Privacy Policy | 101 Pandit

1. Scope of This Policy

This Privacy Policy applies to:

All users of the 101 Pandit mobile application on iOS and Android
Any web-based interfaces or services we operate in connection with the App
Interactions with our support and contact channels

This Policy does not apply to third-party websites, services, or platforms linked from or integrated into the App. Please review their privacy policies separately.

2. What Personal Data We Collect

We collect the following categories of personal data, depending on how you use the App:

Category	Examples
Account Information	Name, email address, phone number (if provided during registration or account setup)
Birth Details	Date of birth, time of birth, place of birth — used to generate astrology and numerology readings
Biometric-Adjacent Data	Palm images voluntarily uploaded by you for palmistry readings
Usage Data	App interactions, features used, session duration, in-app navigation, crash logs, diagnostics, device identifiers, operating system, and app version
Payment Information	Transaction ID, payment status, and purchase records. Full card, UPI, and banking details are handled exclusively by Apple, Google, or Razorpay and are not accessible to us
Communications	Any messages or information you send us via email or support channels

We do not intentionally collect sensitive personal data such as government-issued ID numbers, financial account credentials, race, ethnicity, religion, health records, or precise geolocation, beyond what is described above. If you provide such data voluntarily (e.g., in a free-text field), it will be treated with the highest level of care under this Policy.

3. How We Collect Your Data

We collect data in the following ways:

Directly from you: when you create an account, enter birth details, upload palm images, make purchases, or contact us.
Automatically: when you use the App, through Firebase Analytics, crash reporting, and diagnostic tools.
From third-party providers: payment status updates from Apple, Google, or Razorpay; authentication signals from Firebase.

4. Why We Collect and Process Your Data

We process your personal data for the following lawful purposes:

Purpose	Legal Basis (where applicable)
To generate and deliver personalized astrology, numerology, and palmistry readings	Performance of contract / your explicit consent
To operate, maintain, and improve the App	Legitimate interest
To manage user accounts and purchases	Performance of contract
To detect fraud, abuse, and security threats	Legitimate interest / legal obligation
To comply with applicable laws and regulations	Legal obligation
To send service-related notifications (if you opt in)	Consent

5. AI and Automated Processing

Core features of 101 Pandit, including astrology readings, numerology reports, and palmistry interpretations, are generated using artificial intelligence (AI) and large language models (LLMs). By using these features, you acknowledge and consent to this processing.

Specifically:

Your birth details (date, time, and place of birth) and uploaded palm images may be transmitted to our servers and to third-party AI processing providers to generate readings.
We do not transmit your email address, phone number, or direct identity information to LLM providers unless technically required for a specific feature, in which case this Policy will be updated.
AI-generated outputs are for entertainment and spiritual exploration purposes only and should not be relied upon as factual, predictive, or professional advice.
You may be subject to automated decision-making in limited contexts (e.g., fraud detection). You have the right to contest such decisions where required by applicable law.

Palm images are processed solely to generate palmistry readings and are deleted within 30 days of upload, except where retention is required by law or for security purposes. They are not used to train AI models without your explicit, separate consent.

6. Who We Share Your Data With

We share your personal data only as described below. We do not sell your personal data to any third party.

Recipient	Purpose and Scope
AI / LLM Providers	Only to the minimum extent necessary to generate readings and related App features
Google / Firebase	Authentication, analytics, cloud storage, and App infrastructure
Apple / Google	Payment processing for App Store and Play Store purchases, respectively
Razorpay	Payment processing for applicable transactions. We receive only transaction ID and status; card/UPI/bank details are not accessible to us
Legal / Regulatory Authorities	Where required by law, court order, or to protect the safety, rights, or property of users or the public

All third-party service providers who process your data on our behalf are required to handle it in accordance with applicable data protection law and our data processing agreements.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable law. Our general retention approach is:

Account data: Retained for the duration of your account, plus a period thereafter as required for legal, accounting, fraud-prevention, dispute-resolution, or regulatory purposes.
Birth details: Retained for the duration of your account unless you request deletion.
Palm images: Deleted within 30 days of upload, unless retention is required for legal or security purposes. Images are not retained longer than necessary.
Usage and analytics data: Retained in aggregated or anonymised form for App improvement purposes.
Payment records: Retained as required by applicable financial and tax regulations.

When data is no longer required, it will be securely deleted or irreversibly anonymised.

8. How We Protect Your Data

We implement reasonable and industry-standard technical and organizational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

Encryption of data in transit using TLS/HTTPS
Encryption of data at rest where supported by our infrastructure
Access controls and authentication requirements for internal systems
Use of Firebase security rules and cloud security features
Regular review of security practices

No system is completely immune to security risks. While we take these precautions, we cannot guarantee the absolute security of your data. In the event of a data breach that is likely to result in a risk to your rights or freedoms, we will notify affected users and, where required, relevant authorities, in accordance with applicable law.

9. International Data Transfers

Your personal data may be transferred to, stored in, or processed in countries other than the country in which you reside, including by our third-party service providers such as Google (Firebase) and AI processing providers. These countries may have data protection laws that differ from those in your jurisdiction.

Where such transfers occur, we take steps to ensure that appropriate safeguards are in place, as required by applicable law, including:

Standard contractual clauses approved by relevant data protection authorities
Transfers to countries deemed to have an adequate level of data protection
Reliance on service providers certified under applicable data transfer frameworks

10. Your Rights and Choices

Depending on your location, you may have the following rights in relation to your personal data:

Right to Access: You may request a copy of the personal data we hold about you.
Right to Correction: You may update your account information within the App. For corrections to birth details or other data not editable in-App, please contact us.
Right to Deletion: You may delete your account from the Profile or Settings section of the App. We will process deletion requests within 30 days, subject to retention required for legal, security, fraud-prevention, accounting, or regulatory purposes.
Right to Data Portability: Where required by applicable law, you may request your data in a structured, commonly-used machine-readable format.
Right to Object or Restrict: Where processing is based on legitimate interest or for direct marketing purposes, you may object to or request restriction of processing.
Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

Users in India may exercise rights under applicable Indian data protection law, including the Digital Personal Data Protection Act, 2023 (DPDPA), as it comes into force.

Users in the European Union or United Kingdom may exercise additional rights under the GDPR or UK GDPR respectively, including the right to lodge a complaint with your local supervisory authority.

To exercise any of these rights, contact us at: 101panditapp@gmail.com. We may need to verify your identity before processing your request.

11. Children's Privacy

We do not knowingly collect or process personal data from children under 13 years of age (or the applicable minimum age in your jurisdiction) without verifiable parental or legal guardian consent.

If you are between 13 and 18 years of age (or the applicable age of digital consent in your country), your use of the App and any data processing requiring consent must be done with the involvement and consent of a parent or legal guardian, as required by applicable law.

If we become aware that we have collected personal data from a child in a manner not compliant with applicable law, we will take prompt steps to delete that data. If you are a parent or guardian and believe your child has provided data to us without appropriate consent, please contact us at: 101panditapp@gmail.com.

12. Analytics, Tracking, and Cookies

The App uses analytics tools, including Firebase Analytics, to help us understand how users interact with the App, identify performance issues, and improve user experience. Firebase Analytics may collect:

Device identifiers and advertising identifiers (e.g., IDFA on iOS, GAID on Android)
Session data, feature usage events, and in-app behaviour
Crash and error reports

You may be able to limit ad tracking or reset your advertising identifier through your device settings. On iOS, you may restrict Firebase Analytics by using the iOS App Tracking Transparency framework.

Any website we operate may use essential cookies necessary for the operation of the site, and may use analytics cookies to understand visitor behaviour. Where required, we will seek consent before placing non-essential cookies.

13. Third-Party Links and Services

The App may contain links to third-party websites or integrate with third-party services (e.g., payment processors, social platforms). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before sharing personal data with them.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or the App's features. When we make material changes, we will:

Notify you through an in-App notification or banner
Update the "Last Updated" date at the top of this document
Where required by law, seek your renewed consent

Your continued use of the App after the effective date of an updated Privacy Policy constitutes acceptance of the updated terms. If you do not agree with the updated Privacy Policy, please discontinue use and delete your account.

15. Grievance Redressal (India)

In accordance with applicable Indian law, including the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023 (as applicable), users in India may raise privacy or data-related grievances by contacting us at:

Email: 101panditapp@gmail.com

We will acknowledge grievances within 48 hours and endeavour to resolve them within 30 days of receipt.

16. Contact Us

For any questions, concerns, requests, or complaints about this Privacy Policy or our data practices, please contact:

101 Pandit — Operated by Pieco Labs LLP

Email: 101panditapp@gmail.com

We aim to respond to all legitimate inquiries within 30 days.