Last updated: 28 September 2026
This Privacy Policy explains how Dharmika collects, uses, shares and protects personal data when you use the Dharmika website, web application and related services (the "Service"). It also explains your rights and how to exercise them.
We wrote this policy to be read, not skimmed past. If anything is unclear, write to us at support@dharmika.app.
Individual Entrepreneur Chapygin Grigorii Sergeevich
Sole proprietor registered in the Kyrgyz Republic
Registration No.: 002-2026-169-4323
Taxpayer Identification Number (PIN/INN): 20410198640076
Date of registration: 14 September 2026
Email: support@dharmika.app
("Dharmika", "we", "us").
| Category | Examples | Required? |
|---|---|---|
| Account data | Email address, name, password (stored hashed), language and interface settings. If you sign in with Google: your name, email address and profile picture provided by Google. | Yes, to create an account |
| Birth data (Jyotish) | Date, time and place of birth (and the coordinates and time zone we derive from the place) for you or for other people you add, e.g. for compatibility. | Yes, for Jyotish features |
| Ayurveda questionnaire answers | Answers to 50+ questions about your body type, digestion, sleep, energy, appetite, preferences and well-being, and the resulting Prakriti/Vikriti profile. These may be health data. | Only if you use Ayurveda features, with explicit consent |
| Vastu data | The layout you configure in the app, or images/scans of a floor plan you upload, and details such as room purposes and orientation. | Only if you use Vastu features |
| Floor-plan photos for recognition | A photo or scan of a floor plan you upload so that the AI feature can recognise the layout. Location metadata (such as GPS coordinates) is removed before the image is sent to the AI provider. | Only if you use photo recognition |
| Support communications | Messages you send us, including through forms on the website (feedback, reviews), and our replies. | Only if you contact us |
Data about other people. If you enter someone else's birth details or upload a plan of someone else's home, please make sure you have their permission. We use such data only to provide the Service to you.
Images. Please upload only the floor plan itself. Do not upload photos of people, documents or anything not needed for the analysis.
The legal bases listed below apply under the EU and UK General Data Protection Regulation (GDPR). Where other laws apply to you, we rely on the equivalent grounds under those laws.
| Purpose | Data | Legal basis |
|---|---|---|
| Create and manage your account; authenticate you | Account data | Performance of a contract (Art. 6(1)(b)) |
| Provide Jyotish calculations and reports | Birth data | Performance of a contract (Art. 6(1)(b)) |
| Provide Ayurveda assessments and suggestions | Questionnaire answers (health data) | Your explicit consent (Art. 9(2)(a) and Art. 6(1)(a)) |
| Provide Vastu analysis | Vastu data | Performance of a contract (Art. 6(1)(b)) |
| Recognise a floor plan from a photo you upload | Floor-plan photos | Performance of a contract (Art. 6(1)(b)) |
| Manage subscriptions, access to paid features, renewal reminders and service emails | Account data, subscription data from Paddle | Performance of a contract (Art. 6(1)(b)) |
| Answer support requests | Support communications | Performance of a contract / legitimate interests (Art. 6(1)(b), (f)) |
| Understand how the Service is used, to improve it | Analytics data | Your consent (Art. 6(1)(a)) |
| Keep the Service secure, prevent fraud and abuse, fix errors | Technical and log data | Legitimate interests (Art. 6(1)(f)) |
| Comply with legal, tax and accounting obligations; respond to lawful requests | Relevant records | Legal obligation (Art. 6(1)(c)) |
| Establish, exercise or defend legal claims | Relevant records | Legitimate interests (Art. 6(1)(f)) |
Marketing. We do not currently send marketing emails. If we introduce them, we will send them only with your consent, and every email will include an unsubscribe link.
No advertising, no profiling for advertising. We do not use your data for targeted advertising, and we do not use advertising cookies or pixels.
Automated processing. Your reports are generated automatically by software. This processing does not produce legal effects concerning you or similarly significantly affect you, within the meaning of Art. 22 GDPR.
Before you start the Ayurveda questionnaire, we ask you for your explicit consent to process your answers, which may reveal information about your health. You are free not to give consent; in that case, you will not be able to use the Ayurveda features, but the rest of the Service will work normally.
You can withdraw your consent at any time in Settings → Privacy or by emailing us. When you withdraw it, we delete your questionnaire answers and the resulting Ayurveda profile. Withdrawal does not affect the lawfulness of processing before withdrawal.
We never use health data for analytics, advertising or AI model training, and we do not send it to our AI provider.
We share personal data only with service providers that help us run the Service (processors), acting on our instructions and under data processing agreements, and with independent controllers where described below.
| Recipient | Role | What they receive | Location |
|---|---|---|---|
| Netcup (hosting and database) | Processor | All data stored in the Service | Germany (EU) |
| Paddle.com Market Limited and its affiliates | Independent controller (Merchant of Record) | Name, email, country, billing and payment data you provide at checkout, IP address | United Kingdom, with processing in other countries — see the Paddle Privacy Policy |
| Google LLC / Google Ireland Ltd. — Sign in with Google | Independent controller for sign-in | Authentication data | EU / United States |
| Google LLC / Google Ireland Ltd. — Google Analytics 4 (only with consent) | Processor | Pseudonymous usage data, device data, approximate location derived from IP address | EU / United States |
| DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd. and affiliates) — AI floor-plan recognition | Processor / service provider | Only the floor-plan image you upload for recognition, with location metadata removed. We do not send your name, email address, birth data or questionnaire answers. | People's Republic of China |
| GeoNames (place search) | Processor | The place name you type when searching for a place of birth or a location | Switzerland |
| Telegram (delivery of form messages to us) | Processor | Name, contact details and message text you send through forms on the website | United Arab Emirates, with servers in several countries |
| Email delivery provider: Resend | Processor | Email address, content of service emails | United States |
We may also disclose data:
We do not sell or rent your personal data, and we do not "share" it for cross-context behavioural advertising.
Our main servers are in the EU (Germany). Some providers process data in other countries:
You can request a copy of the relevant safeguards by writing to us.
| Data | Retention period |
|---|---|
| Account data, birth data, Vastu data, uploaded floor-plan images | While your account is active. After you delete your account, we delete these data within 30 days. Residual copies in encrypted backups are overwritten within a further 30 days. |
| Ayurveda questionnaire answers (health data) | Until you withdraw consent, delete them or delete your account; then within 30 days, as above |
| Support communications | 2 years after the conversation ends |
| Security and server logs | Up to 90 days, unless needed longer to investigate an incident |
| Google Analytics data | 14 months |
| Records of your consents | For as long as needed to demonstrate that consent was given |
| Records required by tax or accounting laws | For the period required by law |
Paddle keeps transaction records under its own retention policy as the Merchant of Record.
Depending on where you live, you have the right to:
How to exercise your rights:
Residents of US states with privacy laws, including California: you have the right to know what personal information we collect, to request its deletion or correction, and not to be discriminated against for exercising your rights. We do not sell or share personal information, and we do not use sensitive personal information for purposes other than providing the Service. To exercise your rights, email us.
Residents of the Kyrgyz Republic: we process your personal data in accordance with the Law of the Kyrgyz Republic "On Personal Information", and you have the rights provided by that law.
The Service is intended only for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
We protect your data with appropriate technical and organisational measures, including encryption in transit (HTTPS/TLS), encryption of backups, hashed passwords, access controls and least-privilege access, and regular updates. No system is 100% secure, but if a personal data breach is likely to result in a risk to your rights, we will notify you and the competent authorities as required by law.
See our Cookie Policy. Non-essential cookies (Google Analytics) are used only if you accept them in our cookie banner. You can change your choice at any time via the "Cookie settings" link in the website footer.
We may update this Privacy Policy. We will post the new version on this page with a new "Last updated" date. If changes are material, we will notify you by email or in the app before they take effect.
Individual Entrepreneur Chapygin Grigorii Sergeevich
Email: support@dharmika.app