Privacy Policy

Last updated: April 6, 2026

1. Data Controller

The controller of your personal data is:

NumeroDan
Email: support@numerodan.com

Due to the size of the organization, appointing a Data Protection Officer (DPO) is not legally required.

2. Data We Collect

Data	Purpose	Legal Basis
Email address	Authentication, notifications	Contract (Art. 6(1)(b))
First and last name	Numerological calculations (expression number)	Contract (Art. 6(1)(b))
Date of birth	Numerological calculations (life path, personal day)	Contract (Art. 6(1)(b))
Profile context (work, focus, style)	AI message personalization	Consent (Art. 6(1)(a))
Language preference	Content localization	Contract (Art. 6(1)(b))
Notification time	Sending daily notifications at preferred time	Contract (Art. 6(1)(b))
Payment data	Subscription processing	Contract (Art. 6(1)(b)) — processed by Stripe

3. Data Recipients (Third Parties)

Recipient	Purpose	Location
Anthropic (Claude API)	Generating AI numerological insights	USA
Supabase	Data storage, authentication	EU (Frankfurt)
Stripe	Payment processing	USA / EU
Vercel	Application hosting	EU / USA

4. International Data Transfers

Some of our service providers (Anthropic, Stripe) are based in the United States. Data transfers to the US are conducted based on Standard Contractual Clauses (SCCs) in accordance with Article 46(2)(c) GDPR and/or the EU-US Data Privacy Framework (DPF), which ensures an adequate level of personal data protection.

Anthropic Claude API does not retain your data for model training (per Anthropic API terms of service). Data is processed and immediately discarded.

5. Automated Processing and Profiling

NumeroDan uses automated data processing to generate personalized numerological insights. This includes:

Mathematical calculations based on date of birth (life path, personal day, expression number)
AI-generated interpretation of these numbers in the context of your profile

This processing does NOT lead to legally or similarly significant decisions within the meaning of Article 22 GDPR.

Numerological insights are intended exclusively for entertainment and reflection. You should never make financial, medical, or legal decisions based on these insights.

6. Your GDPR Rights

You have the following rights:

Right of access (Art. 15) — You may request a copy of all your personal data.
Right to rectification (Art. 16) — You may request correction of inaccurate data.
Right to erasure (Art. 17) — You may request deletion of all your data (right to be forgotten).
Right to restriction (Art. 18) — You may request temporary restriction of processing your data.
Right to portability (Art. 20) — You may request export of your data in a machine-readable format.
Right to object (Art. 21) — You may object to the processing of your data.
Right to withdraw consent (Art. 7(3)) — You may withdraw consent for consent-based processing (e.g., profile context) at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

To exercise your rights, write to: support@numerodan.com. We will respond within 30 days.

7. Right to Complain

If you believe the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the competent supervisory authority:

Information Commissioner of the Republic of Slovenia

Dunajska cesta 22, 1000 Ljubljana, Slovenia

Phone: +386 1 230 97 30

Email: gp.ip@ip-rs.si

Website: www.ip-rs.si

8. Cookies

We use only essential cookies for authentication (Supabase Auth sessions). We do not use analytics, tracking, or advertising cookies. Consent is not required for essential cookies (Art. 5(3) ePrivacy Directive).

9. Is Providing Data Mandatory?

Providing your email address, name, and date of birth is a contractual requirement — we cannot provide the service without this data. Providing profile context (work, focus, style) is voluntary and consent-based — the service works without it, but personalization will be reduced.

10. Data Retention

We retain your personal data as long as you have an active account. Upon account deletion or erasure request, all personal data is deleted within 30 days. Anonymized statistical reports (without personal data) may be retained longer for service improvement.

11. Policy Changes

We will notify you of material changes to this policy via email at least 14 days before the changes take effect.

12. Contact

For all questions regarding privacy and data protection:

support@numerodan.com