Your story stays yours.

UnderstandMylove is a self-reflection experience designed to help you explore your personal connection patterns. This notice explains how personal data may be processed when you visit our website, answer questions, purchase a report, or contact us.

The data controller is the business identified in the Contact & controller section below. This document must be checked against the website's actual implementation before publication.

Depending on how you use the service, we may process: information you provide in the 24-question reflection and generated report; contact details you submit; transaction identifiers, subscription status and billing metadata received from our payment provider; support messages; and limited technical information such as IP address, browser information and necessary security logs.

We do not need your full payment card number to provide your report. Card details entered in Stripe Checkout are handled by Stripe. Please do not send passwords, full card details or unnecessary sensitive information in support messages.

Your answers are used to calculate and display your individual connection profile and report. Because free-text or relationship-related information can be personal, please only share information you are comfortable providing. Avoid entering another person's identifying information.

Before publishing, confirm where answers are stored, whether they are linked to a purchase or account, whether any external AI provider processes them, and exactly when they are deleted. Disclose any such provider and data transfer here if applicable.

We process information to deliver the quiz and report, operate and secure the service, process purchases and subscriptions, respond to requests, meet accounting or legal duties, and—where permitted—understand and improve website performance.

We do not treat the results as a medical diagnosis or professional psychological assessment. If we introduce a new materially different use of your answers, this notice and any required consent process must be updated first.

Depending on the processing activity, the relevant GDPR basis may be performance of a contract (delivering your purchased report), legal obligation (accounting records), legitimate interests (proportionate fraud prevention and service security), or consent (optional analytics or marketing cookies where required).

If your implementation collects special-category personal data under GDPR Article 9, a separate valid Article 9 condition may also be required. Do not assume ordinary contractual necessity alone is sufficient for such data.

Payments and recurring subscriptions are handled through Stripe. Stripe may process payment information, billing contact details, transaction identifiers and fraud-prevention information in accordance with its own applicable privacy documentation and contractual role.

Our displayed offer is €1.95 for 7 days of access, followed by €29.95 every 4 weeks until cancelled. The checkout terms presented at the time of purchase govern the transaction. We may receive subscription and payment-status updates to provide access and customer support.

We may share only the data necessary with service providers used for hosting, payments, email delivery, customer support, security and any analytics or report-generation features actually enabled on the website. Providers should be assessed and appropriate data-processing arrangements put in place where required.

We do not publish your individual quiz answers as public testimonials. Any marketing use of identifiable customer material requires an appropriate legal basis and, where needed, permission. Add an accurate list of actual processors before going live.

Essential cookies or comparable storage may be needed for security, checkout and basic site operation. Optional analytics, advertising or other non-essential tracking must be described accurately and, where legally required, enabled only after consent.

Your Cookie Policy should list the technologies actually used, their purposes, providers and retention periods. A privacy-policy link alone does not replace a functioning cookie-consent mechanism when one is required.

We retain personal information only for as long as reasonably necessary for its purpose, including providing access, handling customer requests, meeting statutory record-keeping requirements and resolving disputes. Different categories may require different retention periods.

BEFORE PUBLICATION: insert your actual retention schedule for quiz responses, generated reports, customer records, support correspondence, security logs and accounting records. Do not publish an invented universal deletion deadline.

We aim to apply appropriate organisational and technical safeguards proportionate to the risks, such as access restrictions, secure connections and limited provider access. No online service can guarantee absolute security.

If you suspect an issue with your personal information, contact the privacy address listed below. We will assess incidents and make any notifications required by applicable law.

Some technology providers may process information outside the European Economic Area. Where GDPR applies, any restricted transfer must be supported by an appropriate transfer mechanism and any required supplementary measures.

BEFORE PUBLICATION: verify your hosting, Stripe configuration, analytics, email and AI/report providers, and describe the actual destinations and transfer safeguards here.

Where GDPR applies and subject to applicable conditions, you may request access, correction, erasure, restriction, portability or objection to processing. You may withdraw consent for consent-based processing without affecting the lawfulness of earlier processing.

You may also lodge a complaint with a competent supervisory authority. In Belgium, this is the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données): www.dataprotectionauthority.be. We may need to verify your identity before responding to a rights request.

BEFORE PUBLICATION: specify the actual minimum age for using UnderstandMylove and ensure the quiz, checkout and any age-verification measures are consistent with that requirement and applicable law. We do not intentionally encourage children to disclose personal relationship information.

We may revise this policy when our services, providers or legal obligations change. The effective date at the top identifies the published version. Where required, we will provide additional notice or seek fresh consent for materially different processing.

Controller: [LEGAL COMPANY NAME]

Registered address: [REGISTERED BUSINESS ADDRESS]

Registration / VAT number: [COMPANY / VAT NUMBER, IF APPLICABLE]

Privacy contact: [YOUR MONITORED PRIVACY EMAIL]

You can also use our Contact Us page to ask about your personal information. Do not include passwords or full payment-card numbers in your request.