Vastu Laabh ("we", "our", or "us") is a product of Zero MS Labs, Bengaluru, Karnataka, India. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use the Vastu Laabh mobile application (Android and iOS) and our website at vastulaabh.com.
By creating an account or continuing to use Vastu Laabh, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our services.
1. Information We Collect
1.1 Account Data
When you create a Vastu Laabh account, we collect:
- Full name — to personalise your experience and display your profile.
- Email address — for account creation, login, OTP verification, and service communications.
- Phone number — collected at sign-up for account identification.
- Password — stored as a securely hashed value (bcrypt). We never store your password in plain text.
- Profile photo — optionally selected from your photo library. Your profile photo is stored locally on your device only and is never uploaded to our servers.
1.2 Astrological & Birth Data
To generate your Vedic natal chart and daily horoscope, we collect:
- Date of birth — used to calculate your Nakshatra, Rashi, and Zodiac sign.
- Time of birth — used together with date and place of birth for accurate Kundali calculations.
- Place of birth — the city or district you were born in. We store the geographic coordinates (latitude, longitude) and timezone derived from this place. This data is used exclusively for Vedic chart generation and daily horoscope personalisation.
This astrological data is used exclusively within the Vastu Laabh platform. It is never sold, shared with advertisers, or used to build behavioural profiles.
1.3 Property & Vastu Data
When you use the Vastu scanner feature:
- Property name — the label you assign to a home or property during a scan.
- Room descriptions and scan results — directional headings, room names, and Vastu scores generated from your scans, stored in your account scan history.
- Scan photos — room photographs you optionally capture during a scan. These images are transmitted to Google Gemini AI for visual Vastu analysis (assessing furniture placement, clutter, colour, and decor) and to generate personalised remedy recommendations. Scan photos are retained in your account until you delete the scan or your account.
1.4 Palmistry Data
When you use the palm reading feature, you may capture a photograph of your hand. Palm reading photos are processed by Google Gemini AI in real time and are not retained after your session ends.We do not store palm photos on our servers. No palm image is linked to your account after the reading is complete.
1.5 Device & Usage Data
We automatically collect limited technical data to operate and improve the service:
- Device data — timezone, locale, device type, and operating system version.
- Anonymised crash logs — error reports that help us fix bugs. These do not contain personally identifiable information.
- Usage metadata — feature usage frequency and session metadata (e.g., which tabs you visit, how often you run a scan). We do not log personally identifiable usage trails.
1.6 Payment Data
All subscription payments are processed by Razorpay, a PCI-DSS compliant payment gateway. We never see, collect, or store your card number, bank account details, or UPI credentials. Razorpay handles the full payment flow. We retain only your order amounts, subscription plan, and subscription status (active/expired). Razorpay's handling of your payment data is governed by the Razorpay Privacy Policy.
1.7 Google Sign-In
If you sign in using Google, we receive from Google your display name, email address, and a Google-issued identity token. We do not receive or store your Google password. Your use of Google Sign-In is governed by Google's Privacy Policy.
2. How We Use AI
Some features — Vastu room analysis, daily horoscope, and palm reading — are powered by Google Gemini AI. When you use one of these features, only the input that feature needs (a room or hand photo, or your astrology chart data) is sent to Google Gemini AI to generate your result. We do not include any directly identifying information — such as your name, email, phone number, or birth details — in AI requests. Palm-reading photos are processed in real time and are not retained on our servers. Google's handling of data sent to its AI is governed by the Google AI Terms.
3. Device Permissions
Each permission below is requested only when you first use the related feature, and you can deny or revoke it at any time in your device settings.
- Camera — to capture room photos for a Vastu scan and hand photos for palm reading. Used only when you tap the camera; never in the background.
- Photo Library — to let you choose a profile picture. Your profile photo stays on your device and is not uploaded to our servers.
- Motion Sensors — to read the compass and accelerometer in real time for the directional Vastu compass. This sensor data is not stored on our servers.
4. How We Use Your Information
| Purpose | Details |
|---|---|
| Account management | Creating and maintaining your account, authentication, password reset, and OTP verification. |
| Personalised astrology | Calculating your Nakshatra, Rashi, Zodiac sign, and Kundali from your birth details. Results are stored in your profile for ongoing personalisation. |
| Daily horoscope | Generating a personalised daily reading using your Vedic chart data via Google Gemini AI. Readings are cached for 1 day, then automatically deleted. |
| Vastu analysis | Generating your Vastu score, room-by-room directional analysis, and personalised remedy reports based on scan data and your Nakshatra. |
| AI room & palm analysis | Sending room photos or palm images to Google Gemini AI for analysis. No user identity is included in these AI requests. |
| Subscription & billing | Managing your subscription plan, processing payments via Razorpay, and sending plan-related communications. |
| Service communications | Sending transactional emails (OTP codes, password reset, subscription confirmations). We do not send marketing emails without your explicit consent. |
| App improvement | Analysing anonymised usage patterns and crash logs to identify bugs and improve the user experience. |
| Legal compliance | Retaining records as required by applicable Indian law, including the Digital Personal Data Protection Act, 2023 (DPDPA). |
5. Third-Party Services
We use the following third-party services to operate Vastu Laabh:
- Google (Sign-In & Gemini AI) — Authentication via Google Sign-In; AI processing for Vastu analysis, horoscopes, and palm reading. Governed by Google's Privacy Policy.
- Razorpay — Payment processing for subscriptions. We never see your card or bank details. Governed by Razorpay's Privacy Policy.
- Railway — Cloud hosting provider where our backend servers and database run. Data is stored in Railway's infrastructure. Governed by Railway's Privacy Policy.
- Expo / React Native — The mobile runtime framework powering the Vastu Laabh app. Expo may collect anonymised SDK telemetry per their own policies.
We do not sell, rent, or trade your personal data to any third party for advertising purposes.
6. Data Retention
We retain your data for as long as your account is active or as needed to provide our services. Specific retention periods:
- Daily horoscope readings — retained for 1 day (24-hour TTL), then automatically deleted from our servers.
- Vastu scan data and remedy reports — retained until you delete the scan or your account.
- Palm reading photos — not retained. Processed in real-time only; deleted immediately after the AI call completes.
- Account data (name, email, phone, birth details) — retained until account deletion. You can delete your account at any time via the in-app option or by emailing support@vastulaabh.com.
- Payment records — retained for 7 years as required under the Companies Act, 2013, and applicable tax regulations.
- Crash logs and usage metadata — retained for 90 days in anonymised form.
Upon account deletion, we will delete or anonymise all personal data within 30 days, except where retention is required by law.
7. Data Security
We implement industry-standard technical and organisational measures to protect your personal information:
- TLS/HTTPS encryption for all data in transit between the app and our servers
- Encryption at rest for stored personal data
- Bcrypt hashing for stored passwords — we never store plain-text passwords
- JWT-based authentication with short-lived access tokens and refresh token rotation
- Role-based access controls limiting internal access to personal data
Despite these measures, no method of electronic transmission over the internet is 100% secure. We encourage you to use a strong, unique password and keep your device secure.
8. International Data Transfers
Vastu Laabh is operated from India, and our primary servers and database are hosted on Railway's infrastructure. Some of the third-party services we rely on — notably Google Gemini AI (for Vastu, horoscope, and palm-reading analysis) and our cloud hosting and payment providers — may process data on servers located outside your country of residence, including in the United States and the European Union.
Wherever your data is processed, it remains subject to this Privacy Policy and to the safeguards described in Section 7 (Data Security). We transfer data only to service providers that maintain appropriate technical and organisational protections, and we minimise what is shared — no directly identifying information (name, email, phone, or birth details) is included in requests sent to our AI provider. By using Vastu Laabh, you consent to the transfer and processing of your information in these locations as necessary to provide the service.
9. Your Rights
You have the following rights with respect to your personal data. To exercise any of these rights, contact us at support@vastulaabh.com.
- Right to access: Request a copy of the personal data we hold about you.
- Right to correction: Update your name, birth details, timezone, and language directly within the app at any time. For other corrections, contact us.
- Right to deletion: Delete your account via the in-app "Delete Account" option, from the web at vastulaabh.com/delete-account, or by emailing us. We will complete deletion within 30 days.
- Right to data export: Request your personal data in a structured, machine-readable format by emailing support@vastulaabh.com.
- Right to withdraw consent: Revoke device permissions (camera, photo library, sensors) at any time through your device's system settings. This does not affect prior processing.
- Right to grievance redressal: Under the Digital Personal Data Protection Act, 2023 (DPDPA), you may raise a grievance with us. If unresolved, you may escalate to the Data Protection Board of India.
10. Children's Privacy
Vastu Laabh is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected data from a child under 13, please contact us at support@vastulaabh.com and we will promptly delete such information.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the features we offer. We will notify you of material changes by posting a notice within the app or by sending an email to your registered address at least 7 days before the change takes effect. The "Last Updated" date at the top of this page always reflects the most recent revision. Continued use of Vastu Laabh after the effective date of a revised policy constitutes your acceptance of the updated terms.
12. Contact Us & Grievance Officer
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out:
Zero MS Labs
Operating Vastu Laabh · Bengaluru, Karnataka, India
Email: support@vastulaabh.com
Website: https://vastulaabh.com
In accordance with the Digital Personal Data Protection Act, 2023, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, you may contact our Grievance Officer for any complaint regarding the processing of your personal data:
Grievance Officer — Vastu Laabh
Email: support@vastulaabh.com (Attn: Grievance Officer)
We acknowledge grievances within 48 hours and endeavour to resolve them within 30 days. If your grievance remains unresolved, you may escalate it to the Data Protection Board of India.
We aim to respond to all privacy-related inquiries within 5 business days.
© 2026 Zero MS Labs. All rights reserved.
← Back to Vastu Laabh