Last updated: October 2026
OccultSanctum ("we," "us," "our") operates the platform at myday.vedajyoti.org and associated mobile applications. We are based in Perth, Western Australia, Australia. For any privacy-related inquiries, contact us at [email protected].
| Data | Source | Purpose |
|---|---|---|
| Name | Google / Apple sign-in | Account identification, personalisation |
| Email address | Google / Apple sign-in | Account identification, transactional emails, support |
| Profile photo URL | Google sign-in (optional) | Avatar display in the app |
| Google ID / Apple User ID | OAuth providers | Unique account linking |
| Data | Purpose | Required? |
|---|---|---|
| Date of birth | Astrological chart calculation, numerology | Required for most services |
| Time of birth (with seconds) | Precise chart calculation, BTR | Optional but recommended |
| Place of birth (coordinates, timezone) | Astrological chart calculation | Optional but recommended |
| Full name | Numerology calculations | Required for numerology services |
| Data | Purpose | Retention |
|---|---|---|
| Chat conversations with AI oracles | Service delivery, context continuity | Stored until you delete or request deletion |
| Generated charts and reports | Your reference, chart comparison | Stored until you delete or request deletion |
| BTR results and saved charts | Birth time analysis reference | Stored until you delete or request deletion |
| Uploaded reading images β palm photos (Hasta), face photos (Sutra), floor/site plans (Vastu Analyser) | AI-powered palm, face and VΔstu readings; letting you re-open a reading and ask follow-up questions | Stored with our image-storage provider to power your reading; retained until you delete the conversation or your account, or request deletion (see Sections 7 and 15) |
| Credit balance and transaction history | Billing, audit, dispute resolution | Retained for legal/accounting requirements |
| Widget preferences, profile settings | Dashboard personalisation | Stored with your account |
When you access the Platform, we may automatically collect:
The Palmistry Studio is a measuring tool for palmists on the Platform. A palmist uses it to photograph a client's hands at a sitting, or sends the client a link from which the client takes the photos themselves. The client does not need an account of their own; this section describes what is kept about them.
Consent comes first. No photo can be kept for a reading until the client's consent to their reading is recorded. The studio shows the client its consent text and asks them to tick, themselves, each choice they agree to; none is ticked for them. At a sitting this is done on the palmist's screen before the reading starts; on a link it is the link's first page, before the first photo.
| Choice | What it allows | Required? |
|---|---|---|
| Their reading | Keeping the photos and measuring them, so that the palmist can read the client's hands and prepare their report | Needed to take part |
| Improving the studio | OccultSanctum using the photos and measurements to test and improve the studio's measuring software, without the client's name | The client's choice |
| Photos in their report | Showing the photos in the client's report. The studio does not yet produce reports; the choice is recorded for when it does | The client's choice |
Each choice is recorded with the version of the consent text the client saw, the time it was given and whether it was given at the sitting or on the link, and every later change is recorded in the same way.
A reading taken under an earlier consent text keeps that text's record, and is used for the client's reading alone until the client is asked again under the current text. The earliest readings, from before the studio had this consent screen, kept instead the palmist's confirmation that the client had agreed to their photos being taken and kept for the palmist's analysis only.
What is kept for each sitting (a "reading"):
| Data | Where it is kept |
|---|---|
| Photos of both palms and of each fingertip | Our image-storage provider, Bytescale (upload.io), as private files |
| The measurements made from the photos: from the palm photos, the hand's keypoints, the lines traced and the shape of the fingers; from each fingertip photo, its ridge pattern (the loop, whorl or arch of its fingerprint) and the ridge flow it was read from | Our database, hosted by Render |
| The client's email address, if the palmist gives it to send them their link | Our database |
| A record of each email that sends the client their link: the address, when it was sent, and what our email service reports of it, such as whether it arrived, was opened or its link was followed; not the email's content | Our email log, kept for 180 days after the email was sent |
| The name or reference the palmist gives the reading | Our database |
| The palmist's notes on the reading, and any marks they draw on a palm photo | Our database |
| The client's consent choices and their record | Our database |
In the studio, a reading and everything kept with it opens only for the palmist who took it; another palmist cannot open it.
The client's link. A palmist may send the client a link in place of photographing their hands at a sitting. It opens a page, with no account needed, that shows the client the consent text first and then takes them through the twelve photos, one at a time. Each photo is read on our server when it is taken and kept only if it passes, as at a sitting. The page tells the client which photos are in and, of a photo not kept, what a new one needs (for example, more light); it shows them no reading. The link works until all twelve photos are in, or until the palmist closes it or replaces it with a new one. We do not keep the link itself, only a one-way digest of it, so it cannot be read back from what we store. If the palmist gives the client's email address, it is kept with the reading and the link is emailed to the client through our email provider, Resend. When all twelve photos are in, the palmist who sent the link is emailed; that email does not name the client.
Measured on our server. The photos are measured on our server, hosted by Render, by the studio's own measuring software, which includes a hand-finding model (MediaPipe) that runs on the server itself. The photos are not sent to any AI service, and no part of the studio calls one. Each photo is checked and measured when it is added, and kept only if it passes; a fingertip's ridge pattern (the loop, whorl or arch of its fingerprint) is read from its photo then, and kept with it.
The marks file. Where the client has agreed, under the current consent text, to improving the studio, the palmist can download a file of the marks they drew and the measurements of the same photos, for testing the measuring software. It holds no photo and no client name. A file already downloaded is not deleted with the reading.
How long it is kept. Until the reading is deleted, or until the client withdraws their consent to it, whichever comes first. When a reading is deleted, it is hidden at once and its notes, marks, link and the client's email address are deleted; each photo is removed from the image-storage provider, and its measurements with it; then the reading's name and consent record are deleted. A photo the provider could not remove at once is removed on a later attempt, made when the palmist next opens their list of readings, and the rest of the reading goes then. A palmist's readings are deleted with the palmist's account (Section 15). A record of an email that sent the client their link is kept in our email log for 180 days after it was sent, even if the reading is deleted sooner.
The client's rights. A client can withdraw any of their choices at any time, as easily as they gave it, by asking their palmist or by writing to [email protected]. Withdrawing consent to their reading deletes the reading with its photos; withdrawing either of the other two stops that use. Withdrawing does not undo what was done before. A client may also exercise the rights in Section 8. A complaint goes first to OccultSanctum at [email protected]; if that does not settle it, a client may complain in Australia to the Office of the Australian Information Commissioner, and in India to the Data Protection Board of India.
Trying the camera. The studio's capture lab, which measures how the live camera works on a palmist's phone, keeps nothing and sends nothing: the camera's picture, and any photo chosen to compare with it, stay on the page and are gone when the page closes. The report it offers to copy holds numbers and readings only, never a photo or a keypoint.
Some data you provide may be considered sensitive or special category data under certain privacy laws. This includes:
By using the Platform and voluntarily providing this information, you give explicit consent to its processing for the stated purposes. You may withdraw this consent at any time by ceasing to use the Platform and requesting deletion of your data. A Palmistry Studio client gives their consent on the studio's own consent screen, or on the first page of their palmist's link, choice by choice, and withdraws it as Section 2.5 describes.
We use your personal information exclusively for the following purposes:
We do not use your data for:
We share limited data with the following third-party service providers, solely for the purposes stated:
| Service | Provider | Data Shared | Purpose |
|---|---|---|---|
| Authentication | Google, Apple | OAuth tokens | Account sign-in |
| AI Processing | Anthropic, Google | Chat messages, chart context sent as API prompts | Generating AI responses |
| Payments | Stripe, Razorpay, Apple, Google | Payment details (handled by processor) | Credit purchases |
| Geocoding | Google Maps / Places | Place search queries | Birth place coordinates |
| Resend | Email address, transactional content | Sending receipts, notifications | |
| Hosting | Render | All Platform data (hosted infrastructure) | Running the Platform |
| Vector Search | Pinecone | Anonymised knowledge base embeddings | RAG for AI oracle responses |
| Image Storage | Bytescale (upload.io) | Images you upload for palm, face and VΔstu readings, and the photos of a client's hands in the Palmistry Studio, taken by their palmist or by the client from their palmist's link, held as private files | Storing your uploaded image so your reading persists and can be continued across sessions and devices; keeping a studio reading's photos with it (Section 2.5) |
Each third-party provider operates under their own privacy policy. We encourage you to review their policies. We do not control how these providers handle data once transmitted to them.
When you interact with our AI oracle chatbots, your messages and relevant chart/numerology context are sent to Anthropic (Claude) or Google (Gemini) via their APIs for processing. These providers:
We recommend reviewing Anthropic's Privacy Policy and Google's Privacy Policy for details.
Your data is stored on servers managed by Render, Inc. Infrastructure is hosted in data centres that maintain industry-standard physical and digital security measures. Images you upload for palm, face and VΔstu readings are stored separately with our image-storage provider, Bytescale (upload.io), as private files that are not publicly accessible; they are served back only to you, over an authenticated, access-controlled connection. A Palmistry Studio reading's photos are stored the same way and served only to the palmist who took them.
We implement the following security measures to protect your data:
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users by email within 72 hours of becoming aware of the breach and, where required, notify the relevant data protection authority.
Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law (e.g., payment records for tax compliance).
Depending on your jurisdiction, you may have the following rights regarding your personal data:
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
We comply with the Australian Privacy Principles (APPs) as set out in the Privacy Act 1988 (Cth). Where there is any inconsistency between these policies and the APPs, the APPs prevail. Australian residents can contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au if they believe their privacy has been breached.
If you are accessing the Platform from outside Australia, your data will be transferred to and processed in Australia (or wherever our hosting provider maintains servers). By using the Platform, you consent to this transfer. We take reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.
For users in the European Economic Area (EEA), United Kingdom, or other jurisdictions with data protection laws: your data is transferred on the basis of your explicit consent provided at sign-up. You may withdraw this consent at any time by ceasing use and requesting account deletion.
For users in India: we comply with applicable provisions of the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDPA) to the extent applicable. Your data is processed with your consent and you have the right to withdraw consent and request deletion.
The Platform is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such data, we will delete it promptly. Users aged 13β17 may only use the Platform under parental supervision. If you believe a child under 13 has provided us with personal data, please contact us immediately.
We use only essential session cookies to maintain your authenticated session. These cookies are strictly necessary for the Platform to function and cannot be opted out of while using the service.
We do not use:
If you opt in to push notifications, we may send you daily astrological insights or service updates. You can disable push notifications at any time through your device settings or browser permissions. We do not use push notification tokens for tracking or profiling purposes.
We send the following types of email communications:
We do not send marketing or promotional emails. You may unsubscribe from non-essential emails at any time using the unsubscribe link provided in each email or by visiting your account settings.
Emails are sent through Resend, a third-party email delivery service. We track delivery status (delivered, bounced, opened) for reliability purposes. Hard bounces result in automatic unsubscription to maintain list hygiene.
You may request deletion of your account and all associated personal data at any time by contacting [email protected]. Upon receiving your request:
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will post the updated policy on this page with the revised "Last updated" date. For material changes, we will make reasonable efforts to notify you via email or a prominent notice on the Platform. Your continued use of the Platform after any changes constitutes your acceptance of the updated policy.
For any questions, concerns, or requests relating to this Privacy Policy or your personal data, contact us at:
OccultSanctum β Privacy Enquiries
Email: [email protected]
Website: myday.vedajyoti.org
Location: Perth, Western Australia, Australia
For complaints that are not resolved to your satisfaction, Australian residents may contact the OAIC at www.oaic.gov.au/privacy/privacy-complaints.