Effective Date: 10th July 2026

Your birth is sacred. Your reflections are yours. Anantya is designed to protect both.

In plain language

• We do not sell your information, show ads, or use your data for advertising.

• Your birth date, time, and place are stored in encrypted form in our systems. Our AI provider receives only your name and your computed chart, not your raw birth details.

• We do not use your readings, questions, or reflections to train any AI model, ours or anyone else’s, unless you separately and affirmatively opt in.

• You can permanently delete your account, and everything with it, inside the app at any time.

• Bond and Union information about another person should be added only with their permission, and they can ask us to delete it.

The full policy below governs.

HIGHER SELF SOLUTIONS - FZCO (“Anantya,” “we,” “us,” or “our”) operates the Anantya mobile application, website, and related services (the “Service”). This Privacy Policy explains what information we collect, how we use it, how we share it, and the choices and rights you have.

This Privacy Policy should be read together with our Terms of Service. By using Anantya, you acknowledge the collection and use of information as described in this Privacy Policy.

Our privacy commitments

We designed Anantya with privacy as a first principle.

• We do not sell your personal information.

• We do not show advertising inside Anantya.

• We do not use your personal information for behavioral advertising.

• We do not use your readings, questions, messages, reflections, relationship data, or other personal content to train any AI model, ours or anyone else’s, unless you separately and affirmatively choose to participate in an optional program for that purpose.

• We use OpenAI to help generate personalized insights, and we disclose that use clearly in this Privacy Policy and in the onboarding consent flow.

• Your raw birth details are stored in encrypted form and are never sent to our AI provider.

Information we collect

Information you provide to us

We collect information you provide when you create an account, use the Service, purchase access, contact us, or interact with Anantya. This may include:

• account details, such as your email address, name, chosen name, login method, and authentication information

• birth details, including date of birth, time of birth, and place of birth

• profile information and preferences you choose to provide, such as display name, energy preference, or other personalization settings

• information about people you add for Bond or Union readings, including their name or chosen name and birth details

• questions, messages, or prompts you submit to Ask Anantya or similar interactive features, if available

• saved readings, notes, reflections, or other content you choose to create or store in the Service, if available

• support messages, feedback, survey responses, or other communications you send to us

Birth details are required for the astrological calculations that power the Service. If you do not provide accurate birth details, Anantya may not be able to generate accurate or personalized readings. Your birth date, time, place, and coordinates are protected with field-level encryption (AES-256-GCM) while stored in our database, and are decrypted only as necessary to perform astrological calculations and provide the Service.

Information collected automatically

When you use Anantya, we and our service providers may automatically collect limited technical and usage information, such as:

• device type, operating system, app version, language, and time zone

• crash reports, diagnostics, and performance data

• product usage events, such as screens viewed, features used, onboarding completion, trial starts, purchases, subscription status, Bond purchases, and feature usage

• approximate location inferred from IP address, where needed for security, fraud prevention, regional availability, or legal compliance

• pseudonymous identifiers used to operate the Service, maintain sessions, prevent abuse, measure performance, and understand product usage

Our analytics are configured so that the content of your readings, your Ask Anantya messages, your birth details, your full name, and your Bond or Union reading content are not sent to our analytics provider.

Payment information

Payments and subscriptions are processed through the app platform you use, currently Apple In-App Purchase. We do not collect or store your full credit card number, debit card number, bank account details, or other payment credentials.

We may receive purchase-related information from Apple and RevenueCat, such as product purchased, subscription status, trial status, renewal status, transaction identifiers, cancellation status, refunds, and entitlement information. This is used to provide paid access, manage subscriptions, prevent fraud, and comply with legal obligations.

Information we do not intentionally collect

We do not intentionally collect:

• government identification numbers

• full credit card or bank account details

• physical address

• phone number, unless added in the future with updated disclosure

• precise or continuous GPS location

• advertising identifiers for tracking across apps

• data purchased from data brokers

Sensitive personal information

Some information you provide to Anantya may feel deeply personal, including your birth details, relationship-related information, personal questions, notes, reflections, or messages to Ask Anantya.

Depending on your jurisdiction, some of this information may be considered sensitive personal information or may reveal sensitive aspects of your life. We process such information only to provide, personalize, secure, maintain, and improve the Service, and as otherwise described in this Privacy Policy.

Please do not submit medical, mental health, financial, legal, or other highly sensitive information unless you choose to do so and understand that it may be processed to provide the Service. Anantya is not a medical, mental health, financial, legal, or emergency service.

How we use information

We use information for the following purposes:

• to create and manage your account

• to generate your birth chart and related astrological calculations

• to generate Life Story, Current Chapter, Daily Truth, Bond, Union, and other readings

• to personalize your experience and maintain context across sessions

• to answer questions through Ask Anantya or similar interactive features, if available

• to process purchases, subscriptions, trials, renewals, cancellations, refunds, and entitlements

• to provide customer support

• to diagnose crashes, fix bugs, improve reliability, and secure the Service

• to understand product usage and improve the user experience

• to prevent fraud, abuse, unauthorized access, and misuse

• to comply with applicable law, legal process, tax, accounting, consumer protection, and platform requirements

• to enforce our Terms of Service and protect the rights, safety, and integrity of Anantya, our users, and others

We do not use personal information to show advertising inside Anantya. We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.

AI processing

This is an important section. Please read it carefully.

Anantya uses OpenAI to help generate personalized, literary, and interpretive text within the Service.

Anantya performs its own astrological computation on our servers. To create your readings and responses, we send OpenAI:

• your name or chosen name

• your computed astrological chart, such as planetary positions, houses, nakshatras, dasha periods, yogas, current transits, and derived interpretive factors

• for Bond or Union readings, the other person’s name or chosen name and their computed chart on the same basis

• questions, messages, or prompts you submit to Ask Anantya or similar interactive features, if available

• relevant context from your previous interactions with Anantya, where needed to generate a useful response

We do not send OpenAI your raw birth date, time, or place, your birth coordinates, your email address, your account identifier, your device identifier, your IP address, your payment information, or any advertising identifier. The chart is computed on our secure backend from your stored birth information; only the computed chart and your name or chosen name are included in requests to OpenAI.

OpenAI processes this information on our behalf to provide AI-generated outputs for the Service. OpenAI does not use our API data to train its models. Under OpenAI’s standard API retention, inputs and outputs may be retained for abuse monitoring for up to 30 days unless a different retention setting applies or longer retention is required by law.

We do not use your readings, questions, messages, or personal content to train any AI model, ours or anyone else’s, unless you separately and affirmatively opt in to an optional program for that purpose.

If we change AI providers, we will update this Privacy Policy and notify users where required. Personal data sent to a previous AI provider remains subject to that provider’s retention policies. Anantya may update its AI architecture over time, for example by reducing the information sent to AI providers, changing prompts or models, requesting reduced retention, changing providers, or adding new AI-powered features. If a change materially affects how your personal information is processed, we will update this Privacy Policy and provide notice where required.

AI-generated content may be inaccurate, incomplete, inconsistent, or subject to hallucinations. It should be treated as material for personal reflection, not as professional advice, factual certainty, or prediction of future events.

Bond and Union readings

Anantya allows you to create Bond or Union readings by adding another person’s details. This may include the other person’s name or chosen name, date of birth, time of birth, and place of birth. This information is obtained from you, the Anantya user, not from the person concerned.

We use this information only to generate and display relationship-related astrological calculations and readings for you, provide the Service, prevent abuse, and comply with legal obligations. Added Person birth details are protected with the same encryption and security measures as your own information and are processed only as necessary to provide the requested Bond or Union reading.

We do not create a user account for the other person merely because you add their details. We do not sell Added Person data. We do not use Added Person data for advertising.

When needed to generate a Bond or Union reading, we send our AI provider the Added Person’s name or chosen name and their computed chart, on the same minimized basis described in the AI processing section. Their raw birth details are not sent.

If an Added Person contacts us and asks us to delete their information from Anantya, we will take reasonable steps to verify and process the request. Added Persons may contact us at privacy@myanantya.com.

Human access to your content

Anantya personnel do not routinely read your readings, questions, or reflections. A limited number of authorized personnel may access specific information where necessary to respond to support you request, investigate security or abuse, correct a technical problem, or comply with law. Such access is restricted to those who need it and is logged where appropriate.

Service providers we use

We share information only as needed to operate, provide, secure, and improve the Service. Our service providers, and what each receives, are:

• OpenAI (United States): AI reading generation. Receives your name or chosen name and your computed chart, and Ask Anantya messages if available. Retains API inputs and outputs for up to 30 days for abuse monitoring; not used for training.

• Supabase (hosted on AWS, United States): authentication and our primary database. Holds your account details, encrypted birth details, charts, readings, Bonds, and consent records for the lifetime of your account, plus encrypted backup copies where backup or point-in-time recovery features are enabled. Deletion in the app permanently removes your information from our active systems; backup copies expire under our backup retention schedule.

• Google Cloud (United States): computing infrastructure that runs our backend. Processes request data in transit; operational logs are retained for approximately 30 days.

• Firebase Cloud Messaging (Google): push notification delivery only. Receives a push token. Analytics is disabled.

• PostHog (United States): product analytics and crash diagnostics. Receives a pseudonymous user identifier, device and app information, and product usage events. Does not receive your birth details, your full name, your full email address, or any reading content. Analytics history is deleted when you delete your account.

• RevenueCat (United States): subscription and purchase entitlement management. Receives a pseudonymous account identifier and App Store transaction data.

• Apple: Sign in with Apple, push notification transport, and In-App Purchase, under Apple’s own terms and privacy policy.

• Google: Sign in with Google, if you choose it, under Google’s own terms and privacy policy.

• Google Maps Platform: birth-place search during onboarding. Receives the place name you type and returns coordinates, which we store encrypted. Requests are proxied through our servers.

• Cloudflare: network security and content delivery in front of our services. Processes IP addresses and request metadata in transit.

• Postmark (United States): transactional email, such as sign-in codes. Receives your email address; message activity is retained for approximately 45 days.

We may also share information with legal, accounting, security, and compliance advisors where necessary. These providers are authorized to process information only for the purposes we specify and are required to protect it under contractual, confidentiality, and data protection obligations.

Legal and safety disclosures

We may disclose information if we believe disclosure is reasonably necessary to comply with applicable law, legal process, court order, or government request; enforce our Terms of Service; detect, prevent, or address fraud, security incidents, or technical issues; protect the rights, property, or safety of Anantya, our users, or others; or investigate or defend against legal claims.

Business transfers

If Anantya is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, information may be transferred as part of that transaction. We will provide notice if your information becomes subject to a materially different privacy policy.

No sale or behavioral advertising sharing

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not show third-party ads inside Anantya.

Tracking and advertising

Anantya does not track you across other companies’ apps and websites for advertising purposes. Anantya does not use your readings, birth details, questions, messages, or relationship data for behavioral advertising.

We may advertise Anantya on third-party platforms such as Apple, Google, Meta, TikTok, or similar platforms. To understand whether marketing works, we may use privacy-preserving or aggregated attribution methods, such as Apple SKAdNetwork or similar platform tools. These tools do not receive your reading content, Ask Anantya messages, birth details, or Bond or Union reading content from us.

If we ever introduce tracking that requires permission under Apple’s App Tracking Transparency framework or similar laws, we will request permission where required before tracking.

Cookies and website technologies

Our website may use cookies or similar technologies for essential site functionality, security, analytics, and performance. We do not use website cookies to sell your personal information or build behavioral advertising profiles based on your Anantya readings or content. You can control cookies through your browser settings.

Legal bases for processing

If you are in the European Union, European Economic Area, United Kingdom, Switzerland, or another jurisdiction that requires a legal basis for processing, we rely on the following legal bases:

• performance of a contract, to provide the Service you request

• consent, where you give consent for AI processing, push notifications, certain optional features, or other consent-based processing

• legitimate interests, to operate, secure, improve, and protect the Service, provided those interests are not overridden by your rights

• legal obligation, to comply with law, tax, accounting, consumer protection, and platform requirements

• establishment, exercise, or defense of legal claims, where necessary

Where we rely on consent, you may withdraw consent at any time. If you withdraw consent for processing that is necessary to provide the core Service, some or all of Anantya may no longer be available to you.

Because Anantya is operated from the United Arab Emirates, we also take into account applicable UAE data protection requirements, including the UAE Personal Data Protection Law, Federal Decree Law No. 45 of 2021, where applicable.

International transfers

Anantya is operated by HIGHER SELF SOLUTIONS - FZCO in the United Arab Emirates. Your information is processed primarily in the United States, where our database, computing infrastructure, and service providers operate, and may also be processed in the United Arab Emirates and other countries where we or our service providers operate.

These countries may have data protection laws that differ from those in your jurisdiction. Where required, we use appropriate safeguards for international transfers, such as Standard Contractual Clauses, data processing agreements, contractual protections, and other lawful transfer mechanisms.

Data retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Our general retention approach is:

• active account data: retained while your account is active

• birth details (encrypted) and readings: retained while your account is active, unless deleted earlier

• Bond or Union data: retained while needed for the feature, unless deleted by you, deleted through account deletion, or removed following a verified request from an Added Person

• Ask Anantya messages and responses, if available: retained while needed to provide the feature and maintain context; you may delete saved messages at any time through the Service, subject to retention requirements for legal, security, fraud prevention, compliance, or dispute resolution purposes

• product analytics events: deleted when you delete your account

• crash reports, diagnostics, and operational server logs: generally 30 to 180 days

• transactional email activity: approximately 45 days with our email provider

• support communications: generally up to 3 years

• purchase, subscription, tax, and accounting records: retained up to 7 years where required

• legal records: retained as long as necessary to comply with law or resolve disputes

• OpenAI API inputs and outputs: retained by OpenAI for up to 30 days for abuse monitoring unless a different retention setting applies or longer retention is required by law

If you delete your account, your personal information is permanently and irreversibly deleted from our active production systems immediately, and in any case within 30 days, unless retention is required for legal, security, fraud prevention, accounting, dispute resolution, or compliance reasons. Encrypted backups may persist for up to 7 days before being overwritten or deleted. We may maintain point-in-time recovery or similar disaster-recovery technologies, under which encrypted backup copies and database recovery logs may be retained for the applicable recovery window, solely for disaster recovery, business continuity, security, and system restoration. Backup copies are maintained separately from our active production systems, are not used for any other purpose, and are automatically overwritten or deleted under our backup lifecycle. A minimal, de-identified deletion audit record (a one-way hash, containing no readable personal information) may be kept for up to 12 months.

Security

We use technical, organizational, and administrative safeguards designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure. These safeguards include:

• encryption in transit (TLS) for all connections

• encryption at rest for our database, with your birth date, time, place, and coordinates additionally encrypted at the field level using AES-256-GCM

• secure processing of encrypted information only to the extent necessary to authenticate users, perform astrological calculations, generate personalized readings, maintain the Service, and provide requested features

• access controls and least-privilege permissions

• restricted internal access on a need-to-know basis

• network security and rate limiting at the edge

• logging, monitoring, and security reviews

• vendor due diligence and contractual protections

No method of transmission or storage is completely secure. We cannot guarantee absolute security.

If we become aware of a data breach affecting your personal information, we will notify supervisory authorities within 72 hours where required by law, and notify you without undue delay where the breach is likely to result in a high risk to your rights and freedoms.

Your rights and choices

Depending on where you live, you may have rights regarding your personal information, including the right to:

• access the personal information we hold about you

• correct inaccurate or incomplete information

• delete your personal information

• restrict or object to certain processing

• withdraw consent where processing is based on consent

• receive a copy of certain information in a portable format

• opt out of sale or sharing of personal information, though Anantya does not sell personal information or share it for cross-context behavioral advertising

• limit use of sensitive personal information, where applicable

• complain to your local data protection authority

You can exercise many rights directly in the app, including editing your profile information and permanently deleting your account (Settings, then Permanently delete account). For other requests, contact privacy@myanantya.com.

We may need to verify your identity before processing a request. We will respond within the timeframe required by applicable law.

Privacy enquiries and data protection requests may be sent to privacy@myanantya.com.

California privacy notice

If you are a California resident, this section provides additional information under the California Consumer Privacy Act, as amended by the California Privacy Rights Act.

Categories of personal information we may collect include:

• identifiers, such as name, email address, account identifiers, or device-related identifiers

• customer records, such as subscription or transaction-related information

• commercial information, such as purchases, subscription status, entitlements, and refunds

• internet or network activity, such as app usage events, diagnostics, and crash reports

• approximate geolocation, such as location inferred from IP address

• sensitive personal information, to the extent your birth details, questions, messages, relationship data, or reflections are considered sensitive under applicable law

• inferences, such as personalization derived from your chart or app usage

We collect and use these categories for the purposes described in this Privacy Policy.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not knowingly sell or share personal information of users under 16. We use sensitive personal information only for purposes permitted by law, including to provide, personalize, secure, and maintain the Service.

California residents may request access, deletion, correction, and other rights by contacting privacy@myanantya.com.

Children’s privacy

Anantya is not directed to children under 13.

You must be at least 13 years old to use the Service. If you are between 13 and the age of majority in your jurisdiction, you may use the Service only with the involvement and consent of a parent or legal guardian.

We do not knowingly collect personal information from anyone under 13. If we learn that we have collected personal information from a child under 13, we will take reasonable steps to delete it.

If you believe a child under 13 has provided us with personal information, contact privacy@myanantya.com.

Communications

We may send you service-related communications, such as account messages, sign-in codes, purchase confirmations, security notices, changes to the Service, legal updates, and support responses.

If we offer marketing communications in the future, we will provide a way to opt out where required by law.

Push notifications are controlled through your device settings and, where required, through in-app permissions and per-category in-app toggles.

Regional availability

Anantya may not be available in all countries or regions. We may restrict, suspend, or modify access to the Service in certain jurisdictions for legal, regulatory, operational, platform, or business reasons.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we will provide notice by in-app message, email, website notice, or another appropriate method. Where required by law, we will obtain consent before applying material changes to how we process your personal information.

Your continued use of the Service after the updated Privacy Policy takes effect means you accept the updated Privacy Policy, to the extent permitted by law.

Contact us

Privacy matters: privacy@myanantya.com General support: support@myanantya.com Legal matters: legal@myanantya.com

HIGHER SELF SOLUTIONS - FZCO Trade License Number: 66705 66705-001 Building A1, IFZA Properties Dubai Silicon Oasis Dubai, United Arab Emirates

If you are in the European Union, European Economic Area, United Kingdom, Switzerland, or another jurisdiction with a data protection authority, you may have the right to lodge a complaint with your local authority.

© HIGHER SELF SOLUTIONS - FZCO. All rights reserved.