Last updated: November 2026
VedaJyoti ("we," "us," "our") operates the platform at myday.vedajyoti.org and associated mobile applications. We are based in Perth, Western Australia, Australia. For any privacy-related inquiries, contact us at [email protected].
| Data | Source | Purpose |
|---|---|---|
| Name | Google / Apple sign-in | Account identification, personalisation |
| Email address | Google / Apple sign-in | Account identification, transactional emails, support |
| Profile photo URL | Google sign-in (optional) | Avatar display in the app |
| Google ID / Apple User ID | OAuth providers | Unique account linking |
| Data | Purpose | Required? |
|---|---|---|
| Date of birth | Astrological chart calculation, numerology | Required for most services |
| Time of birth (with seconds) | Precise chart calculation, BTR | Optional but recommended |
| Place of birth (coordinates, timezone) | Astrological chart calculation | Optional but recommended |
| Full name | Numerology calculations | Required for numerology services |
| For the Chaldean numerology reading: a title you use, other names you are known by, a town, a house number or name, a business name, another person's date of birth to compare, and dates of events in your life | Working out the reading you ask for at that moment | Optional. Used for that reading and not stored, unless you put the reading into a client report (Section 2.6) |
| Data | Purpose | Retention |
|---|---|---|
| Chat conversations with AI oracles | Service delivery, context continuity | Stored until you delete or request deletion |
| Generated charts and reports | Your reference, chart comparison | Stored until you delete or request deletion |
| BTR results and saved charts | Birth time analysis reference | Stored until you delete or request deletion |
| Uploaded reading images β palm photos (Hasta), face photos (Sutra), floor/site plans (Vastu Analyser) | AI-powered palm, face and VΔstu readings; letting you re-open a reading and ask follow-up questions | Stored with our image-storage provider to power your reading; retained until you delete the conversation or your account, or request deletion (see Sections 7 and 15) |
| Credit balance and transaction history | Billing, audit, dispute resolution | Retained for legal/accounting requirements |
| Widget preferences, profile settings | Dashboard personalisation | Stored with your account |
When you access the Platform, we may automatically collect:
The Palmistry Studio is a measuring tool for palmists on the Platform. A palmist uses it to photograph a client's hands at a sitting, or sends the client a link from which the client takes the photos themselves. The client does not need an account of their own; this section describes what is kept about them.
Consent comes first. No photo can be kept for a reading until the client's consent to their reading is recorded. The studio shows the client its consent text and asks them to tick, themselves, each choice they agree to; none is ticked for them. At a sitting this is done on the palmist's screen before the reading starts; on a link it is the link's first page, before the first photo.
| Choice | What it allows | Required? |
|---|---|---|
| Their reading | Keeping the photos and measuring them, so that the palmist can read the client's hands and prepare their report | Needed to take part |
| Improving the studio | VedaJyoti using the photos and measurements to test and improve the studio's measuring software, without the client's name | The client's choice |
| Photos in their report | Showing the photos in the client's report. The studio does not yet produce reports; the choice is recorded for when it does | The client's choice |
Each choice is recorded with the version of the consent text the client saw, the time it was given and whether it was given at the sitting or on the link, and every later change is recorded in the same way.
A reading taken under an earlier consent text keeps that text's record, and is used for the client's reading alone until the client is asked again under the current text. The earliest readings, from before the studio had this consent screen, kept instead the palmist's confirmation that the client had agreed to their photos being taken and kept for the palmist's analysis only.
What is kept for each sitting (a "reading"):
| Data | Where it is kept |
|---|---|
| Photos of both palms and of each fingertip | Our image-storage provider, Bytescale (upload.io), as private files |
| The measurements made from the photos: from the palm photos, the hand's keypoints, the lines traced and the shape of the fingers; from each fingertip photo, its ridge pattern (the loop, whorl or arch of its fingerprint) and the ridge flow it was read from; and, for a photo sent to Claude from 3 to 4 November 2026, what Claude read in it | Our database, hosted by Render |
| The client's email address, if the palmist gives it to send them their link | Our database |
| A record of each email that sends the client their link: the address, when it was sent, and what our email service reports of it, such as whether it arrived, was opened or its link was followed; not the email's content | Our email log, kept for 180 days after the email was sent |
| The name or reference the palmist gives the reading | Our database |
| The palmist's notes on the reading, and any marks they draw on a palm photo | Our database |
| The client's consent choices and their record | Our database |
In the studio, a reading and everything kept with it opens only for the palmist who took it; another palmist cannot open it.
The client's link. A palmist may send the client a link in place of photographing their hands at a sitting. It opens a page, with no account needed, that shows the client the consent text first and then takes them through the photos, one at a time: both palms first, and then, if the client chooses, the tips of their thumbs and fingers. Each photo is measured on our server when it is sent and kept as at a sitting. The page tells the client which photos are in and gives each a rating of the photo itself, with what a new one would do better; it shows them no reading. The link works until the client sends their photos, which they can do once both palms are in, or until all twelve are in, or until the palmist closes it or replaces it with a new one. After the client has sent their photos, the palmist may send a new link for the ones still missing; the photos the client sent cannot be replaced from it. We do not keep the link itself, only a one-way digest of it, so it cannot be read back from what we store. If the palmist gives the client's email address, it is kept with the reading and the link is emailed to the client through our email provider, Resend. When the client's photos are in, the palmist who sent the link is emailed, with how many fingertip photos came; that email does not name the client.
Measured on our server. The photos are measured on our server, hosted by Render, by the studio's own measuring software, which includes a hand-finding model (MediaPipe) that runs on the server itself. Each photo is measured when it is added. A palm photo is kept only if the hand-finding model finds a hand in it; otherwise every photo is kept as it is, with a rating of the photo itself (its sharpness, light and framing, and how the hand was held), and the measurements are a guide for the palmist, who decides whether a photo will do. A fingertip's ridge pattern (the loop, whorl or arch of its fingerprint) is read from its photo then, and kept with it. The photos are not sent to any AI service: none has been sent since 4 November 2026, and on 6 November 2026 AI was removed from the studio. From 3 to 4 November 2026 each photo was also sent to Anthropic's API, where its AI model, Claude, read it once it was kept; what Claude answered then stays with the photo's measurements, unused and not shown, until the photo is measured again, replaced or deleted, and how Anthropic handles what it is sent is described in Section 5.1.
The marks file. Where the client has agreed, under the current consent text, to improving the studio, the palmist can download a file of the marks they drew and the measurements of the same photos, for testing the measuring software. It holds no photo and no client name. A file already downloaded is not deleted with the reading.
How long it is kept. Until the reading is deleted, or until the client withdraws their consent to it, whichever comes first. When a reading is deleted, it is hidden at once and its notes, marks, link and the client's email address are deleted; each photo is removed from the image-storage provider, and its measurements with it; then the reading's name and consent record are deleted. A photo the provider could not remove at once is removed on a later attempt, made when the palmist next opens their list of readings, and the rest of the reading goes then. A palmist's readings are deleted with the palmist's account (Section 15). A record of an email that sent the client their link is kept in our email log for 180 days after it was sent, even if the reading is deleted sooner.
The client's rights. A client can withdraw any of their choices at any time, as easily as they gave it, by asking their palmist or by writing to [email protected]. Withdrawing consent to their reading deletes the reading with its photos; withdrawing either of the other two stops that use. Withdrawing does not undo what was done before. A client may also exercise the rights in Section 8. A complaint goes first to VedaJyoti at [email protected]; if that does not settle it, a client may complain in Australia to the Office of the Australian Information Commissioner, and in India to the Data Protection Board of India.
A signed-in member can use the Numerology Grid to prepare a numerology report for someone else, a client, and share it with them by a private link. The client does not need an account; this section describes what is kept about them.
Who provides it. The member who makes the report enters the client's name and date of birth and chooses what goes into it. The member is responsible for having the client's agreement to do so (see our Terms of Service).
What is kept for each report:
| Data | Where it is kept |
|---|---|
| The client's name and date of birth | Our database, hosted by Render |
| The report as it was made: the numbers and grids worked out from the date of birth for the parts the member chose; the Vedic and Chaldean readings the member chose, as they were on the member's screen, which can include names, a town, a house number, a business name, another person's date of birth or life events the member entered there and, if the member turned them on, traditional health associations; the questions the member chose from their own conversation with our AI assistant, with its answers; and the member's notes | Our database |
| The name the report is prepared under ("Prepared by", the member's account name) and the report's language | Our database |
| When the report was made; when its link expires (after 7 days, after 30 days, or never, as the member chooses); whether the member has turned the link off; how many times the report has been opened, and when it was last opened | Our database |
The private link. Anyone holding the link can open the report, with no account, until the link expires or the member turns it off; after that it says only that the link is not open any more. The link is shown to the member once, when the report is made. We do not keep the link itself, only a one-way digest of it, so it cannot be read back from what we store. The report is sent with instructions that it must not be indexed by search engines or stored by browsers and caches. We do not record who opens a report: each opening adds one to its count, with the time, and our server logs record the request as they do for any page (Section 2.4). A report is fixed when it is made: it is not changed by later changes to the member's account or to the Platform.
Who can see it. The member who made it, in their list of reports, and anyone with its link while the link is open.
How long it is kept. A report stays stored with the member's account, including after its link has expired or been turned off, until the member's account is deleted (Section 15) or deletion of the report is requested at [email protected]. Turning a link off stops it opening at once.
The client's rights. A client can ask the member who made their report to turn its link off, or write to [email protected] to have the report deleted, and may exercise the rights in Section 8. A complaint goes first to VedaJyoti at [email protected]; if that does not settle it, a client may complain in Australia to the Office of the Australian Information Commissioner, and in India to the Data Protection Board of India.
Some data you provide may be considered sensitive or special category data under certain privacy laws. This includes:
By using the Platform and voluntarily providing this information, you give explicit consent to its processing for the stated purposes. You may withdraw this consent at any time by ceasing to use the Platform and requesting deletion of your data. A Palmistry Studio client gives their consent on the studio's own consent screen, or on the first page of their palmist's link, choice by choice, and withdraws it as Section 2.5 describes.
We use your personal information exclusively for the following purposes:
We do not use your data for:
We share limited data with the following third-party service providers, solely for the purposes stated:
| Service | Provider | Data Shared | Purpose |
|---|---|---|---|
| Authentication | Google, Apple | OAuth tokens | Account sign-in |
| AI Processing | Anthropic, Google | Chat messages, chart context sent as API prompts; the photos of a client's hands in the Palmistry Studio from 3 to 4 November 2026 only; AI was removed from the studio on 6 November 2026 (Section 2.5) | Generating AI responses |
| Payments | Stripe, Razorpay, Apple, Google | Payment details (handled by processor) | Credit purchases |
| Geocoding | Google Maps / Places | Place search queries | Birth place coordinates |
| Resend | Email address, transactional content | Sending receipts, notifications | |
| Hosting | Render | All Platform data (hosted infrastructure) | Running the Platform |
| Vector Search | Pinecone | Anonymised knowledge base embeddings | RAG for AI oracle responses |
| Image Storage | Bytescale (upload.io) | Images you upload for palm, face and VΔstu readings, and the photos of a client's hands in the Palmistry Studio, taken by their palmist or by the client from their palmist's link, held as private files | Storing your uploaded image so your reading persists and can be continued across sessions and devices; keeping a studio reading's photos with it (Section 2.5) |
Each third-party provider operates under their own privacy policy. We encourage you to review their policies. We do not control how these providers handle data once transmitted to them.
When you interact with our AI oracle chatbots, your messages and relevant chart/numerology context are sent to Anthropic (Claude) or Google (Gemini) via their APIs for processing. These providers:
In the Palmistry Studio, the photos of a client's hands are not sent to Anthropic: AI was removed from the studio on 6 November 2026. From 3 to 4 November 2026 each was sent to Anthropic (Claude) through its API, to read a fingertip's pattern or a palm's lines (Section 2.5), and what is said above applies to those.
We recommend reviewing Anthropic's Privacy Policy and Google's Privacy Policy for details.
Your data is stored on servers managed by Render, Inc. Infrastructure is hosted in data centres that maintain industry-standard physical and digital security measures. Images you upload for palm, face and VΔstu readings are stored separately with our image-storage provider, Bytescale (upload.io), as private files that are not publicly accessible; they are served back only to you, over an authenticated, access-controlled connection. A Palmistry Studio reading's photos are stored the same way and served only to the palmist who took them.
We implement the following security measures to protect your data:
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users by email within 72 hours of becoming aware of the breach and, where required, notify the relevant data protection authority.
Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law (e.g., payment records for tax compliance).
Depending on your jurisdiction, you may have the following rights regarding your personal data:
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
We comply with the Australian Privacy Principles (APPs) as set out in the Privacy Act 1988 (Cth). Where there is any inconsistency between these policies and the APPs, the APPs prevail. Australian residents can contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au if they believe their privacy has been breached.
If you are accessing the Platform from outside Australia, your data will be transferred to and processed in Australia (or wherever our hosting provider maintains servers). By using the Platform, you consent to this transfer. We take reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.
For users in the European Economic Area (EEA), United Kingdom, or other jurisdictions with data protection laws: your data is transferred on the basis of your explicit consent provided at sign-up. You may withdraw this consent at any time by ceasing use and requesting account deletion.
For users in India: we comply with applicable provisions of the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDPA) to the extent applicable. Your data is processed with your consent and you have the right to withdraw consent and request deletion.
The Platform is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such data, we will delete it promptly. Users aged 13β17 may only use the Platform under parental supervision. If you believe a child under 13 has provided us with personal data, please contact us immediately.
We use only essential session cookies to maintain your authenticated session. These cookies are strictly necessary for the Platform to function and cannot be opted out of while using the service.
We do not use:
If you opt in to push notifications, we may send you daily astrological insights or service updates. You can disable push notifications at any time through your device settings or browser permissions. We do not use push notification tokens for tracking or profiling purposes.
We send the following types of email communications:
We do not send marketing or promotional emails. You may unsubscribe from non-essential emails at any time using the unsubscribe link provided in each email or by visiting your account settings.
Emails are sent through Resend, a third-party email delivery service. We track delivery status (delivered, bounced, opened) for reliability purposes. Hard bounces result in automatic unsubscription to maintain list hygiene.
You may request deletion of your account and all associated personal data at any time by contacting [email protected]. Upon receiving your request:
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will post the updated policy on this page with the revised "Last updated" date. For material changes, we will make reasonable efforts to notify you via email or a prominent notice on the Platform. Your continued use of the Platform after any changes constitutes your acceptance of the updated policy.
For any questions, concerns, or requests relating to this Privacy Policy or your personal data, contact us at:
VedaJyoti β Privacy Enquiries
Email: [email protected]
Website: myday.vedajyoti.org
Location: Perth, Western Australia, Australia
For complaints that are not resolved to your satisfaction, Australian residents may contact the OAIC at www.oaic.gov.au/privacy/privacy-complaints.