Back to NumaBondNumaBond
Data Protection & Privacy

Privacy Policy

NumaBond Privacy Policy

Effective date: August 8, 2026

Last updated: August 8, 2026

This Privacy Policy explains how NumaBond collects, uses, stores, shares, and protects personal information when you use numabond.com, create an account, purchase a product, generate a numerology report, contact support, or otherwise use the NumaBond service (collectively, the "Service").

NumaBond is a trading name used by a sole proprietor registered in Poland under tax identification number NIP 9372696089 ("NumaBond", "we", "us", "our", or the "Controller"). The Controller's official registration details may be verified in the Polish public business register using this NIP.

Privacy contact: numabondapp@gmail.com

Because the Controller is established in the European Union, European data-protection rules, including the GDPR where applicable, may apply to our processing even though the Service is marketed primarily to users in the United States.

1. Scope

This Policy applies to personal information processed through the Service.

It does not govern independent processing performed by third-party websites or services that you choose to visit outside NumaBond, except where those parties process information on our behalf.

2. Information we collect

Depending on how you use NumaBond, we may process the following categories of information.

A. Account and authentication information

This may include:

  • email address;
  • display name;
  • profile image if provided by a sign-in provider;
  • internal user ID;
  • authentication provider and related authentication identifiers;
  • account creation and login timestamps;
  • account status.

We may support authentication through providers such as Google and other sign-in services.

B. Information used to create numerology reports

This may include:

  • full name or birth name;
  • date of birth;
  • relationship category;
  • relationship role;
  • relationship context or optional free-text information;
  • information about another person included in a relationship report;
  • numerology values calculated from submitted information;
  • Connection Map dimensions and scores;
  • generated report content;
  • report history and saved cases.

C. Information about another person

A relationship report may contain information about a person who is not a NumaBond account holder.

This may include a name, date of birth, relationship role, and limited context supplied by the user requesting the report.

If you submit information about another person, you are responsible for having a lawful basis and authority to provide that information and, where required, for informing that person about this Policy.

Please do not submit unnecessary sensitive personal information about another person.

D. Sensitive information you choose to provide

Optional relationship context may sometimes reveal information that can be sensitive under applicable law, such as information concerning health, sexual life, sexual orientation, religion, or other private matters.

NumaBond does not require you to provide unnecessary sensitive information.

If the Service expressly permits you to provide your own sensitive information, you should do so only when necessary for the report and only if you are comfortable with it being processed for that purpose.

Do not provide sensitive information about another person unless you have explicit lawful authority to do so.

For adult-only categories such as Intimacy & Chemistry, you must be at least 18 and the other person must also be at least 18.

E. Payment and transaction information

Payments are processed by Stripe or another payment processor displayed at checkout.

We may receive and store:

  • Stripe customer or checkout identifiers;
  • product or package purchased;
  • amount and currency;
  • payment status;
  • timestamps;
  • promotion-code information;
  • limited billing information;
  • refund or dispute status.

We do not receive or store your complete card number or CVC.

F. Technical, device, and security information

When you use the Service, we and our service providers may automatically process:

  • IP address;
  • browser type and version;
  • device type;
  • operating system;
  • language and time-zone information;
  • request timestamps;
  • pages or functions accessed;
  • cookies or similar identifiers;
  • security, fraud-prevention, and diagnostic logs;
  • error and performance information.

G. Communications

If you contact us, we may process:

  • your email address;
  • message content;
  • attachments you send;
  • support history;
  • information necessary to resolve your request.

3. How we use personal information

We may use personal information to:

  • create and manage accounts;
  • authenticate users;
  • calculate numerology values;
  • generate previews and full reports;
  • generate Connection Maps, interpretations, and related content;
  • save reports and account history;
  • process purchases and allocate Portrait Credits;
  • apply promotion codes;
  • provide account deletion and privacy controls;
  • respond to support requests;
  • detect fraud, abuse, security incidents, and attempts to bypass limits;
  • debug and maintain the Service;
  • enforce our Terms of Service;
  • comply with tax, accounting, legal, regulatory, and payment obligations;
  • establish, exercise, or defend legal claims;
  • improve reliability, usability, and safety;
  • send essential service communications.

We will not use numerology reports to make automated decisions about your eligibility for employment, credit, insurance, healthcare, housing, education, or similar high-impact services.

4. Legal bases under the GDPR

Where the GDPR applies, we process personal data under one or more of the following legal bases:

Contract

Processing is necessary to provide the Service you request, including:

  • account functionality;
  • numerology calculations;
  • report generation;
  • purchase fulfillment;
  • access to saved reports and credits.

Legitimate interests

We may process information for legitimate interests such as:

  • securing the Service;
  • preventing fraud and abuse;
  • troubleshooting;
  • protecting legal rights;
  • maintaining service reliability;
  • understanding basic service performance.

We balance these interests against your rights and freedoms.

Legal obligation

We process information where necessary to comply with applicable:

  • accounting;
  • tax;
  • payment;
  • fraud-prevention;
  • regulatory;
  • court;
  • law-enforcement obligations.

Consent

Where required, we rely on consent for specific processing, such as certain optional sensitive information, non-essential tracking technologies, or marketing communications.

You may withdraw consent at any time, but withdrawal does not affect processing already lawfully performed before withdrawal.

5. Numerology calculations, AI processing, and data minimization

NumaBond uses automated systems to generate digital numerology content.

The Service is designed to separate account and payment information from the information needed to generate a report.

NumaBond does not intentionally send the following categories of information to an artificial intelligence provider for report generation:

  • your email address;
  • authentication credentials;
  • Google or other sign-in account identifiers;
  • internal account or user IDs;
  • Stripe customer, checkout, or payment identifiers;
  • full payment-card details or CVC;
  • billing transaction records;
  • IP addresses or device identifiers used for security or anti-abuse purposes.

For report generation, the AI provider may receive only information reasonably necessary to create the requested analysis, such as:

  • deterministic numerology values calculated by NumaBond;
  • relationship category and relevant relationship roles;
  • age or life-stage context where relevant to the selected report;
  • structured Connection Map or interpretation inputs;
  • relationship context or free-text information that you choose to provide;
  • a name or other report label only where the applicable generation workflow requires it.

Where reasonably possible, NumaBond seeks to minimize direct identifiers and use neutral or pseudonymous labels for report generation.

Important: free-text relationship context may itself contain personal information if you choose to include it. You should not enter unnecessary identifying or sensitive information, especially information about another person.

The Service may:

  1. calculate numerology values deterministically from information you provide;
  2. structure those values into predefined categories;
  3. provide the minimum report inputs reasonably necessary to an AI provider;
  4. receive generated analysis;
  5. display or store the resulting report in your NumaBond account.

The generated content is intended for reflection and entertainment.

This processing does not itself produce legal or similarly significant effects about you. NumaBond does not use numerology or AI output to determine your eligibility for employment, credit, insurance, housing, medical treatment, education, or other high-impact opportunities.

6. Service providers and recipients

We use service providers that process information for us or provide essential infrastructure.

These may include:

Google / Firebase / Google Cloud

Used for functions such as:

  • hosting;
  • authentication;
  • databases;
  • account infrastructure;
  • security;
  • technical operations.

OpenAI

Used to generate or assist in generating report content and structured interpretations through API-based artificial intelligence services.

NumaBond does not intentionally provide OpenAI with account credentials, email addresses, payment-card information, Stripe transaction identifiers, or other account-management data for report generation.

The information sent for a generation request is limited to the report inputs reasonably necessary to produce the requested output, such as numerology values, report category, relevant relationship roles or context, and other structured report data. User-provided free-text may contain personal information if the user chooses to include it.

We seek to minimize direct identifiers and use pseudonymous or neutral person labels where reasonably possible.

Stripe

Used to:

  • process payments;
  • provide checkout functionality;
  • support payment methods;
  • apply discounts;
  • prevent payment fraud;
  • process refunds and disputes.

Stripe processes payment information under its own applicable privacy terms and payment obligations.

Authentication providers

If you choose a third-party sign-in provider, such as Google or another supported provider, that provider processes information necessary to authenticate you.

Professional and legal recipients

We may disclose information when reasonably necessary to:

  • accountants;
  • legal advisers;
  • auditors;
  • insurers;
  • security specialists;
  • law-enforcement authorities;
  • courts;
  • regulators;
  • tax authorities.

We require service providers to process information subject to appropriate contractual and security obligations where required.

7. We do not sell personal information

As of the effective date of this Policy, NumaBond does not sell personal information for money.

We also do not knowingly share personal information for cross-context behavioral advertising as those terms are defined under applicable U.S. state privacy laws.

If our practices materially change, we will update this Policy and provide any opt-out mechanism required by applicable law.

8. Cookies and similar technologies

NumaBond and its service providers may use cookies or similar technologies that are necessary for:

  • sign-in;
  • session management;
  • security;
  • fraud prevention;
  • checkout;
  • remembering essential preferences;
  • technical operation.

Third-party authentication and payment tools may set their own essential cookies or similar identifiers.

Optional Meta Pixel and advertising measurement

We use the optional Meta Pixel (provided by Meta Platforms, Inc. / Meta Platforms Ireland Ltd., Pixel ID: 28509376952052310) to measure the effectiveness of our advertising and understand how visitors use NumaBond.

  • Disabled by default: Meta Pixel is completely disabled by default. Before you provide consent, no tracking script (fbevents.js) is loaded, no tracking pixels or cookies are placed, and no tracking requests are transmitted to Meta.
  • Cookies used: If you grant consent, Meta may set first-party cookies (such as _fbp) and process device identifiers.
  • Specific events measured: When enabled by your consent, the Pixel measures:
  • PageView (navigation between pages);
  • CompleteRegistration (only upon the successful creation of a new account; not during regular sign-ins or link requests);
  • PortraitGenerated (confirmation that a relationship portrait was generated, sent without any portrait content or personal parameters);
  • Purchase (after payment confirmation by our backend, including the real package value and currency; free welcome portraits are never counted as purchases, and repeat visits do not duplicate transactions).
  • Strict exclusion of sensitive data and personal inputs: We strictly exclude form inputs, birth names, dates of birth, relationship descriptions, report texts, authentication tokens (such as one-time sign-in or verification codes), and payment session identifiers from all tracking requests and URLs. Meta's automatic advanced matching and automatic event detection are disabled.
  • Consent and revocation: You may accept or reject Meta tracking through the consent banner. You can change your choice or revoke consent at any time by clicking "Cookie preferences" in the footer of our website. Revoking consent immediately stops all tracking and removes accessible Meta cookies from your browser. Your choice will never affect your access to NumaBond or the creation of your relationship portraits.

Browser "Do Not Track" signals are not standardized. We respond to legally recognized opt-out signals where applicable and technically supported.

9. International data transfers

NumaBond is operated from Poland, while some service providers may process information in the United States or other countries.

Where required by applicable data-protection law, international transfers may be protected through mechanisms such as:

  • Standard Contractual Clauses;
  • adequacy decisions;
  • the EU-U.S. Data Privacy Framework where applicable to a participating recipient;
  • other lawful transfer safeguards.

Different countries may have different data-protection laws.

10. How long we retain information

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy and as required by law.

Account and report information

Account-linked information, saved reports, cases, and generated content may generally be retained while your account remains active.

If you delete your account, we will delete or anonymize account-linked information from active systems subject to the exceptions below.

Payment, accounting, and legal records

Transaction information may be retained for periods required by applicable tax, accounting, payment, anti-fraud, dispute, and legal obligations.

Account deletion does not require us to erase records that we are legally required to retain.

Security and technical logs

Technical logs may be retained for a limited period reasonably necessary for security, abuse prevention, reliability, and troubleshooting.

Support communications

Support messages may be retained for a reasonable period necessary to resolve issues, maintain records, prevent abuse, and establish or defend legal claims.

Backups

Deleted information may remain temporarily in encrypted or access-restricted backup systems until those backups are overwritten under normal retention cycles.

11. Account deletion

You may delete your NumaBond account at any time through account settings where the deletion feature is available.

Account deletion is intended to remove or anonymize account-linked personal information from active systems, subject to legal and operational exceptions.

Deleting your account may permanently remove:

  • profile information;
  • saved cases;
  • generated reports;
  • relationship inputs;
  • unused Portrait Credits;
  • other account-linked content.

Deletion cannot necessarily be reversed.

Certain information may remain where necessary for:

  • legal compliance;
  • tax and accounting requirements;
  • payment records;
  • fraud prevention;
  • security investigations;
  • chargebacks or disputes;
  • establishment or defense of legal claims;
  • limited backup retention.

If you cannot access the in-app deletion tool, email numabondapp@gmail.com.

12. Your privacy rights under the GDPR

Where the GDPR applies, you may have the right to:

  • obtain confirmation whether we process your personal data;
  • access your personal data;
  • correct inaccurate data;
  • request deletion;
  • request restriction of processing;
  • object to certain processing based on legitimate interests;
  • receive certain data in a portable format;
  • withdraw consent where processing is based on consent;
  • complain to a supervisory authority.

Requests may be sent to numabondapp@gmail.com.

We may need to verify your identity before completing a request.

You may also lodge a complaint with the competent supervisory authority. For an Operator established in Poland, the relevant authority may include the President of the Personal Data Protection Office (UODO).

13. U.S. state privacy rights

Depending on your state of residence and whether the relevant state law applies to NumaBond, you may have rights such as:

  • the right to know or access categories and specific pieces of personal information;
  • correction;
  • deletion;
  • portability;
  • information about categories of recipients;
  • opting out of sale, sharing, targeted advertising, or certain profiling;
  • limiting certain uses of sensitive personal information;
  • appealing a privacy-request decision where required.

NumaBond does not currently sell personal information or knowingly share it for cross-context behavioral advertising.

To submit a request, email numabondapp@gmail.com or use the in-app account deletion feature where applicable.

We will not unlawfully discriminate against you for exercising an applicable privacy right.

Where permitted, an authorized agent may submit a request on your behalf, subject to reasonable verification.

14. California privacy notice

If California privacy law applies to NumaBond and to your information, the categories described in Section 2 may include:

  • identifiers;
  • customer records;
  • commercial information;
  • internet or electronic network activity;
  • inferences and generated report information;
  • sensitive information only where voluntarily provided and legally permitted.

We use these categories for the business and commercial purposes described in this Policy.

We do not sell personal information for monetary consideration.

We do not knowingly sell or share personal information of users under 16.

Requests relating to applicable California rights may be sent to numabondapp@gmail.com.

15. Information relating to children

NumaBond accounts and purchases are for adults aged 18 or older.

The Service is not directed to children under 13, and children under 13 may not create accounts or use the Service directly.

A parent or legal guardian may submit limited information about their own child for a Parent & Child or similar family report where permitted by the Service and applicable law.

We ask adults to minimize information about children and not submit unnecessary sensitive information.

If we learn that a child under 13 has directly created an account or submitted personal information without appropriate authorization, we may delete the information and terminate the account.

Parents or guardians who believe we hold information improperly submitted by a child may contact numabondapp@gmail.com.

16. Data about third parties

If you create a report about another person, you are acting as the source of that information.

You must:

  • use the information lawfully;
  • provide only what is reasonably necessary;
  • avoid unnecessary sensitive information;
  • respect the other person's rights;
  • provide notice of this Policy where required;
  • not use NumaBond for surveillance, harassment, discrimination, or reputational harm.

If a person contacts us about information submitted by another user, we may request verification and take reasonable steps consistent with applicable law, privacy rights, contractual obligations, and the rights of other users.

17. Security

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

Measures may include:

  • authentication controls;
  • access restrictions;
  • secure cloud infrastructure;
  • encrypted transport;
  • provider security controls;
  • logging and abuse detection;
  • separation of payment-card handling from NumaBond systems.

No system, website, transmission, or storage method is completely secure.

You are responsible for maintaining the security of your own account, login provider, email account, and devices.

18. Data breaches

If a security incident involving personal data occurs, we will assess the incident and provide notices to affected individuals or regulators when required by applicable law.

19. Business transfers

If NumaBond or the underlying business is sold, reorganized, merged, transferred, or acquired, information may be transferred as part of that transaction, subject to applicable law and appropriate confidentiality protections.

20. Legal disclosures

We may disclose information where we reasonably believe disclosure is necessary to:

  • comply with law, regulation, court order, or valid legal process;
  • enforce our Terms;
  • investigate fraud or abuse;
  • protect users, the Service, or third parties;
  • establish, exercise, or defend legal claims;
  • respond to an emergency involving safety where legally justified.

We will not voluntarily disclose personal information to government authorities merely because it is requested informally where a valid legal basis is required.

21. Changes to this Privacy Policy

We may update this Policy when our Service, providers, practices, or legal obligations change.

The updated version will display a revised "Last updated" date.

Where required by law, we will provide additional notice of material changes.

Your continued use after an update does not override any consent requirement imposed by applicable law.

22. Contact

For privacy questions, rights requests, account-deletion assistance, or concerns about personal information:

numabondapp@gmail.com