CHITTA Privacy Policy

1. Introduction

Welcome to CHITTA ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we handle your personal data when you visit our website and use our services, and tell you about your privacy rights.

2. Data We Collect

We may collect the following types of information:

• Account Information: When you create an account, we collect your name, email address, and password.
• Dream Content: The dream descriptions and experiences you choose to share with our service.
• Other Content You Submit: The questions and context you give Ask Bindu, the waking-life context you add to a dream, your Academy practice entries, and the profile photos, posts and images you share in the community.
• Voice Input: If you speak a dream or question instead of typing it, the audio is streamed for transcription. We keep the transcribed text, not the audio.
• Usage Data: Information about how you use our website, including login frequency and feature usage, and a browser identifier described in section 5.
• Authentication Data: When you sign in with a third-party provider like Google, we receive basic profile information as permitted by your privacy settings with that provider.

3. How We Use Your Data

We use your personal data for the following purposes:

• To provide and maintain our service
• To personalize your dream interpretation experience
• To improve our services based on how users interact with our platform
• To review and improve the accuracy of our dream interpretations, as described below
• To communicate with you about your account or changes to our services
• To process payments when you upgrade to premium features

How your dreams help improve CHITTA. Members of the CHITTA team may read a dream, together with the interpretation CHITTA gave for it, in an internal review desk, to judge whether the interpretation was accurate, and may record notes on it. A reviewed dream and its interpretation may then be copied into our evaluation set: test cases we run each new version of the interpretation engine against, so that future versions interpret more accurately. Copies in the evaluation set carry no name, email address or account ID, but the dream text is kept as it was written. We do not use your dreams to train or fine-tune AI models.

4. Data Security

We implement appropriate security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Your dream content and personal information are encrypted and stored securely.

5. Service Providers and Data Sharing

We do not sell or rent your personal data to third parties. We share it only with the service providers below, each for the purpose listed, and with law enforcement agencies when required by law.

• Anthropic (Claude) — the dream text, context, questions and Academy practice entries you submit, with the history needed to answer them (for Ask Bindu: your recent dreams and readings, earlier consultations, questionnaire answers and, if you gave a birth date, your astrological signs), to generate interpretations and guidance.
• OpenAI — the text of your Ask Bindu question (your challenge, desired outcome and obstacles), converted into a search embedding to find relevant passages from the CHITTA books. Your dreams are not sent to OpenAI.
• Deepgram — the audio of voice input, to transcribe it into text. We opt every request out of Deepgram’s model-improvement program, so your voice is not used to train its models and is kept only as long as the transcription needs.
• Google Analytics 4 (Google) — the pages you visit, page titles, your interface language, checkout and purchase events (plan and amount), and technical data such as your IP address and browser, to measure how the site is used.
• Plausible Analytics — page visits, the referring site, outbound-link and download clicks, and referral codes in links, for cookie-free visit statistics.
• Microsoft Clarity (Microsoft) — session recordings and heatmaps (clicks, scrolling and page interactions), your interface language, our internal numeric account ID when you are signed in, and a random visitor ID from our own cookie, to understand how visitors use CHITTA. Not your email address, and not the browser identifier described below.
• Stripe — your email address, name, account ID, country and billing details, to process payments. Card details are entered directly into Stripe and never reach our servers.
• Brevo — your email address, name, language and the content of the emails we send you, to deliver account, verification and service emails.
• Cloudinary — the profile photos and community images you upload, to store and display them.
• Google Sign-In (Google) — if you choose "Continue with Google", Google shares your name, email address, Google account ID and profile photo with us to sign you in.
• Replit — hosting for our application (running on Google Cloud), including server logs that contain IP addresses and account email addresses.
• Neon — hosting for the PostgreSQL database that stores your account and content.
• Sentry — technical error reports when something breaks, with email addresses, dream text and birth details removed.
• Web push services — if you turn on notifications, your browser’s push service (for example Google, Mozilla, Microsoft or Apple) delivers them.
• Blotato — if you comment on or message CHITTA’s social media accounts, we receive your handle and message through this social media management tool.

Some pages also load fonts from Google Fonts, images from content-delivery networks, and embedded videos from YouTube or Loom; those providers receive your IP address and browser details when the content loads.

Browser identifier. Our site computes an identifier from your browser’s characteristics using the open-source FingerprintJS library. It is sent only to our own servers, to keep free dream readings to their fair limit and to restore a dream you started before signing up. It is never sent to an analytics service. It is not a cookie, and the cookie choice below does not switch it off. The library’s maker receives an occasional technical request (about 1 in 1,000 page loads) that carries no identifier.

Cookies & analytics. Google Analytics and Microsoft Clarity use cookies. In the app, visitors in the EU/UK are asked first, and those cookies stay off until you accept them; everywhere else they are on unless you decline. You can decline or change your choice at any time through the "Cookie preferences" link in the site footer, and a decline is honoured in every country. After a decline, Google Analytics still receives page views without cookies. On our article and dream-symbol pages, which do not show the cookie banner, Microsoft Clarity loads for visitors outside the EU/UK unless they have declined in the app; for visitors in the EU/UK it loads only if they have accepted cookies in the app. Plausible Analytics does not use cookies and is not affected by the cookie choice. Text you type into forms, including every dream you enter, is masked in Clarity recordings. For details, see Microsoft's privacy statement.

6. Your Rights

Depending on your location, you may have the following rights regarding your data:

• Access: Request access to your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Data Portability: Request transfer of your data to another service
• Opt-out: Control the use of your data for certain purposes

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal or reporting requirements.

8. Children's Privacy

Our service is not intended for children under 13 years of age, and we do not knowingly collect personal data from children under 13.

9. Changes to This Privacy Policy

We may update our privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "last updated" date.

10. Contact Us

If you have any questions about this privacy policy or our data practices, please contact us at support@usechitta.com.