Privacy Policy

1. Who we are

This Privacy Policy explains how personal data is handled when you use Numa, an I Ching reading app for iPhone, and this website. Numa is provided by Native Consulting Group OÜ ("we", "us").

Numa shows no advertising, uses no third-party tracking or analytics, and we do not sell your data.

2. What we process

Account information

When you sign in with Google or Apple, sign-in is handled by Firebase Authentication (a Google service). We receive your name, email address and a unique account identifier. If you use Apple's "Hide My Email" option, we receive a relay address instead of your real email.

Your readings

Your readings (question, hexagram and interpretation) are saved only on your phone. We do not keep a copy of your questions or interpretations on our servers.

Reading counter

Our server keeps a count of how many readings each account has made, to apply usage limits and subscription benefits. The count is stored under a pseudonymous identifier (a one-way hash of your account identifier), not under your name or email.

Purchases

Subscriptions and in-app purchases are processed by Apple. We receive confirmation of your purchase and subscription status. We never receive your payment card details.

3. AI interpretations

To generate an interpretation, Numa sends the following to our server, hosted on Cloudflare, and from there to Anthropic, the provider of the Claude AI model:

• the question you ask;
• short summaries of up to 8 of your previous readings, to give context;
• your first name, only if you have chosen to enter it in the app.

Our server passes this information through to generate the interpretation and does not store it. Anthropic does not use data received through its commercial API to train its models, and keeps it only for a limited period for trust and safety purposes before deleting it.

Please avoid including sensitive personal information (for example about health, or about other people) in your questions.

4. Purposes and legal basis

We process your data to create and maintain your account, to generate the interpretations you request, to apply usage limits and subscription benefits, and to respond to your support requests. The legal basis is the performance of our contract with you (Article 6(1)(b) GDPR). Where we must keep data to meet legal obligations, such as tax or accounting rules, the legal basis is compliance with a legal obligation (Article 6(1)(c) GDPR).

5. Service providers and international transfers

We use the following providers to operate Numa and this website. They process data on our behalf and only for these purposes:

• Google (Firebase Authentication): account sign-in.
• Cloudflare: hosting of the Numa backend and this website.
• Anthropic: generation of AI interpretations.

Apple processes your purchases and Sign in with Apple data under its own privacy policy, as an independent controller.

These providers are based in, or may process data in, the United States. Transfers outside the European Economic Area rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.

6. Retention

• Account information and reading counter: kept while your account exists, and deleted when you delete your account, except where the law requires us to keep it longer.
• Questions and interpretations: not stored on our servers. Anthropic keeps them only for the limited period described in section 3.
• Readings on your phone: kept until you delete them, delete your account or delete the app.
• Support emails: kept as long as needed to resolve your request.

7. Deleting your account

You can delete your account at any time from Settings in Numa. This deletes your account and reading counter from our systems and also removes the readings saved on your phone. Deleting your account does not cancel an App Store subscription: cancel it in your iPhone settings to stop future charges.

8. Your rights

You have the right to access, rectify and erase your personal data, to restrict or object to its processing, and to data portability. To exercise these rights, email contact@nativeconsultinggroup.com. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee), our lead supervisory authority, or with the data protection authority in your country of residence.

9. This website

This website uses no cookies, analytics or third-party scripts, and loads all fonts and images from our own server. Cloudflare, our hosting provider, processes technical data such as your IP address to deliver the site and protect it against abuse.

10. Changes and contact

If we change how Numa handles data, we will update this policy and the date below. For any privacy question, email contact@nativeconsultinggroup.com.

Last updated: 4 October 2026.