Privacy Policy

Kundlit (“we”, “us”) is operated by DATCRAZY LLP (GSTIN 22AASFD4221E1ZU), with registered office at 105, MM Silver Plaza, G.E. Road, Raipur, Chhattisgarh - 492001. This policy explains what data we collect when you use https://kundlit.com, why we collect it, who we share it with, and the rights you have over it. This policy describes our data practices, and the rights available to you under the Digital Personal Data Protection Act, 2023 of India (the “DPDP Act”) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. What we collect

Chart inputs — name, date of birth, time of birth, place of birth. Used to compute astrological results.
Account data — email address and a hashed password (we never see your plaintext password). Optional: phone number, display name.
Order data — service ordered, price, GST breakdown, billing address (for GST invoices), order status.
Payment data — Razorpay handles entry of card and UPI credentials, which never reach our servers. We do receive and store transaction records such as amount, currency, payment and order references, status, and the last four digits of the instrument, together with the verified webhook payload used to confirm and reconcile the payment. We do not store card numbers, UPI PINs, or CVVs.
Server logs — IP address, user agent, referrer, and request path, retained for security and abuse-prevention purposes.
Cookies — a strictly necessary session cookie for logged-in customers and your cart, plus optional analytics and marketing cookies that are enabled by default and remain under your control through the footer’s Cookie settings control (see the “Cookies & Analytics” subsection below).

1a. Cookies & Analytics

We use a small set of measurement tools to understand how the site is used and to measure the effectiveness of our advertising. These load by default. The consent banner does not auto-show; until you decline through the footer’s Cookie settings control, they remain enabled (Google Consent Mode v2, default-granted).

Google Analytics 4 (GA4) — governed by the Analytics consent category. Collects pseudonymous usage and behavioural data (pages viewed, events, approximate location, device and referrer) to help us improve the site.
Microsoft Clarity — also governed by the Analytics consent category. Provides aggregate heatmaps and pseudonymous session replays (clicks, scrolls and navigation) so we can find and fix usability problems. It loads by default unless you decline Analytics consent; form input is masked by default.
Google Ads and Meta Pixel and OpenAI Ads are advertising and attribution tools in the Marketing consent category. Used to measure ad conversions and reach relevant audiences. Google Enhanced Conversions and OpenAI Ads automatic advanced matching may read the contact details you enter on our forms so a conversion can be matched to an ad click; those details are SHA-256 hashed before they leave your browser — we never transmit your raw email, phone number, or other plaintext personal data to these advertising platforms. Reddit is a measurement platform used only when we have its measurement pixel enabled. Browser pixels load only while Marketing consent is enabled; our server may also process verified conversion events for applicable platforms.
Strictly necessary cookies (your login session and cart) are always on and are not part of these consent categories.
Referral cookie — if you reach us through an affiliate’s referral link (a link carrying a ref parameter), we store a kundlit_ref cookie holding only that affiliate’s numeric id, so their commission can be credited if you go on to buy. It lasts 90 days, cannot be read by scripts in your browser, is never used for advertising, profiling, or cross-site tracking, and is not set while you are on this page. The first referral link you arrive through keeps the credit; a later one does not replace it.

These tools are enabled by default, and you remain in control. The consent banner does not auto-show; it offers Accept all, Decline, and Customize. To withdraw or change consent at any time, open the footer’s Cookie settings control and choose Decline or adjust Analytics and Marketing. This updates Google Consent Mode v2 and the ad pixels.

1b. The Kundlit Android app

The app uses the same account and the same data as the site. In addition:

AI astrologer answers — when you ask the AI astrologer, in the app or on the site, your question and the chart details worked out from the birth details you gave are sent to our AI provider, Anthropic's Claude (DeepSeek is the backup), which writes the answer. In the app we ask for your consent before your first question and record when you agreed.
AI birth time rectification — on the site, the answers you type in its interview, such as the dates of events in your life, are sent to DeepSeek so it can read the dates and write the chat replies. With them we send your birth year. To explain your result, we also send the most likely birth time and the time ranges that were checked, including any range you gave us. Email addresses and phone numbers are removed first. Your name, full date of birth and birth place are not sent.
In-app purchases — AI chat minutes, AI questions, reports and follow-up questions bought in the app are paid through Google Play Billing. Google handles your payment details; we never see them. RevenueCat, Inc. processes the purchase record (your Kundlit account number, the product, the Google Play order number and the price) so we can check the purchase and add it to your account.
Notifications — the app can show notifications, such as an optional daily panchang reminder. You can turn them off in the app or in your phone’s settings.
Deleting your account in the app — Account > Delete account deletes your Kundlit account as described under “Deleting your account” in §4. Orders and invoices are kept for the eight years tax law requires. kundlit.com/delete-account explains the other ways to ask.

1c. Chats under a jeweller's name

Some jewellers offer an astrology chat under their own name, logo and colours. We run that chat for them. Usually there is no sign-up. At some jewellers you pay per chart. There you make a normal Kundlit account, your charts and answers are tied to that account so they follow you to any device, and our normal emails apply, which you can opt out of at any time.

What we keep — the birth details you enter for each person you add (up to six), your questions and the answers. A cookie in your browser keeps you connected to your chats at that jeweller. The name, birth details, questions and answers are stored encrypted in our main database. The coordinates and time zone of a birth place are not encrypted there, because they are used to work out the chart. Our AI system keeps a working copy of your questions and answers, and rejected drafts for up to 30 days, until you delete them.
Who is responsible — we are responsible for this data, not the jeweller, and this policy applies to it. A person's data at one jeweller is kept apart from their data at another.
What the jeweller sees — totals only: how many people used the chat, the minutes used, and counts of the stones recommended and the topics asked about. They see your name and phone number only if you choose to share them.
What the jeweller never sees — your chats, your birth details, or any answer given to you, including an answer that recommends no stone.
AI used — your question and the birth details of the people you attach to it are sent to our AI system, and DeepSeek writes and checks the answer. The jeweller's stock is matched to the answer only after it is written.
Deleting — use Delete my details in the chat, or the delete link it gives you. We delete every chart you added, your chats and anything you shared, and ask our AI system to erase its copy. If you ask no question for 200 days, or a jeweller leaves, we delete the data the same way. A chart you paid for through your account is the exception: it and its answers stay with your account, even if the jeweller leaves, until you delete them or your account. Copies in our encrypted backups expire in about 60 days.

2. Why we use it

Compute astrological results and deliver paid reports.
Authenticate you and keep your account and orders secure.
Process payments and issue tax invoices.
Provide customer support and process refunds.
Detect, prevent, and respond to fraud or abuse.
Comply with Indian tax, accounting, and consumer-protection law.

Under §6 of the DPDP Act, our lawful basis is the consent you give when you submit a form or place an order, together with the “legitimate use” ground for processing strictly necessary to fulfil the service you requested.

We do not sell your data. We share the minimum necessary data with the following processors:

Razorpay Software Pvt. Ltd. — payment processing (India).
Anthropic, PBC (Claude) and DeepSeek — our AI providers. Claude writes AI astrologer answers on our site and app from your question and chart details, and DeepSeek is the backup. DeepSeek writes all answers in chats under a jeweller's name, and reads the answers you type in the AI birth time rectification interview.
Google (Google Play Billing) and RevenueCat, Inc. — payment and purchase records for in-app purchases in the Android app.
Hosting and email infrastructure providers — required to operate the site and send transactional emails (order confirmations, password resets).

4. How long we keep it

Order and invoice records — eight (8) years, as required by the Indian GST Act and Companies Act.
Account data — until you ask us to delete it (see §6 below), subject to the invoice-retention rule above.
Chart inputs from one-off free-tool use — not stored on our servers beyond the immediate computation, unless you are signed in and explicitly save the result to your account.
Server logs — ninety (90) days, then deleted.
Deleting your account — when you ask us to delete your account, we delete your account, your saved birth details, your AI chat conversations (the free chat and any paid AI questions) and your sign-in details, ask our AI system to erase its copy of your AI chats, and stop sending you marketing email. Orders and invoices are kept for the eight years tax law requires, together with the messages about each order and the birth details given for it. Paid consultations, with an astrologer or with the AI astrologer, are kept with their chat transcripts, as are your question credit records and any readings we sent you by link, but they are no longer linked to your account. Support messages and email delivery logs are kept for service and legal records. Copies in our backups are deleted as those backups expire, within about sixty (60) days.

5. Where we store it

Our primary servers are located in India. Payment processors may process data in India, the United States, and the European Union. When data leaves India, it is governed by the contractual safeguards published by those processors and the cross-border transfer provisions of §16 of the DPDP Act.

6. Your rights

Under §11–§14 of the DPDP Act (and, where applicable, GDPR Arts. 15–22) you have the right to:

Access the personal data we hold about you.
Correct it if it is inaccurate.
Have it erased, subject to the retention obligations in §4 above.
Withdraw consent at any time, with future effect.
Nominate another person to exercise these rights on your behalf in the event of incapacity or death (§14 DPDP Act).
Lodge a grievance with us, and escalate to the Data Protection Board of India if unresolved.

To exercise any of these rights, email [email protected] from the address on your account. We respond within thirty (30) days.

7. Security

The site is served over HTTPS. Passwords are stored as one-way hashes. Razorpay handles card and UPI credential entry; those credentials never reach our servers. We receive and store transaction and webhook records, including amount, currency, payment and order references, status, the last four digits of the instrument, and the verified webhook payload used to confirm and reconcile the payment. If we ever suffer a data breach affecting your personal data, we will notify you and the Data Protection Board without undue delay, as required by §8(6) of the DPDP Act.

8. Children

We do not knowingly collect data from children under eighteen (18). If you are a parent or guardian and believe your child has provided us with personal data, contact us and we will delete it.

9. Changes

We may update this policy. Material changes will be announced on this page with a new effective date at least seven (7) days before they take effect.

10. Grievance officer

Under §10(2)(e) of the DPDP Act and Rule 5(9) of the IT (Intermediary Guidelines) 2021, our grievance officer is:

Name: Purushottam Kiri
Entity: DATCRAZY LLP
Address: 105, MM Silver Plaza, G.E. Road, Raipur, Chhattisgarh - 492001
Email: [email protected]

Acknowledgement within forty-eight (48) hours; resolution within thirty (30) days, as required by law.

See also: Terms of Service · Refund Policy · Contact

1. What we collect

Chart inputs — name, date of birth, time of birth, place of birth. Used to compute astrological results.
Account data — email address and a hashed password (we never see your plaintext password). Optional: phone number, display name.
Order data — service ordered, price, GST breakdown, billing address (for GST invoices), order status.
Payment data — Razorpay handles entry of card and UPI credentials, which never reach our servers. We do receive and store transaction records such as amount, currency, payment and order references, status, and the last four digits of the instrument, together with the verified webhook payload used to confirm and reconcile the payment. We do not store card numbers, UPI PINs, or CVVs.
Server logs — IP address, user agent, referrer, and request path, retained for security and abuse-prevention purposes.
Cookies — a strictly necessary session cookie for logged-in customers and your cart, plus optional analytics and marketing cookies that are enabled by default and remain under your control through the footer’s Cookie settings control (see the “Cookies & Analytics” subsection below).

1a. Cookies & Analytics

Google Analytics 4 (GA4) — governed by the Analytics consent category. Collects pseudonymous usage and behavioural data (pages viewed, events, approximate location, device and referrer) to help us improve the site.
Microsoft Clarity — also governed by the Analytics consent category. Provides aggregate heatmaps and pseudonymous session replays (clicks, scrolls and navigation) so we can find and fix usability problems. It loads by default unless you decline Analytics consent; form input is masked by default.
Google Ads and Meta Pixel and OpenAI Ads are advertising and attribution tools in the Marketing consent category. Used to measure ad conversions and reach relevant audiences. Google Enhanced Conversions and OpenAI Ads automatic advanced matching may read the contact details you enter on our forms so a conversion can be matched to an ad click; those details are SHA-256 hashed before they leave your browser — we never transmit your raw email, phone number, or other plaintext personal data to these advertising platforms. Reddit is a measurement platform used only when we have its measurement pixel enabled. Browser pixels load only while Marketing consent is enabled; our server may also process verified conversion events for applicable platforms.
Strictly necessary cookies (your login session and cart) are always on and are not part of these consent categories.
Referral cookie — if you reach us through an affiliate’s referral link (a link carrying a ref parameter), we store a kundlit_ref cookie holding only that affiliate’s numeric id, so their commission can be credited if you go on to buy. It lasts 90 days, cannot be read by scripts in your browser, is never used for advertising, profiling, or cross-site tracking, and is not set while you are on this page. The first referral link you arrive through keeps the credit; a later one does not replace it.

1b. The Kundlit Android app

The app uses the same account and the same data as the site. In addition:

AI astrologer answers — when you ask the AI astrologer, in the app or on the site, your question and the chart details worked out from the birth details you gave are sent to our AI provider, Anthropic's Claude (DeepSeek is the backup), which writes the answer. In the app we ask for your consent before your first question and record when you agreed.
AI birth time rectification — on the site, the answers you type in its interview, such as the dates of events in your life, are sent to DeepSeek so it can read the dates and write the chat replies. With them we send your birth year. To explain your result, we also send the most likely birth time and the time ranges that were checked, including any range you gave us. Email addresses and phone numbers are removed first. Your name, full date of birth and birth place are not sent.
In-app purchases — AI chat minutes, AI questions, reports and follow-up questions bought in the app are paid through Google Play Billing. Google handles your payment details; we never see them. RevenueCat, Inc. processes the purchase record (your Kundlit account number, the product, the Google Play order number and the price) so we can check the purchase and add it to your account.
Notifications — the app can show notifications, such as an optional daily panchang reminder. You can turn them off in the app or in your phone’s settings.
Deleting your account in the app — Account > Delete account deletes your Kundlit account as described under “Deleting your account” in §4. Orders and invoices are kept for the eight years tax law requires. kundlit.com/delete-account explains the other ways to ask.

1c. Chats under a jeweller's name

What we keep — the birth details you enter for each person you add (up to six), your questions and the answers. A cookie in your browser keeps you connected to your chats at that jeweller. The name, birth details, questions and answers are stored encrypted in our main database. The coordinates and time zone of a birth place are not encrypted there, because they are used to work out the chart. Our AI system keeps a working copy of your questions and answers, and rejected drafts for up to 30 days, until you delete them.
Who is responsible — we are responsible for this data, not the jeweller, and this policy applies to it. A person's data at one jeweller is kept apart from their data at another.
What the jeweller sees — totals only: how many people used the chat, the minutes used, and counts of the stones recommended and the topics asked about. They see your name and phone number only if you choose to share them.
What the jeweller never sees — your chats, your birth details, or any answer given to you, including an answer that recommends no stone.
AI used — your question and the birth details of the people you attach to it are sent to our AI system, and DeepSeek writes and checks the answer. The jeweller's stock is matched to the answer only after it is written.
Deleting — use Delete my details in the chat, or the delete link it gives you. We delete every chart you added, your chats and anything you shared, and ask our AI system to erase its copy. If you ask no question for 200 days, or a jeweller leaves, we delete the data the same way. A chart you paid for through your account is the exception: it and its answers stay with your account, even if the jeweller leaves, until you delete them or your account. Copies in our encrypted backups expire in about 60 days.

2. Why we use it

Compute astrological results and deliver paid reports.
Authenticate you and keep your account and orders secure.
Process payments and issue tax invoices.
Provide customer support and process refunds.
Detect, prevent, and respond to fraud or abuse.
Comply with Indian tax, accounting, and consumer-protection law.

We do not sell your data. We share the minimum necessary data with the following processors:

Razorpay Software Pvt. Ltd. — payment processing (India).
Anthropic, PBC (Claude) and DeepSeek — our AI providers. Claude writes AI astrologer answers on our site and app from your question and chart details, and DeepSeek is the backup. DeepSeek writes all answers in chats under a jeweller's name, and reads the answers you type in the AI birth time rectification interview.
Google (Google Play Billing) and RevenueCat, Inc. — payment and purchase records for in-app purchases in the Android app.
Hosting and email infrastructure providers — required to operate the site and send transactional emails (order confirmations, password resets).

4. How long we keep it

Order and invoice records — eight (8) years, as required by the Indian GST Act and Companies Act.
Account data — until you ask us to delete it (see §6 below), subject to the invoice-retention rule above.
Chart inputs from one-off free-tool use — not stored on our servers beyond the immediate computation, unless you are signed in and explicitly save the result to your account.
Server logs — ninety (90) days, then deleted.
Deleting your account — when you ask us to delete your account, we delete your account, your saved birth details, your AI chat conversations (the free chat and any paid AI questions) and your sign-in details, ask our AI system to erase its copy of your AI chats, and stop sending you marketing email. Orders and invoices are kept for the eight years tax law requires, together with the messages about each order and the birth details given for it. Paid consultations, with an astrologer or with the AI astrologer, are kept with their chat transcripts, as are your question credit records and any readings we sent you by link, but they are no longer linked to your account. Support messages and email delivery logs are kept for service and legal records. Copies in our backups are deleted as those backups expire, within about sixty (60) days.

5. Where we store it

6. Your rights

Under §11–§14 of the DPDP Act (and, where applicable, GDPR Arts. 15–22) you have the right to:

Access the personal data we hold about you.
Correct it if it is inaccurate.
Have it erased, subject to the retention obligations in §4 above.
Withdraw consent at any time, with future effect.
Nominate another person to exercise these rights on your behalf in the event of incapacity or death (§14 DPDP Act).
Lodge a grievance with us, and escalate to the Data Protection Board of India if unresolved.

To exercise any of these rights, email [email protected] from the address on your account. We respond within thirty (30) days.

7. Security

8. Children

We do not knowingly collect data from children under eighteen (18). If you are a parent or guardian and believe your child has provided us with personal data, contact us and we will delete it.

9. Changes

We may update this policy. Material changes will be announced on this page with a new effective date at least seven (7) days before they take effect.

10. Grievance officer

Under §10(2)(e) of the DPDP Act and Rule 5(9) of the IT (Intermediary Guidelines) 2021, our grievance officer is:

Name: Purushottam Kiri
Entity: DATCRAZY LLP
Address: 105, MM Silver Plaza, G.E. Road, Raipur, Chhattisgarh - 492001
Email: [email protected]

Acknowledgement within forty-eight (48) hours; resolution within thirty (30) days, as required by law.

See also: Terms of Service · Refund Policy · Contact

Privacy Policy

1. What we collect

1a. Cookies & Analytics

1b. The Kundlit Android app

1c. Chats under a jeweller's name

2. Why we use it

3. Who we share it with (data processors)

4. How long we keep it

5. Where we store it

6. Your rights

7. Security

8. Children

9. Changes

10. Grievance officer

Privacy Policy

1. What we collect

1a. Cookies & Analytics

1b. The Kundlit Android app

1c. Chats under a jeweller's name

2. Why we use it

3. Who we share it with (data processors)

4. How long we keep it

5. Where we store it

6. Your rights

7. Security

8. Children

9. Changes

10. Grievance officer