Privacy Policy
The data controller is NETLS TOV, 29 kv. 34, vul. Akademika Sakharova, Ivano-Frankivsk, 76018, Ukraine. Contact for any data-related question: vadimchasovitin@gmail.com.
This document describes what the service actually stores, why, and how to have it deleted. It was written from the actual database schema rather than from a template.
1. Data we collect
| Data | Purpose |
|---|---|
| Date, time and place of birth | The only input for the chart calculation: without the moment of birth and its time zone the calculation is impossible. The moment is stored in UTC together with the time zone; the place is stored as part of your questionnaire answers. |
| Questionnaire answers | Selecting materials and the order in which they open. Your answers include the name you want to be addressed by. |
| Email address — if you entered it in the questionnaire of earlier versions | The questionnaire no longer asks for an address, and we send no emails: neither sign-in codes nor reminders. An address entered earlier is kept on the account while it exists, deleted with it, and included in your data export; we use it to find your account if you write to us. |
| Google account data — if you sign in with Google | Your stable Google account identifier and its email address. The address is shown under “Account” and helps us find your account when you write to us; we send no emails to it. Your Google password is never transmitted to us, and we cannot access it. |
| Data about people you add (compatibility): the label you give them, their date, time and place of birth | Calculating a pair. You enter this data yourself, so add another person only when they agree to it. |
| Subscription and purchases | Subscription or lifetime access state, paid period, auto-renewal flag, the purchase identifier and order number from the payment system, refunds and service events about payments. If a new subscription replaced an earlier one that is still renewing, we keep the earlier one too, so we can show that it needs to be cancelled in Google Play. If you reinstall the app and have no way to sign in to your previous profile (it has no Google sign-in), the Google Play purchase moves to the new profile together with its dates, the auto-renewal consent and the reminder history; payment records stay with the previous profile. Card details are never sent to us and are not stored by us — payment is handled by Google Play. |
| Consents | Tapping the subscribe button as consent to auto-renewal. Together with it we store the time of the tap, the plan, its price and period (for a special offer, the price as Google Play displayed it), the trial period if one was shown, the language, the renewal terms text and the button label. Kept so we can show exactly what you agreed to. |
| In-app activity | Completion marks, unlocked sections, your reactions to materials, your daily check-in answers and the notes you write with them — these determine what is shown next. |
| Questions to the assistant | If you ask the assistant a question, we store the conversation. To answer, we send OpenAI your question, the recent conversation and facts from your chart: type, strategy, authority, profile (if the birth time is known), defined and open centres, channels, gates and incarnation cross. We do not send your birth date, name or email. The conversation is kept while your account exists, deleted with it, and included in your data export. |
| Answer after the payment window | If you close the payment window, we ask once on that device what stopped you and offer fixed options: “Too expensive for me”, “I don't want a subscription”, “Payment didn't work”, “Just looking for now” or “Skip”. There is no free text; closing the question counts as “Skip”. After reinstalling the app or clearing browser data the question may appear again. We store the option you picked, the selected plan and payment method, how long the payment window was open, the account language and the time of the answer; the fact that you answered is also remembered on the device. The option and the plan are also included in usage statistics. Used to understand what gets in the way of subscribing: the price, the type of plan or the payment method. Kept while your account exists, deleted with it, and included in your data export. |
| Usage statistics — Google Analytics | Which screens were opened and how far you got: questionnaire step number and game score (without the answers themselves), the plan you chose, its price and payment method, sign-in method, error codes, how long a screen or the payment window was open, the option you picked after the payment window, an app reinstall, a restored purchase or a purchase held by another profile, whether the Google Play rating card was offered, the library section and your reaction to a material. Along with this Google receives the device and browser type, language and approximate location (country, city) derived from the IP address; Google Analytics does not store the IP address itself. Your questionnaire answers, birth data, name and email are never included. Used to see where the service is inconvenient or broken. Outside the EEA, the UK and Switzerland counting relies on the _ga cookie holding a pseudonymous identifier. If you have an account (including one created in the questionnaire without signing in), we store that identifier with your account: our server uses it to report the first, second and third subscription charge and the lifetime access purchase to Google Analytics — the plan, the amount and the Google Play order number — so Google Analytics can match the payment with what you did on the page before it. Your name, email and birth data are never included, and the identifier is deleted with your account. In the EEA, the UK and Switzerland no analytics cookies are set, and Google receives signals without a persistent identifier. |
| Android app statistics — Google Analytics for Firebase, from version 1.0.3 | The Android app includes Google Analytics for Firebase. It records on its own the first open, launches and time in the app, app and system updates, Google Play purchases (product, price, currency) and app removal, and along with this sends Google the phone model, the Android and app versions, language and approximate location (country, city) that Google derives from the IP address. The events are tagged with the Firebase install number — a random identifier of this app install — and with the Android advertising ID, unless you deleted it in the phone settings (section 4). Google uses the advertising ID to match the install and payments with a tap on or view of our ad. App statistics are collected in all countries, including the EEA, the UK and Switzerland. The app passes the Firebase install number to the service page, and if you have an account, we store the number with it: our server uses it to report subscription charges and the lifetime access purchase (as in the row above) to the app statistics instead of the page statistics — each charge goes to one place only. Your questionnaire answers, birth data, name and email are never included here either. The number is deleted with your account. Used to count how many installs and payments the ads bring and to optimise them. |
| Notifications | If you turned them on: the hour you chose, your time zone and the address of your browser push subscription. They deliver a daily notice about the new day and, before a subscription charge, there may be a push reminder about it. The app also requests the notification permission: it is required by the Google Play billing library. You may decline and the service keeps working. Deleted with your account. |
| Data on your device | The browser or app stores your account sign-in key, a random app install number, in the Android app Google Analytics for Firebase data and the Firebase install number, settings (such as language), a mark that you answered the question after the payment window, and special-offer timers. When the app is reinstalled they are wiped, and the previous sign-in key is revoked on the server. |
| Your Google Play review — if you left one; we receive this data from Google | We store the review identifier, text, rating, phone language, date of the last edit and machine translations of the text; we do not store your name, device or Android version. The review is not linked to your account, and reviews with any rating are stored. Five-star reviews may be shown on the website and in the app after we check them — without your name, with month and year, sometimes translated and marked “translated”. Used to show new users real opinions about the service. To have us stop showing your review or delete it, write to us with the text and date of the review. |
| Installs and purchases after our ad — Google Ads; Google Play and Google Analytics report this to our Google Ads account | We advertise the app with Google Ads. If you tap our ad or watch our video ad and then install the app from Google Play, or subscribe or make a purchase in it, Google Play reports the install to our Google Ads account, and for a purchase also its amount (for a subscription, only the first payment). In the Android app from version 1.0.3 Google Analytics also reports the install and payments to our Google Ads account, from the app statistics (see above). In Google Ads we see only aggregated statistics about the ads: they contain no name, email, birth data or chart, and are not linked to your account in the service. We do not send birth data to Google Ads. We use these statistics only to count how many installs and purchases the ads bring and to optimise the ads. We do not use them for remarketing and do not target ads with them: we do not use the user lists that Google Ads builds automatically from Google Play and Google Analytics data to show ads. How Google itself uses this information is described in its privacy policy (see section 4). |
| Technical records | Server logs: request time, request path with parameters (in the app, the app version, a random install number not linked to your account, and the Firebase install number), response code. For payment operations: the account number, the beginning of the purchase identifier and the Google Play order number. Used for troubleshooting. |
Birth data is sensitive. We process it solely to calculate the chart, select materials and prepare the assistant's answers. We do not use it for advertising and do not share it with third parties for their own purposes.
2. What we never do
- We do not sell data and do not share it with data brokers. The only things that reach an ad network — Google Ads — are installs and payments after our ad: Google Play and, in the Android app, Google Analytics report them — see section 1.
- We do not use birth data for advertising.
- We do not collect device location, contacts, photos, microphone or calendar.
- We do not track you across third-party websites. The connection between our ad and an install or purchase is made by Google itself, in the Android app also by the phone's advertising ID — see section 1.
3. Legal bases
Processing is necessary to provide the service you requested — performance of a contract. Birth data, being sensitive, is processed on the basis of your explicit consent: you provide it yourself in order to receive the calculation. Consent can be withdrawn at any time — see section 6.
Usage statistics, the answer to the question after the payment window and Google Play reviews are processed on the basis of our legitimate interest in finding where the service is inconvenient or broken and what gets in the way of subscribing, and in showing new users real opinions about the service. Their scope is limited to what section 1 describes; in the EEA, the UK and Switzerland page statistics are collected without cookies.
Android app statistics with the advertising ID are processed on the basis of our legitimate interest in knowing how many installs and payments the ads bring and in not paying for ads that do not work. You can delete the advertising ID in the phone settings at any time — see sections 4 and 6.
The aggregated Google Ads statistics on installs and purchases after our ads do not tell us who installed the app or made a purchase. Google itself matches the ad interaction with the install or purchase, as an independent controller, under its own privacy policy.
The consent log is kept on the basis of our legitimate interest in confirming exactly what you agreed to when subscribing.
4. Who receives data
- Google Play — payments for subscriptions and one-time purchases, notifications about their changes and refunds, and review texts. Google receives data about the purchase, not about your chart.
- Google Analytics — the usage statistics and the Android app statistics described in section 1, including the events about the first three subscription charges and the lifetime access purchase that our server sends. Google processes them on our behalf; Google signals and ad personalisation are turned off. Google's servers may be located outside your country, including in the United States.
- Google Ads — the installs and purchases after our ad described in section 1. Google Play and, for the Android app, Google Analytics report them to our Google Ads account, together with the phone's advertising ID; our server sends nothing to Google Ads. Google processes them under its own privacy policy. You can limit Google's ad personalisation at myadcenter.google.com and, on the phone, in the Android settings: Settings → Google → Ads → Delete advertising ID (on older Android versions, “Opt out of Ads Personalisation”). Without the advertising ID Google cannot use it to match the install with an ad; these settings may not switch off the counting of installs and purchases that Google Play reports.
- OpenAI (USA) — questions to the assistant and the chart facts listed in section 1. OpenAI prepares the answer on our behalf.
- Your browser's push service — delivering notifications, if you turned them on.
- Hosting provider — the servers the service runs on. The provider does not use the data for its own purposes.
- Authorities — only upon a lawful request.
5. Retention
Data is kept while your account exists. Payment records are kept longer where accounting and tax law requires it. Server logs are kept for a limited time. Usage statistics and app statistics are kept in Google Analytics for 14 months and then deleted; aggregated reports without identifiers may be kept longer. Aggregated Google Ads statistics are not linked to your account and are not deleted with it.
After you uninstall the app or clear browser data, you can return to your account only by signing in with Google. If you have not signed in with Google, delete the account under “Account” before uninstalling the app, or write to us with your Google Play order number.
Google Play reviews are not linked to your account and are not deleted with it; we delete a review at your request.
6. Your rights
- Obtain a copy of your data: “Account” → “My data” → “Download my data”.
- Correct inaccurate data.
- Delete your account and all data linked to it, including the chart, the answers, the assistant conversations and the people you added: “Account” → “Delete account”.
- Withdraw consent to processing of birth data — this means deletion of the calculation.
- Ask us to stop showing your Google Play review or to delete it.
- Object to the collection of usage statistics. In a browser a content blocker turns them off — the service works fully without them. In the Android app, delete the advertising ID in the phone settings (section 4); if you have an account, at your request we will delete the app statistics from Google Analytics by the Firebase install number stored with it.
- Lodge a complaint with the data protection authority in your country.
Write to vadimchasovitin@gmail.com from the address you sign in with through Google or entered in the questionnaire, or, if there is none, from any address with your Google Play order number. We reply within 30 days.
7. Subscription and cancellation
The subscription is purchased and cancelled in Google Play. Cancelling inside the app takes you to the Google subscriptions screen — we cannot turn off auto-renewal on your behalf, and we will not claim that billing has stopped while Google keeps charging. Access remains until the end of the paid period.
Lifetime access is a one-time Google Play purchase without auto-renewal. It does not cancel a subscription you already have: cancel that separately in Google Play. If the purchase is refunded, access ends.
8. Age
The service is intended for adults. We do not knowingly collect children's data. If such data reached us, contact us and we will delete it.
9. Nature of the materials
The materials describe decision-making mechanics within the Human Design system. They are not medical, psychological or financial advice and do not predict events in your life.
10. Changes
For material changes we update the version date on this page.