Data controller
The controller of your personal data is:
Axperts Dariusz Zalewski ul. Pelikana 1/3, 71-698 Szczecin NIP: 851 319 2109, REGON: 363785540 E-mail: [email protected] Telefon: +48 789 072 764
The controller is the publisher of the Spirit of Nibiru mobile app and website.
What data we collect
You provide voluntarily:
- Your date of birth. Without it there is nothing to calculate, so it is required to use the app, but not to create an account.
- A name or nickname. Optional, used only to address you.
- An e-mail address. Only if you create an account with one.
- Dates of birth of other people, if you calculate a matrix for a partner, a child or any event.
- The content of your journal entries, if you use the journal.
Collected automatically:
- Platform and app version, with product events and error reports.
- The names of screens you open, reduced to a pattern. We store „/card/[id]”, not the number of the particular card.
- Event names from a closed list, for example „paywall opened", together with numbers: the length of a message, a chapter number, a count of Sparks.
- The install source from Google Play, if the app arrived from an ad or a link. Android only, and only once, at first launch.
- The content of an error report, meaning the message and the stack trace.
- IP address and basic technical connection data, in server logs.
We do not collect location, contacts, photos or advertising identifiers. The app carries no ads and no cross-app tracking.
The diagram itself is calculated on your device
The Matrix of Destiny is calculated entirely inside the app or in your browser. Your date of birth is not sent anywhere in order to draw the diagram. It reaches our server only when you ask us to save it to your account.
Purposes of processing
- Providing the service, meaning calculating and storing matrices and the journal.
- Creating an account and signing in.
- Sending a sign-in code to the address you give us.
- Notifications, if you turn them on.
- Improving the app based on product events.
- Fixing failures based on error reports.
- Security of the service, including protection against abuse.
- Handling complaints and contact with you.
- Meeting legal obligations, including accounting ones.
Legal bases
- Art. 6(1)(b) GDPR, performance of a contract: running the account, calculating and storing matrices, the journal.
- Art. 6(1)(a) GDPR, consent: artificial intelligence features, install measurement and notifications. We ask for the AI consent and the install measurement consent on the FIRST screen of the app, before anything else. Both are optional, neither is a condition of using the app, and you can withdraw either at any time in the “Me” tab.
- Art. 6(1)(f) GDPR, legitimate interest: security of the service, product statistics, handling of error reports.
- Art. 6(1)(c) GDPR, legal obligation: accounting and record keeping.
Recipients of the data
- Hosting: the controller’s own infrastructure in Poland.
- Cloudflare, Inc.: network traffic intermediation and protection against abuse.
- Resend (Plus Five Five, Inc.): delivery of the sign-in code message.
- Apple Inc. and Google LLC: only if you sign in with their account, and only to the extent of confirming your identity.
- Apple Inc. and Google LLC as store operators, for settling purchases and subscriptions. They receive your payment details directly from you; we receive from them the purchase confirmation, transaction identifier, amount and currency, with no card number and no billing address.
- OpenAI Ireland Limited (for people in the European Economic Area; outside the EEA: OpenAI, L.L.C.): generating readings, Daily Energy texts and Nova’s answers. Only with your consent. We send: your date of birth, the matrix numbers calculated from it, your name and intention if you gave them, the content of your messages to Nova, and summaries of earlier chapters of a reading.
We do not send your e-mail address, billing data or journal entries. The data goes through the OpenAI application programming interface, which under that company’s terms is not used to train its models. Without this consent the diagram, the calculations, the wheel of age and the journal work unchanged; readings, Daily Energy texts and conversation with Nova do not work.
- Google LLC (Firebase Analytics): install measurement, meaning which ad or which place you came to the app from and whether a purchase followed. Only with your consent, which you can give and withdraw in the “Me” tab and which is off by default: on the first screen both switches are off and nobody ticks them for you. We then send the installation identifier, device model, country, and the fact and amount of a purchase.
We do not send your date of birth, your matrix, your journal or your conversations with Nova. We do not build an advertising profile, we do not read the advertising identifier and we do not ask for tracking permission, because we do not track: ad attribution works through a system mechanism that does not identify a person. Without this consent the app works the same.
- Apple Inc. (APNs) and Google LLC (Firebase Cloud Messaging): delivering notifications to your device. They receive only the device token and the content of the notification, which you will see on screen anyway. Without them notifications have no way to arrive: on both systems this is the only route. If you do not turn notifications on, no token is created and nothing is sent.
Artificial intelligence features are available and require your separate consent. The entity that performs them and the scope of data sent to it are described above, in the list of recipients.
Answers produced by artificial intelligence are reflective and entertaining in nature. They are not medical, psychological, legal or financial advice.
An account shared with Spirit of Arkanum
If you create an account, it is shared with the Spirit of Arkanum app from the same controller. You sign in once and both apps recognise you as the same person.
Shared are: the account, sign-in sessions and the basic profile, meaning name, date of birth, language and time zone.
Not shared are: purchases and subscriptions, consent to processing by artificial intelligence, the journal, the history of readings and conversations. Each app keeps those separately.
Deleting the account deletes data in both apps. We say so on the deletion screen, before you confirm.
Cookies
On the website we use only the sign-in session cookie, which is necessary for the account to work. We use no advertising or tracking cookies, so we show no consent banner: there is nothing to consent to.
Analytics tools
We store product statistics and error reports in OUR OWN database on our own server. We use no external error monitoring and no external product analytics.
The only external measurement tool is Google Analytics for Firebase, and only for install measurement, described above in the list of recipients. It runs only if you consent to it, and it is off by default.
What exactly we record in measurement
We measure how the app is used so we know which screens cause trouble. In doing so we record only the shape of usage, never the content.
We record: the name of the screen you opened, reduced to a pattern, the name of an event from a closed list, and numbers, for example the length of a message to Nova, a chapter number or a count of Sparks.
We do NOT record any content. We do not record what you write to Nova, nor the text of your journal entries, nor the names or dates of the people whose matrices you calculate. With Nova we only care whether people write sentences or single words, so we record the length of a message and nothing else.
Events are tied to a random device identifier. It is created on your phone at first launch, it is NOT an advertising identifier, it cannot be linked to other apps, it never leaves our server, and it changes when you reinstall the app.
The install source, meaning whether the app arrived from an ad or straight from the store, is handed to us by Google Play at first launch. We ask for it once, and on Android only. On iPhone this information does not exist at all, so those installs remain of unknown origin to us. It serves only to judge whether paid advertising is worth it, and it changes nothing in how the app works.
All of this measurement is stored in OUR OWN database, on our own server, and it disappears when you erase your data in the app. We keep it for 90 days, after which only aggregate numbers remain, which cannot be linked to a person.
Your rights
You have the right to:
- access your data and receive a copy of it,
- rectify inaccurate data,
- erase your data,
- restrict processing,
- data portability,
- object to processing based on legitimate interest,
- withdraw consent at any time, without affecting processing carried out before the withdrawal.
You can export and erase your data in the Service yourself, in the app. We then delete everything we hold about you in Spirit of Nibiru: readings, portraits, the memory of conversations with Nova, the journal, product events and the install source. Purchases and subscriptions remain, but detached from you as a person, because they are proof of payment.
The account itself, meaning your e-mail address and the ability to sign in, is shared with Spirit of Arkanum and does not disappear when Nibiru data is erased. To delete the account itself, write to [email protected] and we will do it within 30 days. It removes access to both apps at once. We handle other requests within the same period.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.
Retention periods
- Account data, meaning e-mail address and sign-in sessions: until the account is deleted, on request sent to the address above.
- Matrices, journal and reading history: until you erase your data in the app, or up to 24 months from your last sign-in.
- Install source: until you erase your data in the app.
- Product events, screen trail and error reports: 90 days, after which only aggregate numbers remain, which cannot be linked to a person.
- Sign-in sessions: one year from last use.
- Server logs: 90 days.
- Accounting data: 5 years from the end of the tax year, as required by law.
Security
Connections are encrypted. Only the controller’s services have access to the database, and the app connects to the account database with a role that has no right to delete data. Sign-in codes are stored only as hashes, so even a copy of the database gives no access to accounts awaiting sign-in. Backups are made regularly and kept in the controller’s infrastructure.
Children’s data
The app is intended for people aged 16 and over. That is the age of consent for processing in information society services applicable in Poland. We do not knowingly collect data of people below that age.
Other people’s dates of birth
You can calculate a matrix for a partner, a child or any date. You enter such data on your own responsibility and it is you who is responsible for the basis of its use. You can delete any such person separately, at any time.
Changes to this policy
We will announce changes to this document in the app. Every version has its own effective date and previous versions remain available.
Contact about personal data
Axperts Dariusz Zalewski ul. Pelikana 1/3, 71-698 Szczecin NIP: 851 319 2109, REGON: 363785540 E-mail: [email protected] Telefon: +48 789 072 764