Privacy policy

Data collected

The form collects the following data: name, first name, email, phone, date/time/place of birth (for Ba Zi), health data (medical conditions, medications, allergies, pregnancy), lifestyle (activity, sleep, stress, smoking, alcohol, cooking), goals and food preferences.

Legal basis

Processing is based on your consent (GDPR art. 6 §1 a) and on contract performance (GDPR art. 6 §1 b).

Use

Your data is exclusively used to create your personalized therapeutic menu. It is never used for other purposes.

Data recipients

Data is processed by Ludovic Dumay (editor) and the following subprocessors: Supabase Inc. (database hosting, authentication, storage — Ireland, EU) and Stripe Inc. (payment processing — United States). No data is sold or shared with other third parties.

Retention period

Your data is kept for the time necessary to create your menu, then permanently deleted. The final PDF is kept to allow quality monitoring.

Your GDPR rights

You have the rights of access, rectification, erasure and objection. To exercise these rights, write to yinshi.app@gmail.com.

Transfer outside the EU

Your data is hosted by Supabase Inc. in Ireland (EU). Stripe payment involves a transfer to the United States, governed by the EU-US Data Privacy Framework. Stripe is PCI-DSS certified.