Privacy policy

1. In short

NumeroDan works out numbers from your name and your date of birth. For that we need three things: your name, your date of birth, your email. We keep your data in Europe, with our database provider Supabase in Frankfurt. The text for your day is written by AI. That is Anthropic, in the USA. We send them your name, your numbers and a little about your interests. We do not send your email address or your date of birth. You can export or delete your data at any time. Both are buttons in Settings. We sell nothing. We advertise nothing. We do not follow you around the web.

This version is dated 8 September 2026. The previous version was from May 2026.

2. Who we are

The controller of your data is NumeroDan. Full company details (name, address and registration number) will be added before the paid version launches.

You can write to us at info@numerodan.com.

We do not have a data protection officer. We believe a service this small does not need one (Article 37).

3. What we keep about you

When you open an account, we keep:

your email: you sign in with it, and we send your mail to it;
your full birth name: its letters give part of your numbers;
your date of birth: it gives the other part;
your gender: so the wording is grammatically right;
your language and letter system: these are app settings;
what defines you now and what interests you: so the text fits you better.

We also keep things that appear as you use the app:

your calculated numbers: life path, expression, soul urge and others;
the text the AI writes for your day;
your thumbs up and down under the sections;
the dates you opened the app;
a record of when you confirmed your age, the terms, this policy and email;
a record of when the error screen appears while your day is being prepared (only the reason for the error, not the content).

That last record, the consent log, is a new part of the app. We have to check whether it really runs in our database before we publish this policy. Until we confirm that, we do not state it here as a fact.

Two things we keep from older versions of the app, although we do not use them:

your family status, if you used NumeroDan before July 2026. We stopped asking then. We do not use it. It goes when you delete your account;
an old description of you, once written by the AI. Nothing in today's app displays it. It goes when you delete your account.

If you came from the old version of the app, your gender and a few other fields hold placeholder values. We ask you to confirm them. It does not block your use of the app.

We do not keep your address, phone, contacts or photos. We do not read your messages. We do not connect to social networks.

Why we may keep this: without it we cannot provide the service. That is the contract basis (Article 6(1)(b) GDPR).

4. What stays in your browser

Some data also sits in your browser. That makes the app faster, and it keeps working when your connection is poor. There you have: your name, your date of birth, your gender, your Circle, your cookie choice and your sign-in data.

Signing out in Settings clears your personal data from this device. Three settings of this browser stay: appearance, tone and your cookie choice. A short technical note about members we are still deleting stays too (see section 9).

If you leave the app any other way than the Sign out button in Settings, nothing is cleared. Closing the tab is not enough. On a shared or borrowed device, always sign out in Settings.

We use cookies only to make the app work: one for language, and one or two for your sign-in. The sign-in cookie appears as soon as you request a sign-in link, even if you never click it. Your cookie choice is stored in the browser, not in a cookie. We have no advertising cookies. We have no third-party cookies.

5. The people in your Circle

Read this section before you add anyone. You can enter up to ten people in your Circle. For each you enter a full birth name, date of birth, gender and relationship. From that we work out their numbers and your dynamic with them.

You are the one who enters this data. We hold it for you. Only you see it. Other users do not see it. You see it on your other devices too, once you sign in.

Why we may keep this. You entered these people because they are part of your everyday life. We keep their data so that we can tell you how the day is between the two of you. That is our legitimate interest (Article 6(1)(f) GDPR). Contract does not apply here, because the contract is with you, not with them. We cannot obtain their consent, because we have no way to reach them. So we set ourselves limits, and we list them here. What we keep about them: full birth name, date of birth, gender, the type of relationship, and the numbers we work out from that. Nothing else. We do not have their address, phone number or email. What we do with it: short texts appear next to their numbers. Those texts are written in advance and tied to the numbers. They are not written by AI. Only you see them. What we do not do: we do not show them to other users, we do not send them anything, we do not sell their data, and we do not buy anything about them elsewhere.

What leaves the app: when we prepare your daily text, a Circle member's name and the type of relationship go to our AI provider. A short description of their nature and their day goes with it, in words. Their date of birth does not go. We do not have their email at all. At most five adult members go there, in the order you entered them. If you have more, the rest never reach the model at all. Section 7 sets this out in detail.

We ask you to be fair about this. Add people who are fine with it. Before you add someone, consider whether they would want us holding this. If someone is not fine with it, remove them from your Circle. The app does not ask you this with a checkbox. We ask you here, in words.

Removing a member: use the button on that person's page. It disappears from your device at once. We delete it from the database when the app is connected and you are signed in. If that does not work at the time, we remember that it has to be deleted and try again the next time you open the app.

If someone added you to their Circle and you do not want that, write to us at info@numerodan.com. We answer within one month. Two things then happen. The first we do ourselves: we delete your data from our database. The second we ask of the user who entered you: to remove you inside the app on their device. Why both: a copy of your data also sits in their app, and that copy can be written back into our database the next time they open it. You also have the right to object under the law (Article 21 GDPR). When you object, we delete your data. We do not ask for a reason.

6. Children

Only a person aged 18 or over may open an account. You confirm this with a checkbox when you sign up. We do not verify your age. We take your word for it.

You may add a child to your Circle. You are responsible for that data.

For children under 15 there is one difference: we do not send their data to our AI provider. That limit is built into the program, not just written on paper. If a date of birth is unclear, the program treats the person as a child.

We show the map for a child too. The matching map's texts are written by relationship type; where there is no text for a child, a neutral sentence is used instead. The descriptions of their numbers are the same as for adults. The numbers follow the same rules as for an adult. There is no separate children's account; an adult opens the account.

7. Who we trust with your data

We run no servers of our own. So we use other companies' services. Each one gets only what it needs for its job.

Supabase database and sign-in. Servers in Frankfurt, in Europe. It holds everything in section 3. Their terms say data on their disk is encrypted.
Anthropic (Claude) writes the text for your day. Based in the USA. We send: your name, your gender, your numbers, what defines you now and what interests you. For at most five adult members of your Circle we also send their name, the type of relationship, and a short description in words of their nature and their day. We do not send: your email, your date of birth, Circle members' dates of birth, or anything about children under 15. Their commercial terms say this data is not used to train their models by default.
Resend sends the mail. Based in the USA. It holds your email, your name and the full text of the message sent. Internal alerts to the owner also go through Resend – when the nightly text preparation fails for someone, when the app shows you that today's content is not available, on a new registration, and when an account is deleted or deactivated. Your name and your email are not in these alerts.
Sentry tells us when something breaks in the app. Based in the USA. It gets the error message, the page address and browser details. Session replay is off. Performance tracing is off. It also gets a quality measurement of the text: the labels of our own rules, and sometimes a single word our spellcheck did not recognise. Very rarely such a word could be a name.
Vercel runs the app. Based in the USA. Its server logs hold your IP address and browser details.

We sell data to no one. We lend it to no one for advertising.

8. Where your data travels

The database is in Europe, in Frankfurt. The providers in section 7 based in the United States are Anthropic, Resend, Sentry and Vercel.

What goes there: your name and your numbers (Anthropic), your email and the text of the mail (Resend), error messages (Sentry) and technical logs (Vercel).

The basis for every transfer outside Europe is still in legal review. So this section is not finished.

9. What stays on your device

See section 4. Two more details that are only fair to state. If you add someone to your Circle, their name and their date of birth sit in your browser too. That is another person's data on your device. Handle it with care.

When you remove a member, a short technical note stays in the browser. It holds no name and no date. It does hold two internal identifiers: yours and that member's. This note deliberately survives sign-out, because otherwise a deleted member comes back. There are at most fifty such notes. They disappear once the deletion succeeds.

10. Measuring use

We measure two things. The difference matters.

First: whether the app is any use to anyone. Visits before sign-in are measured with a random number your browser makes. It is not tied to your name. Once you are signed in, we record the day you opened the “Today” page. That record is tied to your account. We measure both of these even if you do not choose “Accept all” on the banner. The basis is our legitimate interest (Article 6(1)(f)): without it we do not know whether the app actually helps anyone.

Second: what you open inside the app. Which section you expand, which tool you use, when you share something. We measure that only if you choose “Accept all” on the banner. You can change that choice in Settings at any time. Withdrawing is as easy as giving.

We use no third-party analytics tools for this measurement. We measure ourselves, in our own database. What goes to Google is in section 11.

In the daily mail we measure whether you opened it and whether you clicked in it. Today that runs regardless of your banner choice. Whether your consent is required for it is still in legal review.

11. Mail

We send you three kinds of mail:

the sign-in message: each time you sign in. This cannot be turned off;
a welcome: once, when you open your account;
the morning message with the text for your day: only if you choose it.

You can stop the third at any time. Every message has an unsubscribe link at the bottom. One click is enough. We record the unsubscribe with the date and time.

The links and the image in the morning message carry your internal identifier (a long string of letters and digits). That is how we know your message was opened. Those identifiers hold neither your email nor your name. Anyone your mail passes through can see them, your mail client for example, or Google's image proxy.

We send no promotional mail.

12. How long we keep things

Your profile and your numbers: as long as you have an account.
Your Circle: until you delete it, otherwise as long as you have an account.
The text for your day: as long as you have an account.
Old text from a previous version of the app: as long as you have an account.
The old description of you and the old family status (section 3): as long as you have an account.
Usage measurement: as long as you have an account. Visits before sign-in have no limit.
A record of a failed text preparation: as long as you have an account.
The record of your consents: no limit. See section 14.
Copies of tables from the old app: until we delete them by hand after the move to the new database. There is no automatic limit for this.
Server logs: at the provider, a short time, under their rules.
A record of the error screen while your day is being prepared (section 3): as long as you have an account.

When you delete your account yourself, in Settings, we delete it immediately. This cannot be undone. Every night an automatic cleanup also runs. What we plan for inactive accounts is explained below.

If you do not open the app for a long time

We plan to delete an account ourselves if nobody opens it for two years in a row. With it we will delete everything attached to it, including your Circle. One month before that we will send a warning by email. That warning will arrive even if you have daily messages turned off. It is not an advert, it is a notice about your account. If you come back and open the app during that month, the period will start again. What will count as opening: signing in and opening the app. Opening our email will not count. In many mail programs images load by themselves, even if you never read the message. Until we turn this on, we do not delete your account ourselves.

If an account is never opened even once, we will delete it after one year. We do not do this ourselves yet.

Payment does not affect these periods. We measure the periods by use, not by payment.

13. Your rights

You have every right under the GDPR. In plain words:

Access. You can ask what we hold about you.
Export. The “Export all your data (JSON)” button in Settings.
Correction. You fix your name, date and gender yourself in the app.
Deletion. The “Delete account and all data” button in Settings.
Restriction and objection. Write to us.
Withdrawing consent. For mail: the link at the bottom of the message. For usage measurement: the switch in Settings.
Portability. The export is a JSON file you get immediately.

The export contains: your profile, your Circle, your daily texts, your ratings, your onboarding progress, your visit days and the record of your consents. If you want anything else we hold about you, write to us. We send it within one month. That applies to every request.

14. What happens when you delete your account

When you press the button, this is what happens. At once, not in thirty days.

We delete: your account, your profile, your numbers, your Circle, your daily texts, your ratings and the measurement of your app use.

What stays, with no link to you: the record of pre-sign-in visits and, if the consent log is live in our database (see section 3), the record of your consents. We strip your email and the link to your account from both. An identifier made from your email with a secret key stays in the consent record. We cannot read that identifier back into your email ourselves, because that needs a key we keep separately. We cannot technically remove the identifier either, because the consent record is locked against any change at all. That lock is exactly why we can trust the record as evidence.

What we cannot reach: the copy on your device, which signing out in Settings clears (section 4); records at our mail provider, server logs, records at our AI provider and events in Sentry. Those are deleted on their schedule, not ours.

15. Security

All connections are encrypted (HTTPS). The database is with Supabase in Frankfurt; their terms say their disk is encrypted. Every row in the database is locked to its owner. Only the owner reaches the usage statistics, through a named allowlist. Those statistics are sums only: they show no names and no dates of birth.

What we do not have today: we do not additionally encrypt individual fields in the database. It is decided that we add this after the move to the new database. Until that is done, we do not promise it to you.

16. If there is a breach

If someone reaches data they should not:

we notify the Information Commissioner within 72 hours;
if the risk to you is high, we also notify you by email;
we say what happened, what it concerns and what you should do.

17. AI and decision-making

The text for your day is written by a language model. The numbers are worked out by the program, by rules of arithmetic. The model only puts them into words.

We make no automated decisions about you. Nothing the app writes has a legal or similar effect. NumeroDan is not advice: not medical, not financial, not legal.

There is more on this in the terms of use, clauses 2 and 3.

Among the interests you can pick “Health + body”. That is a choice of topic, not information about your health. That choice goes into the instruction we give the model. Whether that is a special category of data is still in legal review.

18. What we do not do

We do not sell data.
We do not advertise, and we allow no advertising in the app.
We do not follow you across other websites.
We use no third-party cookies.
We buy no data from anywhere.
We do not link your account to social networks.
We do not store your contacts, messages or photos.
We do not store your precise position (GPS). Your country can be seen from your IP address: our hosting provider sees it, and when you open an account the country also goes into the owner's alert (section 7).

19. Changes to this policy

We will change this policy. The app is still being built. With every change we put a new date at the top. If a change matters, we tell you in the app. If you get our mail, we tell you by email too. Here you always see only the current version, with its date at the top.

We will never quietly widen what we do with data we already hold.

20. Contact and complaints

Questions about privacy go to info@numerodan.com.

We answer within one month, usually sooner.

Complaint: Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, Ljubljana, gp.ip@ip-rs.si; in another EU country, to that country's supervisory authority.