Privacy Policy

Jyoti 108 · v1.0 · 2026-09-24 · ⌂

This policy explains what personal data Jyoti 108 (the Telegram bot @Jyoti108bot, the Mini App, the web app at app.jyoti108.com, the mobile apps and the related cabinets) processes, why, for how long, and what rights you have.

1. Who is responsible

The controller is JyotiSoft LLC, New Mexico Business ID 0008118614, 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, USA. Privacy contact: info@jyotisoftllc.com. Data protection officer: not appointed; write to info@jyotisoftllc.com. Representative in the EU: not yet appointed; until then write to info@jyotisoftllc.com; in the UK: not yet appointed; until then write to info@jyotisoftllc.com.

2. What data we process

Account and sign-in

Birth and chart data — the core of the Service

People you add — the name, relationship, gender, birth data and current location of people you add (partner, children, friends) for compatibility and family readings. Please add someone only if you have the right to do so; see also the Children's Privacy Notice.

What you write and receive — your questions and messages (voice messages are converted to text), the readings, reports and answers made for you, course answers and reflections, support tickets with attachments, feedback and reports you send.

Payments — your stars balance and the history of purchases, spending, holds, refunds, promo and referral codes. Payments themselves are processed by Telegram (Telegram Stars) or another payment provider; we receive a payment identifier and amount, never your card details.

Technical data — IP address, browser or device type, pages opened in the web app, referrer and campaign tags, a random visitor identifier (see the Cookie & Local Storage Notice), push notification tokens if you allow notifications, error and request logs.

We do not ask for special categories of data (health, religion, etc.). If you write about them in a question, we process them only to answer that question.

3. Why we process data and on which legal basis

Purpose Legal basis (GDPR / UK GDPR)
Calculating charts, generating readings and answers, delivering reports and courses, keeping your history Performance of our contract with you (Art. 6(1)(b))
Optional life context, optional notifications and digests Your consent (Art. 6(1)(a)); you can withdraw it at any time in settings
Data of children entered by a parent Consent of the parent or guardian (Art. 6(1)(a), Art. 8)
Payments, the stars ledger, accounting records Contract (Art. 6(1)(b)) and legal obligations (Art. 6(1)(c))
Security, fraud and abuse prevention, safety messages, error diagnosis, service quality and anonymous statistics Our legitimate interests (Art. 6(1)(f)) in a safe and working service

For users in Russia, the processing is based on consent to personal data processing given as a separate document — see the Consent to Personal Data Processing — and on the performance of the contract (Federal Law No. 152-FZ, Art. 6). For users in Ukraine, processing is based on consent and on the performance of a contract under the Law of Ukraine "On Personal Data Protection".

We do not sell personal data, do not use it for advertising, and do not use it for automated decisions with legal or similarly significant effects.

4. AI processing

To write a reading, the Service sends the relevant chart data, your question and needed context to AI language models. We route these requests through our own gateway servers to the model providers listed in the Sub-processors list. We send only what the task needs; we do not send your payment details or login credentials. The providers process this data to return the answer; under their own terms they may keep it for a limited time, for example for abuse monitoring. Readings are generated automatically; people review them only on a support request or for quality and safety checks.

5. Who receives data

6. International transfers

Our main servers are in Germany (EU). Some providers (for example, AI model providers) are in the USA and other countries. For transfers outside the EEA/UK we rely on adequacy decisions (including the EU–US Data Privacy Framework where the provider is certified) or the European Commission's Standard Contractual Clauses with additional safeguards. You can ask us for a copy of the safeguards. For users in Russia, cross-border transfer is based on consent (Federal Law No. 152-FZ, Art. 12); operator registry and Roskomnadzor notification details: the Service is not directed at the Russian Federation and does not accept payments from it; the operator is not included in the Roskomnadzor registry of personal data operators.

7. How long we keep data

8. Your rights

You have the right to access your data and get a copy (the "Export my data" button in the web app), to correct it (Settings), to delete it (How to delete your data), to restrict or object to processing based on legitimate interests, to data portability, and to withdraw consent at any time without affecting earlier processing. Write to info@jyotisoftllc.com or use Support in the bot or app; we answer within one month.

You may also complain to a data protection authority — in the EU/EEA the authority of your country, in the UK the ICO. Residents of California have the rights to know, delete, correct and opt out of "sale" or "sharing"; we do not sell or share personal information for cross-context behavioural advertising. Residents of Russia may contact Roskomnadzor, residents of Ukraine — the Ukrainian Parliament Commissioner for Human Rights.

9. Security

Data is transferred over encrypted connections, backups are encrypted, passwords are stored only as salted hashes, and access to production systems is limited to authorised personnel with keys. No system is perfectly secure; if a breach affects your data, we will notify you and the authorities as the law requires.

10. Children

See the Children's Privacy Notice. The minimum age is 13 for the Telegram bot and 18 for the web and mobile apps.

11. Changes

We will publish changes here with a new version and date, and notify you in the bot or app of material changes.

Also see: Cookie & Local Storage Notice · Sub-processors · Contact.