Last updated 28 August 2026
This policy explains what UP N RUNNING collects when you use Trikaal, why, who else sees it, and how to make us delete it. It is written under India's Digital Personal Data Protection Act 2023 and the Information Technology (Reasonable Security Practices) Rules 2011.
The short version. We collect your name, email, phone and the date, time and place of your birth. We use them to calculate your chart and write your report, and for nothing else. We do not sell them, we do not use them for advertising, and you can have everything deleted at /delete in about ten seconds.
UP N RUNNING is the data fiduciary for the personal data described here. Our contact details, and the name of the grievance officer you may escalate to, are at the end of this page and in section 9.
| Data | Why we need it | What happens without it |
|---|---|---|
| Date of birth | Fixes the position of every planet in your chart. | No chart can be produced. |
| Time of birth | Fixes your ascendant, which is the frame the whole reading hangs on. A few minutes can move it across a sign boundary. | No chart can be produced. |
| Place of birth | Converted to latitude, longitude and historical timezone. The ascendant is computed from local sidereal time, so location changes the chart. | No chart can be produced. |
| Name | Printed on the cover of your report and used to address you. | The report is produced without it. |
| Email address | Your login, the address we send the ready notice to, and the address we verify before producing a free report. | You cannot have an account, and there is nowhere to deliver to. |
| Phone number | Contacting you about your own order if email fails. | We rely on email alone. |
| Password | Stored only as a scrypt hash with a random salt. We cannot read it and cannot recover it for you. | No account. |
| IP address | Stored as a truncated one-way hash, never in the clear, and used only to count requests for rate limiting and abuse prevention. | We could not stop automated abuse of the free tier. |
| Payment details | Handled entirely by our payment gateway. Your card number never reaches our servers and we never see it. We receive only a payment reference and its status. | No purchase. |
We do not use tracking or advertising cookies. The only cookie Trikaal sets is the session cookie that keeps you logged in. It is HTTP-only, expires after 90 days, and does nothing else.
We process your birth details on the basis of the consent you give by ticking the box on the order form. That consent is specific to producing your reading and is not consent to anything else.
You may withdraw it at any time by deleting your data at /delete. Withdrawal does not affect processing already carried out, and if a report has already been produced it will be deleted along with everything else.
These are the only external parties involved in producing a reading. Each receives the minimum needed for its own step.
| Processor | What they receive | Where |
|---|---|---|
| OpenRouter, routing to Anthropic | The computed chart facts: planetary positions, houses, dasha periods, dates. Sent with your first name where the report addresses you. Your email address, phone number and password are never sent. | United States |
| Supabase | Database and private file storage. Holds your account, your orders and your finished PDFs. | Region as configured for our project |
| Dodo Payments | Your name, email and the amount, to take payment. They handle the card details; we never receive them. | As per their own policy |
| Zoho Mail | Your email address and the contents of the notices we send you. | India |
| OpenStreetMap Nominatim | The birth place text you typed, to convert it into coordinates. Sent on its own, with nothing that identifies you attached. | European Union |
Cross-border transfer. The writing step runs on a model hosted outside India, so your computed chart facts leave the country. You are consenting to that transfer when you place an order. What crosses the border is astronomical data and your first name; your contact details and password do not.
We do not sell your data, rent it, or share it with data brokers, advertisers or matchmaking services. We will disclose it only where a law or a valid order of an Indian court or authority requires it.
| What | Kept for |
|---|---|
| Your account and your reports | As long as your account exists, so you can re-download at any time. Deleted immediately when you ask. |
| Accounts with no order and no login for 24 months | Deleted automatically. |
| Session and reset tokens | Until they expire, then removed. |
| Payment and tax records | Kept by us and by our gateway for as long as Indian tax and accounting law requires, currently eight years. These records survive an erasure request, because we are not permitted to destroy them. They contain the transaction, not your birth details. |
No system is perfectly secure. If a breach occurs that is likely to affect you, we will notify you and the Data Protection Board of India as the Act requires.
Under the DPDP Act you may:
We answer erasure and access requests within 7 days. Deletion through /delete is immediate and does not wait for us.
Trikaal is not for anyone under 18 and we do not knowingly hold a child's data. If you have entered a child's birth details, including your own child's, write to us and we will delete them.
Required by section 13 of the DPDP Act and by rule 3(11) of the IT Rules 2011. Complaints about how your personal data has been handled go here first.
If you are not satisfied with our response you may complain to the Data Protection Board of India.
If we change this policy materially we will update the date at the top and email everyone with an account before the change takes effect.