Right Image Digital, 1031 Leavenworth St, San Francisco, CA 94109, United States operates NUMERA. This policy explains what we collect and why.
1. Data we collect
NUMERA works without an account. Without one, your chart, journal and preferences stay on your device and
are never sent to us. What does reach us without an account: anonymous usage events (below), which you can turn
off; messages you choose to send us; and the app's check for updates (see Sharing).
Your chart: your birth date, and if you give them, your full birth name and the name you use
now; your calculation method options and time zone. With an account they are stored with it, with a history of
changes (what changed and when, and the numbers it gave), so you can see earlier versions.
Account: name, email, sign-in method (email and password, Google or Apple; passkeys when they
become available), app language, push notification token, the Terms version you accepted.
Journal: entries, moods and tags you write. They are stored on your device in an encrypted
database. With Premium and an account, they also sync to your account automatically so you can use them on your
other devices; otherwise they never leave your device.
Saved items: readings and dates you save, with any note, and what you explore in the Name
Explorer (names, brands, projects and addresses); with an account they sync to it.
Notification choices: whether and when reminders come, how often, and your quiet hours; with an
account they are kept with it.
Other people (Connections): the name and birth date of someone you add, after you confirm you
have their permission, and a record of that confirmation. Shared links you create, and when they were revoked.
Purchases: Apple, Google Play and Stripe transaction and subscription records, never card
numbers.
Events (when available): if you sign up for Events, your gender, who you would like to meet, the
age range and the membership bracket you would like to meet, the city, region and postal code you type (we never
read your device's location), your confirmation that you are 21 or older and when you gave it, and
your membership payments through Stripe (the tier and the amount, never card numbers). We use them only to plan
gatherings and to group people by chart compatibility.
Usage events: which features are used (for example "a daily reading was opened"), with an
anonymous install identifier, and your account id when signed in. Never your name, birth date or journal text.
When we test two versions of a feature (for example a shorter first-launch flow), that identifier decides which
version you see, and we record which one it was. Turn all of this off in Settings → Privacy; you then always see
the standard version.
Feedback and security: messages you send (such as a report of an incorrect calculation), with
the anonymous install identifier while usage events are on; and an audit log of security-relevant account actions
(exports, deletion, shared links, sign-in confirmations) with the network address stored as a hash.
Website visits: when you visit our website, we count the page you viewed, the site that sent you
there, your device type and your browser's time zone. We don't use cookies, and we don't store your IP address. We
keep these counts for 24 months. If your browser sends Do Not Track or Global Privacy Control, we don't count your
visit.
Data exports you request can be downloaded for 7 days. Where we prepare them as files, the files are kept privately for those 7 days; otherwise each download is built from your account at that moment.
Practitioner workspaces (when available): if you're a practitioner, your profile and verification status, and
for each client you add: their name, birth date, the consent wording you recorded and when, readings and notes you
write, sessions and private session notes, report PDFs, and the portal invitations and shared links you send. The
practitioner decides what goes in and is responsible for having the client's consent. Client data is walled off per
workspace, never enters NUMERA's usage analytics, and is used only to run the workspace.
If a practitioner keeps your information: a portal link from them shows you everything they
keep about you and the consent on record. Ask them to correct or delete it, or contact us.
Daily reminders are prepared on your device; your chart is not sent anywhere for them.
2. How we use it
To calculate and show your chart and readings, keep your account and synced data, process purchases, plan the
Events you sign up for, send the notifications you turn on, answer feedback, improve the app from aggregate usage,
and keep accounts secure.
Where the GDPR or similar laws apply, our legal bases are:
To provide what you asked for (performance of our contract with you): your chart, account,
synced data, purchases, the notifications and exports you request, and answers to your messages.
Your consent: push notifications, journal sync, and the AI companion if you turn it on. You
can withdraw consent at any time in Settings; that doesn't affect what happened before.
Our legitimate interests, balanced against yours: usage events to improve the app (you can
turn them off), keeping accounts and the service secure, and the outreach email described below.
Legal obligations: keeping payment records for tax and accounting.
When you add another person under Connections, you confirm you have their permission, and we use their name
and birth date only to show you the comparison. If you share a comparison, and confirm that they've agreed, the link
also shows their display name or first name to anyone who has the link, until it expires or you turn it off. It never
shows their birth date.
3. AI processing
The optional AI reading companion (Premium, when it becomes available, and off until you turn it on) sends your chart's numbers, never your
name or birth date, together with NUMERA's own published interpretations, to Anthropic (Claude) to write a
reading. The text it writes is not stored unless you save it. Anthropic does not use API data to train its models
by default.
4. Sharing
We don't sell your data. Processors that handle it for us, some only once the feature they serve is on:
Railway (hosting and database); Cloudflare R2 or another S3-compatible store (private export files); Firebase
Authentication (Google and Apple sign-in); Apple and Google (sign-in, purchases and push notifications; Google's
sign-in may use your network address to estimate your general location to prevent fraud); Stripe (web payments);
Anthropic (the AI companion, if you use it); Expo (push delivery, and app updates: each launch, the app checks for
an update with a random identifier for the install); Resend (email).
A reading you share opens through a link you control; it never includes your birth date, and you can revoke
it at any time.
Email we send about NUMERA
We sometimes email people and organizations who may be interested in NUMERA. We keep the address, the
message and its delivery status. Our email provider, Resend, delivers it. Every message has an unsubscribe link,
and you can also reply "unsubscribe". Once you unsubscribe we keep your address on an opt-out list, only so we
never email you again.
Where the GDPR applies, this outreach relies on our legitimate interest in telling people about NUMERA.
Records of the messages we send are kept for 24 months. The opt-out list is kept for as long as we send email.
5. Retention
Your chart, its history, journal sync, saved items, connections and settings: until you delete them or your
account.
Events preferences: until you leave Events or delete your account.
Usage events, which version of a test an install saw, website visit counts, the audit log, feedback and the
anonymous record that an account was deleted: 24 months.
Export files: 7 days. Password-reset links: 30 minutes. Shared links: until revoked or expired, then 30 days.
Practitioner clients: until the practitioner deletes them, or after the workspace's own inactivity period
(24 months unless the practitioner sets another), with their files. Report PDFs: 30 days. Portal invitations: until
revoked or expired, then 30 days.
Payment records: kept after account deletion, unlinked from your name and email, for tax and accounting.
6. Deleting your account
You can export your data (Settings → Privacy → Export my data) and delete your account (Settings → Privacy → Delete account) in the app, free. See Delete your account.
7. Your rights
Wherever you live, you can:
see and export your data: Settings → Privacy → Export my data;
correct it: edit your chart and profile in the app;
delete it: delete items in the app, or your whole account;
turn off usage events and notifications in Settings, and withdraw any consent you gave.
For anything you can't do in the app, write to support@rightimagedigital.com from the address on your account. We answer
within 30 days (45 days for California requests). We won't treat you differently for using these rights.
In the European Economic Area, the UK and Switzerland you also have the right to object to
processing based on our legitimate interests, to restrict processing, and to data portability, and you can
complain to your local data protection authority.
California residents: we don't sell your personal information or share it for cross-context
behavioural advertising, and we don't use sensitive personal information to infer characteristics about you. You
have the rights to know, delete and correct described above, and you may use an authorized agent.
8. Children
NUMERA is not meant for anyone under 16. We don't knowingly collect personal data from children
under 16. If you believe a child has given us their data, write to support@rightimagedigital.com and we will delete
it.
9. Where data is processed, and security
Right Image Digital is based in the United States. We and the processors listed above store and process
data in the United States and in other countries where they operate. Where the law requires it, transfers out of
the EEA or the UK use the European Commission's standard contractual clauses or another approved safeguard.
Data travels between the app and our servers encrypted (TLS). Your journal is kept in an encrypted database on
your device. Sign-in tokens can be revoked, and deleting your account signs out every device. No system is
perfectly secure; if a breach affects your data, we will tell you as the law requires.
10. Changes to this policy
We will update this policy when what we collect or how we use it changes. The date at the top shows the latest
version. If a change is significant, we will tell you in the app first.
11. Contact
Right Image Digital, 1031 Leavenworth St, San Francisco, CA 94109, United States. Email: support@rightimagedigital.com