📊1. Data we collect

1.1. Data you enter

• email; birth date; birth name and current name (optional for some services); gender (optional);
• your question or the purpose of the reading;
• the birth date and name of a partner or child (compatibility and child readings) — enter them only if you are entitled to share them;
• in the service “The answer to your question about a person” — the birth date of the other person (partner, former partner, child, parent, friend or colleague) and your free-text question about them; we do not ask for their name or any other data. We process these under legitimate interest solely to write the text you ordered; the question is not shown in emails and is not passed to anyone except OpenAI (section 7). Please do not include a third person's name or health details in the question;
• for the MyNum Daily subscription: first and last name, language, time zone, preferred delivery hour, chosen topics and — if you use them — the mood journal (a daily score and an optional note) and push notification subscriptions on your devices; also your “questions of the day” with their answers and your rating of a letter (“hit / missed”);
• reviews: rating, text and the name you give for publication;
• referral code.

1.2. Order and subscription data

• service, amount, payment status, language;
• acceptance of the Terms and this Policy, and your consent to immediate performance of the digital service — with the text and time of the consent;
• your choice about marketing emails (consent or refusal) with its text and time.

1.3. Data collected automatically

IP address, browser and device type, pages visited and actions on the site (for example "started the quiz", "opened the order form"), advertising campaign parameters (UTM) and email events (delivered, opened, link clicked).

🍪2. Cookies and similar technologies

• Necessary (no consent needed): language, session, access links to your orders or subscription stored in your browser.
• Our own statistics: pages and actions are recorded on our server under a random session identifier and are not shared with anyone. We use them to find and fix problems on the site.
• Advertising (Meta Pixel, Google Ads and Microsoft Advertising tags) — only after you click "Accept" in the cookie banner.

You can change your choice at any time with the Cookie settings link at the bottom of every page. If you withdraw consent, the advertising cookies are deleted.

💳3. Payments

Card payments, wallets and subscriptions are processed by Stripe Payments Europe Ltd (Ireland); bank-link payments by EveryPay AS (Estonia). They receive the amount, currency, order or subscription number, your email and, for EveryPay, your IP address. You enter card and bank details directly with the payment provider; we never see or store them.

🎯4. Purposes and legal basis (GDPR Art. 6)

✉️5. Emails

Emails about your order, reading or subscription are part of the service. After you order a free or paid reading or subscribe to the forecast, we may send you emails about our services. You can refuse them in the order form or the subscription form. Every marketing email has a one-click unsubscribe link; unsubscribing does not affect emails about what you have bought.

💾6. Retention

• order and payment records — 7 years from the end of the financial year (Accounting Act);
• readings — until you ask us to delete them;
• the forecast subscription — its data, forecasts and mood journal — while the subscription is active and 12 months after it ends;
• your “questions of the day” and the answers to them — 90 days; if a question concerns health, investments or court matters, or contains words about not wanting to live, its text is not stored at all;
• email delivery log — 24 months; site statistics and analytics — 26 months;
• server logs and expired sign-in links — up to 90 days; encrypted backups — up to 3 months (daily copies for a week, weekly for a month, monthly for 3 months; a removed copy is erased from cloud storage 7 days later).

🔄7. Recipients (processors)

We use the following service providers, each bound by a data processing agreement:

• OpenAI (OpenAI Ireland Ltd / OpenAI, L.L.C., USA) — writes the text of readings and forecasts and creates the audio narration. It receives the data needed for the text: birth date, names, gender, your question, partner or child data, forecast topics and, for subscribers who keep the journal, recent mood scores and notes. If you ask a “question of the day”, OpenAI receives the text of the question and your numbers for that day (without your name or email); the answer is written by AI, and this is stated under every answer. The numbers are calculated by our own program. Under OpenAI's API terms the data is not used to train its models.
• Brevo (Sendinblue SAS, France) — sending emails: your email, name and the content of the email.
• Migadu (Switzerland) — our mailbox for your letters and a backup sending route.
• Stripe, EveryPay — payments (section 3).
• OVH (France) — servers and databases; Backblaze — encrypted backups.
• Meta Platforms Ireland — measuring our advertising. After cookie consent — the Meta Pixel in your browser. From our server, when you order a free or paid reading, we send Meta an event ("lead" or "purchase") with your email, name, birth date, gender and country in hashed (irreversibly encoded) form, together with the IP address and browser type, so that Meta can match the event with an ad view. Basis — legitimate interest. You may object at any time: tick "Do not send me MyNum offers" when ordering or write to info@mynum.app — we then stop sending these events for your email. If you have accepted advertising cookies, the Meta Pixel also lets us show our ads on Facebook and Instagram to you as a visitor to our site. Legal basis: your consent; after you withdraw it ("Cookie settings" at the bottom of the page), no new data is collected for this purpose.
• Google Ireland Ltd. (Google Ads) — measuring our advertising in Google Search. Only after cookie consent — the Google Ads tag in your browser: it tells Google that after clicking our ad you received a free reading or paid for an order (for a purchase — the amount and order number). We do not send Google your email, name, birth date or phone number. If you have accepted advertising cookies, the tag also lets us show our ads on Google to you as a visitor to our site. Legal basis: your consent; after you withdraw it ("Cookie settings" at the bottom of the page), the tag is not loaded.
• Microsoft Ireland Operations Ltd. (Microsoft Advertising) — measuring our advertising in Bing, Yahoo and AOL search. Only after cookie consent — the Microsoft Advertising (UET) tag in your browser: it tells Microsoft that after clicking our ad you received a free reading or paid for an order (for a purchase — the amount). We do not send Microsoft your email, name, birth date or phone number. If you have accepted advertising cookies, the tag also lets us show our ads on Bing to you as a visitor to our site. Legal basis: your consent; after you withdraw it ("Cookie settings" at the bottom of the page), the tag is not loaded.
• Browser push services (Google, Apple, Mozilla) — if you turn on forecast notifications, they deliver the notification text to your device.

We do not sell your data.

🌍8. Transfers outside the EEA

Some providers (OpenAI, Google, Meta, Microsoft, Backblaze) may process data in the USA. Such transfers are based on the EU–US Data Privacy Framework or Standard Contractual Clauses (GDPR Chapter V).

🤖9. Automated processing

The texts of readings and forecasts are generated automatically, but no decision with legal or similarly significant effect is made about you by automated means (GDPR Art. 22).

🛡️10. Your rights (GDPR Chapter III)

• access your data and receive a copy;
• correct inaccurate data;
• request deletion or restriction of processing;
• data portability;
• object to processing based on legitimate interest, including marketing emails and advertising measurement;
• withdraw consent at any time;
• lodge a complaint with the Estonian Data Protection Inspectorate — aki.ee.

Requests: info@mynum.app. We reply within one month.

👶11. Age

The Service is intended for persons aged 18 and over.

📝13. Changes to this Policy

We update this Policy when our data processing changes. The current version is always on this page, with the date of the last update at the top.

📞14. Contact

Xprofit OÜ · Pae tn 21, 11415 Tallinn, Estonia

📩 info@mynum.app · ☎ +372 5898 8503