Effective date: 10 October 2026
1. Scope and controller
This policy applies to the StarManifest consumer app, StarManifest Expert app, website and related support services. Truly Worlds Groups Private Limited is the data controller for personal information processed through these services.
StarManifest provides astrology, spiritual and personal-reflection experiences. Information you share may be sensitive to you, so we design access around the service you request.
2. Information we collect
Account and profile
Name, phone number, email address, profile image, language, city and account preferences. Expert accounts may also include identity, professional, tax, bank, business and verification information.
Birth and report details
Date, exact time and place of birth, coordinates and timezone resolved from a selected place, the report selected, report calculation inputs and outputs, order status, delivery email and consent record. A website report can be purchased without a mobile-app account.
Sessions and communications
Queue activity, bookings, session status and duration, chat messages, voice notes, attachments, support requests, reports, reviews and consent choices. Calls and broadcasts use third-party real-time communication infrastructure. We do not record a private session unless a recording feature is clearly offered and you provide the required consent.
Payments and transactions
Wallet balance, recharge and usage records, report order references, prices, taxes, payment status, refunds, disputes and reconciliation references. Payment card, bank or UPI credentials are handled by the payment provider; StarManifest receives transaction status and references rather than full payment credentials.
Device and security
Device type, app version, push token, IP address, login and audit events, crash diagnostics and security signals. Website report checkout uses Cloudflare Turnstile to evaluate limited browser, network and interaction signals needed to distinguish legitimate visitors from automated abuse before an order is created. Turnstile does not receive the name, contact or birth details entered in the checkout form. Location permission is requested only when a feature needs it; website report checkout uses the place you select and does not require device location permission.
Website usage, analytics and conversion measurement
On Home and Reports, Microsoft Clarity Consent Mode can provide cookieless, page-scoped measurements while analytics storage is denied. If you allow Analytics in Cookie choices, Clarity can additionally use cookies and session continuity to help us understand how visitors move through the website and where the experience can be improved. It can collect page visits, clicks or taps, scrolling, cursor movement, navigation paths, browser and device information, performance and diagnostic data, and session replays. Form controls are masked by Clarity, and StarManifest additionally marks the report checkout and order-status areas for masking so readable names, contact details, birth details and order references are not uploaded in these recordings.
If you allow Advertising measurement, the website loads Meta Pixel and sends PageView, a report-specific ViewContent event when you open a report, and an InitiateCheckout event when you open checkout. These events can include the public report product identifier and title, page URL, displayed total and payment currency (INR or USD), together with associated browser, device, network and Meta cookie identifiers. They do not include the buyer name, contact details or birth details. The pixel is not requested before this choice and automatic form or button tracking is disabled. A private order-status URL is not measured.
After Razorpay confirms a consented purchase, our server may also send Meta a Purchase conversion containing the public report product identifier and title, payment time, amount and currency together with one-way SHA-256 hashes of the buyer email address and mobile number. This helps measure which report an advertisement led to. We do not send Meta the buyer name, birth details, birthplace, calculation inputs, report content or order reference.
When an order URL contains advertiser-controlled UTM campaign labels, StarManifest can retain the source, medium, campaign and content labels with the order for its own revenue reporting. This first-party order record does not retain fbclid, Meta cookie identifiers or a cross-page visitor profile, and is not itself sent to Meta.
With the same choice, our server may send OpenAI Ads an Order Created event containing an opaque event ID, event time, the StarManifest reports URL and the event type. This event does not contain the buyer's name, email, mobile number, payment amount, currency, birth details, report selection, astrology inputs or order reference.
3. How we use information
- Create and secure accounts, authenticate sessions and prevent abuse.
- Validate website report inputs, generate the edition purchased and deliver its private PDF.
- Match consumers with available experts and operate queues, calls, chat and notifications.
- Process wallet and website payment activity, taxes, payouts, refunds, disputes and financial reconciliation.
- Moderate content, investigate reports and protect consumers and experts.
- Provide support, respond to grievances and send order acknowledgements, report delivery and other service communications.
- Understand website navigation and drop-off points, measure completed purchases attributed to advertising, and improve accessibility, performance, usability and product quality.
- Meet tax, accounting, law-enforcement and other legal obligations.
Where required, we rely on your consent. Other processing is necessary to perform our contract with you, protect legitimate interests such as fraud prevention, or comply with law.
5. Retention and security
A website checkout that never reaches the payment provider is removed after 24 hours. A gateway-backed checkout closes after 24 hours; its encrypted contact and birth details may remain for up to 30 days so a payment made within the checkout window can still be reconciled safely. For a paid report, encrypted contact details, birth inputs and the generated PDF are retained for 30 days after payment so we can fulfil, redeliver and support the order, then automatically deleted. Non-personal email delivery event identifiers are removed after 90 days. A non-personal payment tombstone and transaction, tax, refund or dispute records may be retained longer where law, reconciliation or a legitimate legal claim requires it.
Website birth details and report PDFs are encrypted at rest with versioned keys; transport to the private report engine and email provider uses authenticated encrypted connections. We also use access controls, secret management, bounded service logs and payment-signature verification. No service can guarantee absolute security; report a suspected issue immediately through our contact channels.
6. Your choices and rights
- Review and update profile information in the app.
- Control push notifications and device permissions in app or operating-system settings.
- Use your browser settings to block or delete analytics cookies; where consent is legally required, Microsoft Clarity uses the available consent signal before placing its analytics cookies.
- Request access, correction, portability or deletion where applicable.
- Withdraw optional consent without affecting earlier lawful processing.
- Delete your account in app or follow our account deletion instructions.
StarManifest is intended for adults aged 18 or over. We do not knowingly offer accounts to children.
7. Contact and grievances
Email support@starmanifest.com for privacy questions. For a formal complaint, see the grievance officer page.
We may update this policy as services or law change. Material changes will be communicated through the app or this website, and the effective date above will be revised.
Regional website pricing
We estimate your browsing network’s country from its IP address to select the website’s regional prices and payment currency. This lookup runs locally on our server using the DB-IP Country Lite database; we do not send your IP address to DB-IP for this lookup. Your birth country does not determine the price. A VPN or other network routing can affect the estimate. The regional price selection is used for the requested checkout, not as proof of residence or tax status.
Free sky snapshot emails
When available, you can request one free sky snapshot without creating an account or making a payment. We use the name, email address, birth date, birth time or unknown-time choice, selected birthplace and its coordinates and timezone, time source and optional area of interest to prepare and email the snapshot. This is the same English email edition worldwide. The email includes suggestions for relevant paid StarManifest reports; we send only the snapshot you request. You will not be added to a mailing list or a sales-email sequence, and you will not receive marketing follow-up emails from this request.
Our website relays the request to the snapshot service. That service uses the visitor IP address and protected email identifiers to enforce request limits. The form is marked for masking in session recordings, and the website does not save the form details in browser storage or include them in advertising events. Use the unsubscribe link in the email or contact support@starmanifest.com for help with email preferences or a deletion request.