Astronia — Powered by AP Pure Care Private Limited
What we collect, why, and your rights
This Policy applies to the Astronia website at astronia.in and to the Astronia mobile applications published on the Apple App Store and Google Play. For data processed through Astronia, AP PURE CARE PRIVATE LIMITED is the data fiduciary/controller unless a notice identifies another lawful role. The Data Protection contact and the Grievance Officer may be reached at support@astronia.in, and their details are published on the Platform. This Policy is intended to align with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 as their provisions come into force, together with other applicable Indian law.
| Data category | Examples |
|---|---|
| Account and identity | Name, mobile number, email, age or age declaration and the outcome of age assurance, profile image, login and verification records. |
| Astrology inputs | Date, time and place of birth; gender or relationship information only where voluntarily provided and relevant. |
| Consultation content | Chat messages, uploaded material, voice notes, call/video recordings where consented, reports, live interactions and support tickets. |
| Transaction data | Orders, credits, invoices, refunds, gifts, subscription status, payment status and masked payment references; full card data is generally handled by payment providers. |
| Device and usage | IP address, device/app identifiers, operating system, language, app events, crash logs, cookies, approximate location and fraud signals. |
| Permissions | Microphone, camera, notifications, contacts or call-related permissions, only when requested for an enabled feature and permitted by the device. |
| Safety and quality | Reviews, complaints, moderation actions, risk flags and evidence needed to investigate abuse or protect users. |
4.1 Astronia provides a clear notice describing the data and the purpose before seeking consent. Consent will be free, specific, informed, unconditional and capable of withdrawal with comparable ease. Service is not conditioned on unnecessary permissions or on unrelated marketing consent.
4.2 Language. A User may request this Policy and the accompanying consent notices in English or in any language specified in the Eighth Schedule to the Constitution of India. Astronia makes those versions available through the Platform.
4.3 Withdrawal does not invalidate prior lawful processing. A feature may stop where the requested service cannot function without the relevant data, and Astronia will explain the consequence before withdrawal is confirmed.
4.4 Astronia maintains consent records showing the policy version, the notice displayed, the timestamp, the account and device, and the affirmative action taken.
4.5 A general acceptance of this Privacy Policy is not used as blanket consent. Separate just-in-time notices and affirmative choices apply to recording, marketing, contact access, precise location, AI processing of private content and any materially different purpose.
5.1 Astronia may share only necessary data with the selected Service Provider; with hosting, communications, analytics, customer-support, security and payment processors bound by contractual safeguards; with professional advisers and auditors; with an acquirer in a lawful business restructuring; and with government or law-enforcement authorities under a valid legal basis.
5.2 Astronia does not sell private Consultation content or Users’ phone numbers to Service Providers. A Service Provider must use Consultation information only to deliver the requested service, and must not retain, contact or market to the User outside Astronia.
5.3 Where audio Sessions are routed through a telecom or communications provider, the User’s telephone number is masked from the Service Provider, and the call may traverse that provider’s network. Astronia identifies the categories of such providers on the Platform.
5.4 Live processor register. Before the relevant processing begins, Astronia publishes and keeps current the categories and, where legally required or material to User choice, the names of cloud, communications, analytics, support, AI and payment processors, their purpose, data category and principal processing location. App-store privacy declarations must match this register.
User inputs may be processed by disclosed AI service providers to generate an AI response or support an enabled feature. Astronia will not use identifiable private Consultation recordings or chats to train a general-purpose model without separate, specific consent or valid anonymisation that is not reasonably reversible. Human quality review, if used, is disclosed and access-restricted.
| Record | Default approach |
|---|---|
| Routine Session recordings | Up to 180 days by default; longer only for an active complaint, safety issue, fraud review or legal requirement, under a recorded legal hold. |
| Account-registration records | While active and for 180 days after cancellation or withdrawal of registration, or longer under a documented lawful hold. |
| Chat and report history | Consultation chat and AI transcripts: 365 days after the consultation ends, then deleted; longer only under a recorded legal hold or statutory requirement. Reports a User makes: while the account is active and ordinarily for 3 years after the later of delivery, last interaction or account closure; longer only under a recorded legal hold or statutory requirement. |
| Payment, invoice and tax records | Ordinarily 8 financial years, or the longer period required for an assessment, audit, proceeding or other applicable law. |
| Support and grievance records | Normally 3 years after closure of the ticket, or longer for a pending claim. |
| ICT, security and access logs | A rolling minimum of 180 days, securely maintained within India as required by applicable CERT-In directions; ordinarily no longer than 365 days unless linked to an incident, fraud review, legal hold or longer statutory requirement. |
| Age-assurance records | The outcome and method are retained for the life of the account and for 180 days after closure. Underlying identity documents are deleted after verification, normally within 30 days, unless law requires longer retention. |
| Marketing preferences | Until opt-out, plus a suppression record to honour the opt-out. |
| Phone number of a deleted account | For 12 months after deletion is completed, Astronia keeps a salted one-way hash of the account's mobile number, and nothing else from the account. It is used only to check whether a new registration with the same number is eligible for a new-customer offer. It is not shared, cannot be used to contact the number, and is deleted automatically after 12 months. |
7.1 Astronia deletes or irreversibly anonymises personal data when its purpose and required retention end. Deleted production data may remain in access-restricted backups for up to 90 days, after which it is overwritten in the ordinary backup cycle; it is not restored for ordinary use after deletion. Data collected solely for the restricted child-guidance flow is ordinarily deleted 90 days after delivery unless a complaint, consent record or legal hold requires longer retention.
7.2 Astronia reviews this schedule at least annually, and will implement any additional erasure obligation that applies to it under the Third Schedule to the DPDP Rules, 2025 as its user base grows.
Astronia uses reasonable technical and organisational safeguards appropriate to risk, including least-privilege access controls, encryption in transit, credential protection, security logging, vendor review, tested backups, incident response and employee confidentiality. Access to Session recordings is role-based and audited. Astronia enables logs for relevant ICT systems, protects them against unauthorised alteration, maintains the legally required rolling log period within India, designates a CERT-In Point of Contact and preserves incident evidence. No internet system is absolutely secure; Users must protect OTPs and devices.
Subject to applicable law, a User may request a summary of their personal data and its processing, correction, completion, updating, erasure, withdrawal of consent, grievance redressal, and nomination of another person to exercise their rights in the event of death or incapacity. Astronia may verify identity and may retain data that law requires or that is needed for a legal claim. Each request may be made from the account settings, through the Privacy Choices page, or by email to support@astronia.in. Account deletion may also be initiated through the Account and Data Deletion page.
10.1 Astronia is intended for adults. It does not knowingly process a child’s personal data for a direct account, and does not undertake tracking, behavioural monitoring or targeted advertising directed at a child.
10.2 At registration, every User affirms that they are at least 18. Astronia supplements that declaration with age-assurance measures, and applies them again before higher-risk actions including a first paid Session, a wallet top-up above a published threshold, sending a virtual gift, and participating in a live session.
10.3 Where verifiable parental consent is required, Astronia verifies the identity and age of the consenting adult using reliable details already held by Astronia, identity details voluntarily furnished by that adult, or a virtual token or digital identity issued or mapped by an authorised entity or service, in accordance with the DPDP Rules, 2025.
10.4 Guidance concerning a child. A parent or lawful guardian may seek general guidance concerning a child only through a restricted flow that: verifies the adult under Clause 10.3; collects only the information reasonably necessary for that guidance; does not create an account for the child; does not permit a private Consultation between the child and a Service Provider; applies a shorter retention period; and excludes the child’s data from profiling, recommendation and marketing.
10.5 Where Astronia establishes that an account holder is a minor, it suspends the account, stops further charges, and refunds amounts paid in accordance with the Terms of Use, Cl. 3.2.
Some vetted technology providers may process data outside India. Astronia uses contractual and security safeguards and complies with any government restriction on cross-border transfer. The current vendor list or vendor categories is made available through the Platform. Where Astronia accepts Users located outside India, the International Users Policy also applies.
12.1 On becoming aware of a personal data breach, Astronia will contain the risk, preserve evidence and investigate.
12.2 Astronia will intimate each affected User without delay, in concise, clear and plain language, describing the nature, extent, timing and location of the breach so far as known; the likely consequences relevant to that User; the mitigation measures Astronia has implemented or proposes; the safety measures the User may take; and Astronia’s contact point for queries.
12.3 Astronia will give the Data Protection Board an initial intimation without delay, describing the nature, extent, timing, location and likely impact of the breach, and will file a detailed report within 72 hours of becoming aware, or within any longer period the Board allows on written request. That report will cover the circumstances and causes, the mitigation implemented, the findings on responsibility, the remedial measures taken to prevent recurrence, and a copy or summary of the intimations given to affected Users.
12.4 Where the incident is also a reportable cyber security incident, Astronia will report it to the Indian Computer Emergency Response Team within the period and in the format required by the directions in force.
12.5 Astronia maintains a named incident owner and deputy, and tests this process at least annually.
13.1 A privacy grievance or rights request may be made by email to support@astronia.in, or through the in-app route. It is handled by the Grievance Officer named in the Grievance Policy, Cl. 6.
13.2 Astronia acknowledges a privacy grievance within 48 hours and responds within 30 days of receipt, and in no case later than 90 days. Where identity verification is required, the period runs from the date verification is completed, and Astronia will say so when it asks.
13.3 Complaints of other kinds are handled under the timelines in the Grievance Policy, Cl. 2, which reflect the different statutory clocks that apply to them.