Effective date: May 2026 · Vivara Intelligence Private Limited, Bengaluru, India
This policy explains what personal data we collect, why we collect it, how we protect it, and what rights you have over it. It is published under the Information Technology Act 2000, the IT (Reasonable Security Practices) Rules 2011, and the Digital Personal Data Protection Act 2023 (DPDP Act).
This summary is for convenience and is not a substitute for the full policy below.
When you use VivaraAI, we collect:
Google account (email and basic profile) — used to verify your identity via Google Sign-In. It is never shared with or visible to third parties.
Birth details (date, time, place of birth) — used exclusively to generate your astrological chart. This data is tied to your account and is not shared externally. Because Vedic astrological output may reveal information about your beliefs, we treat your birth details as sensitive personal data and apply additional safeguards (encryption at rest and in transit, role-based access controls, and separation between identifying data and analytics records).
Device information — device type and identifiers, used to secure your account and detect fraud.
Voice audio — when you speak to Enaya, your audio is processed in real-time. It is not stored beyond your active session unless a quality issue is flagged, in which case it may be retained for up to 7 days before deletion.
Usage data — anonymised signals about how you navigate the app, used only to improve our AI and fix issues.
We use your data to:
We do not sell your data. We do not share it with advertisers. We do not use it to build profiles for third-party targeting.
Our Services involve two distinct kinds of automated processing:
Deterministic computation. Your chart — planetary positions, divisional charts, dasha periods, and all astronomical calculations — is computed by deterministic astronomical software. The same inputs always produce the same output. This does not involve artificial intelligence.
AI inference. Artificial intelligence is used only in the Enaya chat feature, where you submit questions and receive AI-generated responses. AI inference runs under contractual terms that prohibit the model provider from using your data to train their foundation models and prohibit sharing your data with any third party. Your prompts and responses are not used to train AI models.
Neither process makes decisions that have legal or similarly significant effects on you; the content is informational and for entertainment. If you have a concern about any interpretation or AI response, write to us and we will review it.
Your birth data and conversations with Enaya are not seen by human astrologers or third-party advisors — they stay between you and our AI.
We work with a small number of trusted service providers, each bound by contractual data-protection terms to handle your data securely and only for the purposes we specify:
If required by a court order or law enforcement request, we will disclose data to the extent legally mandated.
We encrypt data in transit and at rest. Payments are handled by PCI-DSS compliant partners — we never see or store your card details. We also apply role-based access controls, network isolation, and audit logging. Despite these measures, no digital system is perfectly secure. We ask you to protect your own account by keeping your login credentials private.
Vivara Intelligence Private Limited acts as a Data Fiduciary under the DPDP Act.
Under Section 6 of the DPDP Act, we process your personal data primarily on the basis of your consent, which you provide at signup as a free, specific, informed, unconditional, and unambiguous indication of your agreement to the processing described in this policy. You may withdraw your consent at any time by deleting your account; the consequence of withdrawal is that we can no longer provide the Services, since they cannot function without processing your birth data.
We may also process your personal data for the limited "legitimate uses" permitted under Section 7 of the DPDP Act, such as compliance with a legal obligation, prevention and investigation of fraud, and responding to emergencies.
Under the DPDP Act and applicable Indian law, you have the right to:
To exercise any of these rights, go to Settings → Delete my account, or write to privacy@vivara-ai.com. We will respond within 30 days.
Under the DPDP Act, a "child" is any individual under the age of 18. VivaraAI is not for users under 18, and we do not knowingly collect data from anyone under 18. We do not perform behavioural monitoring or targeted advertising directed at children. If you believe a minor has used the app, contact us and we will delete their data promptly.
We keep your data for as long as your account is active. When you delete your account, your personal data is removed within 30 days. Some records (e.g. payment history held by Razorpay) may be retained longer where required by Indian financial law.
In the event of a personal data breach that affects your information, we will notify affected users and the relevant authorities as required by the DPDP Act and applicable Indian law, without undue delay. Our notice will describe the nature of the breach, the categories of data involved, the likely consequences, and the steps you can take to protect yourself.
We may update this policy periodically. Significant changes will be notified through the app. Continuing to use the app after a change constitutes acceptance.
For any privacy-related concerns, including requests to access, correct, or erase your data: Email: privacy@vivara-ai.com. Our Grievance Officer will acknowledge your complaint within 72 hours and resolve it within 30 working days.
This policy is governed by Indian law. Disputes are subject to arbitration in Bengaluru, Karnataka, under the Arbitration and Conciliation Act, 1996.