Skip to content
Back to home

Privacy Policy

1. Introduction

Protecting your personal data matters to us. This privacy policy explains how the UmbraLux app (the “App”), with your companion Verus, and our website umbralux.app process your personal data. It is governed by the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

2. Controller

Adrian Schmidt
Adalbert-Stifter-Straße 4
82494 Krün
Germany
Email: sternenschmied96@gmail.com

3. Types of data we process

  • Account data: your first name, depending on how you sign in your email address (with Apple or Google) or your phone number (with an SMS code), your profile picture if you upload one, and the language in which you use the App.
  • Birth and profile data: date, time and place of birth (with coordinates and time zone) and the profiles calculated from them, for example in astrology and Human Design. Without your birth data we cannot calculate your profile; there is no legal obligation to provide it. So that the App also works without internet, it keeps a copy of your profile on your device and deletes it when you sign out.
  • Personality test: your answers, if you take the test. Verus only uses them with your consent (section 4).
  • Conversations with Verus: your messages, images you share, and the titles and summaries of your chats. We convert voice messages into text and do not store the recording itself.
  • Verus’ memory: what you enter about yourself under “What Verus Knows” (such as your self-description, values, focus, intentions and boundaries) and what Verus derives from your conversations (reflections and facts).
  • Reports, Meisterbuch and audio: your reports, your Meisterbuch with its dedication, your full name, birth name and delivery address, and the PDF and audio files created for them.
  • People you add: name, relationship and birth data of partners or friends. These profiles are stored only on your device. You delete a person with a long press in the relationship check; when you sign out, the App removes all people from your device. In app versions before 2.1 they stay on your device until you delete your account or the App. If you select a person in a chat, the App calculates a few traits on your device, such as the zodiac signs of their Sun, Moon and Ascendant, their Human Design type, profile and authority and their Life Path number, and sends only these, with their name and your relationship, into the conversation, not the birth data. App versions before 2.1 also send the person’s calculated profile, including their birth data, to our server, which neither analyses nor stores it.
  • Purchases and referrals: which products you bought and when, the order data of a Meisterbuch ordered through our website, your referral code, how many people you referred and, if applicable, who referred you.
  • Support and feedback: support requests with information about your device (model, operating system, app version) and a screenshot if you attach one, as well as feature suggestions.
  • Usage data: daily counters, for example for your messages with Verus and for the audio versions and quizzes you have the library create, so that the daily limits in our terms apply. We also count which topics come up in conversations with Verus, only as weekly totals with no link to you (topic statistics, section 4); you can turn this off in the settings. The App also counts, with no link to you, which areas are opened and how often a few steps occur (usage statistics, section 5). App versions before 2.1 also record which areas of the App you open, sign-ins and sign-outs, and purchase and subscription events, each with your user ID, plus measurements of how quickly the App loads (see section 5).
  • Device and technical data: IP address, device type, operating system, app version, push token, crash and error reports, and attestation signals with which Apple or Google confirm that a request comes from our genuine App. On Android devices, app versions before 2.1 also collect the advertising ID through Firebase Analytics (see section 5).
  • Consents and terms: whether you have given, declined or withdrawn your consent to conversations with Verus and to the use of your test answers, with a log of these decisions, and which version of our terms you accepted and when (section 4).
  • Website visits: technical access data (such as IP address and browser identifier), audience measurement data, and messages you send to the chat assistant or through the contact form.

4. Purposes & legal bases

We process your data for the following purposes:

Providing the App

Your account, the calculation of your profiles, reports, the Meisterbuch including printing and shipping, purchases, support and the daily limits in our terms. Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

Conversations with Verus

Your conversations with Verus, including voice messages, images and read-aloud replies, and what Verus remembers from them. Legal basis: your explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR), details below.

Personality test

Verus uses your answers to tailor conversations, daily texts and your profile to you. The test is optional. Legal basis: your explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR), details below.

Reports, Meisterbuch and profile texts

Your reports, your Meisterbuch and texts about your profile, such as the summary after setup, are created with the help of AI models (see section 5). Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

Topic statistics

To improve Verus, we count which topics come up in conversations, such as relationships, work or health. For this, our server assigns each message up to three topics based on keywords and adds them to weekly totals across all users. These totals contain no message content, no user ID, no link to a chat and no time more precise than the week. The legal basis is your consent to conversations with Verus, whose text mentions this count; you can turn it off at any time in the settings (“Share topic statistics”).

Records

We keep a record of your decisions on your consents (see below) and of which version of our terms you accepted and when, at sign-up or after a change, each with the app version. Legal basis: Art. 6(1)(c) in conjunction with Art. 7(1) GDPR (proof of consent), and Art. 6(1)(b) GDPR for the terms.

Security and error analysis

Crash and error reports and protecting our servers against abuse. Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is a stable and secure App.

Usage statistics

To understand what is used in the App, it counts, without a user ID, which areas are opened and how often a profile is created, a message is sent to Verus, the purchase page of a report is opened or something is bought (Umami, see section 5). Legal basis: Art. 6(1)(f) GDPR.

Usage analysis (app versions before 2.1 only)

App versions before 2.1 record which features are used and where purchases are abandoned, in order to improve the App (see section 5). Legal basis: Art. 6(1)(f) GDPR. From version 2.1, there is no such usage analysis anymore.

Notifications

We only send push notifications if you allow them when your device asks. Legal basis: your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time in your device settings.

Website

Delivering and protecting the website, audience measurement, error reports, the chat assistant and the contact form. We state the legal basis for each service in section 5.

Automated decisions: Verus analyses your information in order to accompany you personally. In doing so, we make no decisions that produce legal effects concerning you or similarly significantly affect you (Art. 22 GDPR).

5. Service providers and recipients

We rely on specialised service providers for our services. Where they process data on our behalf, we have concluded data processing agreements with them under Art. 28 GDPR. Apple and Google (for sign-in and in-app purchases) and PayPal and Klarna (when you pay with them) process data under their own responsibility; their own privacy notices also apply.

In the App

Google Cloud and Firebase

Our backend runs on Google Cloud and Firebase: sign-in (Firebase Authentication, including sending the SMS code), database (Cloud Firestore), file storage (Cloud Storage, for example for profile pictures, PDFs and audio files), server functions (Cloud Functions and Cloud Tasks), app configuration (Remote Config) and abuse protection (App Check). The database, files and server functions are located in the europe-west3 region (Frankfurt am Main, Germany). The provider is Google Ireland Limited.

Sign-in with Apple, Google or phone number

If you sign in with Apple or Google, we receive your email address from them (with Apple, an anonymous relay address if you choose one) and your name if you share it. If you sign in with your phone number, Firebase Authentication (Google) sends you a confirmation code by SMS. Apple and Google process the sign-in under their own responsibility.

Place of birth search (Google Maps Platform)

When you enter a place of birth, your own or that of a person you add, Google Places suggests matching places; your input and your device’s IP address go directly to Google for this. To determine the time zone at the time of your birth, we send the coordinates of the place and your date of birth to the Google Time Zone API. Legal basis: Art. 6(1)(b) GDPR.

AI services (Mistral AI, OpenAI)

Verus’ replies, the titles and summaries of your chats, Verus’ memory, your reports, texts about your profile and the texts of your Meisterbuch are generated by language models from Mistral AI (France). For this, we send the content each task needs: in a chat, your first name, your calculated profile, what you entered under “What Verus Knows”, stored facts and reflections, your answers in the personality test if you consented to that, the traits of a person you select in the chat, and the conversation so far, including images you share. For some chapters of the Meisterbuch, this also includes your full name, your birth name and your birth data.

OpenAI (USA) converts voice messages into text; the App tells it the language in which you use the App. OpenAI also generates read-aloud replies, the audio version of reports and the Meisterbuch audiobook from the respective text.

We do not send this data in anonymised form. According to their terms, Mistral AI and OpenAI do not use data processed through their programming interfaces to train their models. Conversations with Verus and the personality test need your consent (section 4).

Purchases and subscriptions (Apple, Google, RevenueCat)

In-app purchases and subscriptions are handled by the Apple App Store and Google Play; only they see your payment details. We use RevenueCat (RevenueCat, Inc., USA) to manage your purchases. RevenueCat receives your user ID and the purchase data (product, time, price, store), which we also store ourselves. If you delete your account, we also delete your record at RevenueCat.

Firebase Crashlytics (Google)

If the App crashes or an error occurs, Firebase Crashlytics records a report with your user ID, information about your device, operating system and app version, and your IP address; Google also processes it in the USA. The App does not collect an advertising ID. Legal basis: Art. 6(1)(f) GDPR.

Firebase Analytics and Performance Monitoring (app versions before 2.1 only)

App versions before 2.1 use Firebase Analytics to send Google which areas of the App you open and how purchases go, and Firebase Performance Monitoring to measure load and response times, each with your user ID, information about your device and app version, and your IP address, also in the USA. They also send your email address to Firebase Analytics and, on Android devices, your device’s advertising ID. This stops as soon as you update to version 2.1, which no longer contains either service. Legal basis: Art. 6(1)(f) GDPR.

Sentry (error reports)

If an error occurs in the App, we send an error report to Sentry (Functional Software, Inc., USA; the data is stored in the EU). It contains technical information about your device, operating system, app version and the areas of the App you last opened, as well as your user ID. We do not send your birth data or the content of your conversations, and we do not use Sentry to measure load times. Legal basis: Art. 6(1)(f) GDPR.

App versions before 2.1 also send your email address and measure load times for a small share of sessions.

Umami (usage statistics)

To understand which parts of the App are used, the App counts with Umami, the same cookie-free analytics software we operate ourselves for the website (server at Vercel and database at Neon, both in Frankfurt). The App sends the area opened (such as the chat, a report or a library entry), for four steps their name (profile created, message to Verus, purchase page of a report opened, purchase with the product bought), the App’s language, the app version, the operating system with its version and the device type. It does not send your user ID, your name, your birth data or the content of your conversations. Umami stores no IP addresses: to count visits, it creates an irreversible identifier from your IP address, the app version, the operating system and a random value that changes daily, and stores this information and your approximate location (country, region, city) under it. We only evaluate it in aggregate and do not link it to any person. Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is understanding how the App is used and improving it.

Push notifications (Expo, Apple, Google)

If you allow notifications, we store a push token of your device with your account. We send notifications through the Expo service (650 Industries, Inc., USA), which delivers them via the Apple Push Notification service or Google Firebase Cloud Messaging. The content passes through these services, for example a prompt about your Human Design type or sun sign. So that they reach you in your language, we use the language of your App. You can turn off notifications at any time in your device settings.

Printing and shipping the Meisterbuch (epubli)

To print and ship your Meisterbuch, we pass the print file together with your name and delivery address to the printer epubli, which sends the book directly to you. Legal basis: Art. 6(1)(b) GDPR.

Map and fonts (app versions before 2.1 only)

For the map of your resonance places, app versions before 2.1 load map images from CARTO and the Leaflet map library via unpkg.com, and for PDFs of your reports, fonts from Google Fonts. In the process, these providers learn your device’s IP address. From version 2.1, the App ships the map and the fonts itself and loads nothing from other servers for them.

On the website

Hosting (Vercel)

Our website is operated by Vercel Inc. (USA). When you visit it, Vercel processes technically necessary data such as your IP address, the time, the requested address, the referrer and your browser identifier in order to deliver the pages and protect them against attacks. Page requests are answered by Vercel’s worldwide server network; the chat assistant, the contact form and the free chapter run on servers in Frankfurt, other server functions in the USA. Legal basis: Art. 6(1)(f) GDPR.

Umami (audience measurement)

To measure our website’s reach, we use Umami, a cookie-free analytics software that we operate ourselves (server at Vercel and database at Neon, both in Frankfurt). Umami sets no cookies and stores no IP addresses. To count visits, Umami creates an irreversible identifier from your IP address, your browser identifier and a random value that changes daily. Under this identifier, Umami stores the pages viewed, the referrer, your approximate location (country, region, city), browser, operating system, device type, screen size and language setting. We only evaluate this information in aggregate and do not link it to any person. Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is understanding how our website is used and improving it.

Sentry (error reports)

If a technical error occurs while you use our website, the page sends an error report to Sentry (Functional Software, Inc., USA; the data is stored in the EU). It contains the error message, the page you opened without any further additions to its address, and your browser, operating system and device type. Sentry does not store IP addresses in the process, we set no cookies for it, and we do not transmit what you enter in forms or the chat. Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is a website that works without errors.

Chat assistant

If you ask the chat assistant on our website a question, we forward the conversation via our server at Vercel in Frankfurt to Mistral AI (France), which generates the reply. We do not store the conversation; it disappears as soon as you reload or close the page. Legal basis: Art. 6(1)(f) GDPR.

Contact form

If you write to us via the contact form, we pass your name, email address and message through our server at Vercel in Frankfurt to our database (Google Cloud, Frankfurt) and store them there. We send you a confirmation of receipt via the email service Resend (USA); a notification goes to our email inbox at Google (Gmail). Legal basis: Art. 6(1)(b) GDPR where your request concerns a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering your request).

Free chapter and e-mails

If you request your free chapter on our website, we pass your first and family name, date, time and place of birth and your e-mail address through our server at Vercel in Frankfurt to our database (Google Cloud, Frankfurt). First we send you an e-mail through the e-mail service Resend (USA) in which you confirm your address; only then do we calculate your profile and have the chapter written by Mistral AI (France). With your confirmation we send you the chapter as a PDF, seven e-mails with insights from your profile over 14 days (including offers for the Meisterbuch) and then “Dein Monat” once a month. We store when you requested and confirmed and which text you agreed to. Legal basis: your consent, Art. 6(1)(a) GDPR. You can withdraw it at any time with one click in every e-mail. The free chapter and its e-mails are in German, like the Meisterbuch.

Waitlist for the English edition

If you join the waitlist for the English edition of the Meisterbuch, we pass only your e-mail address through our server at Vercel in Frankfurt to our database (Google Cloud, Frankfurt) and send you an e-mail through Resend (USA) in which you confirm your address. With your confirmation we write to you once, when the English edition is ready. We store when you signed up and confirmed and which text you agreed to. Legal basis: your consent, Art. 6(1)(a) GDPR. You can withdraw it at any time with the link in the e-mail.

Contact via WhatsApp

In the App and on our website, you can also write to us via WhatsApp. This is optional; you can reach us just as well by email or through the contact form. WhatsApp is operated by WhatsApp Ireland Limited, a Meta company, which processes your messages for this purpose; data may also be transferred to the USA. We receive your phone number, depending on your WhatsApp settings your profile name and profile picture, and everything you write or send to us. If you contact us about a report from within the App, the App suggests a message with the report’s title, which you can change before sending. WhatsApp explains in its own privacy policy which data it processes itself. Legal basis: Art. 6(1)(b) GDPR where your request concerns a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering your request). We delete the chat at the latest 12 months after your last message.

Cookies

Our website sets no cookies for advertising or analytics. It only sets the technically necessary cookie “NEXT_LOCALE”, which remembers your language choice for the duration of your browser session (Section 25(2) No. 2 TDDDG).

Buying the Meisterbuch on the website

You order the Meisterbuch (printed, digital or as a voucher) on our website. The checkout runs on principium.one (servers at Vercel, orders in Google Firebase in the EU); payment goes through Stripe (Ireland, with transfers to the USA); if you pay with PayPal or in instalments with Klarna, Stripe passes the data needed for that to this provider, which also processes the payment itself. The invoice comes through Resend (USA). We receive your email address, name, for printed books the delivery address and, where applicable, a partner code, in order to match the order to your app account by its email address and to write and deliver the book. If no account is found, we keep the address and the order until you create one. Legal basis: Art. 6(1)(b) GDPR.

Your opinion of the Meisterbuch

Some time after delivery we ask you once by email for your opinion of the book. What you write we store with the name you give for it. We show your words on our website and in our emails only if you expressly agree; you can withdraw that consent at any time by email. Legal basis for the request: Art. 6(1)(f) GDPR (legitimate interest in improving our book); for publication your consent, Art. 6(1)(a) GDPR.

6. Transfers to third countries

Some service providers are based in the USA or process data there, in particular OpenAI, RevenueCat, Expo, Resend, Vercel, Sentry, Apple and Google. We base transfers to the USA on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework where the recipient is certified under it, and otherwise on the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR).

7. Storage period

We store your data for as long as you have an account and we need it for our services. After that, we delete it unless statutory retention obligations require otherwise. In detail:

  • Chats: a chat counts as finished after 24 hours without a new message. We archive it 14 days later and delete its messages, including shared images, after a further 90 days. The title, the summary and what Verus has learned from it remain until you delete the chat, Verus’ memory or your account. If you delete a chat, what Verus learned only from that chat goes with it. We do not archive or empty pinned chats.
  • Verus’ memory: Verus keeps at most the seven most recent reflections. On his own, he forgets facts that haven’t come up for about six months (those that came up often, a little later); he keeps who you are, your boundaries and your preferences. Your own entries remain until you remove them. If you delete a single fact, we keep only a technical sequence of numbers instead of the text, so that Verus does not derive it again from older messages; it disappears when you delete Verus’ memory or your account.
  • Personality test: your answers remain until you decline or withdraw your consent to it or delete your account.
  • Consents: if you decline or withdraw your consent to conversations with Verus, we immediately delete all your chats and Verus’ memory (section 4). We keep the log of your consents and your acceptance of the terms for as long as you have an account, so that we can prove them.
  • Audio: we delete read-aloud replies after 24 hours. The audio versions of your reports and the Meisterbuch audiobook remain until you delete your account.
  • Account deletion: if you delete your account in the App or ask us to by email, we immediately delete all data associated with it, including your record at RevenueCat. A daily check removes anything left over. For technical reasons, deleted files remain in a backup for up to 7 days. Server logs that may contain your user ID are deleted after 30 days, and crash, error and usage data at Google and Sentry when the retention period set there expires. Feature suggestions remain without your name and user ID. The topic statistics remain as well; they consist only of weekly totals that cannot be linked to any person. The usage statistics in Umami contain no user ID and remain as well.
  • Accounts without a profile: if you sign in but never create a profile with your birth data, we delete the account and everything stored with it after you haven't used it for 30 days.
  • Contact requests: we delete them 12 months after receipt.
  • Free chapter: if you don’t confirm your address, we delete your details after 7 days. If you unsubscribe from the e-mails, we immediately delete your name, birth data, chapter and address. Only an irreversible checksum of your address remains, so that we don’t write you a second free chapter.
  • Waitlist for the English edition: if you don’t confirm your address, we delete it after 7 days. If you leave the list, we delete it immediately.

8. Your rights as a data subject

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You can withdraw your consent at any time with effect for the future (Art. 7(3)).

Right to object: where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you can object to this at any time on grounds relating to your particular situation.

Much of this works directly in the App: you delete chats with a long press in your history, individual entries under “What Verus Knows” and Verus’ entire memory in the settings. There you can also see and withdraw your consents to conversations with Verus and to the personality test under “Consents”, turn off the topic statistics (“Share topic statistics”, labelled “Anonyme Qualitätsverbesserung” in older versions), create a copy of your data under “Export Data” and delete your account under “Delete Account” (instructions: umbralux.app/en/delete-account).

The export is a JSON file with all data we store for your account, including your profile, reports, Verus chats and memory, test answers, your consents with their log, your acceptance of the terms, your Meisterbuch order, purchases, daily counters and links to download your photos, PDFs and audio. App versions before 2.1 export only part of it.

For anything else, write to us at sternenschmied96@gmail.com; on request, we will also send you a complete copy of your data by email. You also have the right to lodge a complaint with a data protection supervisory authority, for example the Bavarian State Office for Data Protection Supervision (BayLDA) in Ansbach, which is responsible for us.

Last updated: 5 October 2026Version 2.1