Controller

Roman Olichowski, Bahnhofstraße 20, 56112 Lahnstein, Germany. E-Mail: support@myhumancode.app.

Website and app

Visiting this website does not create an app account or send interview answers to AI. Website visits and email contact are covered by https://myhumancode.app/en/privacy. The information below concerns the app where a feature is available and configured in your version.

Local use and accounts

Profile details and answers can initially be stored on your device. In Astro, planet, transit and numerology calculations run locally. Astro and Mind use the same sign-in account; their personal app records and full-access rights are separate. This does not mean the entire app makes no network connections. For registration and sign-in, Supabase Auth processes your email address, password for authentication, account ID and session tokens; your confirmation of the minimum age and terms is also stored as proof together with the time the account was created. This record cannot be changed afterwards and is deleted with your account. The purpose is to provide and secure your account. Legal basis for required account data: Art. 6(1)(b) GDPR.

Profile, journal and history

Name, interview answers, archetypes and result texts, personal goals, daily focus and mood, journal and check-in entries and companion messages are stored locally and synced to your Supabase account when signed in. This includes personal notes you explicitly save, chosen practices and experiments with reflections, and your confirmation or rejection of interpretations. Human Code Astro additionally uses date, time and place of birth for its optional symbolic perspectives. Mind does not send those birth details to AI. Personal records belong to the app being used. The purpose is to provide your chosen features and saved history (Art. 6(1)(b) GDPR for ordinary personal data). AI sharing and use of personal memory are separate choices; withdrawing them does not automatically stop account synchronisation.

Sensitive content

Free text may contain specially protected information such as health data, religious beliefs or political views. Please do not enter this information in the pre-release version or submit confidential information about other people. Entering text or accepting terms is not explicit consent under Art. 9 GDPR. The existing choice to share information with AI is not presented here as blanket permission to process such content. The handling of sensitive free text, including an appropriate legal basis, must be settled before the general app launch.

AI features and your choice

For analysis, daily reflections, the companion and voice transcription, each app separately asks for consent to sharing (Art. 6(1)(a) GDPR). Depending on the feature, name, interview answers, goals, results, current mood and chat messages are sent through our AI server to OpenAI. Astro may additionally send the birth details used, daily and transit data and numerological themes; Mind does not use those perspectives. The companion sends at most the last 14 messages and the personal context used. Additional saved notes, journal excerpts and experiments are included only with the memory permission described below. Your AI choice is stored per account and app on the current device. AI transfers are blocked without permission. You can withdraw it in Settings; new requests are blocked and ongoing client requests are aborted. This does not delete information already received by a provider or affect the lawfulness of processing before withdrawal.

Personal memory and your control

Personal memory is off by default and requires an additional choice in each app. If enabled, the companion and daily reflection may send notes you explicitly saved, selected excerpts from your own journal, and your experiments and reflections in that app through our server to OpenAI. Up to 24 short notes, seven experiments and six bounded journal excerpts are used; some excerpts may be selected from older entries for relevance to your current question. Permission must be active in the saved app profile and the current request; switching it off now prevents that additional context even before synchronisation finishes. You can view, edit and delete notes, and turn memory off. Changes are synchronised. Turning it off does not delete your saved notes or journal entries. Confirmation or rejection of current interpretations remains part of your feedback even with memory off; a rejected interpretation is not reused as a personality fact. Memory does not create hidden diagnoses or automatically confirmed traits. Later changes do not erase content already received by a provider.

Analysis without full access

Without full access, the selected app receives only your archetype and a short portrait after AI analysis. Our server stores the complete analysis at Supabase in a separate area the app cannot access directly. Only the latest analysis is kept per account and app. A server-verified Astro purchase releases only the Astro analysis; a Mind purchase releases only the Mind analysis. Release does not send your data to OpenAI again. A new analysis in the same app replaces the previous one; account deletion removes both. The purpose is to provide your requested analysis (Art. 6(1)(b) GDPR). Daily reflections, the companion and voice transcription through our server require full access for the selected app.

Voice and reading aloud

Recording requires your device microphone permission. For transcription, up to 120 seconds of audio is sent through our server to OpenAI. The app initiates cleanup of temporary recordings after a transcription attempt or cancellation; our AI server does not create its own audio or prompt files. This does not rule out separate provider retention. Built-in web speech recognition and reading aloud may use your browser or operating system’s speech services; exclusively local processing is not promised.

Reports and abuse prevention

If you report an AI response, the selected response (up to 12,000 characters), reason, app identifier, account ID, review status and timestamp are stored in Supabase and processed by the operator for review. The server also limits requests by IP address and account. Abuse and AI usage limits may apply account-wide across both apps. Usage records contain account/request ID, AI feature, date, status and timestamps, but no prompt or audio content. Purposes are handling reports, security and preventing abuse (Art. 6(1)(f) GDPR).

Purchases and subscriptions

When store purchases are enabled, Apple or Google handles the purchase. RevenueCat receives your app account ID and purchase/subscription information such as product, term and status to associate and verify access rights. Our server checks access to paid features separately for Astro and Mind. A purchase in one app does not unlock the other. This purchase flow does not provide us with full card details or banking credentials. Processing to provide your chosen subscription: Art. 6(1)(b) GDPR. The stores’ own processing is also governed by their privacy notices.

Optional usage analytics

Usage analytics is off by default. If PostHog is configured for your app version and you agree, selected events such as viewing a purchase page are sent with a timestamp and a random persistent device identifier; a verified purchase may also include the monthly or annual plan. Events additionally include a product tag for Astro or Mind. Our event code adds no account ID, free text, memory notes or journal content. The choice and local identifier are separate per app. The identifier is pseudonymous, not anonymous; the connection also exposes technical request data to the recipient. The purpose is to improve the experience, based on your withdrawable consent (Art. 6(1)(a) GDPR and § 25(1) of the German TDDDG). Withdrawal stops new events and removes the local identifier, but does not delete events already held by PostHog.

Reminders

Reminders are scheduled locally with your device permission. Their local data may contain the account ID. This reminder feature does not upload a push token to our server.

Retention in the current app

Profile, results, goals, personal notes, experiments, reflections, interpretation feedback, journal and companion history generally remain until you delete them or your account. A complete analysis held back without full access remains stored until your next analysis or account deletion, the consent record until account deletion. AI reports currently have no additional automatic expiry. Displaying a limited mentor history does not delete older messages. AI usage records older than 35 days are removed when that account next reserves an AI request; no daily cleanup is configured when there are no further requests. Daily reflections are cached locally and are not currently removed simply because they are old. IP request-limit counters are held in memory in 15-minute windows. These are not retention periods for separate provider logs or backups.

Providers and operating details awaiting confirmation

Depending on the feature, the prepared app integrates Supabase (accounts and sync), OpenAI (AI), RevenueCat (purchase status), PostHog (optional analytics) and Apple or Google (stores). The AI server’s hosting provider also processes technically necessary connection data. The actual contracted entities, production storage regions, log/backup periods and any safeguards required for transfers outside the EEA still need final confirmation and must be specified here before the general app launch. This advance notice does not promise exclusively European processing or that particular contracts have already been concluded.

Deletion and contact

Account deletion in either app removes the shared sign-in account and associated server records of both apps from our app database and initiates cleanup of that account’s local storage on the device used. It does not cancel a store subscription or automatically erase every copy, provider log, backup, RevenueCat record or past analytics event. For the steps and a deletion request without app access, see https://myhumancode.app/en/delete-account. Contact: support@myhumancode.app.

Your rights and minimum age

Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction, portability and objection, and may withdraw consent. Send requests to support@myhumancode.app; necessary details for handling requests and any required identity checks are processed to fulfil our data protection duties (Art. 6(1)(c) GDPR). You may complain to a supervisory authority, such as the LfDI Rhineland-Palatinate in Germany: https://www.datenschutz.rlp.de/. The app is intended for people aged 16 and over. A minimum age does not replace any legally required consent from a representative.

Automated analysis

The app associates answers with symbolic archetypes and generates personal reflection texts. This is neither a medical diagnosis nor decision-making with legal or similarly significant effects. Results may be inaccurate; you decide which suggestions to use.