Cosmic Compass ("we", "our", or "us") is operated by Valorg Apps. We built this app to help you understand your Vedic birth chart — honestly, without selling you remedies or gemstones. This Privacy Policy explains what information we process, why we process it, the service providers involved, and how long different information may be kept.
If you have questions, contact us at hello@valorg.app.
1. What we collect
Account information: Your email address and authentication records when you create an account. Supabase processes your password for authentication; we do not store or have access to a readable copy of it.
Birth details: Date of birth, time of birth, birth location (city/place name, latitude, and longitude). This is the core data needed to generate your Vedic birth chart. You provide this voluntarily during onboarding.
Chart information and preferences: The chart, dasha, and transit information calculated from your birth details, along with preferences such as chart style and terminology display.
Chat messages: The questions you ask and the interpretations we generate in response. These are stored to maintain session continuity and allow you to refer back to prior conversations.
Usage and credit records: Your free message usage, paid credit balance, and limited entitlement-reservation records used to charge, complete, or safely refund a chat request.
AI usage records: Input/output token counts, provider and model labels, and associated account/session references used for cost monitoring and reliable credit handling. These records do not contain chat-message text, but they are linked to your account until deleted under the retention rules below.
Purchase records: In-app purchases are processed through Google Play and RevenueCat. We receive pseudonymous purchase-event identifiers, an app account identifier, the product purchased, credits granted, and processing timestamps. We do not receive or store your payment card details.
Operational information: Our hosting and service providers may process ordinary network and diagnostic information, such as IP address, request path, timestamp, device or browser information, and bounded error details. We do not intentionally include birth details, chat text, payment receipts, or credentials in application logs.
2. What we do not collect
- We do not require your legal name, phone number, or street/postal address. We do process the birth-place information and ordinary network address described above.
- We do not use advertising trackers or analytics SDKs.
- We do not sell your data to third parties.
- We do not use your birth details or chat history to train our own AI models.
3. How we use your data
- To generate your Vedic birth chart via the Prokerala API.
- Chat messages and relevant derived astrology context are sent to Anthropic to generate AI-powered responses. We do not intentionally include your account email, location name, or raw birth coordinates in that AI context; anything you write in a chat message is included.
- To maintain your account, credit balance, and session history.
- To process in-app purchases via Google Play and RevenueCat.
- To secure, operate, monitor, and diagnose the service and prevent abuse or fraud.
4. Third-party services
Cosmic Compass relies on the following third-party services, each with their own privacy practices:
- Supabase — database and authentication hosting. Privacy Policy
- Prokerala API — Vedic chart and transit computation. Your birth date/time and coordinates are sent to Prokerala; birth coordinates are also reused as the location input for current-transit calculations. Privacy Policy
- Anthropic — the Production AI provider receives your chat messages and relevant derived astrology context to generate AI-powered responses. Privacy Policy
- RevenueCat — in-app purchase management. Privacy Policy
- Google Play — app distribution and payment processing. Privacy Policy
- Railway — backend API hosting. Privacy Policy
- OpenStreetMap Nominatim — place search during birth-detail entry. The search text, network address, and identifying app user-agent are sent to the public Nominatim service. Privacy Policy
5. Storage and security
Your data is stored on Supabase's infrastructure (PostgreSQL database), protected by row-level security policies. Passwords are hashed and never stored in plain text. All data transmission between the app and our backend uses HTTPS encryption.
6. How long we keep information
- Account, birth, chart, and preference data: generally retained while your account exists and removed through the account-deletion process. They are not automatically removed merely because your account is inactive.
- Chat history: chat content becomes eligible for deletion once more than 90 days have passed since the associated chat session is closed, subject to the retention exceptions below. This period starts at session closure, not when each message is sent; a session may remain open until it is closed following inactivity. Actual deletion may occur later depending on scheduled cleanup and operational circumstances, including cleanup delays or failures. Sessions associated with paid chat requests or unresolved credit-accounting records may be retained longer, including their associated chat history. Eligible sessions and messages may be permanently deleted and become unavailable in the app. Save or copy information you wish to keep.
- AI token-usage and chat-accounting records: token-usage records older than 90 days and completed or refunded free-chat accounting records whose creation and completion or refund are both more than 90 days old become eligible for cleanup after their associated session has closed. Paid-chat accounting records and unresolved credit-accounting records may be retained longer for accounting or service recovery. These eligibility thresholds are not guaranteed deletion deadlines.
- Operational caches and provider-operation records: may be retained as needed to operate and recover the service and support security and fraud prevention. They are not intended as permanent user history and are not subject to the chat-history deletion threshold.
- Purchase reconciliation and other retained records: some records may be retained longer where necessary for purchase or accounting purposes, security and fraud prevention, dispute handling, audit, legal compliance, or service recovery. This includes limited purchase-event records used for reconciliation and duplicate-event protection. The direct app-user link in purchase reconciliation records is removed during completed account deletion, while limited transaction metadata remains.
- Logs and backups: information may remain temporarily in infrastructure logs, security records, or backups according to provider-controlled retention and backup cycles. We do not promise an exact deletion time for systems we do not directly control.
7. Account deletion
You may request account deletion in the app (Settings → Delete account). The service first removes your ordinary application profile and user content, including birth details, charts, chat history, usage records, and credit balance, and then deletes the associated Supabase Auth identity. If the final authentication deletion is temporarily unavailable, a minimal recovery record containing the deletion stage, timestamps, attempt count, and a bounded error category may remain so the request can be safely retried.
Completed account deletion cannot be undone. Limited purchase, security, fraud-prevention, dispute, audit, or legal records may remain as described above. Third-party providers may also retain information under their own policies and legal obligations.
8. Your choices
You can:
- Correct your birth details at any time via the app (Home screen → Edit birth details).
- Delete your account and ordinary application data via the app (Settings → Delete account), subject to the limited retention described above.
- Contact us at hello@valorg.app with access, correction, deletion, or copy questions. We will respond as required by applicable law; the app does not currently provide a self-service data-export tool.
9. Age eligibility
Cosmic Compass is intended only for people aged 18 or older. We do not knowingly permit minors to create accounts. If you believe a minor has provided us with personal information, contact us so we can review and address it.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.
11. Contact
Questions or concerns? Email us at hello@valorg.app.