Karmik Connect

Privacy Policy

Last updated: August 22, 2026

This Privacy Policy explains how Quantum Epoch Private Limited ("Quantum Epoch", "we", "us", or "our") collects, uses, shares, and protects information when you use Karmik Connect, our astrology guidance and consultation app and website.

1. Information We Collect

Account and sign-in information: mobile number, OTP verification status, name, email address, Google Sign-In profile details, Apple Sign-In details, user ID, session tokens, and account security information such as app PIN status.
Profile and astrology information: display name, gender, date of birth, birth time, birth place, birth timezone, birth latitude and longitude, city, country, saved birth profiles, preferences, profile photo, and consultation choices.
Consultation and communication data: consultation requests, chat messages, LiveKit session metadata, call status, call duration, participant details, support chat, feedback, reviews, chat transcripts, consultation summaries, and mandatory consultation recordings.
AI interaction data: prompts, questions, conversation context, astrology profile context, retrieved knowledge references, generated responses, and feedback used to provide guidance and assistant features.
Wallet and payment data: wallet balance, top-up orders, payment status, transaction references, debit history, invoices or tax records where applicable. Card, UPI, bank, or payment instrument details are handled by payment providers such as Razorpay and are not stored by us in full.
Device, notification, and technical data:app-generated device ID, Firebase Cloud Messaging token, APNs or PushKit VoIP token on iOS, platform, IP address, device type, app version, network status, logs, diagnostics, and crash or performance information.
Media and permission-based data: profile photos selected from camera or photo library, microphone audio during live consultations, camera video during video consultations, Bluetooth audio routing, and notification permission status.

2. How We Use Information

To create accounts, authenticate users, verify mobile numbers, maintain sessions, and protect accounts.
To provide horoscope, matching, daily reading, birth-profile, astrologer discovery, and spiritual content features.
To enable chat, audio, video, live consultation, support, review, feedback, wallet, billing, and order-history workflows.
To provide AI-assisted features, including guidance, support assistant responses, and consultation summaries.
To send transactional notifications, incoming consultation alerts, call-status updates, wallet updates, support messages, and service announcements.
To monitor reliability, prevent fraud or abuse, debug issues, improve safety, maintain records, and comply with legal obligations.

2.1 Legal grounds and mandatory processing

Under the EU GDPR and UK GDPR where they apply, we use the lawful basis appropriate to each purpose: steps requested before a contract and performance of our service agreement; compliance with legal obligations; and proportionate legitimate interests such as account security, fraud prevention, service safety and dispute handling. We document and balance legitimate interests against your rights. Optional analytics and marketing rely on a separate, withdrawable choice where consent is required. Consultation recording and transcription are mandatory for Karmik Connect consultations. The acknowledgement records that this required processing was clearly disclosed; it is not presented as freely withdrawable consent. If you do not acknowledge it, authenticated account and consultation features are unavailable.

2.2 Sampling, recommendations, and profiling

Sampling and discovery systems may compare language, price band, availability, consultation history, client selection, answer relevance, accuracy feedback, badges, ranking and introductory-offer performance. These signals affect which astrologers are shown or assigned. They do not provide medical, financial, legal, employment or credit decisions. Contact the privacy team to question an outcome or request human review where applicable.

2.3 Jurisdiction-specific privacy frameworks

This notice is intended to support the privacy frameworks that may apply to our processing, including India's Digital Personal Data Protection Act and Rules; the United Kingdom GDPR, Data Protection Act 2018, and Privacy and Electronic Communications Regulations; the European Union GDPR and applicable ePrivacy rules in the European Economic Area; and applicable United States federal and state privacy laws, including the California Consumer Privacy Act as amended and the Colorado Privacy Act. Based on supported pricing regions, we also account for potentially applicable privacy frameworks in the United Arab Emirates, Singapore, Australia, Canada, New Zealand, Malaysia, Saudi Arabia, Qatar, Oman, Kuwait, Bahrain, South Africa, Switzerland, Sweden, Norway, Denmark, Hong Kong, Thailand, the Philippines, Japan, and South Korea. A particular right or obligation applies only when its territorial scope and coverage thresholds are met; currency display alone does not determine residency or legal applicability.

3. Sharing of Information

We do not sell personal information. We may share information only as needed with:

Astrologers or service providers involved in your consultation.
Infrastructure, hosting, database, storage, notification, authentication, AI, analytics, logging, customer support, and communication providers.
Payment providers such as Razorpay for wallet top-ups, payment confirmation, fraud checks, refunds, and payment support.
Apple, Google, Firebase, APNs, FCM, LiveKit, and other platform providers where their SDKs or services are used to operate features.
Authorities, courts, regulators, or other parties where disclosure is required by law, safety, fraud prevention, or enforcement of our terms.

3.1 International processing

Some infrastructure and service providers may process data outside your country. Where the EU GDPR or UK GDPR applies, a restricted transfer must be covered by an applicable adequacy decision or regulations, appropriate contractual safeguards such as recognised standard clauses or the UK transfer mechanisms, or a lawful exception. We also use technical and organisational protections and provide information about applicable safeguards on request. Providers are limited to the data and purpose needed to perform their contracted service.

3.2 U.S. state privacy disclosures

Where applicable U.S. state privacy law applies, residents may request access, correction, deletion, or a portable copy and may opt out of sale, sharing, targeted advertising, or qualifying profiling. We do not sell personal information for money. Optional analytics, marketing, and targeted advertising remain off until enabled. We recognise supported Global Privacy Control signals and provide a persistent "Do not sell or share my personal information" control in Privacy Centre. We do not discriminate against a person for exercising an applicable privacy right. An authorised agent may submit a request where the law permits, subject to verification.

Categories collected, purposes, recipient categories, and retention practices are described in this notice at or before collection. If we deny an eligible state-law request, our response will explain any available appeal process. Contact connect@karmikconnect.com to submit or appeal a privacy request.

4. Retention and Account Deletion

We keep personal information only while it is needed to provide the service, protect users, resolve disputes, or meet legal, tax, payment, and accounting obligations. Karmik Connect client accounts and Karmik Connect Hiring accounts follow different deletion timelines.

4.1 Karmik Connect Client Accounts

You may request deletion from the authenticated app after recent verification. Active consultations, consultation requests or queue entries, pending payments, and active customer-care calls must be completed or ended first.
Access is blocked when the request is accepted. The account remains recoverable for exactly seven days. Completing the normal verified login for the same account during that period automatically cancels deletion and reactivates it; using a different or new number does not.
Routine deletion does not require administrator approval. If the request is not cancelled, processing becomes eligible after seven days. Contact details, profile information, saved birth details and charts, preferences, authentication credentials, registered devices, and other data used for the ordinary account are deleted, revoked, or irreversibly redacted.
Consultation recordings, transcripts, relevant chat and support evidence, restricted security evidence, and the minimum protected identity link needed to handle a later lawful complaint become eligible for automated deletion 365 days after account-deletion processing begins. They cannot be accessed through the deleted account.

4.2 Records That May Be Kept Longer

Issued GST invoices, including the name already printed on an invoice, are not rewritten. GST, wallet, payment, refund, chargeback, settlement, accounting, and dispute records are kept for the period required by law or the relevant proceeding.
A documented legal hold may preserve selected evidence beyond the normal deletion date where it is needed for a complaint, dispute, safety matter, investigation, or legal process. It does not reactivate the account or preserve unrelated profile data. The evidence becomes eligible for deletion only after its normal retention deadline has passed and the hold has expired or been formally released.
Limited deletion, security, fraud-prevention, and compliance records may remain in restricted form. Copies already contained in encrypted backups or historical storage versions expire under their applicable lifecycle and are not available through the deleted account.

See the Account Deletion & Retention Guide for the complete user-facing timeline, including the separate Hiring process.

5. Security

We use reasonable technical and organizational safeguards, including authenticated API access, transport security, access controls, and operational monitoring. No system is completely secure, and users should protect their devices, OTPs, account sessions, and app PINs.

6. Your Choices

You may update profile and birth-profile details in the app.
You may manage camera, microphone, photo, Bluetooth, and notification permissions in device settings.
You may delete secondary birth profiles and request or perform account deletion from the app or from our Karmik Connect account deletion page.
You may use our Privacy Centre to download your data, correct profile information, delete your account, withdraw optional choices, or submit a privacy grievance.

Subject to applicable law, rights may include notice, access, correction, portability, erasure, restriction, objection, withdrawal of optional consent, grievance redressal, complaint to a competent authority, and nomination under India's Digital Personal Data Protection framework. We verify requests to prevent disclosure to the wrong person. Certain payment, tax, security, dispute, fraud-prevention and consultation-evidence records cannot be erased until their applicable retention obligation ends.

UK residents may complain to the UK Information Commissioner's Office (ICO), and EEA residents may complain to their local data-protection authority. You may contact us first so we can investigate promptly, but doing so does not limit the right to contact a regulator. If UK GDPR requires us to appoint a UK representative, its verified contact details will be published here before we actively offer the relevant service in the UK.

7. Children

Karmik Connect accounts and consultations are available only to people aged 18 or older. We do not currently provide accounts or consultations for children.

8. Karmik Connect Hiring — Additional Privacy Practices

The Karmik Connect Hiring app is a separate application used by individuals applying to become astrologers on Karmik Connect. The following describes additional data we collect and process in the context of astrologer applications and onboarding.

8.1 Applicant Information We Collect

Identity and personal details: first name, last name, date of birth, gender, email address, mobile number, and profile photograph.
Professional background: years of experience, education and training details, work experience description, languages spoken, skills, and astrology topics or specialisations.
Location information: city, state, and country provided during the application process.
References: name, phone number, and email address of any reference provided by the applicant.
Referral information: referral code, if provided.
Application status and history: application ID, current status (draft, submitted, shortlisted, rejected), current round, completed steps, submission timestamp, shortlisting or rejection timestamps, rejection stage and reason, and porting date if the applicant is onboarded.

8.2 Identity, KYC, and Agreement Documents

We collect copies of government-issued identity documents including Aadhaar card (front and back), PAN card, bank proof or cancelled cheque, astrology certificates, a passport-size photograph, and signed agreements.
For agreement signing, we process the agreement version, selected signature method, signer role, signing status, timestamps, provider transaction identifiers, completed signed PDF, and related audit and error records. Aadhaar-based eSign is completed through an eSign provider; DSC and physical or manual signing use uploaded PDFs.
These documents are used for identity verification (KYC), fraud prevention, payment processing, tax compliance, and legal record-keeping. Documents are reviewed by authorised personnel and stored securely while required for the application and onboarding process.
When eligible Hiring account deletion is processed, applicant photos, KYC and application documents, certificates, and bank proof are deleted or irreversibly redacted unless a legal hold or required retention applies. Signed agreement versions and related signing evidence are retained for contract administration, audit, dispute handling, and applicable legal obligations.

8.3 Interview and Session Data

Interview sessions conducted in-app via LiveKit or Agora generate audio and video data, session metadata, participant identity, room name, session duration, and connection details.
Interview sessions may be recorded for evaluation, quality assurance, and compliance purposes. After Hiring account deletion, recordings are no longer available through the applicant account and become eligible for deletion 180 days after the 24-hour account-deletion deadline, unless a legal hold applies.
Interview schedule information, round type, status, and outcomes are stored as part of the application record.

8.4 How We Use Hiring Data

To process and evaluate astrologer applications, conduct background and identity verification, schedule and conduct interviews, and communicate decisions.
To fulfil KYC, tax, payment, and legal compliance obligations associated with onboarding independent service providers.
To send notifications related to application status, interview schedules, document requests, and onboarding steps.
To detect and prevent fraudulent applications, identity misuse, or policy violations.

8.5 Sharing of Hiring Data

We do not sell applicant data. We may share hiring-related information with:

Internal team members responsible for application review, interview coordination, document verification, and onboarding.
Secure cloud storage, database, and document management providers used to store application and document data.
Video and audio infrastructure providers (such as LiveKit or Agora) for interview sessions.
Payment providers and financial institutions for bank verification and payment setup associated with onboarding.
Aadhaar eSign and digital-signature providers used to initiate, authenticate, complete, and retrieve signed agreements.
Regulatory authorities, courts, or enforcement agencies where disclosure is required by law, fraud prevention, or legal process.

8.6 Hiring Account Deletion and Retention

An applicant may request self-service deletion from the authenticated Hiring app or verified deletion page only before any signed agreement is successfully submitted.
Once applicant signature evidence exists through a physical or manual upload, DSC, completed Aadhaar-based eSign, or an agreement uploaded as signed by both parties, self-service deletion is unavailable. This applies while the company signature is pending and across revised or superseded agreement versions. The signed PDFs, version history, and signing audit evidence are retained for agreement administration, disputes, compliance, and legal claims.
While an Aadhaar eSign attempt is active, its provider status must be refreshed or completed before deletion eligibility can be determined. A provider-confirmed failed attempt is not treated as a submitted signature.
For an eligible request, access is disabled when the request is accepted, and active hiring calls or interviews are ended or cancelled.
Processing becomes eligible after a mandatory 24-hour waiting period. Unlike the Karmik Connect client process, Hiring deletion cannot be cancelled by signing in again.
During those 24 hours, an authorised administrator may place a documented legal hold where preservation is required. The hold keeps the whole deletion paused while access remains disabled. After processing starts, a narrower documented hold may preserve retained recording evidence without restoring the account or profile. A hold must be formally released before the affected deletion or evidence purge can continue.
When processing begins, login and contact details, applicant photos, KYC and application documents, certificates, bank proof, and direct personal information in the application are deleted or irreversibly redacted.
A limited non-identifying application decision and eligibility record may remain for audit, fraud prevention, reapplication rules, or to prevent an already onboarded person from applying as a new candidate.
Interview and hiring-call recordings become eligible for deletion 180 days after the 24-hour deletion deadline. A legal hold or temporary processing failure may delay actual removal.
If an applicant has already been ported, deleting the Hiring account does not delete the separate Karmik Connect service-provider account or information already needed there. Backup copies expire under their applicable lifecycle.

Applicants may contact us to request access to, correction of, or deletion of their application data, subject to verification and applicable law. The self-service restriction for signed-agreement accounts does not waive rights available under applicable data protection law; some agreement and signing evidence may still be retained where needed for contract administration, disputes, compliance, or legal claims. The Account Deletion & Retention Guide explains both account types in one place. Eligible applicants can submit a verified request from the Hiring account deletion page.

9. Changes to This Policy

We may update this Privacy Policy as the product, features, legal requirements, or operational practices change. The updated policy will show a new "Last updated" date.

10. Contact

For privacy questions, requests, complaints, or data requests — including those related to the hiring app or astrologer onboarding — contact Quantum Epoch Private Limited at connect@karmikconnect.com.