Kaalya — privacy notice
Last updated 7 November 2026
Kaalya is made by Akash Sharma, in India. "We" in this notice means him. You can reach us at privacy@kaalya.app. This notice is at https://kaalya.app/privacy, and in the app beside the sign-in choices.
The short version
- If you never sign in, nothing you enter leaves your phone, except your email address if you ask us to send you a code.
- If you sign in, we keep a copy of your record (your birth details, everything you add, and your chart) on a server in Mumbai, so you can get it back on a new phone. That is the only reason.
- You can delete everything from inside the app, at any time.
Signing in, or asking for a code, is how you agree to us keeping what is listed under "If you ask for a code by email" and "If you sign in", for the reason given beside each item. Nothing else in this notice depends on it.
What we collect, and why
If you use Kaalya without signing in. Your birth date, time and place, and anything else you enter stay on your phone, encrypted. We receive none of it. Kaalya does not read your phone's location; places are ones you type.
If you ask for a code by email. We send your address to our email service to deliver the code, and our server keeps the address even if you never use the code. To have it deleted, write to us.
If you sign in (with Apple, Google or your email address):
| What | Why |
|---|---|
| Your email address | To sign you in. With email sign-in, to send you a six-digit code. We use it for nothing else, except to tell you about your account, a change to this notice, or a data breach. No newsletters, no marketing. |
| A copy of your record: your birth date, time and place; the life events you add (their date, their kind, such as work, family, health or loss, and your words); your notes; the questions you ask Kaalya and its answers; your saved searches; which findings you kept or set aside; what you tell Kaalya about the daily practice Today suggests (the practice, the day, whether you tried it or set it aside, and your replies to its check-ins); the place you choose for Today, if you choose one; your language, region, display and notification settings; your choice about counting how the app is used (this version of Kaalya counts nothing); and the email address and sign-in method on your account | So your chart, and everything you added to it, can come back on another phone. |
| Your answers so far, if you sign in before finishing the questions | So you can continue on another phone. This copy is deleted when your record is saved, or at the latest with your account. |
| When you sign in, and from where: the time, your IP address, and what your phone's network software reports (its system version, and the app's build or the phone's model), for each signed-in session | To keep you signed in safely, with a token that keeps each session going. Deleted with your account. |
| If you use Apple: a token Apple gives us | So that deleting your account also removes Kaalya from your Apple ID. |
The server copy is not end-to-end encrypted: Supabase and we can read it.
Kaalya does not ask you for your name. Apple and Google do give us an account number for you, and Google also gives us the name on your Google account and a link to your profile photo (the photo stays with Google; for a work or school account we also get its domain). We keep these with your account until it is deleted. The app never shows or reads them, and we use them for nothing. On an iPhone, Kaalya asks Apple for your email address only, so Apple sends no name. On Android, Apple's sign-in page asks to share your name too; if you share it, we keep it in the same way. If you sign in with Apple and choose to hide your email, we only ever see Apple's relay address.
The app has a switch for counting how it is used. In this version it counts nothing and sends nothing, whatever the switch says. If a later version does count, it will say so here and ask you first.
We do not sell your information, show you ads, or share it with anyone except the services named below, who handle it only on our behalf.
Where it is kept
| Service | What it holds | Where | When |
|---|---|---|---|
| Supabase, Inc. | Your account, and the copy of your record | Mumbai, India. Its system logs may be held outside India. | Only if you sign in, or ask for a code |
| Resend, Inc. | Your email address, to deliver the sign-in code | United States, and possibly other countries where Resend operates | Only if you ask for a code by email |
| Cloudflare, Inc. | Serves this website, and keeps ordinary web logs of visits to it. Passes on mail you send to privacy@kaalya.app without keeping it, and logs the sender's address | Its network, worldwide | When you open this website, or write to us |
| Microsoft Corporation (Outlook.com) | Mail you send to privacy@kaalya.app | Usually India or the United States, and possibly other countries where Microsoft operates | Only if you write to us |
How long we keep it
- Your account and record: until you delete them, or delete your account.
- Sign-in emails: Resend keeps a log of each code email, including your address, for 30 days.
- Server logs: Supabase keeps its request logs and its sign-in logs for one day (the sign-in logs carry your address and IP address). It makes no daily backups of our database. If our server sits unused for a week, Supabase pauses it and keeps a copy of the database for up to a year so it can be restarted.
How to delete it
In the app: You → Delete everything. This deletes your record from your phone and, if you signed in, deletes your account and the server copy of your record. The app then tells you what was removed. If the server could not be reached, it says so. Sign in again and repeat it, or write to privacy@kaalya.app.
By email: write to privacy@kaalya.app from the address you signed in with, and we will delete your account within 7 days. If you hid your email with Apple, write from any address and tell us the relay address you signed in with; it is listed in your Apple ID settings. If you asked for a code and never used it, write to us and we will delete the address.
An Apple sign-in on Android that you started and did not finish can leave a short record of it on our server, with Apple's tokens, which deleting your account does not remove. Write to us and we will remove it.
Things Kaalya cannot reach for you:
- An export file you saved. That file is yours, wherever you put it.
- An encrypted iPhone backup made before you deleted. It can hold the key, your sign-in and any answers you had not finished, until you delete that backup.
- Sign in with Apple permissions, and on Android your Google permission. They may stay in your Apple ID or Google Account settings; if so, you can remove Kaalya there yourself.
Two things stay on your phone after you delete, and never reach us: on an iPhone, a random number made when the app was installed, which says nothing about you; and, on both phones, one-way codes of the addresses you asked for a code for (never the addresses themselves).
Your rights
You can ask us for a summary of what we hold about you, ask us to correct it, ask us to delete it, or withdraw your agreement at any time. Withdrawing is the same as deleting your account, and Delete everything also removes your record from your phone, so save an export first if you want to keep it.
You can also name someone to use these rights for you if you die or cannot act for yourself. Write to privacy@kaalya.app with their name and email address.
You can ask for this notice in any of the 22 languages listed in the Eighth Schedule to the Constitution of India; write to us and we will send it within 7 days.
How to complain
Write to privacy@kaalya.app first. We will reply within 7 days.
From 13 May 2027, if you are not satisfied with our answer, you can complain to the Data Protection Board of India.
Children
Kaalya is for people 18 and over. Please do not sign in if you are under 18. If we learn that an account belongs to someone under 18, we delete the account and everything our server holds for it.
Changes
If this notice changes, we will update the date at the top. If a change affects what we collect or who holds it, the app will ask you before it applies.