Privacy Policy

This Privacy Policy explains how MyNum ("we", "our", "Service") collects, uses and protects your personal data when you use the website, place orders and receive digital numerology content.

By using the Service, you acknowledge that you have read this Policy.

🏢Data Controller

XPROFIT OÜ

Registry code: 16919521

Address: Pae tn 21, 11415 Tallinn, Estonia

Email: support@mynum.app

📊1. Data we collect

We collect only the minimum data required to provide the service.

1.1. Information you enter into forms:

email
birth date
birth name (optional)
current name (optional)
gender (optional)
analysis purpose
partner's birth date (compatibility)
child analysis details
question to the numerologist
Telegram username (optional)
referral code

1.2. Order data:

service ID
payment amount
selected language
acceptance of Terms, Privacy Policy and GDPR consent

1.3. LocalStorage data:

sessionId
i18nextLng
referral_code
trackingEnabled (false in production)
magicToken
apiKey

We do not use cookies.

💳2. Payment data

All payments are processed through:

Stripe Payments Europe Ltd

We do not collect or store:

card numbers
CVC codes
bank account details

Stripe complies with PCI DSS requirements.

🎯3. Purposes of data processing

We use your data for:

generating numerology analyses
sending reports to your email
displaying your orders in "My Orders"
providing support
processing payments
improving service performance
fulfilling legal obligations

We do not use your data for advertising or resale.

⚖️4. Legal basis (GDPR Article 6)

Art 6(1)(b) — contract performance
Art 6(1)(a) — consent
Art 6(1)(c) — legal obligations
Art 6(1)(f) — legitimate interest (security)

💾5. Data retention

order data — 5 years (Estonian accounting law)
analysis results — until you delete them or request deletion
technical logs — up to 90 days

Delete request: support@mynum.app

🔄6. Third-party data sharing

We share data only with service providers necessary to complete your order.

6.1. Stripe

Receives only:

amount
currency
order ID

Does not receive: birth date, names, analysis results

6.2. Our backend

processes form data
generates analysis
delivers email

6.3. Email providers

SendGrid / AWS SES / MailerSend

email
message content
attached report

6.4. Cross-border data transfers

Some technical partners may process data outside the European Union. When this occurs, data transfers are carried out in accordance with GDPR Chapter V using Standard Contractual Clauses (SCCs) or other approved safeguards ensuring an adequate level of data protection.

We work only with partners who guarantee protection aligned with EU standards.

🛡️7. Your rights (GDPR Chapter 3)

You have the right to:

access your data
correct data
restrict processing
request deletion
withdraw consent
file a complaint with the Estonian Data Protection Inspectorate (AKI)

Contact AKI: aki.ee

👶8. Age restrictions

The service is intended for 18+ users.

Minors require parental consent.

            🔐9. Data protection measures
            HTTPS
secure server-side processing
minimal data collection
restricted access to logs
data encryption

        

📝10. Changes to this Policy

We may update this Policy. The updated version will be published on the website.

📞11. Contact