Privacy Policy

Last Updated: 10 October 2026 | Effective Date: 19 March 2025

Who We Are

Vedara is a Vedic astrology product operated by SIMARA AI Limited, a company registered in England and Wales (company number 16329175) with its registered office at 128 City Road, London, England, EC1V 2NX, United Kingdom. SIMARA AI Limited is the data controller for the personal information described in this policy.

This Privacy Policy describes how we collect, use and disclose your information when you use our website and native Android and iPhone apps at vedara.me (the "Service"). This notice explains our data practices; it does not replace a consent choice. Where a feature relies on your consent, we ask separately and provide a way to change that choice.

For any privacy question or request, contact us at hello@vedara.me.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last Updated" date above. Where a change materially affects how we use your personal data, we will take reasonable steps to notify you (for example by email or an in-product notice) before it takes effect. We recommend that you review this page periodically.

Information We Collect

We collect and process the following personal information about you:

Name, email address, account identifier and sign-in information
Birth details you choose to provide (date, time and place of birth) and your selected current location, used to calculate charts and personalise the guidance you request
Place searches and the location coordinates you select, and approximate location supplied by our hosting provider
Chat questions, conversation history, generated guidance and reports you save or purchase
Partner birth details and relationship context you add for compatibility or chat features
Your chosen profile photo, profile preferences, and Tribe connections and invitations
Notification tokens, installation identifiers and delivery information when you enable mobile notifications
Payment and billing information, processed by our payment provider (we do not store full card details)
Usage and diagnostic information about pages viewed, features used, requests, errors and device/app versions
Marketing consent records, such as when you opt in or out of marketing email, the wording you were shown, the date and time, and, where available, your IP address and browser user agent
Public questions, comments and problem reports posted in r/Vedara or on the Vedara.me Facebook Page, together with the provider comment or thread identifier, public permalink, and a one-way hashed author identifier

How We Collect Your Information

Directly from you, when you register, enter details, use chat or Tribe, choose a photo, make a purchase, or contact us
Automatically, when you interact with the website or app, including operational requests and errors (see also our Cookie Policy)
From the sign-in, payment and notification providers used for the features you choose
From public posts and comments in Vedara's own Reddit community and Facebook Page, using the official Reddit and Facebook APIs

Location Search

To suggest places and find their coordinates, Vedara sends the place text you type and your language to Geoapify through our server. Resolving an approximate detected city sends its city and country. This lookup does not send your account identity, birth date, sign-in cookies or device IP address to Geoapify; the provider sees our server's request and IP address. A place you select can be saved with your profile or the feature you are using.

Repeated location results may be cached by our server. Provider request records and hosting logs have their own retention arrangements; a cache refresh interval is not an exact deletion deadline. See the Geoapify privacy policy.

AI-Assisted Guidance

Some guidance, reports and chat answers use AI services. OpenRouter and the model providers used for a request may process your question, relevant chart and profile context, including birth or selected current-location coordinates when a calculation needs them, conversation history and any partner context needed to produce the response. Chat history and generated content may be saved in your Vedara account. Avoid adding personal information that is not needed for the guidance you request.

Provider handling depends on the service and configuration used for the request. We do not promise that all AI requests have zero retention. For information about routing and provider practices, see OpenRouter data handling. The separate ChatGPT/MCP connection is described below.

Vedara for Connected MCP Clients

When you use Vedara through a compatible MCP client, that client sends the arguments for the tool you invoke. Public calculations may use a birth date, time and place or coordinates; they do not save an account birth profile. We ask clients to obtain your consent before sending birth data, including consent from both people for compatibility. Place-only input uses OpenStreetMap Nominatim to find coordinates. That lookup sends the place label, not your birth date or time. Supplying coordinates and a timezone avoids the lookup. See the OpenStreetMap Foundation privacy policy.

Saved-profile calculations use the encrypted birth profile associated with the connected Vedara account. They do not return your exact stored birth fields or internal account ID. Separate profile-save and profile-update tools can replace birth fields, clear derived caches and start recalculation. They require explicit confirmation of the supplied date, time and place. Before confirmation, a preview contains the fields you supplied so you can check them. These tools calculate positions and rule outcomes; the connected client writes the interpretation. Other Vedara AI-assisted features are described above.

Public chart sharing is optional and separate from calculation or account connection. If you ask to publish a chart, anyone with its link can view the chart output, birth date, place label and optional display name. The share record does not store birth time or coordinates. It includes view counts and, for a linked account, an internal creator ID. Shares remain available until separately revoked. Deleting an account does not automatically remove every public share. Include any share URLs in a removal request to hello@vedara.me; we verify the request and can make the public page unavailable.

Account connection uses OAuth through WorkOS. We process a verified email or canonical account subject, authorization information and account status to resolve your account. Connected clients process conversations and returned tool data under their own policies, for example OpenAI when you use ChatGPT, or Meta if you connect through a supported Meta client. This notice does not mean that a particular platform listing is available.

MCP tool audit records contain the tool, result status, duration, bounded language and activity categories, entitlement class, an internal user ID where authenticated, and a correlation ID. They may also contain hashed client-reported subject/session identifiers and broad date-range or location-input categories. These hashes are pseudonymous, not anonymous. Tool audit details exclude prompts, full arguments, exact birth details, email addresses and returned chart data. MCP failure details are redacted at the tool audit boundary. Separate account-recalculation, hosting and provider records have their own operational handling. We have not established a universal automatic deletion interval for all MCP operational records; necessary retained records are described below.

Disconnect Vedara in your connected client and revoke its authorization where supported. Effective access-token invalidation depends on provider behavior and expiry; we do not promise that every issued token becomes invalid immediately. Disconnection does not delete your account, stored chart data or public shares. You can request access, correction or deletion through the account-deletion page below or hello@vedara.me. Technical details and reviewer tests are in the MCP developer guide.

How We Use Your Information

We use the information we collect about you for the following purposes:

Creating and managing your user account
Calculating your birth chart and providing personalised astrological guidance
Processing payments and fulfilling purchases
Providing customer support
Sending administrative information about the Service
Marketing and promotional communications, where you have consented or where otherwise permitted by law
Recording your marketing consent choices, so we can demonstrate what you agreed to
Understanding and improving how the Service is used (analytics)

If we want to use your information for any other purpose, we will ask for your consent and will use your information only after receiving it, and only for the purpose(s) for which consent was granted, unless we are required to do otherwise by law.

Public Community Questions and Support Monitoring

We monitor public comments only in r/Vedara and on the Vedara.me Facebook Page so that we can answer questions about the app and its guidance, identify feature suggestions, and escalate access, payment, account or technical problems. We rely on our legitimate interests in operating and protecting Vedara's own communities and providing responsive product support. We do not monitor unrelated communities or private messages.

A public question may be placed in a review queue with its provider comment and thread IDs, a short public excerpt, public permalink, and a one-way hashed author identifier. The author's platform handle is not copied into the queue. Safe questions may receive a draft based on the current Vedara weekly guidance, but there is human review before any public reply. Medical, legal, financial, crisis, privacy-invasive and deterministic-outcome requests are blocked from the astrology reply path and escalated for appropriate human handling.

Privacy-minimised operational alerts may be sent to a private Vedara operations chat on Telegram. Those alerts contain the platform, internal queue ID, a short public excerpt and public permalink; they do not include the author's handle, email address, birth details or account data. Community content is not used to train an AI model, build advertising profiles, or infer sensitive traits. No solely automated decision produces legal or similarly significant effects.

You have the right to object to this processing. You may also ask us to remove a queued copy of your public question by contacting hello@vedara.me with the public post or comment link. Deleting a comment on Reddit or Facebook does not replace a direct deletion request where a temporary review-queue copy already exists.

Push Notifications

If you enable mobile notifications, we associate a notification token with your account to deliver daily-guidance alerts. Android uses Firebase Cloud Messaging and a Firebase installation identifier; iPhone delivery uses Apple Push Notification service. You can turn notifications off in the app or device settings. Vedara disables its delivery registration and removes its stored token when you turn notifications off in the app. Limited delivery and security records may remain.

Native cleanup on Android requests deletion of both the messaging token and the Firebase installation identifier. Cleanup may need a working connection; an offline or failed request does not mean the provider has completed deletion. Firebase states that removal from its live and backup systems can take up to 180 days after an installation-deletion request. See Firebase privacy information. Turning off notifications does not delete your saved guidance or reports.

Purchases in Mobile Apps

RevenueCat helps validate native purchases from Google Play and the App Store and link paid access to your Vedara account identifier. Purchase tokens or receipts, product identifiers, transaction and subscription status, and relevant app/device information are processed to deliver purchases, restore access and prevent fraud. We do not receive full payment-card details from the app stores. See the RevenueCat privacy policy.

Deleting your Vedara account does not cancel your Google Play or App Store subscriptions or delete the store's purchase records. Manage subscriptions and store-account privacy choices with the store where you purchased them. Purchases made on our website use Stripe.

How We Share Your Information

We do not sell your personal information. The providers involved depend on the features you use. Some process information on our behalf; platforms that operate your store, sign-in, community or connected-client accounts may also process information under their own privacy policies.

Hosting and infrastructure (Vercel)
Application hosting and databases (Railway and Supabase)
Connected-client delivery (for example OpenAI for ChatGPT, or Meta when you use a supported Meta connection)
OAuth authorization for connected accounts (WorkOS)
Product analytics (PostHog)
Payment processing (Stripe)
Native purchases and access validation (RevenueCat, Google Play and Apple App Store)
Native notification delivery (Firebase Cloud Messaging and Apple Push Notification service)
Place lookup (Geoapify for website/app search; OpenStreetMap Nominatim for place-only MCP inputs)
AI-assisted guidance (OpenRouter and the model providers used for the request)
Transactional email delivery (MailerSend)
Community platforms and operational messaging (Reddit, Meta and Telegram)

Providers acting on our behalf are subject to the applicable data-processing terms. Provider processing may take place outside the United Kingdom. Contact us for information about the providers and transfer safeguards relevant to your request. The privacy policies linked above also explain the providers' own processing and retention arrangements.

We may also disclose your personal information: (1) to comply with applicable law, regulation, court order or other legal process; (2) to enforce your agreements with us, including this Privacy Policy; or (3) to respond to claims that your use of the Service violates any third-party rights. If SIMARA AI Limited is merged with or acquired by another company, your information will be one of the assets transferred to the new owner.

Retention of Your Information

We keep account information and saved content for as long as needed to provide your account, fulfil purchases and honour your choices. You can request deletion using the link below. Limited payment, consent, security or legal records may need to be retained to meet obligations, investigate abuse or establish, exercise or defend legal claims. Deleting an account is not a promise that every provider or backup copy disappears immediately; store purchase records, provider deletion periods and necessary retained records are handled separately.

Public community question text is removed after an approved reply is posted and otherwise retained for no longer than 30 days in the review queue. Provider and audit identifiers may be retained where necessary to prevent duplicate replies, investigate errors, comply with platform requirements, or establish, exercise or defend legal claims, but are minimised and do not include the author's platform handle.

Your Rights

To delete your Vedara account and associated personal data, request account deletion. You can make this request without signing in or reinstalling the app.

Depending on the law that applies to you (including UK GDPR), you may have the right to access, rectify or erase your personal data; receive a copy of your personal data; restrict or object to the processing of your data; ask us to port your personal information to another entity; withdraw any consent you have provided; and lodge a complaint with a supervisory authority (in the UK, the Information Commissioner's Office). To exercise any of these rights, write to us at hello@vedara.me. We will respond to your request in accordance with applicable law.

You may opt out of direct marketing communications, or of profiling we carry out for marketing purposes, by using the unsubscribe link in any marketing email or by writing to us at hello@vedara.me.

Note that if you do not allow us to collect or process required personal information, or if you withdraw consent to process it for the required purposes, you may not be able to access or use the services for which your information was sought.

Cookies

To learn more about how we use cookies and similar tracking technologies, and the choices you have in relation to them, please see our Cookie Policy.

Security

The security of your information is important to us and we use reasonable security measures to prevent the loss, misuse or unauthorised alteration of your information under our control. However, given the inherent risks, we cannot guarantee absolute security and consequently we cannot ensure or warrant the security of any information you transmit to us; you do so at your own risk.

Contact / Data Protection Queries

If you have any queries or concerns about the processing of your information, email us at hello@vedara.me or write to SIMARA AI Limited, 128 City Road, London, England, EC1V 2NX, United Kingdom. We will address your concerns in accordance with applicable law. For general product support, contact support@vedara.me.