from the language layer. We do not place private provider credentials in the mobile app.

API providers may retain and review request data under their own abuse-monitoring and data-processing terms. Guruji uses provider settings intended to limit unnecessary application-state retention, but does not claim Zero Data Retention unless it has been expressly enabled and verified for the production project.

4. Service providers

Providers process data under their own terms and may process it in countries other than yours. We use only the data and provider access needed for their stated function.

5. Retention and deletion

Account, profile, birth, prediction, question and preference records are generally retained while your account is active so the service can restore your profile and history. Device tokens are removed or invalidated when you sign out, change accounts, delete the account or when the provider reports that a token is no longer valid. Billing and security records may be retained where necessary for fraud prevention, disputes, accounting or law.

You can permanently delete your account in Guruji under Settings → Delete account, or use our web account-deletion request. The implemented deletion path removes the active Guruji account and associated application data. Limited copies may remain temporarily in protected backups or provider/security logs until normal expiry, and information required by law or legitimate fraud-prevention needs may be retained. We do not promise a deletion period that the relevant backup or service-provider system does not substantiate.

6. Security practices

Guruji uses HTTPS, authenticated API access, server-side entitlement and quota checks, database ownership controls, rate limits, idempotency protection and cloud secret storage. Private OpenAI, AstrologyAPI, Resend, database and Supabase service-role credentials belong only in backend/private configuration. No security measure can guarantee absolute protection.

7. Your choices and rights

You may update profile and language choices, disable notifications, delete prediction history, sign out or delete your account. Depending on applicable law, you may also ask for access, correction, deletion, restriction or information about our processing. Contact support@appguruji.com from your account email. Do not include passwords or OTP codes.

8. Children

Guruji is intended for adults aged 18 or older. We do not knowingly offer accounts to children. Contact us if you believe a child has provided personal information.

9. Changes

We may update this policy when the service, providers or law changes. The current version and effective date will remain published here. Material changes will be communicated where required.

10. Contact

For privacy or data questions, contact support@appguruji.com or visit Guruji Support.