Privacy

Last updated 25 September 2026

Antar is a Vedic astrology app. To do its job it needs your birth details, it listens when you talk to it, and it keeps notes on what you have talked about. That is more personal than most apps ever ask for. So this page is specific rather than general: below is the actual list of what is stored, in the actual order it happens.

Who we are

Antar is operated by the team behind tryantar.com. We are the data controller for everything described here. Write to privacy@tryantar.com about anything on this page.

What we collect, and why

Your phone number	The main way you sign in. We send a six-digit code by SMS and you type it back. There is no password because there isn't one to steal. Your number is also what makes friend matching possible.
Your email address	An alternative sign-in, either by six-digit code or through Google or Apple. If you sign in with Google or Apple we receive the email address and name they release to us, and nothing else: no contacts, no calendar, no files from either account.
Your birth details	Date, time, how confident you are of that time, and birthplace, stored as the text you chose plus its latitude, longitude and timezone. Without these there is no chart, so this is the one thing the app cannot work without. It is also the most sensitive thing we hold, and we treat it that way.
Your computed chart	The result of the astronomical calculation: positions, houses, dashas, transits. Computed on our own server and cached so the same question gives the same answer.
Your conversations	What you write or say to Antar and what it says back, so a conversation can be resumed rather than restarted.
Your voice, while you speak	During a spoken consultation your audio is carried live to a speech-to-text service and turned into text. We keep the transcript. We do not keep the audio recording.
What Antar remembers	Short notes drawn from your conversations ("weighing a job change", that sort of thing), reused in later sessions. This is what lets guidance build on itself instead of starting cold every time. Every note is listed and individually removable.
Contact hashes, only if you allow it	If you turn on friend matching, your address book is read on your phone, the numbers are normalised and turned into salted hashes, and only those hashes are sent to us. We compare them against other users' hashes to tell you who is already here. See the section below.
Your username and public page	Optional. If you choose a handle, a page at tryantar.com/@handle can be made visible to other people. It is off by default and you turn it off again in the app at any time.
Usage counters	Seconds of voice used and turns taken, so we can show you what is left of your allowance and enforce it. These are numbers, not content.
Subscription status	Whether you have an active subscription and when it renews. We never see your card.
Language preference	Whether you want English or Hindi.
How you use the app	Which screens you open, which buttons you press, when the app crashes or stalls, and the model of phone and version of the app it happened on. We use this to find what is broken and to see which parts of the app people actually reach. See Analytics and screen recording.
A recording of your screens	A replay of what the app showed you and where you tapped, so we can watch a problem happen instead of guessing at it. Text you type is masked and the conversation screens are left out altogether. The section below says exactly what that covers and what it does not.
How you found us	Whether you arrived from an advertisement, a link or the store itself, and your device's advertising identifier if, and only if, you allowed tracking when your phone asked. See How you found us.

Friend matching, in detail

This is the part of the app people are right to ask hard questions about, so here is exactly how it works. Friend matching is optional. If you skip it, nothing in this section happens and the rest of the app works normally.

If you allow it:

• Your address book is read on your device. Phone numbers are put into a standard international format and then hashed with a salt.
• Only the hashes leave your phone. Names, email addresses, notes, photos and everything else in a contact card stay where they are.
• We compare those hashes against hashes of the numbers of people who already have Antar accounts, and tell you who matched.
• The uploaded hashes are discarded once the check is done. We keep the matches, not the address book.

Three things we promise, in the app and here:

• We do not keep your address book.
• We never message anyone in it. No invitation SMS, no "your friend joined" email, nothing sent on your behalf.
• We never auto-add anyone. A match is shown to you; it does not create a connection by itself.

Turn contacts off in the app under You → Contacts and the matches are forgotten.

Analytics and screen recording

Until this version there was no measurement in Antar at all. There now is, and we would rather describe it plainly than let you find it in a network log.

Product analytics. The app sends events to PostHog: a screen was opened, a chart was generated, a subscription screen was shown, the app crashed. Each event carries your account identifier, the app version, and the device model and operating system. It does not carry your birth details, your chart, or anything you said to Antar.

Session replay. PostHog also records a replay of the app as you use it. This is not a video from your camera and it is not your voice. It is a reconstruction of what was drawn on the screen and where you tapped, played back later like a screen recording.

Here is what is actually done to it, stated exactly:

• Text is masked at the point of capture, on your phone. Text fields and text on screen are replaced with blocks before anything is sent, so the recording shows that you typed, not what you typed. Images are masked the same way.
• The conversation screens are excluded entirely. No replay is captured on the screens where you talk or write to Antar, where a call is summarised, or where what Antar remembers about you is listed. On those screens the recorder is off, not merely masked.
• Masking is a mechanism, not a guarantee. It works by recognising the kinds of view that hold text. A future screen built in an unusual way could be missed, and layout and navigation are visible even when the words are not, so a replay can still show that you went to a particular part of the app and how long you stayed. We are telling you this rather than calling it anonymous, because it is not anonymous: replays are tied to your account.

Replays and events are held by PostHog under its own retention settings for the product, and we have not set a shorter period of our own. Deleting your account deletes the events and replays we hold that are keyed to you.

Two further things you are entitled to know. Our PostHog project is in its United States region, so these events and replays leave your country and are processed in the US wherever you are, including if you are in the UK or the EU. And the key the app uses to send them is a public one embedded in the app, as it is in every app that does this: anyone who examines the app can see that it talks to PostHog and where. That is not a leak, and it does not let anyone read your data, but we are not going to describe this pipeline as private or hidden, because it is neither.

How you found us

We use AppsFlyer to tell whether an install came from an advertisement, a link someone shared, or a search in the store. It receives your device model and operating system, your rough location from your IP address at the level of country, the app version, the identifiers the store gives us for that install, and the fact of events such as first open and starting a subscription. It does not receive your birth details, your conversations or what Antar remembers.

The advertising identifier is only read if you allow it. On iOS, your phone will ask whether Antar may track you across other companies' apps and websites. If you say no, or ignore it, the advertising identifier is never read and attribution runs on the coarser signals above. If you say yes, the identifier is included and can be matched with data held by advertising networks. Saying no costs you nothing in the app: every feature works the same either way. You can change the answer later in your phone's settings, under privacy and tracking.

On the websites

tryantar.com and app.tryantar.com use Google Analytics (Google LLC) to count visits and to tell which of our ads bring people to Antar. It records the pages you open, roughly where you are at the level of country or city, your browser and device type, the ad or link you came from, and three steps: creating an account, starting a subscription checkout, and completing a purchase with its amount. It does not receive your name, your email address, your birth details, your chart, or anything you say or write to Antar, and we do not send it your account identifier.

You choose. The first time you visit, a bar at the foot of the page asks whether to allow it. If you are in the European Economic Area, the UK or Switzerland, nothing is stored on your device for analytics or advertising until you say yes. Elsewhere it is on until you say no. Your answer is kept in your browser, and you can change it in the web app under You → Privacy. Google processes this data in the United States under its own terms and privacy policy, and may use it to measure our ads in Google Ads.

PostHog in the web app. app.tryantar.com also sends events and a session replay to PostHog, the same as the phone app does (tryantar.com itself does not). The events record each step you take and whether it worked: a screen was opened, a birth-detail step was finished (with how sure you were of the time, never the date, time or place), a place search found nothing, you chose Google or email to sign in, a sign-in step failed, a reading or a section of it was opened, a call started or ended and how long it lasted, the subscription page was shown or closed. Once you are signed in they are tied to your account. The replay records the pages you see, where you tap and how you scroll. How it is handled on the web, stated exactly:

• What you type is never recorded. Every text field is blanked in the browser before anything is sent, on every page.
• Words are hidden on every page about you. Where you enter your birth details or email, on Today, Life and every reading, where you talk or write to Antar, in a call summary, and on your friends, your account and what Antar remembers, every word is replaced with asterisks in your browser before it is sent. Unlike the phone app, these pages are still recorded, so a replay shows where you tapped and scrolled, but not what was written there.
• Words are visible only on pages that read the same for everyone: the welcome and sign-in steps, the page that invites you to talk, the plan and subscription pages, and settings. A new page is treated as one about you until we decide otherwise.
• Some things are never recorded. The sign-in page that Google returns you to is not recorded at all. Nothing from the browser's console or network traffic is recorded. Page addresses are cut down to the kind of page before they are sent, so no identifier or sign-in code in an address reaches PostHog.

The same bar decides both: say no and neither Google Analytics nor PostHog runs, and PostHog's code is not even loaded. In the EEA, the UK and Switzerland PostHog waits for a yes (we tell which region you are in from your device's time zone, so everywhere in Europe is asked). The data goes to PostHog through our own address, app.tryantar.com, and is processed in PostHog's United States region.

Your choices about all of this

• Decline the tracking prompt. That is the whole of it for the advertising identifier. Nothing else in Antar changes.
• Turn analytics and screen recording off. In the app under You → Privacy there is a switch that stops both the events and the replay. It takes effect immediately and the app keeps working.
• On the websites, answer the analytics bar with No thanks, or turn analytics off later in the web app under You → Privacy. One switch stops Google Analytics and PostHog, replay included.
• Or write to us. privacy@tryantar.com and we will switch it off on our side and delete what has been collected about you.

What we deliberately do not collect

• No device location. The app never asks for it. When you search for your birthplace, that search runs against a place-name file that ships inside our own server. Your search never leaves it and never reaches a third-party maps service.
• No advertising profile, and no selling. Antar measures itself and measures where installs come from, and both are described above. What it does not do is build a profile of you to sell advertising against, hand your data to a data broker, or use anything you tell an astrologer to target you. If you decline the tracking prompt, we do not track you across other companies' apps or websites at all.
• No conversation in the analytics. Your birth details, your chart, what you said to Antar and what Antar remembers are never sent to the analytics or attribution providers, and the screens where those things appear are excluded from screen recording.
• No photos, camera or files. The app asks for two device permissions and only two: the microphone, when you start a spoken consultation, and contacts, if you choose friend matching. On iOS you will also see Apple's tracking prompt, which is a question rather than a permission to reach anything on your phone. All three can be declined and the app still works.
• No voice recordings kept. Speech is transcribed and the audio is not stored by us.
• No payment details. Subscriptions are billed by Stripe on the web, or by Apple or Google in their app stores. Your card never touches our systems and we never see it.

Safety screening

What you say in a spoken consultation is checked for signs of self-harm or acute crisis before it reaches the astrology. That check is plain deterministic code running on our server, not a judgement call by a model, and when it fires Antar gives you helplines instead of a reading. It exists to get you to a person. We do not use it to profile you, we do not build a mental-health score, and we do not share what it finds with anyone.

Who else touches your data

Running the app means using other companies for pieces of it. Each one below receives only what it needs to do its part, is bound by a contract to process it only on our instructions, and none of them are permitted to use your data for their own purposes.

Supabase	Sign-in and the database your data lives in: account, birth details, chart, conversations, memory.
Vonage	Delivers the six-digit sign-in code by SMS. It receives your phone number and the code, and nothing else about you.
Railway	Hosts the server that runs the app.
Cloudflare	Serves this website and sits in front of our traffic for security and delivery. It sees connection data such as IP addresses.
LiveKit	Carries the live audio during a spoken consultation and passes it to the two speech services below. It is the pipe, not a store.
Deepgram	Turns what you say into text during a spoken consultation. It receives the audio of your voice while you talk.
Cartesia	Turns Antar's replies into speech. It receives the text of what Antar says, not your voice.
Google (Gemini), through OpenRouter	Google's Gemini model writes Antar's answers, spoken and typed, and your day, week and month readings. We reach it through OpenRouter. They receive your chart data, the relevant part of what Antar remembers, and what you ask. They do not receive your phone number or email address. The chart itself is computed by our own code; the model only puts it into words.
Stripe	Takes the payment for subscriptions bought on the web and runs the page where you manage or cancel one. It receives your card details directly, which never pass through our systems, your email address if you give it at checkout, and an account identifier.
Google Analytics	Counts visits to our websites and the sign-up and purchase steps, as described under On the websites. It does not receive your name, email, birth details or conversations.
RevenueCat	Tells our server whether your subscription is active. It receives an account identifier and store receipts.
PostHog	Product analytics and session replay, in the phone app and the web app. It receives the events described above, keyed to your account identifier, and the masked screen recordings. It does not receive your birth details, your chart or your conversations. We use PostHog's United States region, so this data is processed there wherever you live.
AppsFlyer	Install attribution: it tells us whether an install came from an advertisement, a link or the store. It receives device and app information, your IP address, install and subscription events, and your device's advertising identifier only if you allowed tracking when your phone asked.
Apple, Google	Take the payment and handle billing for subscriptions bought in their app stores. They also provide sign-in if you choose it.

These providers operate in the United States, the European Union and India, so your data is processed outside your own country. Transfers out of the EEA and UK rely on the European Commission's Standard Contractual Clauses and the UK Addendum. Two specifics we would rather state than leave you to assume: our PostHog project is in its United States region, so analytics events and screen replays are processed in the US for every user including those in the UK and the EU, with PostHog acting as our processor. For AppsFlyer we have not yet confirmed which region processes our data, and we would rather say that than name one we have not checked. We will state it here once we have. We do not sell your personal information. The one thing that leaves us for an advertising purpose is the attribution described above, and only if you allow tracking. Under Californian law that counts as sharing for cross-context behavioural advertising, so we say so: declining the prompt is how you stop it, and we treat the decline as an opt-out signal.

How long we keep it

Account, birth details, chart	Until you delete your account.
Conversations and memory	Until you delete them individually, or until you delete your account. Their whole value is that they accumulate.
Voice audio	Not retained. It exists only for the length of the call.
Uploaded contact hashes	Discarded once the match check has run.
Matched friends	Until you turn contacts off or delete your account.
Analytics events and screen replays	Held by PostHog under its own retention settings for our project. We have not set a shorter period, so we are not going to quote you a number we do not enforce. Deleted with your account, and sooner if you ask.
Attribution records	Held by AppsFlyer under its own retention policy. Deleted with your account, and sooner if you ask.
Server logs	Kept briefly for debugging and abuse prevention, then rotated.
Encrypted backups	Roll off within 30 days of deletion.
Billing records	Held by Apple, Google and RevenueCat under their own policies and tax law, not by us.

Your control over it

• Read what Antar remembers. Every remembered note is listed in the app under You → Memory.
• Delete any single note. Remove it there and it is gone; Antar will not act on it again.
• Turn off contacts. You → Contacts. The matches are forgotten.
• Turn off your public page. You → Public page. It is off unless you switched it on.
• Turn off analytics and screen recording. You → Privacy. Both stop, and the app is otherwise unchanged.
• Say no to tracking. Decline your phone's tracking prompt and the advertising identifier is never read. You can change your mind in your phone's settings either way.
• Delete your whole account, in the app. You → Account → Delete my account. The account record, birth details, charts, conversations, memory notes and friend matches go together. You can also write to privacy@tryantar.com from your account's address and we will do it for you within 30 days.
• Get a copy. Ask at the same address and we will send you everything we hold on you in a machine-readable file.
• Correct something. Birth details are editable in the app. For anything else, write to us.

GDPR, UK GDPR and India's DPDP Act

If you are in the EEA or the UK, the GDPR and UK GDPR apply. If you are in India, the Digital Personal Data Protection Act 2023 applies. Both give you real rights and we honour them for everyone, wherever you live, rather than sorting users by jurisdiction.

If you are in the UK or the EEA, note specifically that the analytics events and screen replays described above are processed in the United States, because that is the PostHog region our project sits in. PostHog is our processor and is bound to act on our instructions only. We are not going to quote you a transfer mechanism for that route that we have not verified ourselves, so instead we tell you the transfer happens and who does it, and if this matters to you the switch under You → Privacy stops it.

Our lawful bases (GDPR)

Contract	Account, birth details, chart, conversations and memory. You asked for an astrology app; these are what makes one.
Consent	Contacts matching, the microphone, the public page, and reading the advertising identifier for attribution. Each is off until you switch it on, and you can withdraw at any time in the app without losing the rest of the app.
Legitimate interests	Keeping the service secure, preventing abuse, the safety screening described above, and the product analytics and screen recording used to find faults and improve the app. We have weighed these against your rights, which is why the conversation screens are excluded and text is masked, and why the switch under You → Privacy exists.
Legal obligation	Retaining what the law requires us to retain.

Special category data

We do not ask for health data. But people talk to an astrologer about their health, their relationships and their beliefs, and anything you choose to say is stored in your conversation and possibly in what Antar remembers. Where that amounts to special category data under Article 9, we rely on your explicit consent, given by choosing to tell us. Delete the note or the conversation and it goes.

Your rights

Access, correction, erasure, portability, restriction, objection, and withdrawal of consent. Under the DPDP Act you additionally have the right to nominate someone to exercise your rights if you die or become incapacitated. Write to us and we will record it. We do not carry out automated decision-making that produces legal or similarly significant effects.

Use privacy@tryantar.com for any of these and we will answer within 30 days. If you are unhappy with the answer you can complain to your data protection authority (in the UK the ICO, in the EEA your national authority, and in India the Data Protection Board), but please try us first, because we would rather fix it.

Children

Antar is for people aged 13 and over, and 16 and over in the EEA and the UK. It is not designed for children, we do not knowingly collect anything from a child below those ages, and we do not target the app at them. If you believe a child has given us data, write to privacy@tryantar.com and we will delete the account and everything attached to it.

Security

Traffic is encrypted in transit, data is encrypted at rest, and access is scoped per user so one account cannot read another's chart or memory. There is no password to be stolen, because sign-in is a one-time code. No system is perfect; if we ever discover a breach affecting you we will tell you, and the regulators we are required to tell, rather than hope you don't notice.

Changes

If this policy changes materially we will say so in the app before the change applies, not quietly edit this page.

Contact

privacy@tryantar.com