Privacy policy

2. Data controller

Blueprint is responsible for the processing of your personal data.

Privacy contact: team@blueprintexploration.com

3. Data we collect

Data you provide to us

When you buy a Blueprint, we collect:

• ◇Full name
• ◇Email address
• ◇Date of birth
• ◇Time of birth (when you provide it)
• ◇Place of birth (city and country)
• ◇Place where you spent your last birthday (when applicable)

When you contact support, we collect:

• ◇Your name and email
• ◇The content of your message

Data collected automatically

When you visit blueprintexploration.com:

• ◇IP address
• ◇Browser and device type
• ◇Pages visited and time on site
• ◇Referral source (Google, Instagram, etc.)
• ◇Cookies and similar technologies (with your consent)

Payment data

Your card details (number, security code, expiration date) are NOT received or stored by us. They are processed directly by our certified payment providers.

We only receive payment success confirmation and a transaction identifier.

Data in the app

When you use the Blueprint app on your phone or tablet, in addition to the above we may collect:

• ◇Basic device information (model, iOS or Android version, language) so the app works correctly
• ◇An Apple or Google purchase identifier when you buy or renew a subscription inside the app
• ◇Diagnostic and crash data, in aggregate form, to detect and fix errors

In-app purchases (Apple and Google)

Subscriptions inside the app are processed by the store you installed it from: Apple on iPhone and iPad (App Store / StoreKit) and Google on Android (Google Play Billing). The store handles the charge and we do not receive or store your card details; we only receive the purchase confirmation and an identifier to activate your access.

Your conversations with Beyou (your AI)

When you ask Beyou something inside your Blueprint, we store usage metrics without the content of the conversation: the date, where you asked from (iPhone, Android or web), the language, the general topic of the question (for example, love or work), which calculation tools it used, how long the answer took and its length. We don't store what you asked or what Beyou answered. Conversations stay on your device or in your browser.

Under each answer you can rate it with 👍 or 👎. The rating is stored without any text. If you write to us what didn't help, we keep that note. And only if you choose to share the conversation («Share this conversation to improve Beyou», off by default), we keep that question and that answer so our team can review how to improve Beyou. What you share is deleted automatically after 30 days.

If we detect signs in a question that you may be going through a crisis, we only record that it happened, never the text, even if you choose to share the conversation.

In the Basic Blueprint (the free version), the questions you ask Beyou and its answers are stored with your email, to keep count of your free questions and improve the service. You can ask us to delete them at any time.

On-device artificial intelligence

On iPhone and iPad, some features of the app use artificial-intelligence models that run directly on your device (Apple Foundation Models). In those cases the processing happens on your own device and that content is not sent to our servers or to third parties.

4. How we use your data

We use your data exclusively to:

Generate your Blueprint and show it to you in the app

• ◇Calculate your personalized Blueprint from birth data
• ◇Write your specific report
• ◇Send you reminders and updates by email or on your phone

Support and care

• ◇Answer your questions
• ◇Regenerate your Blueprint if needed
• ◇Process refunds when applicable

Site operation

• ◇Ensure the site works properly
• ◇Detect and prevent fraud
• ◇Improve the product and experience

Operational communication

• ◇Purchase confirmations
• ◇Notices about important service changes
• ◇Replies to your requests

Invitations

If you arrive through someone's link, we record that the invitation was used so the discounts can be applied. Whoever invited you never sees who you are: we don't show them your name, your email, or anything your Blueprint says. They only know how many people have completed theirs.

This is deliberate: an invitation link can end up being public, and then whoever uses it is a stranger to whoever shared it. Showing their name would expose someone who never agreed to be there.

To keep one person from counting several times, we store a device identifier that says nothing about you and cannot identify you outside Blueprint.

We do NOT use your data to:

• ◇Sell it to third parties
• ◇Share it with advertisers
• ◇Third-party marketing
• ◇Train AI models

5. Legal basis for processing

We process your data under the following legal bases:

• ◇Contract performance: to deliver the Blueprint you purchased
• ◇Consent: when you accept optional cookies or subscribe to specific communications
• ◇Legitimate interest: to improve the service, prevent fraud, and operate the site
• ◇Legal compliance: when a law requires us to retain certain records

6. Sharing data with third parties

All our providers have data processing agreements that meet the applicable protection standards (GDPR in Europe, LFPDPPP in Mexico, equivalent regulations in other jurisdictions).

Payment providers

To process your purchases securely. They receive only the minimum data needed for the transaction. Blueprint+ subscriptions are started in the app and processed by Apple (App Store) or Google (Google Play), depending on the store you installed it from. If you subscribed earlier on the website, that charge is still processed by a certified payment provider.

Email service

To send your Blueprint and operational communications.

Hosting and servers

Where the site is hosted and your Blueprint calculations are processed.

Analytics services

Only if you accepted analytics cookies. We use this data in aggregate form to improve the site.

We use Microsoft Clarity to understand how you navigate the site (clicks, scroll, areas you visit). Clarity may record sessions, but we apply technical masking (data-clarity-mask) over all sensitive content: your name, birth date and birth data, natal chart, personalized Blueprint narratives, conversations with Beyou, Basic Blueprint content, and the contact and booking form data. In the recordings those elements appear as opaque rectangles · Microsoft does not receive the actual text. Recordings only help us understand product usage flow.

Artificial intelligence

To write parts of your Blueprint and power conversations with Beyou (our AI assistant inside the Blueprint), we use the following services under commercial agreements with data protection:

• ◇Anthropic (Claude) · generates the narrative content of your Blueprint and Beyou's responses. We operate under Anthropic's standard commercial policy which prohibits the use of your prompts and responses to train public models.
• ◇Voyage AI · generates vector embeddings to retrieve relevant content from our interpretation corpus. It only receives the text of your question, not personal data.
• ◇Vercel AI Gateway · routes calls to Anthropic. Does not retain content beyond the request pass-through.

Explicit guarantee: none of the AI providers we work with use your content to train their public models. Your Blueprint, your birth data, and your conversations with Beyou are yours.

Database

We use Neon Postgres (hosted on Vercel/AWS infrastructure) as our database. It stores your account data (name, email, birth data), your Blueprint, the Beyou questions from the Basic Blueprint, Beyou usage metrics and the conversations you choose to share with your rating, as well as the interpretation corpus we wrote ourselves that powers Beyou. Access is restricted to our team.

All our providers have data processing agreements that comply with applicable protection standards (GDPR in Europe, LFPDPPP in Mexico, equivalent regulations in other jurisdictions).

When we share data due to legal obligation

Only when a competent authority requires it through a court order or valid legal request.

7. International transfers

Some of our providers may be located outside your country of residence (for example, in the United States or Europe).

When we transfer data outside your jurisdiction, we do so under approved legal mechanisms:

• ◇Standard Contractual Clauses (SCCs) approved by the European Union
• ◇Adequacy decisions when applicable
• ◇Other valid mechanisms under applicable law

8. Retention period

We retain your data only for the time necessary for the described purposes:

Purchase and Blueprint data

We keep it while you have access to the product, so we can regenerate your Blueprint if you request.

Billing data

We keep transaction records according to applicable tax obligations (typically 5 years in Mexico).

Support communications

We keep them up to 2 years after the last contact, for reference in case of follow-up.

Beyou (your AI)

The conversations and notes you share with your rating are deleted after 30 days. Beyou usage metrics, which don't include the content of conversations, and ratings are deleted after 90 days.

Cookies and analytical data

According to the duration indicated in each cookie. You can delete them anytime from your browser.

Once these periods elapse, data is irreversibly deleted or anonymized.

9. Data security

We apply technical and organizational measures to protect your data:

• ◇Encryption of sensitive data in databases
• ◇HTTPS connections across the entire site
• ◇Restricted access to authorized personnel only
• ◇Industry-standard server security
• ◇Regular backups and recovery plans

While we do everything reasonable to protect them, no internet system is 100% secure. If a security breach occurs that affects your data, we will notify you as required by applicable laws.

10. Your rights

Depending on your jurisdiction, you have the following rights over your personal data:

Universal rights

• ◇Access: know what data we have about you
• ◇Rectification: correct incorrect data
• ◇Erasure: request that we delete your data
• ◇Restriction: limit the use of your data
• ◇Objection: object to processing based on legitimate interest

Jurisdiction-specific rights

If you are in Europe (GDPR):

• ◇Right to data portability
• ◇Right not to be subject to automated decisions with significant effects
• ◇Right to file a complaint with your data protection authority

If you are in California (CCPA/CPRA):

• ◇Right to know what personal data is collected
• ◇Right to delete personal data
• ◇Right to opt-out of data sale (we don't sell data, but the right applies formally)
• ◇Right not to be discriminated against for exercising your rights

If you are in Mexico (LFPDPPP):

• ◇ARCO rights: Access, Rectification, Cancellation, Opposition
• ◇Right to revoke your consent

If you are in Brazil (LGPD):

• ◇Rights similar to GDPR
• ◇Right to portability

How to exercise your rights

Write to team@blueprintexploration.com from the email associated with your account. We confirm receipt within 5 business days and respond within a maximum of 30 days.

Delete your account from the app

If you use the Blueprint app, on iPhone, iPad or Android, you can request the deletion of your account and personal data directly from within the app, in its account settings section. You can also do it by writing to the email above.

Some requests may require additional identity verification to protect your data.

11. Cookies and similar technologies

We use cookies so the site works correctly and to understand how it's used.

Cookie types

Essential: indispensable for the site to function (selected language, checkout session, basic preferences). They cannot be disabled.

Analytics: help us understand how the site is used. Only activated with your consent.

Marketing: to show relevant content on other platforms. Only activated with your consent.

Your control over cookies

When you visit the site for the first time, we show you a banner to choose which cookies you accept. You can change your preferences anytime via the Cookie preferences link in the footer.

You can also delete cookies from your browser settings.

12. Minors

Blueprint is intended for people 13 years and older. If you are under the age of digital consent in your country (up to 16 years in some European Union jurisdictions), you need the authorization of a parent or guardian to use the service. We do not knowingly collect data from children under 13.

If we discover that we have collected data from a minor without parental authorization, we delete it immediately. If you believe we have data on a minor, write us at team@blueprintexploration.com.

13. Changes to this policy

We may update this policy when needed.

When we make significant changes, we'll notify you by email (if you have an active account) or by a notice on the site. The “Last updated” date above indicates the current version.

We recommend reviewing this page periodically.

14. Contact

For any question, request, or complaint about the processing of your personal data:

team@blueprintexploration.com

If you are in Europe

You may also file a complaint with the data protection authority of your country.

If you are in Mexico

You may file a complaint with INAI (National Institute of Transparency, Access to Information and Protection of Personal Data): www.inai.org.mx