Privacy
Your work is other people’s names, birth times and birthplaces. This page says exactly what happens to that, in the order that matters.
1. Charts are calculated on your device
The ephemeris, the calculation engine and the atlas of places all ship inside the app. To produce a chart, nothing is sent anywhere. You can put the phone in airplane mode and the charts, the dashas and the time zone lookups all still work.
This is worth being precise about, because it is the part most software gets wrong. We are not describing a privacy policy choice. There is no server that computes your charts, because the computation never leaves the handset.
2. What does leave your device
What you save syncs, so that it appears on your other devices. That is storage, not calculation.
| What | Where it goes | Why |
|---|---|---|
| Entries — names, birth date, time, place and coordinates | Supabase, via PowerSync | So your library is on every device you sign in to |
| Pages, widgets, tags, notes, life events | Supabase, via PowerSync | Same |
| Your engine settings — ayanamsa, house system, and the rest | Supabase | So the app calculates the same way everywhere |
| Your account email | Supabase Auth | To sign you in |
| Crash reports — stack trace, device model, OS version | Sentry | To fix crashes. Personal data attachment is switched off |
| Product analytics — which screens were opened, session id | PostHog (EU) | To see which parts of the app are used. Screen recording and session replay are off |
| Approximate location, derived from your IP address | PostHog (EU) | A default of the analytics service. It is roughly city-level and is not the location used for your charts |
Crash reports and analytics are on unless you turn them off
Both are enabled by default. The switch is in the app, under Account → Diagnostics and analytics. Turning it off stops the vendors’ code from starting at all on your next launch — not merely from sending, but from running, so nothing is gathered and no identifier is created.
While they are on, both are tied to your account. We pass your account id to Sentry and to PostHog so that a crash can be matched to the session that caused it. That means this data is linked to you rather than anonymous, and we would rather say so than describe it as anonymised when it is not.
About location
If you use the app’s current-position feature, your device’s coordinates are used to compute the chart. That chart is temporary and is not saved unless you save it; if you do, the coordinates become part of the entry and sync with it, like any other birthplace. The app asks the operating system for position to about a hundred metres, not the finest fix available.
Separately, the analytics service derives an approximate location from your IP address, as almost all web services do. The two are unrelated, and the second is not used for any chart.
3. How it is stored
On the device, the local copy of your library is encrypted. The key is random, held in the iOS Keychain or the Android Keystore, and never leaves the device. If the phone is lost, the file is not readable by taking it off the disk.
On the server, every synced table is separated per account at the database level, so one account cannot read another’s rows even if it asks. Traffic between the app and the server uses TLS.
We do not hold your data encrypted in a way that we ourselves cannot read. If we claimed that, the sync, the account recovery and the support we offer could not work as they do. It is a real limit and we would rather state it than imply otherwise.
4. The charts you keep about other people
A practitioner’s entry list is mostly other people — clients, family, people being studied — none of whom agreed anything with us. We treat that accordingly.
| Data | Who decides what happens to it | Our role |
|---|---|---|
| Your account, billing and app analytics | Vedic Software | Controller |
| Charts you store about other people | You | Processor — we act on your instructions |
| Your own chart | Vedic Software | Controller |
In practice: we do not read, analyse, profile or mine those records, and we do not use them to train anything. They are synced back to you, and that is all. If one of your clients asks you to erase them, deleting the entry deletes it on the server too — not just from your screen.
If your practice needs a data processing agreement, ours is here. It names the same sub-processors listed on the sub-processors page, and a signed copy comes from privacy@shrijyotistar.com if you ask for one.
5. Who else touches it
The full list of companies that process anything on our behalf, and what each one does, is on a separate page.
We do not sell data. There are no advertising networks, no data brokers, and no third parties buying anything, in any tier, at any point.
6. Why we are allowed to hold it
| What | Why we may |
|---|---|
| Your account, your synced library, your settings | To perform the contract you have with us. Without these there is no product |
| Crash reports and product analytics | Our legitimate interest in shipping software that works, balanced against a switch that turns it off |
| Release-note emails, if you asked for them | Your consent, which you may withdraw at any time |
Birth data can reveal something about a person’s beliefs, and an entry in a practitioner’s library shows that they are that practitioner’s client. Some laws treat information of that kind as a special category. Whether they reach a chart library is unsettled, and nothing in the app asks you to agree to it separately, so we do not claim your consent as the basis for it. We treat the library as sensitive either way — encrypted on the device, separated per account on the server, and never read or analysed by us.
We do not make any decision about you by automated means, and we do not profile you.
7. How long
- Your library — until you delete it, or until you close your account.
- Crash reports and analytics — kept to the vendor’s standard retention and not extended.
- The email list — until you ask to come off it.
8. Closing your account
Email privacy@shrijyotistar.com from your account address. We delete the account, the entries, the pages, the tags, the events and the settings, from the live database and from backups on their normal rotation.
9. Your rights
You can ask us for a copy of what we hold about you, to correct it, to delete it, to restrict what we do with it, to receive it in a portable form, or to object to it. Where we rely on your consent you can withdraw it at any time, and withdrawing it does not affect what we did before you did. Write to privacy@shrijyotistar.com. We answer within a month and do not charge for it.
If we handle a request badly you can complain to the data protection authority where you live or work. We would rather you told us first, but that is your right and not conditional on anything.
10. Where it is stored, and who we are
We are Andrew Foss, trading as Vedic Software, in Virginia, United States. That means we are outside the EEA and the UK, and that data about people in those places reaches us there.
Where data is transferred out of the EEA or the UK, it is covered by the European Commission’s standard contractual clauses and the UK addendum to them. Crash reports and analytics are processed in the EU. The regions of the account database and the sync service are listed on the sub-processors page.
11. Children
The app is for practitioners and is not directed at children. Entries about children are a normal part of astrological practice — those are records you hold about someone else, and section 4 covers them.
12. This website
No advertising trackers and no analytics cookies. Nothing on this site is used to follow you anywhere else.
If you join the email list we keep your address and where on the site you joined from, until you ask to come off it. Ask by writing to privacy@shrijyotistar.com and we will remove you.
13. Changes
If we change something material we will say so by email rather than silently updating this page. The date in the sidebar is the last change of any kind.
14. Contact
privacy@shrijyotistar.com · Andrew Foss, PO Box 91, Earlysville, VA 22936, United States.