Legal

Privacy Policy and GDPR Compliance Statement

Last updated · 30.06.2026Version · 1.1

Privacy Policy and GDPR Compliance Statement

This Privacy Policy explains how Sentia collects, uses, shares, and protects your personal information when you use our application and related services (collectively, the "Services"). By using our Services, you acknowledge and accept the terms outlined here, including our compliance with the General Data Protection Regulation (GDPR). If you disagree with any part of this policy, you should discontinue using our Services.

Data Controller

The data controller responsible for your personal data is:

SIR PATRYK PEAS
ul. Długa 57c/45
53-633 Wrocław, Poland
Email: support@hisentia.app

In this policy, "we," "our," or "us" refers to SIR PATRYK PEAS.

We may revise this Privacy Policy from time to time. If substantial updates occur, we will modify the "Effective Date" and notify users via prominent notices on our Services or direct communication using the contact information you have provided (e.g., via email to the address you've shared). Continuing to use our Services after such changes indicates your acceptance of the revised terms. We encourage you to review this Privacy Policy regularly.

This Privacy Policy is part of our Terms of Service and is incorporated by reference. By using our Services, you also agree to our Terms of Service. If you do not agree, please stop using our Services.

1. Information We Collect

We collect both information that you provide directly and data gathered automatically from your device. Some of this information is personally identifiable ("Personal Information"), while other data remains anonymous ("Anonymous Information"). If Anonymous Information becomes linked to Personal Information, we will treat it as Personal Information.

Information You Provide

This may include:

  • Account credentials: your email address and password.
  • Profile details: username, first name, and last name (optional).
  • Birth details: date, time, and place of birth (optional, used to generate astrology and numerology readings).
  • Communications with us, such as support inquiries.
  • Your email address, if you subscribe to our newsletter.

Information Generated by the Services

When you use astrology and numerology features, we generate and store derived profile data based on the birth details you provide, including birth chart data (planetary positions, houses, aspects), Chinese zodiac profiles, and numerology profiles. This data is stored against your account.

Payment Information

Payments and billing are handled exclusively by our payment provider, Stripe, Inc. All billing information, including payment card details, is collected and held by Stripe; we do not store payment card information. We retain only a Stripe customer reference and your subscription status (active, canceled, expired, etc.).

Information Collected Automatically

When you use our Services, we may collect:

  • IP address, operating system, device type, screen dimensions, and language settings.
  • Usage data, including feature interactions and activity timestamps.
  • Cookies and similar technologies (see Section 7) to operate the Services and analyze engagement.

2. Do Not Track (DNT) Signals

We respect Do Not Track (DNT) settings in browsers where applicable.

3. How We Use Your Information

We use the information we collect to:

  • Operate, maintain, and improve our Services.
  • Manage and authenticate user accounts.
  • Generate your personalized astrology and numerology readings.
  • Process subscriptions and manage billing through Stripe.
  • Communicate with you about our Services and respond to support requests.
  • Conduct research and analytics.
  • Detect, prevent, and investigate fraud or security threats.
  • Comply with legal obligations, including those under GDPR.

4. Sharing of Information and Third-Party Processors

We do not sell your personal data. We share data only with the service providers ("processors") that enable our Services to function, and only to the extent necessary:

  • Stripe, Inc. — payment processing and billing. All payment and card data is handled by Stripe.
  • Supabase — authentication and database storage of your account and profile data.
  • Google — Google Analytics (usage analytics) and Google Places API (birth-location autocomplete; location searches you enter are sent to Google).
  • Vercel — hosting, Vercel Analytics, and Speed Insights (performance and usage metrics).

If you use our mobile application, subscription status may also be synchronized via RevenueCat.

We may also disclose information when legally required, to protect security or law enforcement interests, or as part of a business transition (e.g., acquisition or merger). All processors are bound by data processing and confidentiality obligations.

5. Children's Privacy

Our Services are not designed for individuals under 13, and we do not knowingly collect data from children under this age. If you believe we have inadvertently collected a child's data, please contact us at support@hisentia.app.

6. External Links

Our Services may contain links to third-party websites. We are not responsible for their privacy practices, and we encourage you to review their policies before sharing personal data.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve the Services. These include:

  • Strictly necessary cookies — authentication tokens (access_token, refresh_token) stored as secure, httpOnly cookies, and your language preference (lang). These are always active.
  • Analytics cookies — used by Google Analytics and Vercel Analytics to understand usage. These can be enabled or disabled via our cookie consent banner.

Your cookie preferences are stored locally in your browser and can be changed at any time. Necessary cookies cannot be disabled, as they are required for the Services to function.

8. Data Security and Storage

We implement industry-standard security measures to protect your personal data, including:

  • Encryption: Data is encrypted in transit and at rest.
  • Secure Servers: Your data is primarily stored on secure infrastructure provided by Supabase, with restricted access.
  • Access Controls: Access to personal data is limited and authentication tokens are stored in secure, httpOnly cookies.

However, no system can guarantee complete security. In the event of a data breach, we will notify affected users as required by law, including under GDPR.

9. Data Retention and Deletion

We retain personal data only as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. For example:

  • Account and profile data (including generated birth charts, Chinese zodiac, and numerology profiles) is kept while your account is active.
  • Transaction and billing records (held by Stripe) are retained for legal and accounting purposes.

You can delete your account at any time from your account settings. When you delete your account, your user record and all associated data — including agreements, birth charts, numerology profiles, Chinese profiles, and subscription records — are permanently removed, and your authentication account is deleted, except where retention is legally required.

10. International Data Transfers

If you access our Services from outside our primary data storage locations, your information may be transferred across jurisdictions with different data protection laws. By using our Services, you consent to these transfers. We ensure that such transfers comply with GDPR requirements, including the use of Standard Contractual Clauses where necessary.

11. GDPR Compliance and Your Rights

If you are a resident of the European Union (EU) or if your personal data is processed by our Services, you have specific rights under the General Data Protection Regulation (GDPR). These rights include:

  • Right to Access: You can request a copy of the personal data we hold about you.
  • Right to Correction: You can request that we correct any inaccuracies in your data.
  • Right to Deletion: You can request that we delete your personal data (also known as the "right to be forgotten"). You may also do this directly via your account settings.
  • Right to Restrict Processing: You can request that we limit how we use your data.
  • Right to Data Portability: You can request that we provide your data in a structured, commonly used format.
  • Right to Object: You can object to certain types of data processing, such as direct marketing.
  • Right to Withdraw Consent: You can withdraw your consent for data processing at any time.

To exercise any of these rights, please contact us at support@hisentia.app. We will respond to your request within 30 days, as required by GDPR. You also have the right to lodge a complaint with your local supervisory authority (in Poland, the President of the Personal Data Protection Office, UODO).

12. Consent

By using our Services and agreeing to our Terms of Service, you also consent to this Privacy Policy and the processing of your personal data as described herein, in compliance with GDPR. You can withdraw your consent at any time by contacting us at support@hisentia.app, though this may affect your ability to use certain features of the Services.

13. Contact Information

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, including exercising your GDPR rights, please contact:

SIR PATRYK PEAS
ul. Długa 57c/45
53-633 Wrocław, Poland
Email: support@hisentia.app

We are committed to addressing your concerns and ensuring your data is handled with care.

Sentia - Unlock Your Potential - Numerology & Astrology