Privacy policy.

What we collect

When you create an account or use RashiRocks, we collect:

• Account information — email, name, and (optionally) date of birth used to calculate your Rashi.
• Scan images — photographs you upload to identify gemstones via our AI scanner. Images are processed via Azure OpenAI and retained against your account for re-reference.
• Saved designs and favourites — the stones, designs, and articles you save.
• Usage analytics — anonymised page views and interaction events via Google Analytics 4 (cookie: _ga).

How we use it

• To provide and personalise gemstone recommendations.
• To improve scan accuracy and content over time.
• To send transactional emails (sign-in links, account notices).
• If you ask for it, a weekly stone-day email (see below). Nothing else is sent to that list.
• To meet legal obligations, including tax and accounting where applicable.

We do not sell your data to third parties. We do not show third-party ads.

Stone-day email

When you ask for the weekly stone-day note, we keep your email address, your Rashi and the date of the last note. You confirm from your inbox before anything is sent, and every email carries a one-click unsubscribe link. Emails are sent through Resend, our email provider.

After you unsubscribe we keep the address, marked unsubscribed, only so we never email it again by mistake. To have it deleted entirely, write to us at the address below.

On your device

Your Rashi, saved stones and designs, japa counts, wear check-ins and family stone circle are kept in your browser or the app on your device. If you sign in, saved stones and designs are also kept with your account so they follow you to other devices; the rest stays on the device. Family names and relations are never sent to us.

How we store it

Account data is stored in a dedicated Azure Database for PostgreSQL instance in Microsoft Azure's North Europe region. Scan images are stored in Azure Blob Storage with private access. All connections are TLS-encrypted.

We retain account data for as long as your account is active. Scan images are retained for 24 months unless you delete them sooner.

Your rights (India DPDP & GDPR principles)

You can, at any time:

• Access a copy of your account data via contact us.
• Correct inaccurate information from your profile settings.
• Delete your account and request erasure via delete my account. Requests are actioned within 30 days.
• Opt out of analytics by enabling Do Not Track in your browser or using a privacy extension.

Cookies

We use one analytics cookie (_ga) and a session cookie for authentication. We do not use third-party advertising cookies.

Contact

For privacy questions or to exercise any of the rights above, email [email protected] or use the contact form.

Changes

We'll update the "last updated" date above when this policy changes. Material changes will be announced via in-product notice for at least 7 days before taking effect.