Privacy Policy

This Privacy Policy describes how VedKosh (“we”, “us”, “our”) handles information when you visit vedkosh.com, use the VedKosh Android app, interact with VedAI, the AI Palm Reading tool, or any of our 13 Vedic astrology tools, Aartis, Bhajans, Chalisas, Mantras, Bhagavad Gita, Ramayan, Festival Calendar, Janam Kundali, or any related feature.

VedKosh is an independent Hindu devotional platform based in Bharat (India). For any privacy-related question, request or complaint, contact: contact [at] vedkosh [dot] com. We are the data controller for any information collected via this platform.

VedKosh does not collect any of the following:

• Your name or email address — unless you create an account (section 4a).
• Your password — VedKosh accounts are passwordless (email verification codes or Google Sign-In), so there is no password to store or leak.
• Your postal address — ever. Your phone number — unless you voluntarily tick the optional WhatsApp updates box, which stores only the number you type there (section 4a); leave it unticked and we never ask for or keep one.
• Your card or bank details — payments are processed entirely by Razorpay; card numbers never touch VedKosh servers (section 4a).
• Your location in the background — we never track where you are, never log your coordinates and never build a location profile. The one and only time we read your device location is the moment you yourself tap “Use my location” on a panchang, muhurat or astrology form; section 4 describes exactly what happens then, and typing the city instead works just as well.
• Your contacts, photos (except the palm photo you voluntarily upload for analysis), or device file system.
• Your microphone or camera (unless you explicitly choose to capture a palm photo for AI Hast Rekha).
• Your biometric data.

We collect only the minimum information needed to provide and improve the service:

• Feedback content. When you tap like/dislike, leave a star rating or attach a short comment, we store only the feedback text, the page or content ID it refers to, and a timestamp — held for us in a private Google Workspace sheet — and we do not link it to your account. If you email us instead (our contact page opens your own email app), we naturally receive your email address and use it only to reply to you.
• Share Feedback form (logged-in). When you send a suggestion or an issue report through the lotus feedback button, the details you type (title, description, the page link), any screenshots or PDF you choose to attach, optional page & browser details you opt in to share, and your account email address are delivered as a single email to contact@vedkosh.com (via Resend, our transactional email provider) so we can act on it and reply to you. The attachments are not stored on VedKosh servers — they exist only inside that email. To keep the channel fair we keep a minimal submission record (your user ID, the submission type and the date — never the content) that enforces the one-submission-per-day limit; it is deleted with your account. Unsent drafts are saved only in your own browser (localStorage) and never leave your device.
• Anonymous usage signals. Our hosting provider (Vercel) may log aggregated request metadata (IP, user-agent, country) for security, abuse prevention and uptime monitoring. These logs are not used to build user profiles and are automatically rotated.
• How often each tool is used — counts only. When an astrology tool produces a report, or a message is sent to AstroChat, we add 1 to a daily tally for that tool on that date. The tally is a plain number per tool per day: it contains no name, no birth details, no account id, no IP address and nothing that could identify you or be traced back to a visit. We use it only to see which tools people actually find useful. These counts are deleted automatically after 108 days.
• Janam Kundali / astrology tool inputs. When you generate a Janam Kundali, a Milan match or any astrology report, the names, birth dates, times and places you enter are processed transiently — in your browser or on our server — only to produce that report; the raw details are never written to our database. If you are logged in, we store a one-way cryptographic fingerprint (a SHA-256 hash) of the birth date, time and place — from which the original details cannot be read back — solely so that re-generating a chart you already made never counts again against your daily fair-use limit. These fair-use records are deleted automatically after 30 days.
• Device location — only when you tap “Use my location”. Panchang, muhurat and Kundali results all depend on a place, and you can always simply type the city. If you instead tap the location button, your browser asks your permission first, and we send the coordinates — rounded to roughly 100 metres before they leave your device — to our own city-lookup service for the sole purpose of finding the nearest named place. The coordinates are not stored, not written into any URL we log, and never shared with an advertiser. Decline the browser prompt and every tool still works normally.
• VedAI conversations. Your prompts to VedAI are sent to Google Gemini to generate a response. VedKosh does not store your prompts for later analysis, model training or sale. See section 7 below.
• AI Hast Rekha photos. The palm photo you upload is sent to Google Gemini for analysis and discarded after the response is generated. VedKosh does not retain the photo.
• Push notification token (only if you opt in). If you tap “Enable” on device notifications, a Firebase Cloud Messaging (FCM) device token is stored solely so we can deliver the daily panchang, rashifal and festival alerts you asked for. It is never used for advertising. If you are signed in, the token is linked to your account so the same settings apply on every device you use and so it is deleted with your account; if you are not signed in, it is stored on its own with no identity attached. You can turn it off any time from your browser/app notification settings, and the token is removed automatically once it stops working.
• Notification settings. Your chosen delivery time, muhurat alert lead, categories, quiet hours and rashi are always saved in your browser's local storage. Two cases send them to us, and only these two: if you are signed in, they are saved to your account so the same choices follow you to another device; and if you have enabled device notifications, your delivery time, alert lead, categories and quiet hours are stored with your FCM token, because the alert has to be sent at your chosen time while the app is closed — your rashi is saved only to a signed-in account, never alongside the token. In both cases we also store the town or city you selected for panchang timings, rounded to roughly one kilometre — enough to calculate your sunrise, and deliberately too coarse to identify where you live. We never store your precise coordinates, and none of this is used for advertising. Signing out or turning off device notifications stops both.

4a. Your Account & Premium Kundali (July 2026)

• Account data (only if you sign up). Your email address (verified by one-time code or Google Sign-In) and the profile details you choose to enter — full name, gender, date or year of birth (optional), nationality (optional), preferred language — plus timestamps of your consent to the Terms and this Policy. Stored in our authentication/database provider Supabase (project region: Mumbai, India) and used only to operate your account and purchases.
• WhatsApp updates (optional opt-in — channel not yet active). If — and only if — you tick the WhatsApp box, we store the phone number you provide (in international format) together with the date and time of your opt-in. Where verification is available, a number is saved only after you confirm it with a one-time code sent to it on WhatsApp — a number that is never verified is never saved. Purpose: occasional devotional updates and festival reminders on WhatsApp — nothing else. We have not started sending WhatsApp messages yet: your number sits unused until the channel launches, and if you have opted out by then you will never receive one. When the channel does launch, messages will be delivered through the WhatsApp Business platform operated by Meta, which processes your number only as needed to deliver them, and every message will include a simple way to stop. Your consent is the only legal basis for this (GDPR Art. 6(1)(a); India DPDP Act, 2023 §6): it is specific to WhatsApp updates, entirely optional, never a condition for using any VedKosh feature, and never used to log you in. Withdrawing is as easy as giving — untick the box on your Account page and your number is deleted immediately. We never sell your number or share it for anyone else's marketing.
• Consent records. When you create an account we record the date and time the Terms of Service and this Privacy Policy were presented to you and acknowledged. If you opt in to WhatsApp updates we also record when you opted in and (if you later change your mind) when you opted out. These records are write-once on our side: they cannot be edited, backdated or erased through the app, even by you, because they exist to evidence your choices. They are kept only while your account exists and are erased with your account data when you delete your account (only the anonymised order records described below outlive deletion, as tax law requires).
• Payment records. Payments are processed by Razorpay (an RBI-regulated Indian payment gateway). VedKosh stores only the order record: product, amount, currency, order/payment IDs, status and the email the receipt was sent to. Your card / UPI / bank credentials are entered on Razorpay's secure checkout and are never visible to VedKosh.
• Transactional emails (Resend). All service emails — your login verification codes, any Kundali PDF report you ask us to email you, and purchase receipts — are delivered through Resend, our transactional email provider, and only ever to your own verified account email (never to an address someone else types in). If you choose “Email me the PDF”, the report attachment necessarily contains the birth details and name you entered; it travels to your inbox via Resend and is not stored on VedKosh servers. To prevent abuse we cap email sends per user per day and keep, for up to 30 days, only a timestamp that a send happened — never the report or its contents.
• Android beta invite (optional). If you request an invite to our Android app's Play Store beta, we store the Gmail address you provide — in the same private Google Workspace sheet as feedback content — solely to send you that invite through Google Play and track that it was sent. It is never used for marketing, never linked to your VedKosh account, and is kept only as long as needed to administer the beta programme.
• Self-service rights. The Account page lets you download all your data (JSON export) and permanently delete your account at any time. Deletion removes your profile and entitlements immediately; anonymised order records (with your email removed) are retained as required for tax and accounting law. Step-by-step instructions, and the full list of what is deleted and what is retained, are on our Delete Your Account & Data page — which you can read without signing in.

We use a minimal set of cookies and browser storage:

• Strictly-necessary: language preference, recently viewed items, and a CSP nonce per request — all stored locally on your device.
• Login session (only if you create an account): secure, first-party authentication cookies (Supabase sb-*) that keep you signed in. They contain your session token, are never used for tracking or advertising, and are removed on sign-out or account deletion.
• Advertising (Google AdSense): Google and its partners set cookies to deliver ads. See section 6 below and opt out any time.
• Analytics (Google Analytics 4): we use Google Analytics to understand which pages and languages people find useful. It sets _ga and _ga_* cookies, which last up to 2 years and record pages viewed, approximate location (country/city level, derived from a truncated IP address), device and browser. We do not send Google your name, email address, phone number, or any birth details you enter into our tools.
• No social-media or ad-network pixels — Facebook Pixel, TikTok Pixel and similar trackers are not installed on VedKosh.

VedKosh is supported by tasteful advertising from Google AdSense and its certified partners.

• Third-party vendors, including Google, may use cookies to serve ads based on your prior visits to our website or other websites.
• Google's use of advertising cookies enables it and its partners to serve ads based on your visits across the internet.
• You can opt out of personalised advertising at any time by visiting Google Ads Settings or aboutads.info.
• We never display adult, gambling, alcohol, tobacco, weapons or hateful ads — we use AdSense category blocking in line with our family-safe policy.

VedAI and AI Hast Rekha are powered by Google Gemini APIs. Your prompts and uploaded photos are transmitted securely over HTTPS to Google for processing.

• VedAI prompts are used only to generate the response shown to you.
• VedKosh does not store your prompts, responses or palm photos for secondary analysis, profiling or model training.
• We do not sell or share your AI interactions with any third party.
• We do not perform routine human review of your spiritual or personal queries.
• Google's own data handling for Gemini is governed by Google's Privacy Policy.

VedKosh is a religious and devotional platform designed to be safe for all ages. We do not knowingly collect personal information from anyone, including children. VedKosh follows the spirit of the US Children's Online Privacy Protection Act (COPPA) and India's Digital Personal Data Protection Act, 2023 (DPDP Act) regarding minors. If you believe a child has somehow submitted personal data through our platform, please contact us and we will delete it immediately.

VedKosh is accessed worldwide. Depending on where you live, you may have additional rights:

• EU / UK (GDPR / UK-GDPR): right of access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with your local supervisory authority.
• California, USA (CCPA / CPRA): right to know, delete, correct, and opt out of “sale” or “sharing” of personal information. VedKosh does not sell personal information.
• India (DPDP Act 2023): right to access, correction, erasure, grievance redressal and nomination.

Because we hold almost no personal information about you, most of these requests resolve immediately. If you have an account, the fastest path is self-service: the Account page provides one-click data export and permanent account deletion. For anything else, email us at contact [at] vedkosh [dot] com with a description of your request. We respond within 30 days.

Feedback content is retained only as long as needed to act on it (typically up to 24 months), then archived or deleted. Server logs are typically rotated within 30 days. AI prompts and palm photos are not retained by VedKosh at all. Account data is kept while your account exists and is deleted immediately when you delete the account; paid-order records are kept (with your email redacted after account deletion) for the period required by Indian tax and accounting law. Kundali fair-use records (a timestamp plus a one-way fingerprint of the chart — never the birth details themselves, which cannot be recovered from it) are deleted automatically after 30 days. You can request earlier deletion of anything else at any time.

VedKosh is delivered over HTTPS / TLS 1.2+ with a Content Security Policy (CSP) restricting scripts to an explicit allow-list, database row-level security so your records are only ever readable by you, abuse rate-limits on the login and report endpoints (plus an additional bot-challenge on the login form when enabled), secure headers (HSTS, X-Content-Type-Options, Referrer-Policy, Permissions-Policy) and regular dependency security audits. We take reasonable technical and organisational measures to protect data, but no system on the internet can be 100% secure.

VedKosh links to external resources (Wikipedia, government tourism sites, the Google Play Store, etc.) for context and verification. We are not responsible for the privacy practices or content of these third-party sites. Please review their own policies before sharing any data on them.

We may update this Privacy Policy from time to time. Material changes will be flagged at the top of this page. The “Last updated” date reflects the most recent revision. Continued use of VedKosh after changes are posted constitutes acceptance of the updated policy.

For any privacy question, data request, or complaint:

• Email: contact [at] vedkosh [dot] com
• Contact page: vedkosh.com/contact
• Typical response time: within 2–3 business days; legal requests within 30 days.

For users in India, the same email address serves as the contact point for the Grievance Officer under the IT Rules, 2021 and the DPDP Act, 2023. Our Grievance Officer is Usha Kushwaha; complaints are acknowledged within 48 hours and resolved within one month of receipt. Full registered-seller details are on our Contact page.