Navashi ("the App") is operated by OccultSanctum ("we," "us," "our"), based in Perth, Western Australia, Australia. The App connects to our servers at myday.occultsanctum.com. For any privacy-related inquiry, contact us at occultsanctum@gmail.com.
Signing in is optional. You can open Navashi and use the calendar, panchang, festivals, muhurats, and most other features without creating an account. While you are signed out, your journal and practice notes and most preferences are kept on your device. Two features are the exception, and only when they are on: if you enable reminders, your device registers with our servers so we can deliver them (see Section 3.7), and usage analytics — which is on by default and can be switched off in Settings — sends interaction events tied to a device identifier (see Sections 3.6 and 14). You sign in only when you want to sync across devices or use features that require an account (such as exporting festivals to your calendar).
| Data | Source | Purpose |
|---|---|---|
| Name | Google / Apple sign-in | Account identification, greeting you in the app |
| Email address | Google / Apple sign-in | Account identification, account-related email, support |
| Google ID / Apple User ID | OAuth providers | Unique, stable account linking |
Sign in with Apple offers a "Hide My Email" relay — if you use it, we only ever receive the relay address, never your real email.
| Data | Purpose | Required? |
|---|---|---|
| City / place you choose, or your precise device location (only if you tap "use my location") | Computing sunrise, sunset, panchang, prayer times, zmanim, festival dates, and other location-dependent timings for your area | A location is required; precise GPS is optional — you can always search and pick a city by hand instead |
The App asks for precise location only when you tap the "detect my location" control. If you decline, nothing breaks — you simply pick your city from search. Place searches you type are sent to our servers, which resolve them to coordinates using a geocoding provider (see Section 6).
| Data | Purpose | Required? |
|---|---|---|
| Date of birth | Your birth star (nakshatra) and personalised daily reading | Optional |
| Time of birth | More precise birth-star calculation | Optional |
| Place of birth | Birth-chart calculation | Optional |
You only provide birth details if you choose to set up a personal chart / birth-star reading. If you never do, we never collect them.
Navashi includes personal practice tools. Anything you write in them is content you own. This can include:
While you are signed out, this content lives only on your device. When you are signed in, it is synced to your account so it is available across your devices and is not lost if you reinstall.
When you are signed in, the preferences needed to compute your calendar — your calendar packs, chosen traditions, location, Islamic madhab and prayer-calculation method, week-start, and content language — are stored with your account so your setup follows you across devices. Some display settings (theme, text size, tradition lens, and notification toggles) are kept on the device only and do not transfer between devices.
| Data | Purpose |
|---|---|
| Product interaction — which screens and traditions (lens) you open. Each event is tagged with your device identifier (see Section 14), and, when you are signed in, with your account, so it is not fully anonymous | Understanding which features matter so we can improve the App. Sent only to our own servers — no Google Analytics, Facebook Pixel, or third-party analytics SDKs |
| Crash and error reports — the error details, the screen/route active at the time, your device's IP address, and browser/OS user-agent | Diagnosing and fixing bugs. Crash reports are sent without your account credentials attached (they are not tied to your account) |
You can turn usage analytics off at any time in Settings → Privacy → Share usage data. Turning it off stops interaction events being sent; it does not affect crash reports.
If you enable reminders (for example, a sunrise or festival notification), your device is issued a push token by Apple (APNs) or Google (Firebase Cloud Messaging). To send the right reminder at the right time, your device registers that token with our servers together with the information needed to target it: your location (coordinates and timezone), your calendar packs and traditions, your Islamic madhab and prayer-calculation method, your tradition lens, and a device identifier (see Section 14). Because reminders work without an account, this registration happens whether or not you are signed in — but only if you have turned reminders on. We store it solely to schedule and deliver the reminders you asked for; it is not used for advertising or cross-app tracking. Only the push token itself is shared with Apple/Google; the targeting information stays on our own servers.
Some data you may provide is treated as sensitive under certain privacy laws:
By choosing a tradition and voluntarily providing this information, you give your explicit consent to us processing it for the purposes described here. You may withdraw consent at any time by changing your choices, deleting the data, or deleting your account.
We use your information only to:
We do not:
We share limited data with the following service providers, solely for the purposes stated:
| Service | Provider | Data Shared | Purpose |
|---|---|---|---|
| Sign-in | Google, Apple | OAuth tokens, name, email | Account authentication |
| Hosting | Render | App data on our servers | Running Navashi's backend |
| Geocoding | Google Maps / Places, OpenStreetMap (Nominatim) | The place name you type, or your device coordinates when you tap "use my location" (for reverse geocoding) | Resolving a place to coordinates, or coordinates to a place name |
| Push notifications | Apple (APNs), Google (Firebase Cloud Messaging) | Device push token only | Delivering the reminders you enable |
Each provider operates under its own privacy policy. We do not control how these providers handle data once it is transmitted to them. Navashi does not use any AI/large-language-model provider to process your personal data, does not upload photos or images, and does not send you marketing email.
Your account data is stored on servers managed by Render, Inc., in data centres with industry-standard physical and digital security. We protect your data with:
In the event of a data breach likely to put your rights at risk, we will notify affected users and any required authority in accordance with applicable law.
Upon account deletion, we remove your personal data within 30 days, except where retention is required by law.
Depending on your jurisdiction, you may have the right to access, correct, delete, or port your data, to withdraw consent, to object to certain processing, and to complain to a data-protection authority. To exercise any of these, contact occultsanctum@gmail.com; we respond within 30 days. You can also delete your account and its data directly in the App at Settings → Delete account.
We comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). Where there is any inconsistency between this policy and the APPs, the APPs prevail. Australian residents may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
Navashi is completely free. There are no subscriptions, no in-app purchases, and no in-app currency. We do not collect or process any payment information, and the App does not integrate any payment or billing service.
If you use Navashi from outside Australia, your data will be transferred to and processed in Australia (or wherever our hosting provider maintains servers). By using the App you consent to this transfer. We take reasonable steps to keep your data secure and handled in accordance with this policy wherever it is processed.
For users in the European Economic Area or the United Kingdom, your data is processed on the basis of your consent, which you may withdraw at any time. For users in India, we comply with applicable provisions of the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 to the extent applicable; your data is processed with your consent and you may withdraw it and request deletion.
Navashi is not directed to children under 13, and we do not knowingly collect personal information from children under 13. The App may be browsed without an account, but creating an account and providing personal data requires you to be at least 13. Users aged 13–17 should use the App with parental involvement. If you believe a child under 13 has provided us personal data, contact us and we will delete it promptly.
On first launch the App generates a random device identifier (a UUID) and stores it on your device. We use it to attribute usage analytics and push registrations to your device across sessions — for example, so repeated interaction events are counted as one device rather than many. It is a first-party identifier: it is created by us, used only by us, and is never shared with third parties or used to track you across other companies' apps or websites. It is not derived from your hardware, so it is not a fingerprint. If you reset it (by deleting the App's data or reinstalling), a new one is generated.
The App also uses a secure session token to keep you signed in. We do not use advertising cookies, retargeting, third-party analytics trackers, cross-site or cross-app tracking, or device fingerprinting.
If you opt in, we send the reminders you choose (such as sunrise or festival notifications). You can disable them any time in the App's Settings or in your device settings. Push tokens are never used for tracking or profiling.
You can delete your account and all associated personal data at any time from Settings → Delete account inside the App, or by contacting occultsanctum@gmail.com. On deletion:
We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date, and for material changes make reasonable efforts to notify you in-app. Your continued use of the App after changes are posted constitutes acceptance of the updated policy.
OccultSanctum — Privacy Enquiries
Email: occultsanctum@gmail.com
Website: myday.occultsanctum.com
Location: Perth, Western Australia, Australia
This Privacy Policy should be read together with our Terms of Use.
For complaints that are not resolved to your satisfaction, Australian residents may contact the OAIC at www.oaic.gov.au/privacy/privacy-complaints.