Privacy Policy
Effective 10 August 2026 · Last updated 4 September 2026
Private beta, for testing only. QuickPanchang is a pre-release build shared with a small group for feedback. This policy reflects how the software handles data today; it has not been reviewed by a qualified lawyer, and the formal operator identity will be published before public launch. Please do not enter anything you are not comfortable sharing during a pre-release test.
QuickPanchang (“we”, “us”) is currently a private beta operated by Quickpanchang.com. This policy explains what we collect when you use quickpanchang.com, why we collect it, who else sees it, and what you can ask us to do about it.
We have tried to write this so it can actually be read. Where a legal term is unavoidable we have said what it means in practice.
The short version
- You can browse Day and month Panchang without an account. The muhurta planner requires signing in. Guest sessions may still exist for other free-tier pages (for example ads eligibility).
- If you provide birth details, they are used to personalise timing results. Nothing else.
- We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
- The free and anonymous tiers may show ads supplied by Google Ad Manager. We request Limited Ads only: no personalised advertising or identifier-based ad features. Premium accounts are ad-free.
- Analytics and session-recording tools exist in our codebase but are switched off. If that changes, this policy changes first, and EU/UK visitors will be asked before anything loads.
- You can delete your account and data at any time.
What we collect
Information you give us
| Data | Why |
|---|---|
| Email address | To create your account, sign you in, and send sign-in links. |
| Display name (optional) | To address you in the interface. |
| Birth date, birth time, and birth place (optional) | To derive your birth nakshatra, rashi and dasha period, which are what make personalised timing results possible. Without them the app still works, using general rather than personalised results. |
| Location for a query: city, or latitude and longitude | Sunrise, sunset and every period derived from them are location-specific. This applies to the public calendar as well as the planner; a result computed for the wrong place is simply wrong. |
| Your plans, saved results and preferences | To show you your saved plans, and to remember language, region, theme, public-calendar location and calendar choices. |
Information created automatically
- An install identifier. A random value generated by your browser and stored in both local storage and a first-party cookie named
qp_install_id, so an anonymous session can survive a page reload and some cookie or storage clears. It is not derived from your name or email. - A soft device continuity signal. A hashed summary of ordinary browser/environment attributes (for example time zone, language, and screen size), stored in local storage as
qp_device_fpand sent on planner requests. It is not a unique hardware serial, is not used for advertising, and is not used to merge one visitor into another guest account. Anonymous continuity after a reload usesqp_install_idonly. - An authentication token stored in a cookie named
qp_jwt, which is how we know you are signed in. - Server logs: request paths, timestamps, status codes and error traces, kept for security and debugging.
Cookies
We use first-party cookies qp_jwt (session) and qp_install_id (anonymous continuity). They are strictly necessary for the service to function and carry no advertising or profiling purpose. When an eligible advertising slot is enabled, QuickPanchang loads Google Publisher Tag from Google's Limited Ads endpoint and explicitly requests limited, non-personalised and restricted-processing treatment. We require our Ad Manager network's optional Programmatic Limited Ads setting to remain off; Google documents that turning it on may use fraud-detection-only cookies and local storage. Google's tag and creatives may still be cached by the browser as part of normal delivery. We do not pass birth details, precise query coordinates, plan text or account identifiers to Google as ad-targeting values.
Advertising request data
For an anonymous or free-tier visitor on an approved ad-supported page, Google may receive the ordinary technical information needed to deliver and measure an ad, such as IP address, browser and device information, the non-sensitive page path, ad-unit and size, timestamp, and whether an ad rendered. An IP address can imply an approximate location. We do not show ads on sign-in, profile, legal, shared-plan or persisted-plan pages, and we do not use Google Ad Manager for cross-context behavioural advertising. Advertising is controlled at runtime and may be switched off entirely.
Sensitive information: read this part
Two categories deserve to be called out rather than buried.
Birth details. QuickPanchang is a cultural planning assistant rooted in the Telugu Panchangam tradition. Depending on where you live, information about your participation in a practice of this kind may be treated in law as revealing religious or philosophical beliefs, and given extra protection. We therefore treat your birth data as sensitive: it is optional, it is used only to compute timing results for you, it is never used to build a profile for any other purpose, and you can delete it while keeping your account.
Precise location. Latitude and longitude are precise geolocation, which several US state privacy laws classify as sensitive personal information. We use it only to compute panchangam values for that place. You can use a city name instead of sharing precise coordinates.
Why we are allowed to use it
If you are in the UK, the EU or another region with a similar law, our legal bases are:
- Contract: to give you the service you asked for: your account, your plans, your saved results.
- Consent: for optional birth details, and for anything we treat as special-category data. You can withdraw consent by deleting that data, without losing your account.
- Legitimate interests: keeping the service secure, preventing abuse, and fixing faults. We limit this to what is needed.
- Legal obligation: where we must keep records.
Who else sees your data
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We use a small number of service providers to run the product:
| Provider | What it handles |
|---|---|
| Supabase | Account authentication and the database holding your account, plans and birth details. |
| OpenStreetMap (Nominatim) | City search and reverse lookup. When you search for a place or ask us to resolve your coordinates, that place or those coordinates are sent to OpenStreetMap to get a name and time zone back. Your identity is not sent with it. |
| Our hosting provider | Runs the servers. Has no application-level access to your account. |
| Google Ad Manager (free and anonymous tiers only) | Delivers and measures Limited Ads in administrator-approved slots. Premium users do not load the ad library. We configure requests as limited, non-personalised and restricted processing; Google still receives the advertising request data described above. |
| RevenueCat (if you purchase) | Subscription status. Card details go to the app store or payment processor and never reach us. |
| Expo (only if you enable notifications) | Delivers push notifications to your device. |
We may also disclose information if we are legally required to, or to protect the rights and safety of users.
Shared plan links
If you create a share link for a plan, anyone holding that link can view that plan without signing in. That is the point of the feature, but it means a link is as private as you keep it. You can stop sharing at any time.
International transfers
QuickPanchang relies on cloud infrastructure that may store and process your information in a country other than the one you use it from, which may not provide the same level of protection as your home jurisdiction. During this private beta your account and birth details are held in a managed database, and the app is served from our hosting provider; the specific processing locations will be listed here before public launch. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses with our providers.
How long we keep it
- Account data: until you delete your account.
- Plans and saved results: until you delete them, or until your account is deleted.
- Birth details: until you remove them or delete your account.
- Anonymous sessions: expire after 2 days of inactivity. Converting the session into a registered account (an) email sign-in) removes that deadline. Associated records carry no email or name.
- Server logs: a short operational period, then discarded.
Your rights
Wherever you live, you can ask us to give you a copy of your data, correct it, or delete it. We do not charge for this and we will not treat you differently for asking.
United States
Depending on your state (California, Virginia, Colorado, Connecticut, Utah, Texas and others have comparable laws) you may have the right to know what we collect, to access and delete it, to correct it, to obtain it in a portable form, to opt out of sale or targeted advertising, and to limit the use of sensitive personal information. Some states also give you a right to appeal a refusal.
We do not sell personal information and we do not use it for targeted advertising. Google Ad Manager is restricted to Limited Ads rather than personalised or cross-context behavioural advertising, so there is no targeted-advertising profile to opt out of. We use sensitive personal information only to provide the service you asked for.
California residents may also request the categories of personal information we collected and disclosed in the preceding twelve months; this policy describes them. You may use an authorised agent.
UK and European Economic Area
You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent at any time. You may complain to your supervisory authority: in the UK, the Information Commissioner's Office.
India
Under the Digital Personal Data Protection Act, 2023 you may access a summary of your data, request correction or erasure, nominate someone to exercise your rights, and raise a grievance with us.
How to exercise any of this
Email support@quickpanchang.com. We will verify your request against the email on your account and respond within the period your law allows: 45 days in most US states, one month under the UK and EU GDPR.
Children
QuickPanchang is not intended for children under 13, and we do not knowingly collect their information. If you believe a child has given us data, write to us and we will delete it. Where local law sets a higher age of digital consent, we follow that instead.
Security
Traffic is encrypted in transit. Authentication tokens are held in an httpOnly cookie so that scripts on the page cannot read them, and we support passkeys so you need not have a password at all. Access to production data is limited to the operator.
No service can promise perfect security, and we will not pretend otherwise. If a breach affects you we will notify you and the relevant regulator as the law requires.
Changes
If we change this policy materially (for example, if we turn on analytics or move beyond Limited Ads) we will update the date above and, where the change is significant, tell you in the app before it takes effect. Personalised advertising or advertising storage would require a separate consent and legal rollout; it cannot be enabled by the current administrator configuration.
Contact
Quickpanchang.com
support@quickpanchang.com