Privacy Policy

Last updated 29 October 2026

This policy explains, in plain language, what Sakha does with your information. Sakha deals with personal and sensitive topics, so we collect only what the features you use need.

Who we are

Sakha is a product of Tiny Sprouts Creations (tinysprout.in). Tiny Sprouts Creations decides how and why your data is processed. Contact: privacy@getsakha.com.

What we collect

• Account: your sign-in through Apple, Google, email or phone number. If you sign in with a phone number, we also ask for and confirm an email address. If Apple or Google shares your name when you sign in, we keep it as your name in Sakha until you give one yourself.
• Website purchases: your plan, subscription status, renewal dates, your billing name and address (and GSTIN if you give one) and your invoices. Card and UPI details are handled by Cashfree; we never see or store them.
• Profile: name, gender, date of birth, country and city, and your marital status (optional, used only to tailor optional features such as the birth chart).
• Consents: the choices you make about optional features.
• Chat messages: what you write to Sakha and its replies. Incognito chats are not stored.
• Memories: things Sakha remembers from your chats to be more helpful.
• Mood check-ins and questionnaire answers.
• Decisions: options, values and plans from the decision engine.
• Faith (optional, with your consent; you can give it during sign-up or later in the app).
• Traditions (optional, with your consent): the traditions you turn on may reveal something about your background. They are encrypted, and you can delete them by withdrawing your consent.
• Faith questions (Ask): kept like your chats and deleted automatically on the schedule you choose. They are not used for memories, and they are deleted when you withdraw your faith consent.
• Prepare answers and guides: your answers about yourself and your impressions of a partner, encrypted. They are sent to the AI provider when you make a guide, so it can write it. They are deleted with the partner, when you withdraw faith consent (faith-specific answers) or with your account. Only add a partner's details if they have given you permission.
• Birth details, birth chart and jataka photo (optional, with your consent).
• Daily health summaries (optional, with your consent).
• Health reports you upload (optional), such as a lab report photo or PDF: the file is sent to Anthropic to read it and is not stored by Sakha. We keep the summary until you delete it.
• Trusted contacts: their names, phone numbers and emails, and whether they accepted.
• Location, only when you allowed it for an alert. It is shared through a link that expires after 24 hours.
• Safety events: risk levels, not the text of your messages.
• Device push tokens and your phone’s time zone, so we can send notifications at the right time of day.
• Subscription status.
• App performance: how long the app takes to start and screens take to load, with device type, operating system and app version. It is not linked to your account.

If you choose to show your first name on your invite link, anyone with that link can see your first name. You can turn this off any time in Invite friends.

How we use it

• To run the app: write replies, remember context, show your mood, decisions and health dashboard.
• To run safety checks and, if you set it up, alert your trusted contacts as you chose.
• To sign you in, send notifications and reminders, and manage your subscription.
• To send a free Daily note at 8 every morning, your time, if notifications are on. It uses your first name and, unless you turn off “Include my horoscope”, the Moon sign from your birth chart or the sun sign from your date of birth. It is chosen from fixed texts, not written by AI, and nothing about it is sent to an AI provider. It is not sent while a safety check is active. You can turn it off in the app’s settings.
• To keep the service secure and fix problems.

Trusted contacts never see your conversations. We never use what you write, your conversations, your mood or health data, or your birth details for advertising.

Measuring our ads (Android app)

We advertise Sakha on Google. To learn which of our ads bring people to Sakha, and whether they go on to use it, the Android app uses Google Analytics for Firebase, a Google service.

• What it collects: an ID for this app installation, your device’s advertising ID, basic device details (model, Android version, app version and language), your approximate location (country and region, worked out by Google from your IP address, which Google does not keep), and a few app events: opening the app for the first time, signing up and how (Google, Apple, email or phone), finishing setup, sending your first message, and starting a free trial or subscription (with plan, price and currency). Nothing is sent while you chat in incognito mode.
• What it never collects: what you write, your conversations, your mood or health data, your birth details, your name, email address or phone number.
• Who receives it and why: Google, which processes it for us. We link it to our Google Ads account to count which ads lead to installs, sign-ups and subscriptions, and to show our ads to people more likely to find Sakha useful. We do not allow Google to use it to personalise the ads you see.
• Your choice: if you are in the EEA, the UK or Switzerland, it is off unless you turn it on. Elsewhere it is on by default. You can turn it on or off at any time in the app under Me → Privacy → Ads and usage measurement. You can also reset or delete your advertising ID in your Android settings.
• Where and how long: Google may process this data outside your country, including in the United States. Google Analytics keeps it for 2 months, then deletes it.
• iPhone app: does not include Google Analytics for Firebase.

Measuring our ads (website)

We also advertise Sakha on Facebook and Instagram. To learn which of those ads bring people to getsakha.com and on to Google Play, our home page and its language versions (such as getsakha.com/hi/) use the Meta Pixel, a Meta service.

• What it collects: that you opened one of those pages, whether you tapped a “Get it on Google Play” button and which one, the page address (including which of our ads you came from), your browser and device type, your IP address, and Meta’s cookies and ad-click ID. If you use Facebook or Instagram, Meta may link this to your account.
• What it never collects: anything you type on the website (such as your email for the waitlist), anything from the Sakha app, your conversations or your account. It does not run on sign-in, account, payment, invite or legal pages.
• Who receives it and why: Meta, which reports to us which ads lead to visits and Google Play taps, and uses it to show our ads to people more likely to find Sakha useful. Meta also uses this data under its own privacy policy.
• Your choice: it never runs if you are in the EEA, the UK or Switzerland, or if your browser sends a Global Privacy Control or Do Not Track signal. You can also block it with your browser’s tracker blocking, and manage ads from Meta in your Facebook or Instagram ad settings.
• Where and how long: Meta may process this data outside your country, including in the United States. Meta’s cookie on getsakha.com expires after 90 days.

Our Google ads land on two pages, getsakha.com/kundli/ and getsakha.com/chart/. Those two pages, and only those, use the Google tag, a Google service, to count which of our Google ads lead to a “Get it on Google Play” tap or an iPhone waitlist sign-up. It reads the page address (including which ad you came from), your browser and device type, your IP address, and Google’s ad-click ID and cookies. It never receives what you type, such as your waitlist email. We turn ad personalisation off, so Google does not use it to personalise the ads you see. It never runs if you are in the EEA, the UK or Switzerland, or if your browser sends a Global Privacy Control or Do Not Track signal. Google’s cookie on getsakha.com expires after 90 days, and Google may process this data outside your country, including in the United States.

Service providers

We share data with these providers only so they can do the job described:

• Anthropic: processes messages to write replies and run safety checks, and reads your Prepare answers to write a conversation guide (Sakha uses Claude).
• Cloudflare: hosting and storage.
• Meta: delivers WhatsApp messages to trusted contacts, and sign-in codes to your phone number on WhatsApp.
• Email delivery provider: sign-in codes and email alerts. If you choose to, we email you when a reading is ready, and once a month when your month-ahead reading is available. These emails never include your reading, birth details or anyone else's details. You can turn them off in the app (Me → Privacy) or with the link in any email.
• Apple and Google: sign-in, in-app purchases, and health data stored on your device (Apple Health, Health Connect).
• RevenueCat: subscription status for App Store and Google Play purchases.
• Cashfree Payments India Pvt. Ltd.: processes payments for subscriptions bought on getsakha.com (your name, email, phone number and payment details). Sakha never sees full card numbers.
• Cloudflare Turnstile: checks that website sign-ins come from a person, not a bot.
• Purelymail (USA): hosts our @getsakha.com email. If you email us, your message and address are stored there.
• Expo (650 Industries, Inc.): push notifications, and measuring app performance with EAS Observe: how long the app takes to start and screens take to load, together with device type, operating system and app version. This performance data is not linked to your account.
• Google (Google Analytics for Firebase): measures which of our ads bring people to the Android app, as described in “Measuring our ads” above.
• Meta (Meta Pixel): measures which of our Facebook and Instagram ads bring people to getsakha.com, as described in “Measuring our ads (website)” above.
• Google (Google tag): counts which of our Google ads lead to Google Play taps and iPhone waitlist sign-ups on getsakha.com/kundli/ and getsakha.com/chart/.
• Open-Meteo: weather for water reminders, based on your city.

Where data is stored

If you are in the EEA, the UK or Switzerland, your personal data is stored in Cloudflare’s EU jurisdiction. Some providers above may process data in other countries, so data can be transferred internationally. Where required, we rely on appropriate safeguards for those transfers.

Security

Data is encrypted in transit and at rest, and each user has their own encryption keys. You can turn on app lock on your device. No system is perfectly secure, but we work to protect your information.

Launch waitlist

If you join the waitlist on our website:

• What we collect: your email address, your browser language, the country your request came from (read from the request, not your precise location), the kind of device you signed up on (Android phone, iPhone, iPad or computer), read from your browser, and the time you signed up. We also keep how you reached the page: the campaign tags in the link you followed (for example utm_source) and the website that referred you. If you came from one of our ads, we may give that ad platform the click reference from the link (never your email or other details) so we can count how many sign-ups our ads bring. We never do this for sign-ups from the EU, EEA, UK or Switzerland.
• Why: to email you when Sakha launches (the email has links that note whether you opened Google Play or asked for the App Store email, and a link to leave the waitlist), and to count how many sign-ups our ads bring.
• Where: stored on Cloudflare, in Tiny Sprouts Creations’ account.
• How long: until 6 months after launch, then deleted.
• Removal: email privacy@getsakha.com and we will remove you.
• Sharing: we do not share or sell waitlist emails.

Retention

• Chats are kept until you delete them. You can optionally set them to auto-delete after 30, 90 or 365 days.
• “Delete everything” in the app removes your data immediately. Backups age out within 30 days.
• Export links expire after 24 hours.
• Ads measurement data in Google Analytics for Firebase is deleted by Google after 2 months.
• Meta Pixel data from our website is kept by Meta under its own policy; its cookie on getsakha.com expires after 90 days.
• Invoices for website purchases, with the billing name and address on them, are kept for 8 years because tax law requires it. They are not deleted when you delete your account; everything else is.
• To prevent repeated free trials we keep a one-way, irreversible code derived from your email or phone after deletion.
• When you ask for a sign-in code on WhatsApp, we keep a record of the request (your phone number, when, and whether sign-in finished) for 90 days to sort out sign-in problems and stop misuse. Deleting your account deletes it straight away.

Your rights

You can access and export your data, correct it, delete it, and withdraw consent at any time. Withdrawing consent deletes the data that depended on it. Most of this is available in the app; otherwise email us. You can also complain to your data protection authority. Depending on where you live, your rights come from laws such as the GDPR, the UK GDPR and India’s Digital Personal Data Protection (DPDP) Act.

Children

Sakha is for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a child has used Sakha, tell us and we will delete the data.

No ads, no selling

Sakha shows no ads inside the app and never sells your data. The Android app includes one third-party analytics tool, Google Analytics for Firebase, which we use only to measure our own ads, as described in “Measuring our ads” above. The iPhone app includes no third-party analytics. On the website, only the home page and its language versions use the Meta Pixel, to measure our own Facebook and Instagram ads, as described in “Measuring our ads (website)” above.

Changes

We may update this policy. We will change the date above and, for significant changes, tell you in the app.

Contact

Questions or requests: privacy@getsakha.com.