Privacy Policy

This Privacy Policy explains how Shukraya Technologies LLC, a New York limited liability company (“Shukraya”, “we”, “us”, “our”), collects, uses, and protects information when you use Shukraya at shukraya.com, the Shukraya mobile apps, and related services (the “Service”).

We practise data minimisation: we collect only what the Service needs to work.

1. Information we collect

Information you provide

• Account: your email address, a username or display name, and a password (which we store only as a salted hash; see the Security section below).
• Sign in with Google (optional): if you choose to sign in with Google, or to connect a Google account to your Shukraya account, Google shares with us your email address, whether Google has verified it, your name and profile picture, and an identifier for your Google account. We keep the identifier, the verified email address, and the date you connected it. We do not keep your name or profile picture. We never receive your Google password, and we ask for nothing else from your Google account: not your Gmail, contacts, files or any other data.
• Sign in with Apple (optional): if you choose to sign in with Apple, or to connect an Apple Account to your Shukraya account, Apple shares with us an identifier for your Apple Account and an email address: your own, or, if you choose Hide My Email, a private relay address that forwards to it. The first time you use Sign in with Apple with Shukraya, Apple may also share the name you give it, once. We keep the identifier, the email address, and the date you connected it. We keep that name only as your account’s display name, and only if your account has none; we never replace a name already there. If a sign-in is not finished, what Apple sent for it is held only with that sign-in attempt, which expires within minutes, and is deleted after it expires. Apple also gives us a token for the link between your Apple Account and Shukraya, which we keep so that we can ask Apple to end that link when you close your account. We never receive your Apple Account password.
• Astrological profiles: information you enter to cast and save charts, including a profile name and birth details (date, time, and place of birth, including the location name, its coordinates, and time zone), plus any tags and a current location you set. You may create profiles for yourself and for other people, for example your clients.
• Purchases: if you subscribe in the Shukraya app, you pay through Apple’s App Store or Google Play, which collect and process your payment details. We never receive your card or bank details. From the store we receive, and keep, a record of each purchase: the plan, the store, the store’s purchase or transaction identifier, the amount and currency, the dates it was bought, renewed, cancelled or refunded, the subscription’s status and end date, and whether it was a test purchase.
• Communications: any messages you send us, such as support or feedback. We previously ran a waitlist. It closed in August 2026, no Shukraya page offers it any more, and the email addresses it collected have been deleted.

Information collected automatically

• Device location, only when you ask: if you tap “Use my location” while adding a profile in the app, the app asks your device for its approximate location, your device’s own location service (Apple or Google) turns it into a city name, and the app searches for that city. We do not receive or store your device’s coordinates.
• Technical and log data: IP address, browser or device type, timestamps, the pages and endpoints accessed, and similar server logs, used to operate, secure, and troubleshoot the Service.
• Essential cookies: a strictly necessary, httpOnly session cookie to keep you signed in, and, if you use social sign-in, a short-lived cookie for that sign-in attempt. We do not use advertising or tracking cookies. Because these cookies are strictly necessary to provide the Service, we do not display a cookie-consent banner for them.
• Preferences kept in your browser: the website and the web app keep a few preferences in your browser’s own storage so they survive a reload, such as your theme, chart display options, and which notes you have dismissed. The web app also keeps the name you asked it to greet you by, together with your account’s random identifier so that the name is only shown to you. The only ones that leave your browser are the calculation settings among them, which are sent with each chart you ask us to calculate; settings you save to your account are covered above. You can clear them at any time from your browser’s settings.

We do not use third-party analytics, advertising networks, or behavioural tracking of any kind.

2. How we use information

• To provide the Service: authenticate you, cast and save charts, and store your profiles and settings.
• To sign you in with Google, if you use it. We use your Google account identifier and verified email address only to sign you in and to keep your Google account linked to your Shukraya account. If that email address already belongs to a Shukraya account, signing in with Google signs you in to that account. Because Google has confirmed that the address is yours, we then remove any password on that account and sign it out everywhere else, so that only the owner of the address keeps access. You can set a password again at any time with “Forgot password?”, which emails you a link.
• To sign you in with Apple, if you use it. We use your Apple Account identifier and the email address Apple shares only to sign you in and to keep your Apple Account linked to your Shukraya account. If that email address already belongs to a Shukraya account, it works as for Google above. A private relay address is never matched to an existing account.
• To send transactional email you request or need, such as password resets and the emails about deleting or restoring your account. We send no waitlist email and no marketing email.
• To give your account the plan you bought, verify each purchase and its renewals with Apple or Google, and keep accurate billing records.
• To secure, maintain, debug, and improve the Service.
• To respond to your requests and communications.
• To comply with law and enforce our Terms.

We do not sell or rent your personal information, and we do not use birth details for any purpose other than providing the Service to you.

3. How information is shared

We share information only with service providers (“sub-processors”) that help us run the Service, and only as needed:

• Amazon Web Services (AWS): cloud hosting, database, storage, and transactional email (Amazon SES). Data is processed and stored in the United States.
• Sentry: application error monitoring. We configure Sentry to exclude personal data from error reports: we disable default personal-data capture and additionally strip user identifiers, cookies, headers, request bodies, and query strings before events are sent.
• Google Workspace: our email service for inbound and support correspondence, for example if you email us.

Apple and Google. If you subscribe in the app, the App Store or Google Play handles the payment under its own terms and privacy policy. To verify and manage your subscription we send the store the purchase identifier it gave your device, and receive the purchase details described above. The purchase carries your Shukraya account identifier (a random ID, not your name or email address) so that it is applied to the right account.

Sign in with Google. If you use it, Google handles the sign-in under its own terms and privacy policy, and sends us only the information described above. Shukraya’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy. We do not sell this information or use it for advertising, and we share it only with the service providers listed above, which host and run the Service.

Sign in with Apple. If you use it, Apple handles the sign-in under its own terms and privacy policy, and sends us only the information described above. We do not sell this information or use it for advertising, and we share it only with the service providers listed above, which host and run the Service.

We may also disclose information where required by law, to protect the rights, safety, or security of users or the Service, or in connection with a business transfer such as a merger or acquisition, in which case we will require the recipient to honour this Policy.

4. Data retention

We keep your account and profile information for as long as your account is active. If you delete a profile, it is removed from the active Service; if you close your account, we delete or anonymise your personal information as described below, except where we must keep limited records to comply with law, resolve disputes, or enforce our agreements. Backups and logs are retained for a limited time and then expire.

When you delete your account on shukraya.com, in the web app at shukraya.com/app, or in the Shukraya app from version 1.0.2, the account is closed at once: you are signed out on every device and cannot sign in. If your account has an email address, we email you a link that restores the account, with everything in it, until the deletion date 7 days later; if it has none, write to us at support@shukraya.com before then to restore it. On that date we permanently delete the account and everything in it, and email you to confirm it. In versions of the app before 1.0.2, deleting your account deletes it at once, and it cannot be restored.

Purchase records are kept while your account exists and are deleted with it. Deleting your account does not cancel a subscription held by the App Store or Google Play: cancel it in the store, or the store will keep charging you.

The link to your Google account is kept while your account exists and is deleted with it. To remove it sooner, write to us at the address below; if your account signs in only with Google, set a password first, so that you keep a way in. You can also stop using Sign in with Google for Shukraya at any time from the linked apps page of your Google Account (Sign in with Google, then Stop using Sign in with Google). That does not delete your Shukraya account or its data.

The link to your Apple Account is kept while your account exists and is deleted with it, and when your account is deleted we ask Apple to end Shukraya’s access to your Apple Account. You can also stop using Sign in with Apple with Shukraya at any time from your Apple Account’s settings.

Waitlist email addresses are not retained. The waitlist closed in August 2026 and the addresses it collected have been deleted, and the backups that still hold them expire on the schedule above.

5. Security

We take the confidentiality of birth details seriously and use industry-standard measures, including:

• Encryption in transit (HTTPS / TLS) for all traffic to the Service.
• Encryption at rest for our database and stored data.
• Password protection using PBKDF2-HMAC-SHA256 with a unique per-user salt and a high iteration count. We never store passwords in plaintext or in any reversible form.
• Network isolation: our database is not publicly accessible and runs inside a private network, and application secrets are held in a managed secrets service.

No system is perfectly secure, but we work to protect your information and to improve our safeguards over time.

6. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. You can:

• View and edit your account details and profiles directly in the app.
• Delete your account and everything in it yourself: on shukraya.com, in Account › Delete account, or in the app, in Settings › Account › Delete account. Section 4 says when the deletion takes effect and how to undo it.
• Request access, correction, deletion, or a copy of your data by contacting us at privacy@shukraya.com.

We will respond within the time required by applicable law and will not discriminate against you for exercising these rights.

If you are in the European Economic Area, the United Kingdom, or a similar jurisdiction: our processing is based on performing our contract with you, our legitimate interests in operating and securing the Service, your consent where required, and compliance with law. Your data is transferred to and stored in the United States, and where required we rely on appropriate safeguards for such transfers.

7. Children

Shukraya is not directed to children and is not intended for anyone under 16. We do not knowingly collect personal information from anyone under that age. If you believe someone under 16 has provided us information, contact us and we will delete it.

8. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will update the “Last updated” date and, where appropriate, notify you. Your continued use of the Service after changes take effect means you accept the updated Policy.

9. Contact us

Questions or requests about this Policy or your data: email privacy@shukraya.com, Shukraya Technologies LLC.