Trust

Privacy Policy

Last updated: October 22, 2026

KarmaLens is the product; this site is served at karmalens.ai. This page describes, in plain language, what we may collect today, why we use it, and what we do not do.

What we may collect

Account details

If you create an account, we store basics like your name and email so you can sign in, verify your address, and reach you about your account.

Google sign-in

If you use Google sign-in—Google’s one-tap prompt, or Continue with Google on the login or signup page—the sign-in flow may share limited profile information with KarmaLens, such as your name, email address, and a stable identifier Google uses for your account, so we can create or sign you in. KarmaLens does not receive your Google password. Google sign-in is optional; you can use email and password on the same screens whenever both are shown.

So that signing in takes one tap, Google’s sign-in library (loaded from accounts.google.com) runs for signed-out visitors on these pages: the home page, the write page, the topic pages (/decide/relationships/, /decide/career/, /decide/family/, /decide/founder/ and /gita/), and the sign-up and log-in pages. It lets Google show the prompt to a browser that is signed in to Google; Google is told the visit is to karmalens.ai (the site, never the page’s path). KarmaLens never sends Google the words you write in the dilemma box.

KarmaLens does not intentionally store OAuth access tokens after sign-in. Tokens are used only to complete the exchange with Google; afterward your normal KarmaLens session applies. As stated elsewhere here, we do not sell your personal information.

Dilemmas and analyses

When you run a reading, we process the dilemma text you submit and keep the result in your signed-in history (for example the call, the first step, the options and their costs, the verse or the reason none fits, your commitment and its check-ins, and share-friendly lines), so you can return to it later.

Where Sarathi’s memory is on, it keeps short notes from your readings (a thread title, a commitment, its status) so the next conversation can pick up the thread. You can see, edit or forget each note, or forget everything, on your account’s memory ledger, once you are signed in; deleting your account deletes them too.

To produce a result, the dilemma text is sent to our language-model provider for that single analysis; we do not retain provider prompts or model traces in your history.

If you talk to your Sarathi about a reading, those messages are stored with that reading in your signed-in history so the conversation can pick up where it left off; deleting the reading deletes its conversation. Like the dilemma itself, conversation messages are sent to our language-model provider only to generate each reply.

Speaking your dilemma

When you are signed in and your browser can record, the recording is sent to our speech-to-text processor, Sarvam AI, only to turn it into words. The audio is not stored, by us or in your history: the words land in the box for you to read and edit, and nothing is analysed until you press Analyse. Each note is short (up to 29 seconds at a time) and the number of notes a day is capped.

Otherwise (signed out, or a browser that cannot record), the mic uses your browser's own dictation: KarmaLens receives no audio, only the words you choose to submit, and your browser's maker may process the audio under its own terms.

Words you type before signing in

If you start writing before you have an account, the words stay in your browser only: in this tab for the sign-up, and as a copy on this device for 24 hours so the reading page can pick them up once you are signed in. The reading page sends them to us only to start the reading you asked for, when it opens after you sign up or sign in; they are read once and cleared, and signing out clears them. Nothing is held against your browser session on our servers before you sign in.

If a dilemma signals a crisis, we show the safety guidance immediately and store nothing.

Feedback you send

Optional feedback you choose to submit (such as usefulness signals, short tags, or a brief comment) is stored in line with the product’s feedback design—intended to improve quality, not to replace human judgment on every submission.

Technical logs

Like most sites, we keep routine technical records needed to run the service safely: for example errors, rate limits, and security signals. These are for reliability and abuse prevention, not for resale.

Where you came from

When you first open KarmaLens we note, in your browser session and — if you sign up — on your account, a small record of how you arrived. It holds only: the type of page you landed on (its route name, never the address itself), any campaign tags on the link (utm_ parameters), whether an advertising click id was present (ChatGPT, Google, Meta, Microsoft or TikTok — the id itself is not kept, except Google’s, which we use to report a purchase back to Google Ads), the names of other link parameters (never their values), and the site that sent you, reduced to its domain and a class (search, mail, sign-in, other).

We keep it to learn which channels bring people who find KarmaLens useful, so that we spend on those and not on the rest. It is stored as part of running the service (a legitimate interest), not under the advertising consent described below, because it contains no page content, no tokens, no full addresses and nothing about your dilemma. The session copy expires with the session (at most two weeks); the account copy lives as long as your account, and goes when the account is deleted.

We also keep a short record of which pages were viewed, as route names only — “the home page”, “a topic page”, “the reading page” — never the page’s address, never a query string, never a share or check-in link, and never anything you wrote. It tells us how people move through KarmaLens (which page they open first, where they go next, where they leave) so that we can improve the paths that lose people. Each view is keyed to your account when you are signed in, and to a keyed hash of your browser session when you are not; if you sign up, the views from that same browser session are joined to your account. This record is kept for 90 days, then deleted; it is deleted with your account; our own staff are never recorded in it. Like the record above, it is kept as part of running the service, not under the advertising consent below.

How we use this information

  • To deliver analysis results and show them in your session.
  • To maintain your account and saved history on the product.
  • To improve clarity, safety, and usefulness over time.
  • To detect misuse, protect accounts, and keep the service stable.
  • To respond when you contact support.

What we do not do

No selling your personal story

We do not sell your personal information as a product category.

No hidden “always-on human review”

Feedback may be reviewed in aggregate or when you reach out—but the app does not promise that a person reads every submission in real time unless we say so plainly elsewhere.

Sign-in and payments

On karmalens.ai, Google sign-in is optional—you can use email and password on the same login and signup screens.

Paid checkout and billing are live; the Pro subscription (and any earlier purchase or legacy plan) is processed securely by Razorpay, our payment provider. KarmaLens never sees or stores your card or UPI details. The pricing and billing screens describe what applies.

Email categories

We send two kinds of email. Both come from [email protected].

Account-related (transactional) emails are tied to your use of the product: sign-up verification, password reset, payment receipts, security alerts. These are sent when the corresponding event occurs and cannot be turned off while you have an active account.

Optional (marketing) emails include the weekly newsletter, product updates, re-engagement reminders, and occasional discount or promotion notices. Each of these channels can be turned off individually on your email preferences page, or by clicking the one-click unsubscribe link in the footer of any marketing email you receive.

Turning off all marketing channels does not affect transactional emails.

Cadence: the weekly newsletter goes out on Sunday evenings (India time) to the accounts that have it on: one reading of a dilemma we wrote, quoted word for word — never your own readings.

Tracking: when you open or click a link in one of our marketing emails, our sending provider (Brevo) reports the event back to us so we can measure overall engagement and stop sending to addresses that consistently bounce or report spam. We do not use that data to profile individual readers and we do not sell it.

Public sharing (gallery)

You can request to share one of your own analysis results to the public KarmaLens gallery at karmalens.ai/gallery/. Sharing is opt-in per card; nothing is shared by default.

What gets published. The card — the verdict line, the share quote, the reflective question, and a theme label — plus a short, anonymized restatement of your dilemma. Before anything goes public, your dilemma is automatically rewritten into one tight, share-worthy line with every identifying detail removed: no names, employers, locations, or unique specifics. That rewritten line is the only form of your question that ever appears publicly. Your original dilemma text is never made public — it stays in your private history.

Identity is anonymous. Cards do not show your name, your username, your email, or anything else identifying. They appear as standalone reflections.

Moderation: AI advises, the moderation team decides. Every submission first runs through an automated pre-screen for personal-name leakage, abusive content, medical/crisis content, and topic fit. If the pre-screen declines a card, you are emailed with the reason and can re-share a different version. If the pre-screen passes, the moderation team explicitly approves the card before it goes live. The rewritten public line is independently checked for leftover identifying detail before it can be published, and the moderation team can edit it before approving the card.

Removal. You can request removal of one of your gallery cards at any time by emailing [email protected]; we will remove it within twenty-four hours. The moderation team can also remove a card after publication if necessary; in that case you receive an email noting the reason.

Discoverability. Approved cards are indexable by search engines so the gallery can carry reflective writing to people looking for it. We place neither the OpenAI measurement pixel nor the Meta Pixel on public card pages.

Personal share pages

Separately from the gallery, tapping Share on one of your readings creates a personal public card page. Sharing is opt-in per reading; nothing is public unless you tap share.

What appears. Only share-safe content: the shareable insight quote and the verse (quoted verbatim). Your dilemma text is never on the page. The page does not show your name, username, or email.

Not search-indexed. Personal share pages tell search engines not to index them — they are meant for the people you send the link to, not for search results. The curated gallery remains the public, discoverable surface.

Removal. You can remove the public page at any time from the reading itself; the link then stops working. Crisis readings can never be shared.

Cookies and similar storage

Essential storage keeps the product working: a sign-in session cookie, a security (CSRF) token, and a small browser setting that remembers your light/dark theme. These are always on while you use the site and need no consent — without them the site cannot function.

Google sign-in: on the pages that offer Google’s one-tap prompt, Google’s sign-in library (from accounts.google.com) keeps a small cookie named g_state, which remembers that you closed the prompt, so it waits before asking again. It holds only the prompt’s state — never your dilemma or your account details.

Advertising and measurement tools come from Google Ads/Analytics (gtag), the OpenAI Ads Measurement Pixel and the Meta Pixel (for our Facebook and Instagram ads). We use them to understand which ads lead to completed registrations, purchases, and readings. These tools never receive your dilemma text or reading content. They stay off or denied by default: before you press Accept, Google operates in its cookieless consent mode and the OpenAI and Meta pixels send no measurement events. Accepting allows future measurement events and related first-party attribution storage; declining keeps OpenAI and Meta measurement off and Google storage denied. You can change your mind at any time.

We use advertising cookies and pixels from our advertising partners to measure our ads. If you accept cookies, we may share some technical and account information about your visit and sign-up with those partners, so that a sign-up can be matched to the ad that led to it. Your dilemma, your reading and anything you say to Sarathi are never shared. If you decline, nothing about your account is shared, and you can change your choice at any time.

You can change your choice whenever you like from the Cookie settings link in the footer, or by clearing site data in your browser. We do not place the OpenAI measurement pixel or the Meta Pixel on public gallery or personal share-card pages.

Sensitive dilemmas

KarmaLens offers reflective ethical guidance—not legal, medical, financial, or mental-health advice, and not an emergency service. Please avoid typing details you would not be comfortable storing on an account-backed tool, especially highly sensitive identifiers or third-party secrets.

Questions, corrections, and data requests

For privacy questions or to discuss your account data, email [email protected]. Account deletion is self-serve: Account settings → Delete my account (you type DELETE to confirm). We try to cancel an active Pro plan or free trial with it; to be sure billing stops, press Cancel Pro on Billing first. Self-serve export is not promised on this page yet; we will describe it here when it ships. Your dilemmas and saved results stay in your account history until you delete them (single rows or your whole history, from the dashboard) or delete your account — we do not auto-expire them, and we do not use them to train models.

When you delete your account we erase your data. We keep only a one-way, unreadable fingerprint of your e-mail: on the deletion record for about 30 days, and on our mail delivery log for as long as that log is kept. It cannot be turned back into your e-mail. One exception: if the account ever started a Pro trial or had a paid plan, a one-way fingerprint of that email is kept after deletion, with no time limit, so the free trial is once per email address; it cannot be turned back into your email either.

Future changes

As KarmaLens grows—possible additions include new sign-in options or richer analytics—we will refresh this policy so the site stays honest about what is collected and why.