Privacy Policy
1. Who we are
ask tota (“ask tota”, “we”, “us”) is an astrology application operated by JUPELLI CONSULTING PRIVATE LIMITED, Flat No. 301, Raghavendra Colony,Kondapur, Serilingampally, K.V.Rangareddy-500084, Telangana, India. For the purposes of India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”), we are the Data Fiduciary for the personal data described here, and you are the Data Principal.
ask tota is intended for users in India and is available only to people aged 18 or over. We do not knowingly collect personal data from children (see §10).
2. The short version
- We ask for your phone number (to sign you in) and your birth date, time, and place (an astrological chart can’t be calculated without them). Your name is optional.
- To generate your readings, your birth-derived chart data and the questions you ask are sent to a third-party AI provider, DeepSeek, which processes them outside India — please read §5.
- We do not sell your personal data, use it for advertising, or share it with data brokers.
- You can delete your account and all your data from inside the app, at any time, and we action it immediately.
3. What we collect
We collect only what the app needs to work. There is no advertising identifier, and no access to your contacts, photos, microphone, camera, or precise GPS location.
Data you give us
| Data | Why | Required? |
|---|---|---|
| Mobile phone number | Your account identity; we send a one-time passcode (OTP) to it over WhatsApp to sign you in. | Required |
| Date of birth | An astrological chart cannot be computed without it. | Required |
| Time of birth (exact / approximate / unknown) | Determines the ascendant and house positions. You may mark it unknown. | Optional |
| Place of birth (a city, converted to coordinates + timezone) | Required for the same reason. We geocode the city name you type — we do not read your device location. | Required |
| Display name | Shown in the app and used to personalise readings. | Optional |
| Birth details of other people (for a compatibility reading) | To compute the compatibility reading you asked for. | Optional |
| Chat messages | To answer your questions. | Optional |
Your date, exact time, and place of birth are, together, highly identifying and personal — we treat them as sensitive. Please only enter another person’s birth details if you have their permission.
Data collected automatically
- Product analytics. We record which features are used and when (e.g. “a chart was created”), linked to an internal random account identifier. These events deliberately exclude your phone number, name, birth details, and message content.
- Crash and error reports. Technical details of failures (error type, device model, OS version, app version) so we can fix them.
- Server logs. Standard request logs including IP address and timestamp, kept briefly for security and debugging.
We do not use cookies, advertising IDs, cross-app tracking, or fingerprinting.
4. Why we process your data
We process your personal data on the basis of the consent you give when you create an account and enter your birth details, and for the legitimate uses permitted by the DPDP Act — to sign you in and keep your account secure, generate your charts and readings, answer your chat questions, compute compatibility readings, apply your plan’s usage limits and process subscriptions, prevent abuse and fraud, fix bugs, and comply with law. You may withdraw consent at any time by deleting your account (§8).
5. Who we share it with
AI reading generation — DeepSeek (outside India). To generate your readings and answer your chat questions, we send your astrological chart data (derived from your date, time, and place of birth), your display name where provided, and the messages you send to DeepSeek, an AI provider operated by Hangzhou DeepSeek Artificial Intelligence Co., Ltd. (People’s Republic of China). This means that data is transferred to and processed on servers outside India, under the laws of another jurisdiction. By using ask tota, you consent to this transfer. If you are not comfortable with it, please do not use the app.
We do not sell your data or share it for advertising. Other processors:
| Provider | What they receive | Purpose |
|---|---|---|
| Meta (WhatsApp Cloud API) | Your phone number and the OTP | Deliver your login code |
| Google (Geocoding) | The birth city name you type — not your identity or device location | Convert a place name to coordinates + timezone |
| Analytics provider | Anonymous-by-design events keyed to an internal id (no phone, name, birth details, or messages) | Product analytics |
| Error-monitoring provider | Crash and error diagnostics | Reliability |
| Google Play Billing | Your purchase, managed by Google | Subscriptions — we never see or store your card details |
| Railway | Hosts our servers and database | Infrastructure |
We may also disclose data where legally required (court order, lawful government request), or to establish or defend legal claims.
6. Cross-border transfers
As set out in §5, some of your personal data — including birth-derived chart data and your chat messages — is transferred outside India for processing, principally to DeepSeek in the People’s Republic of China.
Section 16 of the Digital Personal Data Protection Act, 2023 permits a data fiduciary to transfer personal data outside India, except to a country or territory that the Central Government has restricted by notification. Our transfers are made on that basis, together with the consent you give under §4, and we do not transfer your personal data to any country or territory that is the subject of such a restriction. If a country we rely on is later restricted by notification, we will stop transferring your data there and update this policy. Where any other law applicable to us imposes a higher standard of protection on a transfer, that higher standard applies.
Sending your data outside India does not reduce our responsibility for it: we remain the data fiduciary, our processors act only on our instructions and only for the purposes described in §5, and you keep every right set out in §8.
7. How long we keep it
| Data | Retention |
|---|---|
| Account (phone, name, plan) | Until you delete your account |
| Birth details, charts, and readings | Until you delete the chart, or your account |
| Chat messages and sessions | 365 days, then automatically deleted |
| One-time passcodes (OTPs) | Minutes — destroyed once used, expired, or exhausted. We never store the code itself, only a keyed hash. |
| Session / refresh tokens | Until logout or expiry (up to 90 days) |
| Analytics, crash reports, server logs | A limited period, per our providers’ settings |
8. Your rights & deleting your account
Under the DPDP Act you have the right to access a summary of your personal data and how it is processed; to correct or update it; to erase it; to nominate someone to exercise your rights in the event of death or incapacity; and to grievance redressal (§9).
Deleting your account. You can delete your account and all associated data — charts, readings, chat history, and your phone number — from inside the app: Profile → Delete account. This is immediate and irreversible. If you can no longer sign in, or you would rather we did it for you, see our account deletion page — we verify that the account is yours before deleting anything. You may also request deletion, access, or correction by writing to us at privacy@asktota.com.
9. Grievance Officer
If you have a complaint about how we handle your personal data, you may contact our Grievance Officer, who is required to respond to you:
- Name: Vishnu Prakash
- Email: grievance@asktota.com
If you are not satisfied with our response, you have the right to complain to the Data Protection Board of India.
10. Children
ask tota is not intended for anyone under 18, and we do not knowingly collect the personal data of children. Under the DPDP Act, a “child” is a person under 18, and processing a child’s data requires verifiable parental consent — which we are not set up to obtain. If we learn we have collected data from a person under 18, we will delete it. Contact us at privacy@asktota.com if you believe a child has provided us data.
11. Security
We protect your information with encryption in transit (HTTPS/TLS on every request); one-time passcodes stored only as keyed hashes, never as plaintext codes; session tokens stored as hashes and rotated on every use; rate limiting on authentication and other sensitive endpoints; and access controls that ensure one user’s charts and chats cannot be read by another. Your data is stored on managed infrastructure with access restricted to authorised systems and personnel.
No system is perfectly secure. If we become aware of a personal data breach, we will notify you and the Data Protection Board of India as the DPDP Act requires.
12. AI-generated content
Your readings are generated by an AI language model. They are automatically generated entertainment content — not advice, and not a prediction of fact. See our Terms of Service for the full disclaimer. We do not use your data to make any automated decision that produces a legal or similarly significant effect on you.
13. Changes
We may update this policy. If we make a material change — in particular to who we share your data with — we will notify you in the app before it takes effect, and, where the law requires, ask for your consent again. The “Last updated” date above always reflects the current version.
14. Contact
- Privacy: privacy@asktota.com
- Support: help@asktota.com