Privacy policy
Shinkofa is committed to protecting user privacy in compliance with GDPR.
Data controller
The controller of your data is The Ermite GMS – Angelique Mejías, whose details appear in the Legal notice. Contact: contact@shinkofa.com.
Data collected
Account information (email, name), holistic questionnaire responses, usage data (conversations, journal, planner), and payment data (processed by Stripe — we do not store card numbers).
Use of data
Your data is used exclusively to: generate your holistic profile, personalize the AI experience, improve the service, and communicate with you. Your data is never sold to third parties.
Storage and security
Data stored on European servers (OVH, France). Encryption at rest and in transit (TLS 1.3). Access restricted to authorized administrators.
Your rights
Under the GDPR: rights of access, rectification, deletion, portability and objection. Contact: contact@shinkofa.com. Response time: one month, extendable by two months for a complex request (we will tell you). You may also lodge a complaint with the Spanish Data Protection Agency (AEPD, aepd.es) or the authority of your country.
Sensitive data (Art. 9 GDPR)
Some collected data is considered sensitive under GDPR: emotional state and well-being (EMA questionnaire), psychological profile (personality questionnaire), and optionally menstrual cycle tracking. This data requires explicit and separate consent before collection.
Birth profile without an account
The "Birth profile" page calculates your result (Human Design, astrology, numerology and other systems shown) from your first name, last name, and birth date/time/place. Without an account, nothing is kept: not in our database, not in our logs — the result is shown on screen, then it's gone. City lookup and timezone are computed by our server (never by your browser), so the services that help us compute them (see "Third-party services") receive the city and country, but never your address or identity. One exception: your first and last names are sent to DeepSeek (an AI whose servers are in China) to write the analysis of your name. We keep nothing of it, no birth date or place is sent to it, and DeepSeek applies its own privacy policy. If you enter a child's birth date rather than your own, you confirm you are their parent or legal guardian before submitting the form.
Third-party services
The following third-party services process user data: Stripe (payments; Stripe may transfer some data outside the EU, notably to the United States, with the safeguards provided by the GDPR), OpenStreetMap Nominatim (birth city geocoding, called by our server, never directly by your browser), TimeAPI.io (timezone from coordinates, same guarantee), DeepSeek API (AI-written texts from the holistic profile, and the first and last name analysis of the birth profile — servers in China). No data is sold or shared for advertising purposes.
Cookies
Shinkofa uses only essential cookies (httpOnly authentication session). The Telegram login widget is loaded only after explicit user action. No advertising tracking cookies.
Retention
Data retained while the account is active. After account deletion: server data is erased within 30 days. Local browser data (preferences, questionnaire progress) is automatically cleaned on logout. For the birth profile used without an account: no retention at all, see "Birth profile without an account" above.
Buying a Pioneer pack
When you buy a Pioneer pack, we receive your e-mail address, your name and your country (for the invoice and VAT), the pack, the price, the date, the language of the purchase, and proof that you accepted the terms of sale (accepted text, language, time). Your card number stays with Stripe. Why: to perform the contract and keep our accounts, which is a legal obligation. Who sees it: Stripe (payment), our e-mail service (confirmation) and us. Retention: six years for accounting records, as Spanish law requires.
Business introducers
If you buy through a business introducer's link, they only see that a sale took place (date, offer, amounts, reference): never your name or contact details. If an introducer noted you in their prospect book, they are responsible for that entry; Shinkofa only hosts it for them. To check who a sale belongs to, Shinkofa compares a sealed fingerprint of your e-mail, never the address in clear. You can ask the introducer for erasure, or ask us and we pass it on. If you are an introducer: we process your identity, status, tax number and bank details to issue your invoices and pay you; bank details and tax number are encrypted, and invoices are kept for six years.
Referral links
Referral link tracking is switched off for now. If it is ever switched on, it will store nothing on your device without your prior consent.
Last updated: October 2026