Privacy Policy

1. Introduction

ATSRC Technologies Private Limited ("we," "us," or "our") operates The KnowingLives Platform including the Website and Mobile Application. KnowingLives is a digital wellness platform that connects users with verified professionals across astrology, tarot, numerology, psychology, yoga, meditation, Ayurveda, Reiki, spiritual guidance, and holistic wellness through chat, audio calls, video sessions, bookings, and other digital services. The Platform is operated by ATSRC Technologies Private Limited.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use the Platform. These policies apply equally regardless of whether you access services through a web browser, the Android Mobile Application, or the iOS Mobile Application (upon release). It applies to users in India, the United States, the European Union, the European Economic Area, the United Kingdom, and other jurisdictions where we offer the Platform.

We are committed to protecting your privacy and complying with applicable data protection laws, including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (India), the Digital Personal Data Protection Act, 2023 (India, where applicable), the General Data Protection Regulation (EU) 2016/679 (GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA) as amended by the CPRA, where applicable.

2. Data Controller

The data controller responsible for your personal data is ATSRC Technologies Private Limited. Registered office and contact details are in the section below.

For users in the European Economic Area or the United Kingdom, we may work with a representative or process data in accordance with cross-border transfer mechanisms as described in this policy.

3. Data We Collect

We may collect the following categories of data when you use the website or mobile application:

• Account and profile: Name, email address, phone number, password (hashed), profile photo, date of birth, gender, and preferences you provide when registering or updating your profile.
• Consultation and wellness data: Birth date, birth time, birth place, and other details you voluntarily share with an Advisor for kundli, horoscope, numerology, or similar readings; questions and topics you discuss during chat, audio, or video sessions; and session notes you choose to save.
• Payment and transaction: Payment method type, transaction identifiers, order references, KL Credits balance, wallet or credit balance (if introduced), transaction history, and billing-related information as needed for refunds and support. Payments may be processed securely through authorized third-party payment gateways and partners including CCAvenue, PhonePe (UPI and other supported modes), PayPal, Google Play, Apple App Store, and other authorized payment partners. KnowingLives does not store full card numbers, CVV codes, or complete UPI credentials on its servers. Payment data is handled by the relevant payment processor in accordance with applicable security standards.
• Device information: Device type, model, operating system, browser type, app version, install source (e.g., website, Google Play Store, or Apple App Store), device identifiers, IP address, log data, and usage patterns (e.g., pages or screens visited, advisors viewed, session duration).
• App permissions and device features: Information related to permissions you grant on mobile devices — such as camera, microphone, notifications, storage, or network access — only as needed for the features you use.
• Communications and sessions: Content and metadata of chat, audio call, and video sessions (such as messages, timestamps, session identifiers, participants, duration, and delivery status) as necessary for service delivery, quality, safety, fraud prevention, and dispute resolution. We do not routinely record voice or video calls unless explicitly disclosed for a specific feature.
• Push notification data: Device tokens and notification delivery metadata used to send service alerts, session updates, reminders, and account or security notices where you have permitted notifications.
• Analytics and diagnostics: Aggregated or pseudonymized usage data, performance metrics, and crash or error reports to improve stability and user experience.
• Cookies and similar technologies: As described in our Cookie Policy.
• Location: Approximate location derived from IP or device settings if you grant permission, for regional customization and fraud prevention.

4. Legal Basis and Purposes (GDPR / UK)

For users in the EEA and UK, we process personal data on the following bases:

• Contract: To perform our contract with you (e.g., account management, sessions, payments).
• Legitimate interests: To operate and improve the Platform, prevent fraud, ensure security, and communicate about the service, where not overridden by your rights.
• Consent: Where we ask for your consent (e.g., marketing, non-essential cookies, optional features, push notifications where required). You may withdraw consent at any time.
• Legal obligation: Where required by law (e.g., tax, anti-money laundering, responding to lawful requests).

5. How We Use Your Data

We use the data we collect to: (a) provide, maintain, and improve the Platform across web and mobile channels; (b) process payments and manage your KL Credits balance or wallet/credits (if introduced); (c) connect you with Advisors and facilitate live chat, audio call, and video sessions; (d) display advisor profiles and match you with relevant consultation categories; (e) send service-related communications and push notifications (e.g., confirmations, session alerts, security notices); (f) respond to support requests and disputes; (g) detect and prevent fraud and abuse; (h) comply with legal obligations; (i) analyze usage for product improvement (in anonymized or aggregated form where possible); (j) send marketing communications where you have opted in; (k) enforce our Terms and policies.

5A. Device Permissions (Camera, Microphone, Notifications)

Depending on the features you use on the website or mobile application, the Platform may request access to certain device permissions. We request permissions only when needed for specific functionality and in accordance with your device, browser, and app-store settings.

• Camera: Used for video consultation sessions when you choose to enable video.
• Microphone: Used for voice and video call sessions so participants can communicate in real time.
• Notifications: Used to send service alerts, call/chat updates, reminders, and account/security notices where permitted by your settings.
• Storage (if requested): May be used to cache content or save files you choose to download within the app.

You can deny or revoke these permissions at any time through your device, browser, or app settings. If certain permissions are denied, related features (for example, video or voice calling) may not function properly. We do not access camera or microphone data unless you initiate or join a session that requires it, and we do not use camera or microphone access for background surveillance.

5B. Analytics, Firebase, and Crash Reporting

We may use analytics and diagnostic tools — including Google Firebase (Analytics, Cloud Messaging, and related services on our mobile applications) — to understand how users interact with the Platform, deliver push notifications, measure performance, and diagnose crashes or technical errors. Such tools may collect device identifiers, app version, session events, and crash logs. Where required by law, we seek consent for non-essential analytics. You may limit certain tracking through your device settings or as described in our Cookie Policy.

6. Sharing and Disclosure

We may share your data with: (a) Advisors with whom you have a session (e.g., your name, birth details you provide for a reading, and session content as needed to deliver the consultation); (b) Payment processors and gateways (including CCAvenue, PayPal, Google Play, Apple App Store, and other authorized partners) to process payments, top-ups, refunds, and in-app purchases or subscriptions when introduced; (c) Service providers (hosting, analytics, email, push notifications, real-time communication, customer support) under contracts that require them to protect your data and use it only for the purposes we specify; (d) App store platforms (Google Play, Apple App Store) where in-app purchases or subscriptions are processed through those platforms; (e) Legal and regulatory authorities when required by law or to protect our rights; (f) Affiliates or successors in connection with a merger, sale, or restructuring, subject to this policy. We do not sell your personal data to third parties for their marketing. We do not share sensitive personal data (as defined under Indian law) except as necessary for the purposes stated or with your consent.

6A. Key Service Providers

We may engage trusted third-party providers to operate specific features of the Platform. Depending on your usage, these providers may include:

• Payment gateways (PhonePe, CCAvenue, PayPal, Google Play, Apple App Store, and other authorized partners) for payments, top-ups, and refunds.
• Google Firebase for push notifications, analytics, and crash reporting on mobile applications.
• Cloud and backend infrastructure providers for secure hosting, storage, and core service delivery.
• Authentication providers (e.g., Google, Facebook) for sign-in services and account security.
• Communication and call-delivery providers for chat, voice, and video session functionality.
• Push notification providers for service alerts, reminders, and account/security notifications.

These providers process personal data only under our instructions and applicable contractual, confidentiality, and security obligations.

7. International Transfers and International Users

Your data may be processed in India and in other countries where our service providers operate. Users accessing the Platform from outside India acknowledge that their data may be transferred to and processed in India or other jurisdictions. For EEA/UK users, transfers to countries outside the EEA/UK are carried out using appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission or UK authorities, or other mechanisms permitted by law. You may request details of the safeguards we use.

8. Data Retention

We retain your data only as long as necessary to fulfil the purposes in this policy, including to satisfy legal, accounting, or reporting requirements. Account data is typically retained while your account is active and for a period thereafter (e.g., for disputes and legal compliance). Session and chat records may be retained for a limited period for quality, safety, and dispute resolution. Transaction and payment records may be retained as required by tax and financial regulations. You may request deletion subject to applicable law and our retention obligations — see our Data Deletion Instructions.

9. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your data, subject to legal exceptions.
• Restriction: Request restriction of processing in certain circumstances.
• Portability: Request a copy of your data in a structured, machine-readable format (where applicable).
• Object: Object to processing based on legitimate interests or for direct marketing.
• Withdraw consent: Where processing is based on consent, withdraw it at any time.
• Complaint: Lodge a complaint with a supervisory authority (e.g., in the EU/UK) or with us.

India: You may have rights under the Digital Personal Data Protection Act, 2023 and rules thereunder, including the right to access, correction, erasure, and grievance redressal. Contact our Grievance Officer at support@knowinglives.com or +91 172 314686.

California (CCPA/CPRA): You may have the right to know, delete, correct, and port your personal information, and to opt out of the "sale" or "sharing" of personal information. We do not sell personal information as defined under CCPA. You may designate an authorized agent. We will not discriminate against you for exercising your rights.

To exercise any of these rights, contact us using the details in Section 14. We will respond within the timeframes required by applicable law.

10. Data Security and Storage

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction, in line with applicable law (e.g., reasonable security practices under Indian IT rules). This includes:

• Encryption in transit: HTTPS/TLS for website, app, and API communications.
• Access controls: Role-based access, authentication, and monitoring for systems that hold personal data.
• Payment data: Card numbers, CVV, and UPI PINs are not stored on our servers. Payments are processed by authorized gateways (e.g., PhonePe, CCAvenue, PayPal, Google Play, Apple App Store) that maintain PCI-DSS or equivalent safeguards. We retain only transaction references, amounts, and status needed for support and compliance.
• Storage location: Data is hosted on secure cloud infrastructure operated by reputable providers; backups and logs are protected with equivalent controls.
• Retention: Data is kept only as long as needed for the purposes in this policy and deleted or anonymized when no longer required, subject to legal retention for payments and tax — see Section 8.

No method of transmission over the Internet or electronic storage is 100% secure; we cannot guarantee absolute security.

11. Children's Privacy

The Platform is not intended for users under 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it promptly.

12. Third-Party Links and Services

The Platform may contain links to third-party websites or services (e.g., payment gateways, social login providers, app stores). We are not responsible for their privacy practices. We encourage you to read their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. For material changes, we may notify you by email, push notification, or through the Platform. Your continued use after the effective date constitutes acceptance. Where required by law (e.g., GDPR), we will obtain your consent to material changes.

14. Contact and Grievance Officer

For privacy-related queries, to exercise your rights, or to lodge a complaint, contact us using the details below or visit our Contact Us page.