Legal
Privacy Policy
Last updated: 3 August 2026
Nallaneram (nallaneram.app) — a product of Appspire Labs Private Limited.
This explains what personal data we collect, why, who else handles it, how we contact you, and what you can require us to do. It is our notice to you under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, and it meets our obligations under the Information Technology Act, 2000.
1. What we collect
You give us:
| Data | Why we need it |
|---|---|
| Name | To address you, and to label the charts you save |
| Date, time and place of birth | The whole calculation rests on these three. Without them there is no chart. |
| Mobile number or email address | To create and secure your account, to send purchase confirmations, and — if you agree — to tell you about our apps |
| Your questions, and the thread they sit in | To answer them, and to keep the context so you don't have to repeat yourself |
| Birth details of family members you save | To cast their charts at your request |
| Gender, and relationship to you, where relevant | Some traditional rules turn on these |
Collected automatically: device and browser type, operating system, IP address, app version, crash reports, and which screens you use.
We never receive: your full card number, CVV, UPI PIN or net-banking credentials. Those go straight to our payment provider.
2. Why we process it, and on what basis
| Purpose | Basis |
|---|---|
| Casting your chart and answering your questions | Your consent, and performing our contract with you |
| Creating, securing and supporting your account | Performing our contract |
| Sending service messages — sign-in codes, purchase confirmations, invoices, security alerts | Performing our contract |
| Telling you about new features and offers on Nallaneram, and about other apps published by Appspire Labs Private Limited | Your consent, given separately. You can withdraw it at any time. |
| Taking payment, issuing invoices, keeping accounting records | Legal obligation under the Companies Act, 2013 and the GST law |
| Detecting fraud and abuse, keeping the Service secure | Legitimate use, and our obligation to maintain reasonable security safeguards |
| Diagnosing errors and improving accuracy | Legitimate use — aggregated or de-identified wherever possible |
| Understanding which parts of the Service are used, and where it fails, so we can fix and improve it | Performing our contract — kept as counts, never as a profile, and never joined to your chart or your questions |
| Analytics and advertising measurement on the website | Your consent only. Nothing loads until you accept. |
| Responding to a lawful demand from a court or authority | Legal obligation |
3. How we contact you
There are two kinds of message, and they work differently.
Service messages. Sign-in and verification codes, purchase confirmations, invoices, credit balance notices, security alerts, and changes to these policies. These are part of operating your account and you receive them for as long as the account is open. They are not marketing and cannot be switched off separately — if you no longer want them, close the account.
Promotional messages. New features and offers on Nallaneram, and other apps published by Appspire Labs Private Limited. Sent by SMS, WhatsApp, email, push notification or, occasionally, a phone call — to the mobile number or email address on your account.
These are two separate choices. We ask for promotional consent as its own, unticked option — never bundled into signing up or into a purchase. Declining costs you nothing: every part of the Service works the same either way.
Stopping them. Withdraw consent at any time from your account settings, by replying STOP to an SMS, by using the unsubscribe link in an email, or by writing to us at [email protected]. It takes effect as soon as we can action it and in any event within 7 days. A message already in the queue may reach you in that window. Withdrawing promotional consent does not affect your credits, your charts or anything else.
How we send them. Commercial SMS is sent only through headers and content templates registered under the TRAI Telecom Commercial Communications Customer Preference Regulations, 2018. If your number is registered under DND, we contact you only where you have given us consent.
4. What we never do
We do not sell or rent your personal data. Not to anyone, for any price.
We do not give your contact details to a third party for that party's own marketing. When we promote something, it is our own product and the message comes from us. The providers listed in Clause 6 send on our instructions and may not use your data for themselves.
We do not use your chart, your questions or your answers to decide what to promote to you. Promotional messages go to everyone who has opted in, or to broad groups such as your language preference. What you asked us at 3am never becomes a targeting signal.
We do not build advertising profiles from your birth details.
5. Children and family members
Accounts are for people 18 and over. We do not knowingly allow anyone younger to register, and we do not track children or direct advertising or promotional messages at them.
The Service does let you save a child's birth details — for a naming question, or a chart. When you do, you confirm you are that child's parent or lawful guardian and consent on their behalf. The same applies to an adult family member: you confirm you have their consent.
If someone else has saved your details, or your child's, write to us and we will remove them.
6. Who else handles your data
A small number of providers process data on our instructions, under contract, and may not use it for their own purposes.
| Category | What they receive |
|---|---|
| Cloud hosting and database | Account data, birth details, threads |
| Automated language service | The computed chart summary and your question, for wording the answer |
| Payment gateway | Name, contact details, transaction amount and reference |
| SMS and WhatsApp delivery | Mobile number and the message |
| Website analytics | Usage events, only with your consent |
| Advertising measurement | Website events used to measure and attribute our advertising, only with your consent |
Transfers outside India. Some of these providers process data outside India. The DPDP Act permits this except to countries the Central Government has restricted. We do not transfer data to any restricted country, and will stop any transfer that becomes restricted.
We also disclose data where a court, tribunal or authority lawfully requires it, and where it is necessary to establish or defend a legal claim. If the business is sold or reorganised, your data may transfer with it on the same terms, and we will tell you before that happens.
7. How long we keep it
| What | How long |
|---|---|
| Account, charts and threads | While your account is open |
| After you delete your account | Erased within 30 days, except as below |
| Transaction and invoice records | 8 years, as required under Section 128 of the Companies Act, 2013 and the GST law |
| Security, access and audit logs | At least 1 year, as required under the DPDP Rules, 2025 |
| Record that you opted out of promotional messages | For as long as needed to keep honouring it |
| Anything needed for an ongoing dispute, claim or investigation | Until it concludes |
Deleting a saved chart removes it from your account immediately. Backups are overwritten on their normal cycle.
8. Security
Data travels over encrypted connections (TLS) and is encrypted at rest. Access is limited to people who need it, on a least-privilege basis, and is logged. Everyone with access is under a confidentiality undertaking.
No system is perfectly secure. If a personal data breach occurs, we will notify you and the Data Protection Board of India in the form and within the timelines set out in the DPDP Rules, 2025, and tell you what happened, what was affected and what you can do.
9. Your rights
You may:
- Ask what we hold about you and who we have shared it with;
- Correct or complete anything inaccurate — including a birth time you have since verified;
- Erase your data, unless the law requires us to keep it (see Clause 7);
- Withdraw consent at any time, as easily as you gave it — including consent to promotional messages, separately from everything else. Withdrawal does not undo processing already carried out;
- Nominate someone to exercise these rights for you if you die or become unable to act;
- Complain, and have it dealt with within the timelines below.
Most of this is in your account settings. Otherwise write to us at [email protected]. We may need to verify your identity first. There is no charge.
10. Cookies and analytics
On the website, cookies that are strictly necessary to sign you in and keep the site secure cannot be turned off. Analytics and advertising cookies load only after you consent, and never if you decline. You can change your choice at any time from the Cookie settings link in the footer.
11. Contact
Write to [email protected].
We acknowledge every privacy request or complaint within 48 hours and resolve it within 90 days, usually much sooner.
If you are not satisfied with our response, you may complain to the Data Protection Board of India under Section 13 of the Digital Personal Data Protection Act, 2023.
12. Changes
If we change how we use your data in a way that affects you, we will tell you by email or in the app before it takes effect, and where consent is needed, we will ask again. The date at the top always shows the current version.