Privacy Policy

1 Information we collect

a. Information you provide to us

• Account & sign-in data — your phone number (phone OTP sign-in), and, if you choose Google or Apple sign-in, the name, email address and profile picture they share with us (the picture is stored as a link in your account record).
• Birth & profile details — the information you enter for readings, such as name, date of birth, time of birth, place of birth, gender, and zodiac sign.
• Palm & face images — photos you capture or select for palm reading and face reading (see Section 3).
• Chat & content — messages you send in the in-app astrologer chat, questions you ask, and any files you attach.
• Preferences — your chosen language and notification settings.
• Support & feedback — the message, title and email address you provide when you contact us, and any screenshot you attach. Attachments are stored with the support ticket and are removed when you delete your account.

b. Purchase information

When you buy a subscription or XP pack, the payment is processed by Apple App Store or Google Play. We (and our provider RevenueCat) receive confirmation of the purchase, product identifiers, transaction and subscription status, and receipt validation data. We do not receive or store your full card number.

c. Information collected automatically

• Device & app identifiers — a device identifier (the Android ID on Android, or an app-generated identifier stored in the iOS Keychain) and an app-generated user ID. These maintain your session, credit the once-per-day reward on a per-device basis, and prevent reward abuse and fraud. We also store a randomly generated session key in your device’s secure hardware storage (Android Keystore / iOS Keychain) so you stay signed in; only a one-way hash of it is held on our servers.
• Device reward ledger — to stop the once-per-day reward and the one-time welcome bonus being claimed repeatedly by deleting and re-creating accounts, we keep a small record against your device identifier holding only whether those rewards have been claimed and on what day. It contains no name, contact details or account identifiers, and it deliberately survives account deletion — otherwise deleting an account would reset the rewards and defeat the check.
• Advertising identifier — your device’s resettable advertising ID (Advertising ID on Android, IDFA on iOS) is used by our advertising partner to serve and measure ads. See Section 6.
• Install attribution — on Android we read the Google Play install referrer once after installation to learn which campaign or link brought you to the App.
• Device & usage data — device model, operating system version, app version, language/region, screens viewed, features used, and interactions.
• Diagnostics — crash reports, performance data, and error logs.
• Push token — a notification token used to deliver push notifications.
• Approximate location — a coarse region may be inferred from your IP address and language; we do not collect precise GPS location.

2 How we use your information

• To generate your palm, face, horoscope, kundli (birth chart), and tarot readings and personalize them to you.
• To create and secure your account and authenticate sign-in.
• To operate the XP rewards economy, process subscriptions and purchases, and prevent reward abuse and fraud.
• To send notifications you have enabled, such as daily horoscopes and astrologer messages.
• To provide customer support and respond to your requests.
• To analyze usage and improve the App’s features, content, and reliability.
• To translate content into your selected language.
• To show and measure advertising that keeps the free version of the App available, and to check whether you hold an ad-free subscription.
• To comply with legal obligations and enforce our terms.

3 AI processing & your photos

Your readings are generated using artificial intelligence, including Google’s Gemini AI models accessed through our secure cloud backend, and Google ML Kit, which runs on your device.

• On-device processing. Face detection, object detection (for palm framing), and some translation run locally on your device via ML Kit and are not sent to our servers.
• Cloud AI processing. When you request a reading, the relevant input — such as your palm/face image or birth details — is sent over an encrypted connection to our secure cloud functions and to the Gemini AI service solely to produce your reading.
• No identity recognition. We do not use facial recognition to identify you, and we do not use your images for advertising.
• No model training by us. We do not use your images, birth details or messages to train any model. They are sent to Google’s Gemini API solely to generate your reading. We use Gemini on a paid plan, whose API terms do not permit Google to use submitted content to train or improve its models.

Photos you scan. An image captured or chosen in the Palm Scan or Face Scan flow is held in memory only, sent to the AI to produce your reading, and is not stored on our servers. The resulting text of your reading may be saved to your account so you can view it again in the App.

Photos you send in chat. A photo or file you attach in the astrologer chat is different: it is part of the conversation, so it is stored with that chat thread in our database and remains there until your account is deleted. There is currently no way to delete an individual chat thread from inside the App; deleting your account removes all of them. The astrologer persona may invite you to share a palm, face or chart image in chat — anything you send that way is kept as chat history rather than treated as a one-off scan.

4 Device permissions

The App requests only the permissions it needs, and only when a feature requires them. You can change these at any time in your device settings.

On Android, the App’s ads and services libraries also declare permissions that require no prompt and that you will see listed on the Play Store: an advertising ID (to serve and measure ads), Google Play billing (for purchases), install referrer (to attribute installs), vibrate / wake lock / boot-completed / foreground service and launcher badge permissions (to deliver notifications and show unread counts).

The App does not request access to your microphone, contacts, calendar, or location — precise or approximate. We removed the microphone and location declarations that earlier builds inherited from third-party libraries but never used.

5 Third-party services

We rely on trusted third-party providers to operate the App. Each processes data only as needed to provide its service and under its own privacy policy:

6 Advertising & your ad choices

The free version of AI Astrologer is funded by advertising. We show ads through Google AdMob in the form of banners, native cards inside some screens, occasional full-screen ads between screens, and an optional “watch a video” reward you choose to view.

What advertising data is used

• Advertising identifier — a resettable ID provided by your device (Advertising ID on Android, IDFA on iOS). It is not your name, email or phone number.
• Ad interaction and context — which ads were shown, viewed or tapped, your approximate region (typically inferred from IP address), device type, operating system and app version.
• Android Privacy Sandbox — on newer Android versions the ads library may use Google’s Privacy Sandbox interfaces (Topics and Attribution Reporting) to select and measure ads with less cross-app tracking.
• Apple SKAdNetwork — on iOS, privacy-preserving install measurement that does not identify you individually.

We never share your palm or face images, your birth details, or your chat messages with advertisers. Those are used only to create your readings.

Consent in the EEA, UK and Switzerland

If you are in the European Economic Area, the United Kingdom or Switzerland, we use Google’s User Messaging Platform, a Google-certified consent management platform, to ask for your consent before any ad is requested. You can change or withdraw your choice at any time from the App’s privacy options. If you decline personalised ads, you will still see ads, but they will be non-personalised.

Apple App Tracking Transparency (iOS)

On iOS, the App asks for permission through Apple’s App Tracking Transparency framework before your IDFA can be used. If you decline, we do not access the IDFA and you will see non-personalised ads. You can change this at any time in Settings → Privacy & Security → Tracking.

How to limit ad personalisation

• Android: Settings → Privacy → Ads — reset or delete your advertising ID, or opt out of ad personalisation.
• iOS: Settings → Privacy & Security → Tracking — turn off “Allow Apps to Request to Track”.
• Remove ads entirely: premium subscribers are shown no ads at all, and no ad request is made for them.

7 How we share information

We do not sell your personal information. We share information only in these limited situations:

• Service providers — with the trusted vendors listed in Section 5, who process data on our behalf to run the App.
• Advertising partners — with Google AdMob and its ad partners, who receive your advertising identifier and ad-interaction data in order to select, deliver and measure ads. They do not receive your palm or face images, birth details, or chat messages. See Section 6.
• Legal compliance — when required by applicable law, regulation, legal process, or a valid government request.
• Protection of rights — to investigate, prevent, or address fraud, security, or technical issues, or to protect the rights, property, and safety of our users or the public.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, in which case we will notify you of any change in how your information is handled.
• With your consent — for any other purpose disclosed to you at the time.

8 Data retention

We keep your information for as long as your account is active or as needed to provide the Services. Palm and face images are retained only as long as necessary to generate your reading. Purchase records and certain data may be retained longer where required for legal, accounting, or fraud-prevention purposes. When you delete your account, we delete or anonymize your personal data, except information we are legally required to keep.

Photos attached in the astrologer chat are retained as part of that conversation until your account is deleted, unlike scan images, which are not stored at all.

Advertising and analytics identifiers are retained by the relevant provider under its own retention policy; you can reset your advertising ID at any time in your device settings, which severs it from past ad activity.

9 Data security

We use industry-standard safeguards to protect your information, including encryption in transit (HTTPS/TLS), access controls, and secure, reputable cloud infrastructure. Sensitive credentials and API keys are stored server-side and are never embedded in the App. No method of transmission or storage is completely secure, so while we work hard to protect your data, we cannot guarantee absolute security.

10 Your rights & choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information (you can edit most profile details in the App).
• Delete your account and personal data (see Section 11).
• Withdraw consent or object to certain processing.
• Data portability, where applicable.
• Manage notifications — turn push notifications off in the App or your device settings at any time.
• Manage permissions — revoke camera or photo access in your device settings.

To exercise any of these rights, contact us at support@nextwaveinfotech.com. We will respond within the timeframe required by applicable law.

11 Deleting your account & data

You can delete your account and associated personal data at any time:

1. In the App: open Settings → Delete account and confirm. This permanently removes your account and personal data.
2. By email: send a request from your registered email/phone to support@nextwaveinfotech.com with the subject “Delete my account”.

Deletion erases your profile, readings, chat history (including any photos attached in chat), saved sign-in credentials and support tickets from our database, and removes your push profile from OneSignal. Two things deliberately remain: a small device reward record holding only whether the welcome and daily rewards were claimed (see Section 1c) — without it, deleting an account would reset those rewards — and your analytics profile at Mixpanel, which is keyed to an internal account ID and holds no name or contact details; we disconnect it from you at deletion, and you can request its removal by email.

After deletion, your readings, profile, and account data are removed from our active systems. Some records may be retained only where required by law (for example, transaction records). Purchases and subscriptions are managed by the App Store or Google Play; cancel active subscriptions through your store account.

12 International data transfers

We operate globally, and our service providers may process and store your information in countries other than your own, including the United States and India. These countries may have data-protection laws that differ from those in your country. Where required, we use appropriate safeguards (such as standard contractual clauses) to protect your information when it is transferred internationally.

13 Notice to EU/UK users (GDPR)

If you are in the European Economic Area or the United Kingdom, we process your personal data under the following legal bases:

• Contract — to provide the readings, accounts, and purchases you request.
• Consent — for camera/photo access, push notifications, and processing of your images for readings; you may withdraw consent at any time.
• Legitimate interests — to secure the App, prevent fraud, and improve our Services.
• Legal obligation — to comply with applicable law.
• Consent (advertising) — personalised advertising and the use of your advertising identifier are based on the consent you give through Google’s User Messaging Platform before any ad is requested. You may withdraw it at any time, after which you will see only non-personalised ads. See Section 6.

You have the right to lodge a complaint with your local data-protection authority. Our data controller is Nextwave Infotech, contactable at support@nextwaveinfotech.com.

14 Notice to California users (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, to request access to or deletion of it, and to not be discriminated against for exercising your rights. In the preceding 12 months we may have collected identifiers, account and profile information, purchase/commercial information, photos, usage and device information, and inferences, as described in Section 1.

We do not sell your personal information for money. However, California law defines “sharing” broadly to include disclosing identifiers for cross-context behavioural advertising. Because the free version of the App shows personalised ads through Google AdMob, our use of your advertising identifier for that purpose may qualify as “sharing” under the CPRA. We do not share any other category of personal information — in particular, we never disclose your palm or face images, birth details, or chat messages to advertisers.

Your right to opt out of sharing. You can stop this at any time, without penalty and without losing access to the App:

• turn off ad personalisation in your device settings (Android: Settings → Privacy → Ads; iOS: Settings → Privacy & Security → Tracking); or
• subscribe to premium, which removes ads entirely; or
• email us at support@nextwaveinfotech.com with the subject “Do Not Sell or Share My Personal Information”.

We do not knowingly sell or share the personal information of consumers under 16. To exercise any right, contact us at support@nextwaveinfotech.com.

15 Children’s privacy

The App is intended for adults and is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at support@nextwaveinfotech.com and we will delete it.

16 Entertainment disclaimer

AI Astrologer provides astrology, palmistry, face reading, tarot, and horoscope content generated by artificial intelligence, for entertainment and self-reflection purposes only. It is not a substitute for professional advice — medical, legal, financial, psychological, or otherwise. You are responsible for the decisions you make based on the content.

17 Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, notify you in the App. Your continued use of the App after changes take effect constitutes acceptance of the updated Policy.

18 Contact us