Last updated
This policy explains what UP N RUNNING collects when you use Trikaal, why, who else sees it, and how to make us delete it. It is written under India's Digital Personal Data Protection Act 2023 and the Information Technology (Reasonable Security Practices) Rules 2011.
The short version. We collect your name, email, phone and the date, time and place of your birth. We use them to calculate your chart and write your report. When you buy, we also tell our advertising platform that a sale happened, with your email and phone hashed so they cannot be read, purely to work out which advertisement paid for itself. Your birth details and your reading are never part of that and never leave us for advertising. We do not sell your data, and you can have everything deleted at /delete in about ten seconds.
UP N RUNNING is the data fiduciary for the personal data described here. Our contact details, and the name of the grievance officer you may escalate to, are at the end of this page and in section 9.
| Data | Why we need it | What happens without it |
|---|---|---|
| Date of birth | Fixes the position of every planet in your chart. | No chart can be produced. |
| Time of birth | Fixes your ascendant, which is the frame the whole reading hangs on. A few minutes can move it across a sign boundary. | No chart can be produced. |
| Place of birth | Converted to latitude, longitude and historical timezone. The ascendant is computed from local sidereal time, so location changes the chart. | No chart can be produced. |
| Name | Printed on the cover of your report and used to address you. | The report is produced without it. |
| Email address | Your login, the address we send the ready notice to, and the address we verify before producing a free report. | You cannot have an account, and there is nowhere to deliver to. |
| Phone number | Contacting you about your own order if email fails. When you buy, a one-way hash of it is also sent to our advertising platform as a match key, as described in section 4. | The order form will not submit. This is the one contact field we require. |
| Password | Stored only as a scrypt hash with a random salt. We cannot read it and cannot recover it for you. | No account. |
| IP address | For rate limiting and abuse prevention it is stored as a truncated one-way hash, never in the clear. Separately, when you place an order, the IP address of that request and your browser's user-agent are stored against the order as they are, and sent to our advertising platform to confirm which advertisement produced the sale. Section 4 sets that out in full, and both are deleted with the rest of your data at /delete. | We could not stop automated abuse of the free tier. |
| Your email address, for two follow-ups | After a free reading we write to you twice: once within the hour to ask whether it sounded like you, and once two days later to say what the paid back-cast covers that the free one did not. That is the whole sequence, there is no third, and every one of those emails carries a one-click unsubscribe that works immediately and needs no login. Opting out stops the selling and nothing else: you still get a link when a report you ordered is ready, and a password reset if you ask for one, because those are not marketing and switching them off would break what you paid for. | Nothing. The free reading, the reports and your account all work the same. |
| A review, if you write one | Only if you follow the link in the one email we send asking whether the reading described your past. We store the rating, whatever you wrote, and the name you asked to be credited by. Nothing is published unless you tick the box that says it may be, and a person reads it before it goes up. If you do not tick it, your answer stays internal and no name is stored at all. A published review appears on our site and can be seen by anyone, including search engines. You can have it taken down at any time by emailing us, and deleting your account removes it too. | Nothing. Everything about the product works the same either way, including your refund rights. |
| Payment details | Handled entirely by our payment gateway. Your card number never reaches our servers and we never see it. We receive only a payment reference and its status. | No purchase. |
We use measurement and advertising cookies. Besides the session cookie that keeps you logged in and the cookie that remembers which currency to show you, Trikaal loads the Meta pixel and Google Analytics. They set cookies on this site that let us tell which advertisement or search result brought you here and whether visitors go on to order. We use this to decide where to spend our advertising budget. It is not used to build a profile of you for anyone else, and we do not run advertisements on this site.
We also record, with your order, the campaign parameters in the link you arrived through, your IP address and your browser's user-agent string. Your IP address and user-agent are used to confirm which advertisement produced the order and are deleted with the rest of your data at /delete.
If you are in the United Kingdom none of those cookies is set until you accept them on the banner shown on your first visit, refusing is one tap and is remembered for as long as accepting is, and an order you place after refusing is never reported to an advertising platform, from your browser or from our server. You can change your answer by clearing the trikaal_cookies cookie in your browser.
We process your birth details on the basis of the consent you give by ticking the box on the order form. That consent is specific to producing your reading and is not consent to anything else.
You may withdraw it at any time by deleting your data at /delete. Withdrawal does not affect processing already carried out, and if a report has already been produced it will be deleted along with everything else.
These are the only external parties involved in producing a reading. Each receives the minimum needed for its own step.
| Processor | What they receive | Where |
|---|---|---|
| OpenRouter, routing to Z.ai (Zhipu AI) (GLM 5.3 Flash) | The computed chart facts: planetary positions, houses, dasha periods and dates, together with your name, your birth date, time and place, the coordinates of that place, any of the three optional answers you gave about your relationship, your work and children, and the language you chose for the reading. Your email address, phone number, password and payment details are never sent. | China |
| Supabase | Database and private file storage. Holds your account, your orders and your finished PDFs. | Region as configured for our project |
| Razorpay | Your name, email, phone, PIN code and the amount, to take payment from readers in India. They handle the card or UPI details; we never receive them. | India |
| Dodo Payments | Your name, email and the amount, to take payment from readers outside India, as merchant of record. They handle the card details; we never receive them. | As per their own policy |
| DB-IP | Nothing is sent to them. We look your IP address up in a copy of their country database on our own server, to show you prices in the right currency. IP geolocation by DB-IP. | Our server |
| Zoho Mail | Your email address and the contents of the notices we send you. | India |
| OpenStreetMap Nominatim | The birth place text you typed, to convert it into coordinates. Sent on its own, with nothing that identifies you attached. | European Union |
| Meta (Facebook, Instagram) | The page you are on, through the Meta pixel in your browser. When you complete an order we also tell Meta from our server that an order happened and what it was worth, so we can tell which advertisement paid for itself. If you answer Yes to two of the questions under your free reading, we tell Meta that one fact as well, so we can show our offer again to people who found their reading accurate; we never send which part you answered or what it said. Your email address, phone number and name are sent hashed, meaning converted into an irreversible string that Meta can compare against its own records but cannot read. Your IP address and browser user-agent are sent as they are. None of your birth details, and nothing from your reading, is ever sent. | United States |
| Google (Analytics, Ads) | That an order happened and what it was worth, with the anonymous identifier Google Analytics sets in your browser. Used to tell which advertisement or search result produced the order. None of your birth details, and nothing from your reading, is ever sent. | United States |
Cross-border transfer. The writing step runs on a model hosted outside India, currently by Z.ai (Zhipu AI) in China, so the data in the table above leaves the country. You are consenting to that transfer when you place an order. Your email address, phone number, password and payment details do not cross the border at any point.
What the model is given, and what it is not. The reading is written by an artificial-intelligence model. It is handed a computed file of astrological facts and asked to explain them; it is never asked to calculate anything, and it is never given your account. We do not send your data to any provider for the purpose of training a model, and we keep no copy of the request once your reading is written. What the provider itself logs or retains is governed by their own terms and by our account settings with them, not by this page, and we will tell you the current position if you write and ask.
We do not sell your data, rent it, or share it with data brokers or matchmaking services. The only thing we share with an advertising platform is the fact that an order was placed and what it was worth (and, with Meta only, whether you said your free reading describes you), with the hashed identifiers described in the table above, so that we can measure our own advertising. We do not send them your birth details, your chart, or any part of your reading, and we do not upload lists of our customers to them. We will disclose your data otherwise only where a law or a valid order of an Indian court or authority requires it.
| What | Kept for |
|---|---|
| Your account and your reports | As long as your account exists, so you can re-download at any time. Deleted immediately when you ask. |
| Accounts with no order and no login for 24 months | Deleted automatically. |
| Session, reset and review-link tokens | Until they expire, then removed. A review link stops working after a limited time so an old inbox does not hold a working credential indefinitely. |
| A review you wrote | Until you ask us to remove it, or until you delete your account, whichever comes first. Deleting your account deletes the review, published or not. |
| Payment and tax records | Kept by us and by our gateway for as long as Indian tax and accounting law requires, currently eight years. These records survive an erasure request, because we are not permitted to destroy them. They contain the transaction, not your birth details. |
No system is perfectly secure. If a breach occurs that is likely to affect you, we will notify you and the Data Protection Board of India as the Act requires.
Under the DPDP Act you may:
We answer erasure and access requests within 7 days. Deletion through /delete is immediate and does not wait for us.
Trikaal is not for anyone under 18 and we do not knowingly hold a child's data. If you have entered a child's birth details, including your own child's, write to us and we will delete them.
Required by section 13 of the DPDP Act and by rule 3(11) of the IT Rules 2011. Complaints about how your personal data has been handled go here first.
If you are not satisfied with our response you may complain to the Data Protection Board of India.
If we change this policy materially we will update the date at the top and email everyone with an account before the change takes effect.
Who is responsible, and our UK representative. UP N RUNNING is the controller of your personal data. We are established in India and offer this service to readers in the United Kingdom, so under Article 27 of the UK GDPR we have designated a representative in the United Kingdom whom you, or the Information Commissioner's Office, may contact instead of us about anything on this page: [UK representative not yet appointed].
Why we are allowed to process your data (the lawful basis, Article 6):
| What | Lawful basis |
|---|---|
| Your account, your order, taking payment, producing and delivering the reading you bought, and the notices about it | Performance of a contract with you, and the steps you ask us to take before entering it |
| Your date, time and place of birth, and the three optional answers, being sent to the artificial-intelligence model provider named in section 4 to write your reading | Your explicit consent, given on the order form. We treat this data as though it were special category data, because a reading of it touches on beliefs, and we ask for consent on that footing (Article 9(2)(a)) |
| Measurement and advertising cookies | Your consent, given on the cookie banner, which you may refuse |
| Marketing email about the full reading after a back-cast | Your consent; every such email carries an unsubscribe link and we stop at once |
| Security, rate limiting, fraud prevention and keeping records of what was sold | Our legitimate interests in running the service safely, and our legal obligations to keep tax records |
International transfers. We are in India, and India is not covered by a UK adequacy decision. Your data is transferred to us in India when you place an order, and onward to the processors in section 4 in the countries listed there. For the transfer of your birth details to the model provider we rely on your explicit consent to that specific transfer, given on the order form after being told where it goes (Article 49(1)(a)); for our other processors we use the UK International Data Transfer Addendum to the standard contractual clauses, or an equivalent safeguard, together with an assessment of the risks of the transfer. Write to us for a copy of the safeguard that applies.
Your rights. In addition to the rights in section 7 you have the right, under the UK GDPR, to restrict our processing, to object to processing based on our legitimate interests, to receive the data you gave us in a portable machine-readable form, to withdraw consent at any time without affecting what was done before, and to complain to the Information Commissioner's Office at ico.org.uk. We answer within one month. You are not subject to a decision based solely on automated processing that produces legal or similarly significant effects: the reading is generated by an automated system, and it is entertainment and reflection, not a decision about you.
How long we keep it is in section 5 and is the same for every reader.
The Australian Privacy Principles apply to our handling of your personal information. We collect it directly from you, for the purposes in section 2, and we do not use or disclose it for any other purpose without your consent or as the law requires.
Sensitive information. Your birth details on their own are not sensitive information, but an astrological reading of them may touch on belief, and we treat the combination as sensitive information: we collect it only with your consent, given on the order form, and only for producing your reading.
Overseas disclosure (APP 8). We are in India, so your information is held in India, and it is disclosed to the processors in section 4 in the countries listed there, including the artificial-intelligence model provider in China. Those recipients are not bound by the Australian Privacy Principles, and you may not be able to seek redress under the Privacy Act against them. By placing an order after reading this you consent to those disclosures on that basis.
Automated generation. The reading is written by an artificial-intelligence system from computed astronomical facts. It is not a decision about you and has no legal or similar effect on you; we say this here because the Privacy Act, as amended in 2024, asks us to be transparent about it.
Complaints. Write to us first (section 9). If you are not satisfied you may complain to the Office of the Australian Information Commissioner at oaic.gov.au.
The Personal Information Protection and Electronic Documents Act applies. We collect your personal information with your knowledge and consent, for the purposes in section 2, and we limit what we collect to what those purposes need. Your information is held in India and processed by the parties in section 4 in the countries listed there, and while it is outside Canada it is subject to the laws of those countries.
Commercial email. Under Canada's Anti-Spam Legislation we send commercial electronic messages only with your consent, each one identifies UP N RUNNING with a postal address and carries a working unsubscribe, and we honour an unsubscribe within ten business days. Notices about an order you placed are not commercial messages.
Access and complaints. You may ask what personal information we hold about you and challenge its accuracy; section 7 says how. If you are not satisfied with our response you may complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.
The reading these terms describe is a computed Vedic chart with dated windows. See what it covers, Rs 258 + GST.