About this policy
Draft for legal review. Version 1, 24 October 2026. This policy explains what the RitamSage app for Android and the website ritamsage.com collect, why, who handles it for us, how long it is kept, and how you can see or delete it. If we change it in a way that matters, we tell you in the app before the change takes effect.
Who we are
RitamSage is run by [Owner to fill: legal entity name], [Owner to fill: registered address]. Write to us at ritamsage@gmail.com. Grievance officer (India): [Owner to fill: grievance officer's name], ritamsage@gmail.com.
Who can use RitamSage
RitamSage is for adults. You confirm that you are 18 or older when you sign in, and we keep that confirmation and the version of its wording. The app is not designed for children.
How you sign in
You sign in with your Google account or with a one-time code sent to your email address. We do not use passwords or phone numbers. From Google we receive your email address, your name and a link to your profile picture; from an email code, only the address you proved by typing the code.
What we collect, and why
Each item below is collected only to make the app work for you, and each is deleted when you delete your account unless it says otherwise.
- Your date, time and place of birth, and the chart worked out from them: to make your readings, which are the app's purpose.
- The birth details of other people you add (for Match or a connection added by their details): to compare charts. Add someone only with their permission.
- Your saved town: to work out your day, sunrise and festival dates for where you live.
- Your approximate location, only when you tap "Use my location": to find the nearest town. The position itself is not stored; only the town you then save.
- The deity you choose, if you save it: to choose your music. This can reveal religious belief, so it is saved only when you tap Save beside its explanation, and you can remove it in Profile at any time.
- Your username, display name and an optional profile photo: so the people you connect with can find and recognise you.
- Your connections: the people you have connected with, and the groups you make. Two people who both accept see each other's chart, username and photo, but not each other's email, place or birth details.
- Your practices, points, knowledge cards, mantra rounds and spoken intentions (sankalpam): to show your days and progress.
- Questions you ask Sage and its answers: kept as "Your questions" so you can read them again. You can delete any of them. A question that sounds like distress is answered with a helpline and is not kept.
- Feedback and requests you send us ("Was this helpful?", a missing deity, a suggestion): to improve the app.
- Songs played: to list the songs most played by everyone. Each play is counted under a one-way code that deletes itself after 48 hours; the totals per song are linked to no one.
- A notification token, if you turn on new-song or new-video notes: to send them. It is not linked to your account.
- Your IP address, in each request: to run the service, keep it secure and apply fair-use limits. Limits count requests under a one-way code, not the address.
Sage and artificial intelligence
Sage is an AI guide, not a person. When you ask it a question, your question and the chart facts it needs (signs, houses, planets and periods) are sent to Anthropic, which runs the model that writes the answer. Your name, email, birth place and account are not sent. The written words on some screens (the parts of your day, the areas of life) are made the same way. Answers are checked against your chart before you see them. They are for reflection, not medical, legal, financial or other professional advice.
Crash reports and analytics
If the app crashes, a report goes to Sentry: the kind of error, where in the code it happened, and the app and Android versions, under a random install id. It does not hold your account, your words or a screenshot. Analytics are off until you say yes in the app. With your yes, Mixpanel receives a few kinds of event (the app opened, a practice done, a song played, a knowledge card kept, a question asked to Sage) under a random install id, not your account, a song's name or a question's words. You can turn analytics off at any time in Profile.
Kept only on your phone
Some things stay on your phone and are not sent to us: your reflections, your notification settings, recently played songs, songs saved for offline listening, and the home-screen widget. They are removed when you uninstall the app. Android does not back up the app's data to your Google account.
Who handles your data for us
These companies process data for us, only to provide the service, under their own data protection terms:
- Supabase: our database, sign-in and file storage, in its Mumbai, India region.
- Vercel: runs our server, in its Mumbai, India region, and keeps short request logs.
- Cloudflare: our domain, and the delivery of music and pictures.
- FreeAstroAPI: works out planetary positions. It receives a moment in time and a place's coordinates, not your name or email.
- Google: sign-in with Google, notifications (Firebase Cloud Messaging) and Google Play.
- Expo: passes notifications to your phone.
- Anthropic: the AI model behind Sage's answers (see above).
- Sentry: crash reports (see above).
- Resend: sends our emails (your sign-in code, the welcome, the confirmation of a deleted account).
- Mixpanel: analytics, only with your yes (see above).
Where your data goes
Your account data is stored in India. Some of the companies above process data in other countries, including the United States and the European Union. Where the law asks for it, they protect it with standard contractual terms.
How long we keep it
- Your account and what it holds: until you delete the account.
- One-way play and request codes: 48 hours.
- Database backups: replaced within 7 days.
- Request logs at our hosts: at most 30 days.
- Crash reports: at most 90 days.
- Analytics events: at most 2 years, and none at all without your yes.
Your choices and rights
You can see and change your birth details, place, deity and profile in the app; delete any Sage question; turn notifications and analytics on or off; and delete your whole account at any time (see Deleting your account). You may also ask us for a copy of your data or to correct it, by writing to ritamsage@gmail.com from your account's address. Depending on where you live (India's Digital Personal Data Protection Act, the EU's and UK's GDPR, Canada's PIPEDA and others), you may complain to your data protection authority.
Security
The app talks to our server only over encrypted connections. Each account's rows can be read only by that account. Songs are delivered from addresses that expire within half an hour, and the server checks every allowance itself.
No selling, no advertising
We do not sell your personal data, and we do not use it for advertising.
Changes to this policy
When this policy changes, we update the version and date above and tell you in the app.
Contact
Questions or requests: ritamsage@gmail.com.