Privacy Policy

1. Information we collect

• Full name and email address, when you create an account.
• Date, time, and place of birth, used to calculate astrological and numerological placements. This data is sensitive and is treated with the highest level of care.
• Questionnaire answers, provided during onboarding, used to generate your personal Blueprint and inform your coaching experience.
• Your Blueprint and Full Analysis, a synthesised profile generated from your birth data and questionnaire answers, stored so you do not need to regenerate it.
• Coaching conversations, the messages you exchange with your AI coach, stored to provide continuity within a session.
• Profile photo, if you choose to upload one.
• Subscription and payment status, to determine which features you can access. We do not store payment details.
• App interactions and crash logs, used to improve the app experience and fix technical problems.

2. No third-party data sharing

We do not sell, rent, or share your personal data with third parties for advertising, marketing, or model training. The only entities that process your data are the infrastructure providers we use to operate the app, listed below as data processors. They act under contract on our behalf and may not use your data for their own purposes.

3. Data processors

Supabase provides our authentication and database infrastructure. Your account data, birth data, questionnaire answers, Blueprint, and coaching conversations are stored on Supabase servers in the European Union. Data is encrypted in transit using TLS and at rest using AES-256. Row-level security ensures each account can only access its own data.

OpenRouter provides access to the AI models used to generate your Full Analysis and power your coaching conversations. Your birth data and questionnaire answers are transmitted to OpenRouter solely to generate your analysis. OpenRouter does not retain this data for training purposes under our agreement.

Stripe handles subscription payments. When you subscribe, you are directed to Stripe's secure payment page. We never see or store your card details. Stripe may retain payment records as required by financial regulations.

4. A note on sensitive data

Your birth data and personal questionnaire answers are used exclusively to generate your Blueprint and coaching experience within the app. They are never used for advertising, shared with other users, or sold. We treat this information with the same care as health or financial data.

5. Legal basis (GDPR)

• Contract, to create and maintain your account and deliver the features you use.
• Legitimate interest, to diagnose crashes and improve performance.
• Consent, for any optional feature where consent is requested.
• Legal obligation, where retention is required by law.

6. Your rights

If you are located in the European Economic Area, you have the following rights regarding your personal data:

• Right of access, to request a copy of the data we hold about you.
• Right to rectification, to correct inaccurate data.
• Right to erasure, to request deletion of your personal data.
• Right to data portability, to receive your data in a structured, machine-readable format.
• Right to restrict processing of your data.
• Right to object to processing for certain purposes.
• Right to lodge a complaint with your local data protection authority.

We extend these rights to all PurposeBased users, regardless of where you are located.

7. Right to deletion

You can delete your account and all associated personal data at any time. In the app, open Settings, then tap Delete Account. This triggers a full wipe of your account, birth data, questionnaire answers, Blueprint, and coaching conversations from our systems within 30 days.

If you cannot access the app, email support@humanbased.org from the address associated with your account and we will process the deletion within 30 days.

8. Data retention

• Account data: kept while your account is active, removed within 30 days of deletion.
• Birth data and questionnaire answers: kept while your account is active, removed within 30 days of deletion.
• Blueprint and Full Analysis: kept while your account is active, removed within 30 days of deletion.
• Coaching conversations: kept while your account is active, removed within 30 days of deletion.
• Profile photo: kept while your account is active, removed within 30 days of deletion.
• Crash logs: kept up to 90 days, then automatically removed.

9. Children

PurposeBased is intended for users aged 16 and older. We do not knowingly collect data from children under 16. If you believe a child under 16 has provided personal data, contact us and we will remove it.

10. Changes to this policy

We may update this policy from time to time. When we make material changes we will update the date at the top of this page and notify registered users by email where appropriate.

11. Contact

HumanBased, Copenhagen, Denmark.
Email: support@humanbased.org