Privacy Policy

Our legal texts are available in German and English; the German version prevails. Swiss law applies.

Last updated: 23 October 2026

Please note: this is a courtesy translation. In case of any discrepancy, the German version at /datenschutz prevails.

This privacy statement explains which personal data we process when you use soulresonance.ch, why we do so, who receives data, how long we keep it and which rights you have. It applies to the website, the web app and all related ELANUM services.

1. Controller

maind GmbH
Grütstrasse 13
5200 Brugg
Switzerland

Email for all data protection matters: s‍m‍a‍r‍t@maind.ch
For all other matters you can reach us at k‍o‍s‍m‍o‍s@soulresonance.ch.
When signed in, you can also reach us through the form under "Feedback".

2. Scope and applicable law

We are a Swiss company. Our processing is governed by the Swiss Federal Act on Data Protection (FADP) and its Ordinance (DPO). Where we offer services to people in the European Union, the European Economic Area or the Principality of Liechtenstein, the EU General Data Protection Regulation (GDPR) applies in addition, supplemented in Liechtenstein by the Liechtenstein Data Protection Act. We have written this statement to meet the requirements of all three legal systems. Where the legal bases differ, we name both.

Availability by country: The self-discovery area (Soul Kosmos) with the home page and registration is open to people with residence in: Switzerland, Germany, Austria, Liechtenstein. The dating area (Resonances) requires residence in: Switzerland. We may open further countries step by step. We also restrict access technically by country.

For coaches, therapists and counsellors who use ELANUM professionally, the coach privacy statement applies in addition. It governs the processing of client data on their behalf.

3. Representative in the European Union

Before we direct our offer at people in the EU or the EEA, we will designate a representative in the Union under Art. 27 GDPR and name them here with name and address. Until then, please contact us directly at the address above.

4. Which data we process

Which data is processed depends on the parts of ELANUM you use. You provide most of it yourself. Only the details without which a feature cannot work are mandatory; everything else is voluntary and marked as such.

4.1 Account and sign-in

email address, sign-in links and six-digit sign-in codes (short-lived)
voluntary: passkeys (we hold the public key, the private key stays on your device) and a secret for one-time codes from an authenticator app (TOTP); before we switch on one-time codes, you confirm this with a code we send to your email address
sessions with time, a rough device description and IP address, so that you can see and end open sign-ins
time and version of your acceptance of the terms and this privacy statement, and your decision on statistics and error reports (section 4.11)
at registration: IP address and browser identifier, to prevent duplicate accounts and abuse of the referral programme

4.2 Profile and birth data

first name, gender, date of birth, time of birth (or the note "unknown"), place of birth with coordinates and time zone
voluntary: last name; it is used only for name numerology, never leaves your account and is not shown to others
place of residence (name and coordinates of the town, not your address), preferred language, display and notification settings
a voluntary picture for your own account and your circle, separate from dating pictures

4.3 Calculations and interpretations

From your birth data we calculate, on our own servers, your astrological birth chart, your Human Design profile and your numerological numbers. We use our own calculation engines based on freely available astronomical libraries; no data goes to third parties in the process. From the results we compose texts (portrait, daily impulse, dossier, resonance chapters). We store the results with your account.

4.4 Questionnaires, daily entries and reflections

your answers and results for questionnaires, for example values, personality (Big Five), life direction, attachment style, closeness and affection, conflict style, Enneagram, character strengths and integrity
daily questions, daily entries, mood information and reflections as text or voice recording, including whether you did a ritual for a moon event
visibility settings for each result

You decide what you put into free text fields or voice recordings. Please bear in mind that such content may contain information about health, beliefs or intimate life (see section 6).

4.5 Contacts and circle: data about other people

In your circle you can add people from your life, for example your partner, family, children, friends or people from work. For a contact we store:

first name and type of relationship, voluntarily a last name, a label and the gender
date of birth, voluntarily time and place of birth with coordinates and time zone
voluntarily a photo; it stays in your account, is never shared and is deleted with the contact
your own assessments of this person (for example attachment style or love language) and the results calculated from them
if you invite the person: their email address and the time of the invitation

Guest link: You can send an adult contact a personal link that is valid for 30 days. There, the invited person can answer questionnaires about themselves without an account and add their birth data, voluntarily also their last name. The inviting person does not see the last name or the individual answers of the invited person; they see only the results. This privacy statement also applies to the invited person.

Time and place of birth in the guest link and between connected accounts: Whoever enters or confirms their own time and place of birth decides whether the other person may see these details and use them for shared readings. The setting is preselected and can be changed before submitting and at any time afterwards, on the guest page or, with an account of your own, in the sharing settings of the contact. The same applies to the inviting person: when creating the link they choose whether the invited person may see their time and place of birth. Without this permission the other person only receives broad details (for example star sign and Human Design type), and calculations for them use the date of birth only. The other person cannot change the time and place of birth that were entered. They can instead enter their own estimate of the time and place of birth. This estimate applies only in their own view while the permission is missing and is shown on the guest page as a suggestion. The permission is stored with a timestamp, and withdrawing it deletes it. If the connection is ended, the contact or an account is deleted or an account is blocked, the permission is withdrawn. For guest contacts that existed before 2 October 2026 the permission was set when this setting was introduced; it can be withdrawn at any time.

Connected accounts: If the person has an account and you connect both accounts, each side sees only the results the other releases for this connection, never individual answers. For contacts from work, attachment style as well as closeness and affection are not shared from the outset.

Whom you add: Only add people whose details you know lawfully. Use the results for yourself only. This applies to all contacts.

Children: Special protective rules apply to contacts under 18: no guest link, no invitation to an account, no romantic or sexual content and no compatibility score.

Anyone who enters data about other people bears their own responsibility for it under our terms. For the position of the people concerned, see section 14.

4.6 Dating area (18 and over)

Mobile number (only for reviewing new dating accounts, never visible to others)
gender you are looking for, age, distance and height filters, search cities, minimum score for suggestions
profile details such as height, relationship intention, interests, life circumstances, spiritual practice, texts about you and answers to profile questions
profile pictures and voluntarily a profile voice (voice recording); when you upload a profile picture, IP address and browser identifier, to prevent duplicate accounts and abuse
likes, matches, chat messages as text or voice message, blocks and reports, including a snapshot of the conversation when you report someone
visibility status (visible, paused, invisible)
time and version of your consent for dating and, where applicable, the time of withdrawal

Your consent for dating: Before we suggest people to you, we ask for a separate, explicit consent. It covers our processing of your partner preferences, the gender you are looking for and the form of relationship you want, in order to suggest suitable people to you and to suggest you to others. These details may allow conclusions about your sexual orientation. Please bear in mind: anyone who sees your profile among their suggestions can tell from this whom you are looking for. We store your consent with the time and the version of the text you agreed to. You can withdraw it at any time by leaving the dating area; after that we no longer suggest you to anyone or anyone to you.

As long as there is no valid consent, others do not see you among their suggestions and you receive none yourself. Existing matches and chats remain visible; you can send new chat messages only after giving your consent. If we change the text of the consent materially, we ask you again.

If you leave the dating area (in your account with "Delete dating data"), we delete all details that serve dating only, including: mobile number, profile text, profile pictures and profile voice, the gender you are looking for, your filters and preferences on age, distance, height, cities and minimum score, your dealbreakers, interests, relationship intention, spiritual practice and your own height, your partner preferences in the signals, your details on life circumstances, pause and invisible mode, likes, matches, chats and voice messages, saved and skipped profiles, the list of daily suggestions shown to you, your scores for individual suggestions and the blocks you set yourself. What self-discovery also uses, such as your place of residence, remains. Also remaining are your verification request (to protect against abuse, until you delete your account), blocks that others have set against you, reports with the related messages (section 10) and the record of your consent with the time of withdrawal.

When you register for dating, we send your date of birth to our server in advance once you have confirmed your email address. This lets us check your age before you upload photos and the selfie; without a confirmed minimum age we do not accept any pictures. When your profile is created, we delete this advance entry. If you abandon the registration, we delete the date of birth, your photos and the selfie 30 days after your last entry.

A person from our team reviews new dating profiles and changes to the phone number before the profile appears in the feed.

In demo mode we show you only test profiles, which do not represent real people. They carry the badge "Test profile · AI image". The pictures of these profiles were generated with artificial intelligence. The replies in chats with test profiles are prepared texts (see below). Likes and chats with them are stored like any others and appear in your data export labelled as test profile. In live mode you see no test profiles. You switch between the two yourself under "Manage areas".

In chats with test profiles we use prepared replies. In addition, we store the identifier of the reply used, its language as well as the processing status and the times of the reply tasks. We link this information to the respective conversation and the related messages. This allows us to continue pending replies after a technical interruption and to avoid the same prepared reply appearing more than once in the same conversation. This information is included in your data export. It is deleted together with the related match or your account. Deleting a single message does not remove the record of use.

4.7 Profile verification with a selfie

Before your dating profile appears, we verify it with a selfie; there is no dating profile without verification. We show you a randomly chosen gesture, you upload a selfie showing it, and a person from our team checks it by eye. There is no automatic face recognition, no matching by software and no computation of biometric features. Nobody else can retrieve the selfie. We delete it with the decision, at the latest after 30 days without a decision, and immediately if you delete your account. Only the record of the request and the decision remains; after confirmation your profile shows a verified badge.

4.8 Communication, support and notifications

emails we send you (sign-in, notices about matches and contacts, reminders, summaries; optionally: your weekly reading by email on Sunday evening, only if you switched it on), with a delivery log
for the weekly reading by email: the time of dispatch per week, whether the email was skipped, your consent, and whether and when you opened the link in it (without IP address), so that we can measure whether the email is useful
voluntary: newsletter subscription with confirmation (double opt-in)
for a new sign-up through a referral: in the sign-in email and on the confirmation page we show the invited person the first name of the referring person (never the last name or email address), so that they can check and change the referral before confirming
support tickets with content, replies and voluntarily uploaded screenshots
voluntary: push notifications; for these we store the delivery address your browser creates or, in our app, the device token for notifications together with whether it is Android or iOS, as well as the app version and device model

4.9 Technical data and security

IP address, browser, operating system and requested addresses in server logs
a security log (audit log) of security-relevant events
an access log: when people from our team or coaches access sensitive data (store, read, change, delete, disclose), we record who accessed which type of data, when and in which role, and whose data is concerned (as an identifier only), without the content
to prevent duplicate accounts and abuse: irreversible checksums (hashes) of birth data, device characteristics, IP address, phone number and email address, never in plain text. We renew the checksum of the device characteristics when you sign in on a different device. We compare the checksums with those of the person who invited you and with those of blocked or suspended accounts. If the phone number or email address of a new account matches a blocked or suspended account, the new account waits until our team has reviewed it. A match is a note for our team; whether an account is blocked or suspended is always decided by a person.
error reports when a technical error occurs on the server or in your browser (see section 8). If your visit comes from the EU or the EEA according to the country of your IP address, or if the country cannot be determined, we send error reports from your browser only if you have agreed to statistics and error reports (section 4.11).
the country of your IP address, which we read on our own server from a country database in order to control the offer by country

4.10 Payments, donations and events

Many features of ELANUM are free of charge. We offer individual features as a paid subscription or a single purchase; you see whether a feature costs something, and how much, before you buy. For paid offers for coaches, practices, companies and API customers we process billing and payment data (see section 8, Stripe).
If you buy a paid offer, such as a subscription or a single purchase, we store for each purchase: the offer, the type of purchase (monthly subscription, annual subscription or single purchase), the amount with the VAT share it contains, the time, for a subscription the current period, the status (for example paid, cancelled or refunded) and the identifiers under which Stripe keeps the purchase, the payment, the subscription and you as a customer. Your access to the purchased features follows from the purchase. When you delete your account, any running subscription ends immediately, with no refund of the remaining period.
Payments are processed by Stripe Payments Europe Ltd., Ireland (see section 8). You enter your card and payment details directly with Stripe; we do not store any card data. Stripe creates receipts and invoices. If you open a receipt under «Access and purchases», we fetch the link from Stripe and do not store the receipt ourselves.
If you buy in our app through Apple's App Store or Google Play, you conclude the purchase with Apple or Google. They handle payment, renewal and refunds under their own responsibility, according to their own terms and privacy policies; we do not receive your payment details. We receive from Apple or Google a proof of purchase and notifications about renewal, cancellation and refunds, with the identifiers of the transaction, the product, the period, the status and the country of the store. So that we can assign the purchase to your account, the app passes on a random identifier at the time of purchase that only we can assign to your account. We do not pass your name, email address or profile data to Apple or Google. We store the details of the purchase as for other purchases.
We send you emails about your purchases: when a purchase or a subscription is confirmed, when you cancel a subscription, when it ends, when we refund an amount and when a payment fails. They contain your first name, the offer, the amount with the VAT share and a link to your account. If you cancel a subscription or withdraw a cancellation, we record this in the security log.
Voluntary donations are made via TWINT directly between you and us; we receive the details TWINT transmits to us for the payment.
Events are offers by independent organisers. You register with the organiser; we do not store any participation. If you mark an event with «I'm going», we store this mark for your account. Only you can see it; the organiser sees the number of marks. If you wish, the organiser may see your first name. You can switch this on and off for each event. Without your consent the organiser sees no names. The mark is removed immediately when your account is deleted.
We count how often and by how many members an event page is viewed. To do so, we derive a check value from your account ID and a random key created per event; this value does not yield a list of people. The key is deleted 30 days after the event, after which the figures are anonymous. The organiser sees figures only. This counting of our own sets no cookies and passes no data to third parties.
Organisers may publish an image with an image description and a contact address for their event as well as an organiser page; the organiser is responsible for this content.

4.11 Cookies and local storage

Cookies are small text files your browser stores for us. We set only the following:

Name	Purpose	Duration	Type
session_token	keeps you signed in	30 days, extended with use	necessary
admin_access	second factor for the administration area	up to 7 days	necessary, team only
impersonation_by	notice while the team views an account for troubleshooting	2 hours	necessary, team only
lang	your language	1 year	necessary
cookie_consent	your decision on statistics and error reports	1 year	necessary
ref	remembers a recommendation from a link	30 days	functional; for visits from the EU, the EEA or an unknown country only after your consent
invite_code	remembers an invitation code from a link	30 days	functional; for visits from the EU, the EEA or an unknown country only after your consent
ref_wahl	remembers your choice about a referral until your sign-in is confirmed	30 days	functional
push_decided	remembers that you answered the push notification prompt	1 year	convenience
daily_push_decided	remembers that you answered the daily impulse prompt	1 year	convenience
sr_hero_handoff	hands your input from the start page to the Soul Blueprint	60 seconds	convenience

None of these cookies serves advertising or follows you across other websites. We keep some settings and input in your browser's storage (localStorage), for example the area you used last or your input in the Soul Blueprint; this data does not leave your device.

What we do only after your consent: On your first visit we ask whether you agree to statistics and error reports. Only then do we load Umami Analytics and, if switched on, PostHog (see section 8). If your visit comes from the EU or the EEA according to the country of your IP address, or if the country cannot be determined, we also set the cookies ref and invite_code only after this consent and only then send error reports from your browser (section 4.9). If you decline, none of this happens. You can change your decision at any time in your account under "Download your data" with the switch "Statistics and error reports"; without an account, by deleting the cookie cookie_consent, after which we ask again on your next visit. A withdrawal takes effect from that moment; in the cases just mentioned we also remove the cookies ref and invite_code. Separate from this is our own count of views per event (section 4.10): it runs on our server, sets no cookies and passes no data to third parties.

4.12 Shared experiences

In the "Shared experiences" area you offer activities for two or small groups or join them. The area is open to adults only. Before you use it, you create a separate activity profile and consent to the processing for it; we store your consent with the time and version. For this we process:

your activity profile: display name (pre-filled with your first name), a short introduction, your region, your interests, voluntarily a picture, and with people of which gender you would like to share activities
for selecting offers, your gender from your account
offers you create: title, description, category, region or destination, date or time window, group size and for which genders the offer is open
requests with your message to the person offering, acceptances, declines and your participation
messages and pictures in the group chat of an activity
reports with the reported content and a log of the steps within an activity
notifications about your activities

Which offers you see and who sees your offers depends in both directions on the genders chosen. Other members see your activity profile with your offers and requests; the participants of an activity see the messages in the group chat. Only participants see the exact meeting point. Your dating profile, your birth data and your evaluations are not visible there.

5. Purposes and legal bases

We process personal data only for the following purposes. Under Swiss law, lawful processing does not always require a justification; where we rely on one, we name it. For people to whom the GDPR applies, we name the legal basis under Art. 6 and Art. 9 GDPR.

Purpose	Data (section)	Basis
Running your account, sign-in, session security	4.1, 4.9	contract (Art. 6(1)(b) GDPR); security: legitimate interest (Art. 6(1)(f) GDPR, Art. 31(1) FADP)
Calculating and interpreting birth chart, Human Design and numerology, daily impulse, portrait and dossier	4.2, 4.3	contract; where special data is concerned: your explicit consent (Art. 9(2)(a) GDPR, Art. 6(7) FADP)
Questionnaires, daily entries and reflections	4.4	your consent, given with each voluntary entry (Art. 6(1)(a) and Art. 9(2)(a) GDPR)
Circle and contacts, guest link, connected accounts	4.5	for you: contract; for the people entered: legitimate interest in your personal reflection (Art. 6(1)(f) GDPR, Art. 31(1) FADP); for details the invited person provides: their consent
Dating: suggestions and their order	4.6	your explicit consent when entering dating (Art. 9(2)(a) GDPR, Art. 6(7) FADP)
Dating: matches, chat, review of new profiles	4.6, 4.7	contract; where details allow conclusions about your intimate life: your explicit consent (as above)
Protection against harassment, fraud and abuse, handling reports, suspensions	4.6, 4.9	legitimate interest in a safe platform (Art. 6(1)(f) GDPR, Art. 31(1) FADP); legal obligations
Verification with a selfie	4.7	contract, as a condition for dating; legitimate interest in protecting everyone from fake profiles (Art. 6(1)(b) and (f) GDPR, Art. 31(1) FADP)
Shared experiences: activity profile, offers, requests, group chat	4.12	contract; for the activity profile additionally your consent (Art. 6(1)(a) GDPR)
Account emails, support	4.8	contract
Newsletter, push notifications	4.8	your consent, revocable at any time
Error reports, operation, stability	4.9	legitimate interest in a working service; error reports from the browser for visits from the EU, the EEA or an unknown country: your consent
Remembering referrals and invitations from a link	4.11	in Switzerland: legitimate interest in assigning the link you followed to your sign-up (Art. 31(1) FADP); for visits from the EU, the EEA or an unknown country: your consent
Access log	4.9	legal obligation (Art. 4 DPO); legitimate interest in controlling access to sensitive data (Art. 6(1)(c) and (f) GDPR)
Usage statistics	4.11	your consent
Payments, accounting, retention of records	4.10	contract; legal obligation (Art. 6(1)(c) GDPR, Art. 958f Swiss Code of Obligations)
Assigning purchases through the App Store and Google Play	4.10	contract; legal obligation for retention (Art. 958f Swiss Code of Obligations)
Establishing and defending legal claims	all	legitimate interest; for special data Art. 9(2)(f) GDPR

You may withdraw consent at any time with effect for the future. Processing up to the withdrawal remains lawful. If you withdraw consent that is indispensable for a feature, that feature is no longer available to you; all other features remain usable.

6. Sensitive data

Astrological, numerological and Human Design interpretations describe personality, relationships and life themes. They may count as a personality profile and may be close to philosophical beliefs. The gender you are looking for in dating allows conclusions about sexual orientation. Free texts and voice recordings may contain health information. We therefore treat this data as sensitive personal data (Art. 5(c) FADP) and special categories of personal data (Art. 9 GDPR): we process it only with your explicit consent and only for the purposes named here, we do not pass it on for advertising and we do not use it to train third-party models.

7. Profiling and automated evaluations

ELANUM evaluates your details automatically. In legal terms this is profiling. This is how we handle it:

Self-discovery: interpretations, portrait, daily impulse and questionnaire results are generated automatically from fixed rules and edited text modules. They serve your reflection and have no legal effect.
Dating: which people we suggest to you and in which order is calculated from your birth data, your questionnaire answers (for example values, attachment style, love language, Enneagram and conflict style) and your filters (gender, age, distance, height). How the individual areas are weighted is explained on the Method page. A low score does not exclude anyone; you set your minimum score yourself. We make this selection only with your explicit consent (section 4.6).
The calculation rules are fixed and traceable. We do not use self-learning systems.
Whether a dating profile is approved, suspended or removed is always decided by a person.

We do not make automated individual decisions with legal effect or a similarly significant impact (Art. 21 FADP, Art. 22 GDPR). If you would nevertheless like a person to look at your suggestions or an evaluation, to state your point of view or to contest the result, write to us; we will review it personally.

8. Recipients and processors

Your account and profile data is stored on servers in Switzerland. We pass personal data only to the following parties and only to the extent the respective purpose requires. Where we use service providers, they are contractually bound to our instructions (processing on our behalf, Art. 9 FADP, Art. 28 GDPR), unless stated otherwise. We do not sell data and do not pass data on for advertising.

Hosting and email delivery: Infomaniak Network SA, Geneva, Switzerland. Infomaniak runs the servers holding databases, pictures, voice recordings and backups, and delivers our emails. An email contains your address, your first name and the content of the message.
Error reports: Functional Software, Inc. (Sentry), USA, EU data region (Frankfurt, Germany). When a technical error occurs we transmit the error message, the technical trace, the requested address, browser and operating system. We do not transmit account identifiers, cookies, form input or session recordings. For visits from the EU, the EEA or an unknown country we send error reports from your browser only with your consent (section 4.11).
Usage statistics: Umami Software, Inc., USA (Umami Cloud). Only with your consent. Umami receives page views, referrer, browser, operating system, device type and country, sets no cookies and stores no IP address. We remove invitation and referral details before sending.
Product analytics: PostHog, Inc., USA (PostHog Cloud EU, Frankfurt, Germany). Only with your consent and only while we have this analysis switched on. If you are signed in, PostHog links events to an identifier of your account. No automatic click tracking, no session recording, no IP address.
Payments: Stripe Payments Europe Ltd., Dublin, Ireland. For paid offers for coaches, practices, companies and API customers, and also when you as an end user pay for a subscription or a single purchase. Stripe receives email address, amount, product name, an identifier of your account and of the purchase and the card details you enter directly with Stripe; we ourselves do not store any card data. Stripe keeps you as a customer and creates receipts and invoices; this allows subscriptions to be renewed and cancelled and amounts to be refunded. Stripe also processes this data under its own responsibility for fraud prevention. Stripe never receives profile or calculation data.
Purchases in the app: Apple (App Store) and Google (Google Play). Only if you buy through the store in our app. Apple and Google handle the purchase under their own responsibility; we receive the proof of purchase and notifications about it from them and query the status of a purchase with Google (section 4.10). They do not receive your name, email address or profile data from us.
Push services of the browser vendors (Google, Apple, Mozilla). Only if you allow push messages. The service receives a delivery address and the encrypted message.
Notifications in our app: Google LLC, USA (Firebase Cloud Messaging). Only if you use our app and allow notifications. Google receives the device token for notifications as well as the title and text of the notification and delivers it to your device.
Developing the app. To develop and maintain ELANUM, we use programming tools, including AI-assisted tools from Anthropic and OpenAI, and GitHub to store the program code. These tools do not receive personal data of our users: we develop and test with test data. Since 15 October 2026, we no longer store the content of feedback and support requests in the code repository. The tools are not part of ELANUM; within the app itself, no AI evaluates your details.
Other users: in dating, other users see your profile as you release it. In your circle, connected accounts see only the results you release. In "Shared experiences" other members see your activity profile with your offers and requests, and the participants of an activity see the messages in the group chat (section 4.12). Organisers see only what is described in section 4.10.
Authorities and courts: where we are obliged to disclose by law or by order of an authority, or where it is necessary to avert a serious danger to life and limb.
Advisers such as lawyers or auditors, where necessary and under professional secrecy.

No personal data is received by MaxMind (we only download a country database and map IP addresses on our own server), MeteoSwiss (weather data without reference to you) or Meta (we publish our own content there only).

9. Transfers abroad

Your account and profile data stays in Switzerland. In the cases named in section 8, individual data reaches the following countries:

Germany (Sentry, PostHog) and Ireland (Stripe): both provide adequate data protection as determined by the Swiss Federal Council (Annex 1 DPO).
USA (Umami, browser push services, Google for notifications in our app and for checking purchases through Google Play, and the parent companies of Sentry, PostHog and Stripe): for companies certified under the Swiss-US or EU-US Data Privacy Framework, adequate protection applies. Where this is not the case, we base the transfer on the European Commission's standard contractual clauses recognised by the FDPIC (Art. 16(2)(d) FADP, Art. 46(2)(c) GDPR), or on your consent.

If you buy through the App Store or Google Play, Apple and Google process your data under their own responsibility and in the locations named in their privacy policies.

For people in the EU, the EEA and Liechtenstein: the European Commission has found that Switzerland ensures adequate data protection. You may request a copy of the safeguards.

10. How long we keep data

We keep personal data only as long as the purpose requires or the law prescribes. In detail:

Account, profile, birth data, calculations, questionnaires, reflections, contacts and pictures: as long as your account exists. If you delete your account yourself, we delete this data immediately and permanently. Reports with the related messages, details of purchases and the record of your dating consent are excepted (see below).
Accounts our team deletes because of a violation: we suspend and anonymise them immediately and delete them permanently after 90 days, so that abuse remains traceable; the checksums of device characteristics, phone number and email address stay on the block list for 2 years.
Chat messages: as long as the match exists. If a match is ended or dissolved, the history is kept for 30 days for reports and support and is then deleted.
Reports and related messages: If an account is reported, we keep the report, the snapshot of the conversation and the messages of the affected conversation, even if the reported account or its dating data are deleted. After the account is deleted, these records are no longer linked to it. We delete the snapshot and the messages twelve months after the report is closed. After that we keep the report itself without the reason, without notes and without an account identifier, only with a pseudonymous identifier, so that repeated reports against the same account remain recognisable; three years later we delete it completely. Reports against an account that has already been deleted are deleted completely twelve months after they are closed. The purpose is to protect the reporting person and other members and to establish or defend legal claims (Art. 31 para. 1 FADP, Art. 6 para. 1 lit. f and Art. 17 para. 3 lit. e GDPR).
Feedback on the weekly reading (Founding Souls only): We store your assessment of the previous week (applied, partly, did not apply) together with the week and the identifiers of the text modules shown, so that we can improve the texts. It does not change your texts automatically and is kept until you delete your account.
Weekly reading to read again (Founding Souls only): We store your weekly reading for twelve weeks so that you can read it again in the review. Only you can see it, and it is deleted with your account.
Weekly reading by email: dispatch, consent and clicks per week are kept as long as your account exists and are deleted with it.
Guest link: the link is valid for 30 days. What the invited person entered stays with the contact until you delete the contact.
Verification selfie: until the decision, at most 30 days.
Abandoned dating registration: date of birth, photos and selfie 30 days after the last entry.
Record of your dating consent (section 4.6): as long as your account exists, also after a withdrawal. If you delete your account, we keep the version and the times of consent and withdrawal for another three years, without an account identifier and only with a pseudonymous identifier; then we delete them.
Sign-in sessions: 30 days after last use.
Security log (audit log): 90 days; we shorten the IP address in it after 30 days.
Access log (section 4.9): one year, then we delete the entries. We store a copy every day separately from the database in monthly files; we delete a monthly file once its month lies one year in the past.
Technical server logs: 14 days.
Email delivery log: 30 days.
Checksums against duplicate accounts: 180 days from registration; the checksum of the device you last signed in with, 180 days after that sign-in.
Checksums of device characteristics, phone number and email address of a blocked or suspended account: 2 years after the block or suspension, even if the account is deleted. If we lift a block or suspension, we delete them immediately.
IP address and browser identifier at registration and when uploading a profile picture: 180 days; the picture itself remains until you delete it.
Support tickets: attachments are deleted when the ticket is closed. We delete the ticket with all messages 24 months after it is closed, or with your account if you delete it earlier.
Newsletter and push: until you unsubscribe or delete your account.
View counts per event (section 4.10): the check values until 30 days after the event, the figures without personal reference indefinitely. «I'm going» mark: until you withdraw it or until your account is deleted, then immediately.
Shared experiences (section 4.12): your activity profile until you leave the area or delete your account. If you leave the area, we delete your display name, introduction, region, interests, the genders chosen and your picture, cancel your open offers and end your participations; we keep the time of your earlier consent as a record. Completed or cancelled activities remain in the archive for 30 days; after that we delete the messages and pictures of the group chat. We delete reports 30 days after they are closed.
Invoices, accounting records and details of purchases (section 4.10): ten years from the end of the calendar year (Art. 958f Swiss Code of Obligations), even if you delete your account earlier; then we delete them. We clear the raw data of notifications from Apple and Google about a purchase after 90 days. What Stripe itself retains is governed by Stripe's privacy policy.
Backups: we keep daily backups for 14 days, then one per week until day 56 and one per month until day 365. Deleted data may remain in a backup for that long. We use backups only to restore after a failure and, when doing so, delete accounts that had already been deleted again.

Data without personal reference, such as aggregated counts, may be kept longer.

11. Data security

We protect your data with technical and organisational measures appropriate to the risk, including:

encrypted transmission (HTTPS/TLS with HSTS) and strict security headers (Content Security Policy)
sign-in without a password via email link or code, voluntarily with a passkey or one-time codes (TOTP); one-time codes can only be switched on with an additional code sent by email; sign-in cookies cannot be read by scripts
access to the administration area only with a second factor and only from: Switzerland
rate limiting and detection of automated access
server-side validation of all input; access rights on the principle of least privilege
an access log for access by our team and by coaches to sensitive data, without the content, kept for one year and additionally stored separately from the database (sections 4.9 and 10)
servers exclusively in Switzerland; daily backups, plus a copy on the operator's own backup device in Switzerland, collected over an encrypted connection; restoration is tested automatically every week

No system is completely secure. If we detect a breach of data security that is likely to result in a high risk to you, we report it to the FDPIC as soon as possible (Art. 24 FADP). Where the GDPR applies, we report it to the competent supervisory authority where feasible within 72 hours (Art. 33 GDPR). We inform the people concerned where this is necessary for their protection or required by law.

Note on your dossier: a dossier contains astrological details precise enough to reveal your date and approximate time of birth. Share it only with people you trust. In the dating area we never show others degrees, house positions or gates, only summarised values such as sun sign, moon sign, ascendant and Human Design type.

12. Your rights

In particular, you have the following rights:

Access and copy: under Account, "Download all data" gives you a copy of your data in a machine-readable format (JSON) at any time. If you would like access in another form, write to us (Art. 25 FADP, Art. 15 GDPR).
Data portability: the downloaded file is your copy to take with you (Art. 28 FADP, Art. 20 GDPR).
Rectification: you change most details yourself in your profile. First name, date of birth and place of birth are locked after registration for security reasons; we correct them on request (Art. 32 FADP, Art. 16 GDPR).
Erasure: under Account you delete your account yourself. If you only want to leave the dating area, you can delete the dating data alone; section 4.6 lists what is deleted (Art. 32 FADP, Art. 17 GDPR).
Restriction and objection: you may ask us to restrict processing and object to processing based on our legitimate interest (Art. 18 and Art. 21 GDPR; Art. 30(2)(b) FADP).
Withdrawal of consent: at any time with effect for the future (section 5). You withdraw your consent for dating by leaving the dating area (section 4.6); you change your consent to statistics and error reports in your account under "Download your data" with the switch "Statistics and error reports" (section 4.11).
Human review of an automated evaluation (section 7).
Complaint to a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern; in Liechtenstein the Data Protection Authority, Kirchstrasse 8, 9490 Vaduz; in the EU the supervisory authority of your place of residence, place of work or place of the alleged infringement (Art. 77 GDPR).

For anything you cannot do yourself in your account, write to us at s‍m‍a‍r‍t@maind.ch or through the form under "Feedback" in your account. We answer access requests within the statutory period of 30 days and free of charge. For your protection we answer requests about an account only if we are sure they come from the entitled person; as a rule this means from the email address stored in the account.

13. Minors

Only people aged 18 and over can open their own account, for Soul Kosmos as for dating. The public calculators (such as the Soul Blueprint) store nothing on our server without an account. If we find that a person under 18 has opened an account, we delete it. Data about children only reaches us if someone adds a child as a contact; the protective rules for contacts under 18 then apply (section 4.5).

14. If you have been added as a contact

If someone has added you to their circle while you do not have an account: as a rule we know only your first name, date of birth and the details the person entered, and we use them only for that person's own evaluation. We show these details to nobody else and do not contact you, unless the person invites you themselves. You may write to us at any time and request access or erasure; we review your request and delete the details unless overriding interests of the person who entered them prevail.

15. Data protection adviser

Our data protection adviser under Art. 10 FADP is Tristan Andres, reachable at s‍m‍a‍r‍t@maind.ch. We have currently not appointed a data protection officer under Art. 37 GDPR; if we appoint one, we will name them here.

16. Changes

We adapt this privacy statement when our processing or the law changes. The version with the date shown at the top of this page applies. We inform registered users of material changes in advance by email or in the app. If a new processing requires your consent, we obtain it beforehand.