1. Introduction
This policy describes how Blueprint collects, uses, stores, and protects your personal data when you use blueprintexploration.com, the Blueprint iOS app, or purchase the Blueprint.
We comply with applicable data protection laws, including:
- ◇LFPDPPP (Mexico's Federal Law on Protection of Personal Data)
- ◇GDPR (EU General Data Protection Regulation)
- ◇CCPA/CPRA (California Consumer Privacy Act)
- ◇LGPD (Brazil's General Data Protection Law)
If you have questions, write us at team@blueprintexploration.com.
2. Data controller
Blueprint is responsible for the processing of your personal data.
Privacy contact: team@blueprintexploration.com
3. Data we collect
Data you provide to us
When you buy a Blueprint, we collect:
- ◇Full name
- ◇Email address
- ◇Date of birth
- ◇Time of birth (when you provide it)
- ◇Place of birth (city and country)
- ◇Place where you spent your last birthday (when applicable)
When you contact support, we collect:
- ◇Your name and email
- ◇The content of your message
Data collected automatically
When you visit blueprintexploration.com:
- ◇IP address
- ◇Browser and device type
- ◇Pages visited and time on site
- ◇Referral source (Google, Instagram, etc.)
- ◇Cookies and similar technologies (with your consent)
Payment data
Your card details (number, security code, expiration date) are NOT received or stored by us. They are processed directly by our certified payment providers.
We only receive payment success confirmation and a transaction identifier.
Data in the iOS app
When you use the Blueprint iOS app, in addition to the above we may collect:
- ◇Basic device information (model, iOS version, language) so the app works correctly
- ◇An Apple purchase identifier when you buy or renew a subscription inside the app
- ◇Diagnostic and crash data, in aggregate form, to detect and fix errors
In-app purchases (Apple)
Subscriptions inside the iOS app are processed by Apple through its purchase system (App Store / StoreKit). Apple handles the charge and we do not receive or store your card details; we only receive the purchase confirmation and an identifier to activate your access.
On-device artificial intelligence
Some features of the iOS app use artificial-intelligence models that run directly on your device (Apple Foundation Models). In those cases the processing happens on your iPhone and that content is not sent to our servers or to third parties.
4. How we use your data
We use your data exclusively to:
Generate and deliver your Blueprint
- ◇Calculate your personalized chart from birth data
- ◇Write your specific report
- ◇Send it to your email
Support and care
- ◇Answer your questions
- ◇Regenerate your Blueprint if needed
- ◇Process refunds when applicable
Site operation
- ◇Ensure the site works properly
- ◇Detect and prevent fraud
- ◇Improve the product and experience
Operational communication
- ◇Purchase confirmations
- ◇Notices about important service changes
- ◇Replies to your requests
We do NOT use your data to:
- ◇Sell it to third parties
- ◇Share it with advertisers
- ◇Third-party marketing
- ◇Train AI models
5. Legal basis for processing
We process your data under the following legal bases:
- ◇Contract performance: to deliver the Blueprint you purchased
- ◇Consent: when you accept optional cookies or subscribe to specific communications
- ◇Legitimate interest: to improve the service, prevent fraud, and operate the site
- ◇Legal compliance: when a law requires us to retain certain records
6. Sharing data with third parties
We only share data with providers we need to operate the service:
Payment providers
To process your purchases securely. They receive only the minimum data needed for the transaction. On the website we use a certified payment provider; in the iOS app, purchases and subscriptions are processed by Apple (App Store).
Email service
To send your Blueprint and operational communications.
Hosting and servers
Where the site is hosted and your Blueprint calculations are processed.
Analytics services
Only if you accepted analytics cookies. We use this data in aggregate form to improve the site.
We use Microsoft Clarity to understand how you navigate the site (clicks, scroll, areas you visit). Clarity may record sessions, but we apply technical masking (data-clarity-mask) over all sensitive content: your name, birth date and birth data, natal chart, personalized Blueprint narratives, conversations with Beyou, Basic Blueprint content, and the contact and booking form data. In the recordings those elements appear as opaque rectangles · Microsoft does not receive the actual text. Recordings only help us understand product usage flow.
Artificial intelligence
To write parts of your Blueprint and power conversations with Beyou (our AI assistant inside the Blueprint), we use the following services under commercial agreements with data protection:
- ◇Anthropic (Claude) · generates the narrative content of your Blueprint and Beyou's responses. We operate under Anthropic's standard commercial policy which prohibits the use of your prompts and responses to train public models.
- ◇Voyage AI · generates vector embeddings to retrieve relevant content from our curated astrology corpus. It only receives the text of your question, not personal data.
- ◇Vercel AI Gateway · routes calls to Anthropic. Does not retain content beyond the request pass-through.
Explicit guarantee: none of the AI providers we work with use your content to train their public models. Your Blueprint, your natal chart, and your conversations with Beyou are yours.
Astrology corpus database
We use Neon Postgres (hosted on Vercel/AWS infrastructure) to store the curated astrology corpus that powers Beyou. This database does not contain your personal data · only astrological content we wrote ourselves.
All our providers have data processing agreements that comply with applicable protection standards (GDPR in Europe, LFPDPPP in Mexico, equivalent regulations in other jurisdictions).
When we share data due to legal obligation
Only when a competent authority requires it through a court order or valid legal request.
7. International transfers
Some of our providers may be located outside your country of residence (for example, in the United States or Europe).
When we transfer data outside your jurisdiction, we do so under approved legal mechanisms:
- ◇Standard Contractual Clauses (SCCs) approved by the European Union
- ◇Adequacy decisions when applicable
- ◇Other valid mechanisms under applicable law
8. Retention period
We retain your data only for the time necessary for the described purposes:
Purchase and Blueprint data
We keep it while you have access to the product, so we can regenerate your Blueprint if you request.
Billing data
We keep transaction records according to applicable tax obligations (typically 5 years in Mexico).
Support communications
We keep them up to 2 years after the last contact, for reference in case of follow-up.
Cookies and analytical data
According to the duration indicated in each cookie. You can delete them anytime from your browser.
Once these periods elapse, data is irreversibly deleted or anonymized.
9. Data security
We apply technical and organizational measures to protect your data:
- ◇Encryption of sensitive data in databases
- ◇HTTPS connections across the entire site
- ◇Restricted access to authorized personnel only
- ◇Industry-standard server security
- ◇Regular backups and recovery plans
While we do everything reasonable to protect them, no internet system is 100% secure. If a security breach occurs that affects your data, we will notify you as required by applicable laws.
10. Your rights
Depending on your jurisdiction, you have the following rights over your personal data:
Universal rights
- ◇Access: know what data we have about you
- ◇Rectification: correct incorrect data
- ◇Erasure: request that we delete your data
- ◇Restriction: limit the use of your data
- ◇Objection: object to processing based on legitimate interest
Jurisdiction-specific rights
If you are in Europe (GDPR):
- ◇Right to data portability
- ◇Right not to be subject to automated decisions with significant effects
- ◇Right to file a complaint with your data protection authority
If you are in California (CCPA/CPRA):
- ◇Right to know what personal data is collected
- ◇Right to delete personal data
- ◇Right to opt-out of data sale (we don't sell data, but the right applies formally)
- ◇Right not to be discriminated against for exercising your rights
If you are in Mexico (LFPDPPP):
- ◇ARCO rights: Access, Rectification, Cancellation, Opposition
- ◇Right to revoke your consent
If you are in Brazil (LGPD):
- ◇Rights similar to GDPR
- ◇Right to portability
How to exercise your rights
Write to team@blueprintexploration.com from the email associated with your account. We confirm receipt within 5 business days and respond within a maximum of 30 days.
Delete your account from the app
If you use the Blueprint iOS app, you can request the deletion of your account and personal data directly from within the app, in its account settings section. You can also do it by writing to the email above.
Some requests may require additional identity verification to protect your data.
11. Cookies and similar technologies
We use cookies so the site works correctly and to understand how it's used.
Cookie types
Essential: indispensable for the site to function (selected language, checkout session, basic preferences). They cannot be disabled.
Analytics: help us understand how the site is used. Only activated with your consent.
Marketing: to show relevant content on other platforms. Only activated with your consent.
Your control over cookies
When you visit the site for the first time, we show you a banner to choose which cookies you accept. You can change your preferences anytime via the Cookie preferences link in the footer.
You can also delete cookies from your browser settings.
12. Minors
Blueprint is intended for people 13 years and older. If you are under the age of digital consent in your country (up to 16 years in some European Union jurisdictions), you need the authorization of a parent or guardian to use the service. We do not knowingly collect data from children under 13.
If we discover that we have collected data from a minor without parental authorization, we delete it immediately. If you believe we have data on a minor, write us at team@blueprintexploration.com.
13. Changes to this policy
We may update this policy when needed.
When we make significant changes, we'll notify you by email (if you have an active account) or by a notice on the site. The “Last updated” date above indicates the current version.
We recommend reviewing this page periodically.
14. Contact
For any question, request, or complaint about the processing of your personal data:
If you are in Europe
You may also file a complaint with the data protection authority of your country.
If you are in Mexico
You may file a complaint with INAI (National Institute of Transparency, Access to Information and Protection of Personal Data): www.inai.org.mx