Privacy Policy
This policy explains what Siddha, operated by the Siddha team (“we”, “us”), collects, why, and what control you have. It is written to match what the software actually does; when the software changes, so does this page.
1. What we collect
- Account identity: your email address and, if you provide it, a display name. Sign-in is handled by Supabase Auth; if you sign in with Google we receive the email address and name Google shares.
- Birth details: the date, time, place and time-accuracy you enter for yourself and for any other profiles you add. This is the data every chart is computed from. We never read your device's location; the app requests no location permission.
- Questions and readings: the questions you ask, the answers generated for you, saved readings and any notes you write.
- Preferences: experience mode, tone, language, theme, chart style and calendar conventions.
- Technical records: a request audit log of changes made through your account (which action, when, and the outcome) kept for security and support. Authentication codes and tokens are masked before anything is written to it.
- Push notification tokens, only if you turn notifications on.
- Email preferences: which emails you turned on, and whether an email to you bounced or was marked as spam, so we stop sending.
We do not run advertising or analytics SDKs, we do not track you across other apps or websites, and we do not sell personal data.
2. How we use it
To compute your charts and guidance, to answer your questions, to keep your profiles and history available across your devices, to secure the service, and to respond when you contact us. We do not use your data to train AI models.
3. Who processes it
- Supabase hosts the database and authentication service where your account and content are stored.
- AI model providers (currently Anthropic and Google) receive the text of a question together with the chart context needed to answer it, and return the answer. They process this on our behalf under their API terms and do not receive your email address.
- Apple and Google deliver push notifications if you enable them.
- Resend delivers the emails you turn on (your daily reading, moon and festival days). It receives your email address and the email itself. Every email has a link to stop it, and you can turn emails off in Settings › Notifications.
Our own staff access personal data only to operate the service or to investigate a problem you report.
4. On your device
The app keeps an encrypted cache of your charts and recent guidance so they open without a connection, and stores your sign-in session in the device's secure keychain or keystore. Signing out removes both. The cache is scoped to your account and is never shared with other apps.
5. Retention and deletion
Your data is kept while your account exists. Deleting your account from Settings › Account & privacy removes your profiles, readings, questions, preferences, push tokens and email settings, and deletes the authentication account; the request audit log retains only the fact that a deletion occurred. Backups are rotated out on a fixed schedule afterwards.
6. Your rights
You can view and correct your profiles and preferences in the app at any time, and delete everything as described above. Depending on where you live you may also have rights to access, portability, restriction or objection; contact us through the app store listing and we will respond within the period the law allows.
7. Children
Siddha is not directed at children under 16. If you believe a child has created an account, contact us and we will delete it.
8. Changes and contact
When this policy changes the date above is updated and material changes are announced in the app. Contact details are listed with the app in the App Store and Google Play.