Last updated: 2 October 2026 · Version 1.0
This policy explains what personal data Kundaly collects, why, who receives it, how long we keep it, and your rights. It covers the Kundaly apps and website ("Kundaly").
Kundaly is operated by KUBIT SYSTEMS LIMITED, a company registered in England and Wales under company number 17477285, with its registered office at 128 City Road, London EC1V 2NX, United Kingdom. We are the controller of your personal data under UK data protection law. We are registered with the Information Commissioner's Office (ICO) under registration number [ICO registration number].
For anything about your data, contact us at [support email]. We have not appointed a Data Protection Officer. Privacy questions come directly to us.
If a practitioner uses Kundaly to prepare your readings, the practitioner is the controller of the data they enter about you, and we process it for them. Contact them first about it. We will help them answer you.
Things you give us
Things we collect when you use Kundaly
Things we receive from others
Some of what people share with an astrologer can be sensitive. Kundaly doesn't ask about your health, religious or philosophical beliefs, or sex life, and you don't need to share any of it. If you choose to mention it in a conversation, we use it only to answer you, with your explicit consent, which you can withdraw by deleting it (section 9).
Photos of faces and palms are used only when you give your consent, and only for the reading you ask for. They are sent to our AI provider to produce the reading, are never used to train AI, and are never shown to anyone else. Floor plans are not personal in the same way, but we treat them with the same care. Please remove location data from photos before uploading them if you don't want to share where they were taken.
| What we do | Data used | Our legal reason |
|---|---|---|
| Run your account and give you the charts, readings, tools and conversations you ask for | account, chart details, what you write | Contract |
| Write AI answers (section 5) | chart details and facts, your question, recent conversation, relevant events | Contract |
| Read the photos you upload | face and palm photos; floor plans | Explicit consent (faces, palms); contract (floor plans) |
| Remember the context of your recent questions across conversations | your latest questions and most-asked topics | Legitimate interests (relevant answers) |
| Keep Kundaly secure and stop fraud and abuse | IP address, account, feature use | Legitimate interests |
| Show prices for your location | IP address or your device's region | Legitimate interests |
| Take payments and keep accounting records | payment references, amounts, plan details | Contract; legal obligation |
| Send the readings, reminders and alerts you turn on | contact details, the reading's content | Contract |
| Send news and offers about Kundaly | contact details, push token | Legitimate interests — you can opt out at any time |
| Understand and improve Kundaly | feature use, technical diagnostics | Legitimate interests |
| Calibrate our timing engine, if you opt in (section 8) | de-identified signals from events and moods | Consent |
| Bookings with astrologers, where offered | bookings, notes, messages, reviews | Contract |
| Comply with the law and deal with disputes | as needed | Legal obligation; legitimate interests |
Where we rely on legitimate interests, we have balanced them against your rights, and you can object (section 9). Where we rely on consent, you can withdraw it at any time. This doesn't affect what we did before.
Many readings and all chat answers are written by AI. To answer you, we send AI model providers only what that answer needs, which can include:
If you open a shared chart and ask a question about it, that question and the shared chart are sent the same way.
Our providers process this data on our instructions under contract, and they don't use it to train their models. Kundaly's own systems may also answer using a model we run ourselves.
Readings are produced automatically, from rules and AI. They are not used to make any decision about you that has legal or similarly significant effects. They are reflections for you to consider (see our Terms of Service).
Chat memory. Where this feature is switched on, Kundaly keeps a short list of facts you have volunteered about your life, such as your work or family situation, so later answers can take them into account. It never keeps health, financial or longevity details, or your birth data. You can see the list and clear it in the app.
We share personal data only as this table describes, and we never sell it.
| Who | What they receive | Why |
|---|---|---|
| AI model providers (in the United States) | as described in section 5 | to write answers and read photos |
| Our cloud hosting provider ([hosting region]) | everything we store | to run Kundaly |
| Paddle.com, our reseller and merchant of record | your IP address or device region when you open a pricing screen; everything you give Paddle at checkout | to show your local price and sell you a plan or credits. Paddle uses your data under its own privacy notice |
| Razorpay (India) | the order amount, plan and a reference to your account | to take payments in rupees |
| OpenStreetMap Foundation (Nominatim) | place names you search for, sent from our server | to find a birth place |
| Map tile and code providers (tile.openstreetmap.org, unpkg.com) | your device's IP address, when the map picker loads | to show the map |
| Expo (in the United States) | your push token and the notification's text | to deliver push notifications, if you turn them on |
| Email, WhatsApp and SMS providers, where we use them | your contact details and the message | to send sign-in codes and the messages you ask for |
| Your web browser's speech service | your voice, if you use voice typing in a web browser | to turn speech into text. Your browser's maker handles this under its own policy |
| A video presenter service, if we use one | a script with a first name and astrological signs | to make chart videos |
| An astrologer you book | your booking note and your consultation messages | to provide your consultation |
| Anyone you give a share link to | the shared chart, which includes the name and birth details | because you chose to share it |
| Professional advisers, authorities or a buyer of our business | what is necessary | where the law requires, to protect our rights, or if the business changes hands |
Paddle and Razorpay also act as controllers of the payment data they collect directly from you.
Some of these recipients are outside the UK, mainly in the United States, the European Union and India. When personal data leaves the UK, we make sure it is protected as UK law requires. Usually that means the UK government has found the country's protection adequate (including the UK–US data bridge for certified companies), or the recipient has signed the ICO's International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses. Ask us for details at [support email].
Events and journal entries you record are private to your account. They are used for your own timeline and readings, including when the AI answers about them (section 5). Separately, for each chart you can choose to help calibrate our timing engine. There are two separate switches, one for events and one for moods, and both are off unless you turn them on.
When either switch is on, we derive de-identified signals from that chart: an event's category, whether it was a good or difficult time, how far it fell from the engine's forecasts, and the engine's internal votes. The signals never include a name, birth details, the words you wrote, your account or chart identifiers, or anything about a death. Signals from one chart are grouped together so they can be analysed as one person's history. You can switch either option off at any time. Signals already used in a calibration cannot be separated out afterwards, but no new ones are taken.
Under UK data protection law, you have the right to:
In the app you can download your data and delete your account (Data & privacy). You can also delete charts, photos and events, clear chat memory, turn calibration off, and turn notifications off. The download contains your main data. For a complete copy of everything we hold, including your photos, or to delete particular conversations, email [support email].
We answer within one month, free of charge. We may need to confirm it's you first. If we can't do what you ask, we will explain why.
Messages about news and offers can be stopped at any time with the unsubscribe link in each message, or by asking us.
If you are unhappy with how we have handled your data, tell us first at [support email]. We will acknowledge your complaint within 30 days, look into it properly, keep you updated, and tell you the outcome without undue delay.
You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, 0303 123 1113. If you live in the EU, you can complain to your local data protection authority.
If you are in India, you also have rights under the Digital Personal Data Protection Act 2023 and its Rules:
Our Grievance Officer can be reached at [support email]. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
Kundaly includes charts of some well-known people, living and historical, so users can explore and compare. They are built from birth details and life events that have already been published, in biographies and in public collections of astrological data. We use them, in our legitimate interests, for illustration and to test our timing engine. They never include predictions of death. If you are one of these people and would like your chart removed, contact [support email].
| Data | How long |
|---|---|
| Your account, charts, conversations, events, notes, journal and photos | Until you delete them or your account |
| Saved calculations of a chart | Up to 90 days, then recalculated if needed |
| Sign-in codes | 5 minutes |
| Records of sign-in and other attempts, linked to an IP address | Up to 1 hour |
| Price previews, linked to a one-way scrambled form of your IP address | Up to 10 minutes |
| Records of which features you use | Until you delete your account, then made anonymous |
| Technical diagnostics and payment records we hold | Until you delete your account. Paddle and Razorpay keep their own records as the law requires |
| Marketplace bookings, consultation messages and reviews | When you delete your account they stay with the other person, no longer linked to you, because they are that person's record too. A review then shows as "A seeker". Your booking notes are deleted, and sessions still to come are cancelled |
| An astrologer's marketplace profile | When the astrologer deletes their account, its name and description are removed and it is no longer listed. The record of past bookings and payouts stays |
| Records of action we took against misuse of Kundaly | As long as needed to protect users and to deal with disputes |
When you delete data, it is removed from Kundaly straight away. Copies may stay in our backups until those backups are replaced. On your device, preferences and any voice recordings you made in the video studio stay in your browser until you clear them.
Kundaly is for adults aged 18 and over, and we don't knowingly collect data from anyone younger. If you create a chart for a child, you must be their parent or guardian. If you think a child has used Kundaly, contact us, and we will delete their account.
Kundaly doesn't use cookies, advertising or tracking. To keep you signed in and to remember your settings, it stores a sign-in key and your preferences on your device. In a web browser these go in local storage. In the app, the sign-in key goes in your phone's secure keychain. The video studio keeps any voice recordings you make in your browser. These are necessary for Kundaly to work, so they don't need your consent.
Some services load their own scripts only when you use them: Paddle or Razorpay at checkout, and the map when you pick a place. They may store their own information under their own policies.
We protect your data with encrypted connections, access controls, short-lived sign-in keys, rate limits and other defences against abuse. Only the people who run Kundaly can access personal data, and only when they need to. No system is perfectly secure. If a breach puts your rights at risk, we will tell you and the ICO as the law requires.
When we change this policy, we update the version and date at the top. If a change materially affects you, we will tell you in the app, or by message, before it takes effect.
KUBIT SYSTEMS LIMITED, 128 City Road, London EC1V 2NX, United Kingdom · [support email].