📊1. Data we collect

1.1. Data you enter

• email; birth date; birth name and current name (optional for some services); gender (optional);
• your question or the purpose of the reading;
• the birth date and name of a partner or child (compatibility and child readings) — enter them only if you are entitled to share them;
• for the MyNum Daily subscription: first and last name, language, time zone, preferred delivery hour, chosen topics and — if you use them — the mood journal (a daily score and an optional note) and push notification subscriptions on your devices;
• reviews: rating, text and the name you give for publication;
• referral code.

1.2. Order and subscription data

• service, amount, payment status, language;
• acceptance of the Terms and this Policy, and your consent to immediate performance of the digital service — with the text and time of the consent;
• your choice about marketing emails (consent or refusal) with its text and time.

1.3. Data collected automatically

IP address, browser and device type, pages visited and actions on the site (for example "started the quiz", "opened the order form"), advertising campaign parameters (UTM) and email events (delivered, opened, link clicked).

🍪2. Cookies and similar technologies

• Necessary (no consent needed): language, session, access links to your orders or subscription stored in your browser.
• Our own statistics: pages and actions are recorded on our server under a random session identifier and are not shared with anyone. We use them to find and fix problems on the site.
• Analytics (Google Analytics 4, Microsoft Clarity) and advertising (Meta Pixel) — only after you click "Accept" in the cookie banner.

You can change your choice at any time with the Cookie settings link at the bottom of every page. If you withdraw consent, the analytics and advertising cookies are deleted.

💳3. Payments

Card payments, wallets and subscriptions are processed by Stripe Payments Europe Ltd (Ireland); bank-link payments by EveryPay AS (Estonia). They receive the amount, currency, order or subscription number, your email and, for EveryPay, your IP address. You enter card and bank details directly with the payment provider; we never see or store them.

🎯4. Purposes and legal basis (GDPR Art. 6)

✉️5. Emails

Emails about your order, reading or subscription are part of the service. After you order a free or paid reading or subscribe to the forecast, we may send you emails about our services. You can refuse them in the order form or the subscription form. Every marketing email has a one-click unsubscribe link; unsubscribing does not affect emails about what you have bought.

💾6. Retention

• order and payment records — 7 years from the end of the financial year (Accounting Act);
• readings and forecasts — until you ask us to delete them;
• subscription data and the mood journal — while the subscription is active and 12 months after it ends;
• email delivery log — 24 months; site statistics and analytics — 26 months;
• server logs — up to 90 days; encrypted backups — about 10 days.

🔄7. Recipients (processors)

We use the following service providers, each bound by a data processing agreement:

• OpenAI (OpenAI Ireland Ltd / OpenAI, L.L.C., USA) — writes the text of readings and forecasts and creates the audio narration. It receives the data needed for the text: birth date, names, gender, your question, partner or child data, forecast topics and, for subscribers who keep the journal, recent mood scores and notes. The numbers are calculated by our own program. Under OpenAI's API terms the data is not used to train its models.
• Brevo (Sendinblue SAS, France) — sending emails: your email, name and the content of the email.
• Migadu (Switzerland) — our mailbox for your letters and a backup sending route.
• Stripe, EveryPay — payments (section 3).
• OVH (France) — servers and databases; Backblaze — encrypted backups.
• Meta Platforms Ireland — measuring our advertising. After cookie consent — the Meta Pixel in your browser. From our server, when you order a free or paid reading, we send Meta an event ("lead" or "purchase") with your email, name, birth date, gender and country in hashed (irreversibly encoded) form, together with the IP address and browser type, so that Meta can match the event with an ad view. Basis — legitimate interest. You may object at any time: tick "Do not send me MyNum offers" when ordering or write to info@mynum.app — we then stop sending these events for your email.
• Google (Analytics 4) and Microsoft (Clarity) — site analytics, only after cookie consent.
• Browser push services (Google, Apple, Mozilla) — if you turn on forecast notifications, they deliver the notification text to your device.

We do not sell your data.

🌍8. Transfers outside the EEA

Some providers (OpenAI, Google, Microsoft, Meta, Backblaze) may process data in the USA. Such transfers are based on the EU–US Data Privacy Framework or Standard Contractual Clauses (GDPR Chapter V).

🤖9. Automated processing

The texts of readings and forecasts are generated automatically, but no decision with legal or similarly significant effect is made about you by automated means (GDPR Art. 22).

🛡️10. Your rights (GDPR Chapter III)

• access your data and receive a copy;
• correct inaccurate data;
• request deletion or restriction of processing;
• data portability;
• object to processing based on legitimate interest, including marketing emails and advertising measurement;
• withdraw consent at any time;
• lodge a complaint with the Estonian Data Protection Inspectorate — aki.ee.

Requests: info@mynum.app. We reply within one month.

👶11. Age

The Service is intended for persons aged 18 and over.

📝13. Changes to this Policy

We update this Policy when our data processing changes. The current version is always on this page, with the date of the last update at the top.

📞14. Contact

Xprofit OÜ · Pae tn 21, 11415 Tallinn, Estonia

📩 info@mynum.app · ☎ +372 5898 8503