Privacy Policy
Seedhi baat (short version)
- As a guest, your chats stay in your own browser. We only keep an anonymous visitor ID to count how many people are online.
- With an account, we keep your email, name, an encrypted password, your chats and your game record, so the characters can remember you.
- Your messages are sent to an AI model on Cloudflare to write the reply.
- No ads, no trackers, and we never sell your data.
- You can delete your account and everything in it, any time, from Meri Kundli.
1. Who is responsible
ch.ai is operated from India by Sujith Suresh ("we", "us"). We are the Data Fiduciary for your personal data under the Digital Personal Data Protection Act, 2023 ("DPDP Act"). You can reach us through the Contact / Report form on the ch.ai page.
2. What we collect, and why
| Data | When | Why |
|---|---|---|
| Anonymous visitor ID (a random cookie) and last-seen time | Everyone | To count visitors and show "online now" and "visitors today" |
| A hashed (one-way scrambled) version of your IP address | Everyone, briefly | To limit abuse, such as too many messages a minute. We never store your raw IP. |
| Your chat messages | Everyone, when you chat | Sent to the AI model to write a reply. For guests, kept only in your browser. For account holders, saved so the characters remember the conversation. |
| Game results (which relative, how many questions) | Everyone, when you play | To show overall stats and, for account holders, your Kundli |
| Email, display name, encrypted password, date you accepted these terms | Account holders | To create and secure your account and let you log in |
| Whatever you write in the Contact form, and your email if you add it | When you contact us | To reply, fix problems and handle requests and grievances |
We process this data on the basis of your consent, which you give by using the Service and, for accounts, by ticking the box at sign-up. We don't collect phone numbers, contacts, location, photos or payment details, and we ask you not to share sensitive personal information in chats.
3. Who else handles your data
We use Cloudflare as our data processor to host the website, store the database, and run the AI model (Workers AI) that writes chat replies. Cloudflare runs a global network, so your data may be processed on servers outside India. We don't sell, rent or share your personal data with anyone else, and we don't use advertising or analytics trackers.
If email password resets are switched on, we use an email provider to send the reset email. It receives only your email address and the reset message.
4. What we (the operator) can see
For running and protecting the Service, we can see account details (email, name, sign-up date), usage counts (such as how many chats or games an account has) and Contact form messages. Our admin tools don't show the contents of your chats, and we don't read them. The only exception is if you send us a specific message, for example in a report, or if the law requires us to.
5. How long we keep it
- Account data and saved chats: until you delete your account, or we delete it under the Terms.
- Anonymous visitor records: deleted after about 90 days of inactivity.
- Abuse-prevention records (hashed IPs): deleted within about 2 days.
- Login sessions and password-reset links: expire after 30 days and 1 hour respectively.
- Contact form messages: for as long as needed to handle them, then deleted on request.
- Guest chats: stored only in your browser. Clearing your browser data removes them.
6. Your rights
Under the DPDP Act, you have the right to:
- access a summary of the personal data we hold about you;
- correct or update it;
- erase it. You can delete your account yourself from Meri Kundli, and this also withdraws your consent;
- withdraw consent at any time (this doesn't affect processing that already happened);
- nominate another person to exercise these rights if you die or become incapacitated;
- raise a grievance with us, and if you aren't satisfied, complain to the Data Protection Board of India.
To exercise any right, use the Contact / Report form and choose "Mera data / account". We may ask you to confirm you own the account.
7. Cookies and browser storage
vid: an anonymous visitor ID for the live counters (1 year).sid: keeps you logged in (30 days, only if you log in).- Your browser's local storage: guest chats, your chosen character and the voice setting.
We don't use advertising, analytics or third-party tracking cookies. Fonts are loaded from Google Fonts, which may see your IP address when your browser fetches them.
8. Voice
The "Awaaz" feature reads replies aloud using your own device's built-in speech engine. We don't send text to an external voice service and we never record your voice or use your microphone.
9. Children
Accounts are for people 18 and older. We don't knowingly collect account information from children. If you believe a child has created an account, tell us through the Contact form and we'll delete it.
10. Security
Passwords are stored only as salted PBKDF2 hashes. Login sessions use random tokens kept in secure, HttpOnly cookies, and the database stores only hashes of those tokens. All traffic uses HTTPS. We limit how often sensitive actions can be tried. No system is perfectly secure, but if we learn of a breach affecting your data, we'll notify you and the Data Protection Board as the law requires.
11. Changes to this policy
We may update this policy. The version date at the top will change, and if a change is significant we'll show a notice in the app.
12. Contact and grievances
Grievance Officer: Sujith Suresh, via the Contact / Report form (choose "Shikayat (grievance)" or "Mera data / account"). We acknowledge grievances within 24 hours and aim to resolve them within 15 days.