Privacy

What Tithi stores

Your Google account details that Supabase Auth receives at sign-in: your Google account ID, email address, name and profile picture URL. Tithi shows your email address, and your name and profile picture in the Account menu. The picture is loaded from Google through this site's image service (Vercel), which may cache a resized copy; Tithi does not store it.

The entries you add: names, BS and AD dates, birth times, places, notes, reminder settings and the computed birth tithi.

Your language choice and the secret token in your calendar feed link.

What Tithi does not do

No advertising, analytics or third-party trackers. Fonts are served from this site, not from Google.

Your data is not sold or shared with anyone. Other users cannot see your entries.

Where it is kept

The database is hosted by Supabase in its Seoul region (ap-northeast-2). The app runs on Vercel, which may process requests in data centres outside Nepal. Both keep short-lived technical logs (such as IP addresses and request times) under their own policies.

If you install Tithi or use it offline, your browser keeps a copy of your dashboard on the device. Signing out deletes it.

Calendar feed

Your feed link contains a secret token. Anyone with the link can read your entries' names and dates, so keep it private. You can change the link at any time; the old one then stops working at once, although calendars that already fetched it keep their copy until they next refresh.

When you subscribe in Google Calendar, Apple Calendar or Outlook, that service fetches and stores the feed under its own terms.

Google Calendar sync (optional)

If you choose Connect Google Calendar, Tithi asks Google for one extra permission (calendar.app.created): to create a separate calendar named Tithi and manage the events in it. It cannot see or change your other calendars or events.

Tithi stores a Google refresh token for this, encrypted (AES-256-GCM) with a key kept only on the server, plus the id of the Tithi calendar and which events it created. It writes your entries' names, dates, tithis and reminder times to that calendar, where Google keeps them under its own terms.

Disconnect deletes the Tithi calendar with all its events, revokes the token and deletes what Tithi stored. Deleting your account does the same. You can also remove access at myaccount.google.com/permissions.

Email

Tithi sends a few emails through Resend: a welcome when you sign up, a confirmation when you delete your account, and an invite when someone shares entries with you. Resend processes the address and the message to deliver it. Tithi sends no newsletters or marketing.

If you sign in with email instead of Google, Supabase emails you a one-time code; Tithi then knows only your email address.

Cookies

Only the sign-in session cookies needed to keep you logged in.

Your control

You can edit or delete any entry, export everything as JSON, and delete your account from the Account menu. Deleting the account removes your profile, entries and feed from the live database immediately. Copies may remain in the hosting providers' backups for a limited time before they expire.

Your entries describe other people. Add only what they would expect you to keep.

Google user data

Tithi requests only your basic Google profile and email to sign you in, and the Tithi calendar permission only if you connect Google Calendar. Its use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.