Privacy policy

1. Controller

The controller under the General Data Protection Regulation (GDPR) is: WOB.MBA - Weiterbildung, Orientierung, Beratung, ein Projekt von UDLIS Academy, owner Mihajlo Udlis, Maternusstraße 4, 50678 Köln, Germany. Phone +49 221 9825 3170, email buero@wob.mba.

For any privacy question or to exercise your rights, contact us at buero@wob.mba.

2. What data we process

Account

The app starts with an anonymous account without an email address. We store a random account ID. If you later sign in with Apple or Google, we receive an identifier from them and, if you share it, your email address.

Birth data

Date of birth, time of birth (and how exact it is), place of birth with coordinates and time zone. When you search for a place, your input is sent to our server, which returns the place and the conversion to universal time (UTC).

Names (optional)

Name at birth and current name, if you want to use name numerology.

Settings and consents

Language, explanation mode, reminder time, time zone, and the consents you have given or withdrawn, with date and version.

Journal and mood

Notes and mood stay only on your phone by default. Only if you separately allow syncing do we store them on our server.

Friends

If you connect with another person through an invite link, we store the connection and only the results needed for compatibility (for example signs, numbers), not the date of birth. This happens only with that person's consent.

Partner profiles

Profiles of people you enter yourself (for example for a compatibility comparison) stay only on your phone by default.

Child profiles

Data about your children that you enter in the "Child" section (name, date, time and place of birth) stays on your phone only and is not transferred to us. For the descriptions, the app loads general texts for calculated features (e.g. "Moon in Cancer"), without names or birth data.

AI consultant

Your messages, the answers, the results of your profile calculated by your phone, and a usage counter. Friends' results only if they have given separate consent for this.

Purchases

Purchase status (which content is unlocked, subscription expiry date), store receipts, and your account ID at the payment service RevenueCat. We do not receive payment details such as card numbers.

Push token

A technical token of your device so that we can send rare push notifications. Daily reminders are local notifications scheduled by the phone itself.

Crash reports

Technical details when the app crashes (app version, device model, operating system, error trace). Without your consent, only without personal data.

Usage statistics

Pseudonymous usage events (for example onboarding steps), only with your consent.

Support

Content and sender of your emails to us.

Website

When you visit this website, our hosting provider processes technically necessary connection data (for example IP address, time, page requested). The website sets no cookies, uses no analytics or tracking services and loads no third-party content; fonts are served from our own server.

Birth data is not a special category of personal data under Art. 9 GDPR. In the chat with the AI consultant, however, you may yourself share information such as health details. Please share only what you want to share there. You can delete the history at any time.

3. Purposes and legal bases

• Performance of a contract (Art. 6(1)(b) GDPR): account, birth data, names, settings, place search, syncing between your devices, unlocking purchased content, support.
• Consent (Art. 6(1)(a) GDPR, and § 25(1) TDDDG where device storage is accessed): AI consultant and transfer to Anthropic, journal syncing, sharing your results with friends and with a friend's consultant, push notifications (system permission), extended crash reports, usage statistics. You can withdraw any consent at any time in the app settings; this does not affect the lawfulness of processing before withdrawal.
• Legitimate interests (Art. 6(1)(f) GDPR): security and stability (technical logs, crash reports without personal data), abuse prevention, providing this website, processing third-party data within the compatibility feature (section 4).
• Legal obligations (Art. 6(1)(c) GDPR): retention under commercial and tax law, where it applies to us.

Providing the data is not required by law. Without birth data, however, the app cannot calculate anything.

4. Data about other people (friends and partners)

Compatibility comparisons may involve data about other people. Results calculated from such data also count as personal data, because they allow conclusions about the date of birth.

• Partner profiles you enter yourself stay on your phone by default and are not transferred to us. If you ask the AI consultant about such a person, the results needed for this are sent to the consultant. The legal basis for our processing is our and your legitimate interest in offering the compatibility feature (Art. 6(1)(f) GDPR). Please enter other people's data only if they would agree, and avoid real names when they are not needed.
• Friends in the app share their results only with their own consent. The consultant receives a friend's results only if that friend has separately agreed. If the friendship ends or consent is withdrawn, we delete the shared results.

5. AI consultant

The AI consultant is part of Mapa Daily and only for people aged 18 or over. It is always labelled as artificial intelligence. Before the first chat we show you which data is sent to whom and why. Without your consent the chat is not available; the rest of the app works normally.

To generate answers we send your messages, the conversation so far and the required results of your profile to Anthropic, PBC (USA) as our processor. We store the conversation history and the consultant's memory on our server so you can find them again; you can view and delete them in the app. If you report an answer, the answer concerned is sent to us for review.

6. Recipients, processors and transfers to third countries

We use the following service providers. We conclude contracts under Art. 28 GDPR with processors.

Supabase, Inc.

Database, sign-in, storage and server functions. Data is stored in the EU (data centre in Frankfurt am Main).

RevenueCat, Inc. (USA)

Verification and management of purchases and subscriptions.

650 Industries, Inc. (Expo, USA)

Delivery of push notifications through Apple's and Google's services.

Anthropic, PBC (USA)

Only for the AI consultant and only with your consent.

Functional Software, Inc. (Sentry, USA)

Crash reports.

PostHog, Inc. (hosting in the EU)

Usage statistics, only with your consent.

Cloudflare, Inc. (USA)

Hosting of this website.

Apple and Google

App distribution, payments, sign-in with Apple or Google, and delivery of notifications. For purchases and payments, Apple and Google are independent controllers; their privacy notices apply.

For recipients in the USA, transfers are based on the European Commission's adequacy decision on the EU-US Data Privacy Framework (Art. 45 GDPR) where the recipient is certified, and otherwise on the Commission's standard contractual clauses (Art. 46(2)(c) GDPR). You can request a copy of the safeguards at buero@wob.mba.

We do not pass data to other third parties, do not sell data and do not show ads in the app.

7. Retention

• Account data, birth data, names and settings: until you delete your account.
• Anonymous accounts without activity: deleted automatically after 6 months.
• Friends' shared results: until the friendship ends or consent is withdrawn.
• Journal on the server: until you stop syncing, delete entries or delete the account.
• Conversations with the AI consultant: until you delete them or your account.
• Purchase status: as long as needed for your access, at most until the account is deleted. Purchase receipts are kept by Apple and Google as sellers under their own obligations.
• Push token: until it becomes invalid or you delete the account.
• Crash reports, usage statistics and technical logs: only as long as needed for fixing errors, security and analysis; then deleted.
• Support requests: until resolved, and beyond that only where statutory retention obligations apply.

How to delete your account is described on the page Delete account.

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw consent (Art. 7(3)).

Right to object (Art. 21 GDPR): where we process data based on legitimate interests, you may object at any time on grounds relating to your particular situation.

In the app you can export your data (JSON file) and delete it under Settings. Please send all other requests to buero@wob.mba.

9. Complaint to a supervisory authority

You can lodge a complaint with any data protection supervisory authority, in particular in the member state of your residence or place of work. The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2-4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.

10. Minimum age

The app is intended for people aged 16 or over. The AI consultant is only for people aged 18 or over; age is confirmed during onboarding. If we learn that data of a person under 16 is being processed, we delete it.

11. No automated decisions

Calculations run automatically according to fixed rules. However, there is no automated individual decision with legal effect or a similarly significant effect under Art. 22 GDPR, and no profiling for advertising.

12. Security

Transmission is encrypted (TLS). Data on the server is stored encrypted, and access is restricted so that each account can only see its own data. We collect only the data we need. Logs do not contain the content of your profile.

13. Changes and contact

We update this policy when the app or the law changes. The current version is always available here and in the app. Please send questions to buero@wob.mba.