Legal

Privacy Policy

Last updated: 3 August 2026

Nallaneram (nallaneram.app) — a product of Appspire Labs Private Limited.

This explains what personal data we collect, why, who else handles it, how we contact you, and what you can require us to do. It is our notice to you under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, and it meets our obligations under the Information Technology Act, 2000.

1. What we collect

You give us:

DataWhy we need it
NameTo address you, and to label the charts you save
Date, time and place of birthThe whole calculation rests on these three. Without them there is no chart.
Mobile number or email addressTo create and secure your account, to send purchase confirmations, and — if you agree — to tell you about our apps
Your questions, and the thread they sit inTo answer them, and to keep the context so you don't have to repeat yourself
Birth details of family members you saveTo cast their charts at your request
Gender, and relationship to you, where relevantSome traditional rules turn on these

Collected automatically: device and browser type, operating system, IP address, app version, crash reports, and which screens you use.

We never receive: your full card number, CVV, UPI PIN or net-banking credentials. Those go straight to our payment provider.

2. Why we process it, and on what basis

PurposeBasis
Casting your chart and answering your questionsYour consent, and performing our contract with you
Creating, securing and supporting your accountPerforming our contract
Sending service messages — sign-in codes, purchase confirmations, invoices, security alertsPerforming our contract
Telling you about new features and offers on Nallaneram, and about other apps published by Appspire Labs Private LimitedYour consent, given separately. You can withdraw it at any time.
Taking payment, issuing invoices, keeping accounting recordsLegal obligation under the Companies Act, 2013 and the GST law
Detecting fraud and abuse, keeping the Service secureLegitimate use, and our obligation to maintain reasonable security safeguards
Diagnosing errors and improving accuracyLegitimate use — aggregated or de-identified wherever possible
Understanding which parts of the Service are used, and where it fails, so we can fix and improve itPerforming our contract — kept as counts, never as a profile, and never joined to your chart or your questions
Analytics and advertising measurement on the websiteYour consent only. Nothing loads until you accept.
Responding to a lawful demand from a court or authorityLegal obligation

3. How we contact you

There are two kinds of message, and they work differently.

Service messages. Sign-in and verification codes, purchase confirmations, invoices, credit balance notices, security alerts, and changes to these policies. These are part of operating your account and you receive them for as long as the account is open. They are not marketing and cannot be switched off separately — if you no longer want them, close the account.

Promotional messages. New features and offers on Nallaneram, and other apps published by Appspire Labs Private Limited. Sent by SMS, WhatsApp, email, push notification or, occasionally, a phone call — to the mobile number or email address on your account.

These are two separate choices. We ask for promotional consent as its own, unticked option — never bundled into signing up or into a purchase. Declining costs you nothing: every part of the Service works the same either way.

Stopping them. Withdraw consent at any time from your account settings, by replying STOP to an SMS, by using the unsubscribe link in an email, or by writing to us at [email protected]. It takes effect as soon as we can action it and in any event within 7 days. A message already in the queue may reach you in that window. Withdrawing promotional consent does not affect your credits, your charts or anything else.

How we send them. Commercial SMS is sent only through headers and content templates registered under the TRAI Telecom Commercial Communications Customer Preference Regulations, 2018. If your number is registered under DND, we contact you only where you have given us consent.

4. What we never do

We do not sell or rent your personal data. Not to anyone, for any price.

We do not give your contact details to a third party for that party's own marketing. When we promote something, it is our own product and the message comes from us. The providers listed in Clause 6 send on our instructions and may not use your data for themselves.

We do not use your chart, your questions or your answers to decide what to promote to you. Promotional messages go to everyone who has opted in, or to broad groups such as your language preference. What you asked us at 3am never becomes a targeting signal.

We do not build advertising profiles from your birth details.

5. Children and family members

Accounts are for people 18 and over. We do not knowingly allow anyone younger to register, and we do not track children or direct advertising or promotional messages at them.

The Service does let you save a child's birth details — for a naming question, or a chart. When you do, you confirm you are that child's parent or lawful guardian and consent on their behalf. The same applies to an adult family member: you confirm you have their consent.

If someone else has saved your details, or your child's, write to us and we will remove them.

6. Who else handles your data

A small number of providers process data on our instructions, under contract, and may not use it for their own purposes.

CategoryWhat they receive
Cloud hosting and databaseAccount data, birth details, threads
Automated language serviceThe computed chart summary and your question, for wording the answer
Payment gatewayName, contact details, transaction amount and reference
SMS and WhatsApp deliveryMobile number and the message
Website analyticsUsage events, only with your consent
Advertising measurementWebsite events used to measure and attribute our advertising, only with your consent

Transfers outside India. Some of these providers process data outside India. The DPDP Act permits this except to countries the Central Government has restricted. We do not transfer data to any restricted country, and will stop any transfer that becomes restricted.

We also disclose data where a court, tribunal or authority lawfully requires it, and where it is necessary to establish or defend a legal claim. If the business is sold or reorganised, your data may transfer with it on the same terms, and we will tell you before that happens.

7. How long we keep it

WhatHow long
Account, charts and threadsWhile your account is open
After you delete your accountErased within 30 days, except as below
Transaction and invoice records8 years, as required under Section 128 of the Companies Act, 2013 and the GST law
Security, access and audit logsAt least 1 year, as required under the DPDP Rules, 2025
Record that you opted out of promotional messagesFor as long as needed to keep honouring it
Anything needed for an ongoing dispute, claim or investigationUntil it concludes

Deleting a saved chart removes it from your account immediately. Backups are overwritten on their normal cycle.

8. Security

Data travels over encrypted connections (TLS) and is encrypted at rest. Access is limited to people who need it, on a least-privilege basis, and is logged. Everyone with access is under a confidentiality undertaking.

No system is perfectly secure. If a personal data breach occurs, we will notify you and the Data Protection Board of India in the form and within the timelines set out in the DPDP Rules, 2025, and tell you what happened, what was affected and what you can do.

9. Your rights

You may:

  • Ask what we hold about you and who we have shared it with;
  • Correct or complete anything inaccurate — including a birth time you have since verified;
  • Erase your data, unless the law requires us to keep it (see Clause 7);
  • Withdraw consent at any time, as easily as you gave it — including consent to promotional messages, separately from everything else. Withdrawal does not undo processing already carried out;
  • Nominate someone to exercise these rights for you if you die or become unable to act;
  • Complain, and have it dealt with within the timelines below.

Most of this is in your account settings. Otherwise write to us at [email protected]. We may need to verify your identity first. There is no charge.

10. Cookies and analytics

On the website, cookies that are strictly necessary to sign you in and keep the site secure cannot be turned off. Analytics and advertising cookies load only after you consent, and never if you decline. You can change your choice at any time from the Cookie settings link in the footer.

11. Contact

Write to [email protected].

We acknowledge every privacy request or complaint within 48 hours and resolve it within 90 days, usually much sooner.

If you are not satisfied with our response, you may complain to the Data Protection Board of India under Section 13 of the Digital Personal Data Protection Act, 2023.

12. Changes

If we change how we use your data in a way that affects you, we will tell you by email or in the app before it takes effect, and where consent is needed, we will ask again. The date at the top always shows the current version.