Last Updated: August 6, 2026
App Visionaire, a trading name of XIMPL V.O.F. (KvK 54303613), is the data controller for Enlightenso (“we”, “us”). This policy explains what data we collect, why, and your rights.
Correspondence address:
Gravin Juliana van Stolberglaan 31, Unit S0875, 2263AB Leidschendam, Netherlands
Contact: support form
1. Data We Collect
We follow data minimization. Depending on how you use Enlightenso:
- Anonymous use: a cryptographically signed anonymous session identifier, with no personal data attached.
- Registered account: your email address, used solely for authentication and account-related communication.
- Newsletter subscription: if you sign up for our email newsletter, your email address is used solely to deliver it via Buttondown (see below).
- Premium subscription: billing is handled entirely by Freemius (see below) — we do not receive or store your card details.
2. Content Generation
The contextual and reflective content accompanying each saying (meaning, origin, critical perspectives, practice prompts, and related analysis) is generated using AI language models as part of our content pipeline.
3. Legal Basis for Processing
- Anonymous session data: legitimate interest (providing the core service).
- Account email: performance of a contract (account access) and, where applicable, legal obligation (responding to support/GDPR requests).
- Newsletter email: consent (you opt in and can unsubscribe at any time).
- Subscription data via Freemius: performance of a contract.
4. Sub-Processors
We use the following processors to operate Enlightenso:
| Processor | Purpose | Location |
|---|---|---|
| Supabase | Authentication & database hosting | European Union (eu-central-1, AWS Frankfurt) |
| Freemius | Payment processing & billing (Merchant of Record) | United States / EU (per Freemius’s own disclosures) |
| Render | Backend API hosting | European Union (Frankfurt, eu-central-1) |
| Cloudflare | App hosting & CDN (app.enlightenso.com) | Global edge network |
| LiveAgent (Quality Unit s.r.o.) | Customer support ticketing | Slovakia (EU) |
| Buttondown | Email newsletter delivery | United States (per Buttondown’s own disclosures) |
| Hostinger Analytics | Aggregate website visitor statistics | European Union (per Hostinger's own disclosures) |
5. Data Location
Our primary infrastructure — Supabase (database) and Render (backend API) — both store and process data in the European Union (Frankfurt, Germany). Where a sub-processor operates outside the EEA (see the table above), we rely on Standard Contractual Clauses (SCCs) or an equivalent safeguard as required by GDPR Chapter V.
6. Retention
- Anonymous session identifiers: purged automatically after a period of inactivity by our automated cleanup process.
- Account data: retained for as long as your account is active, or as required by law after account deletion.
- Newsletter subscription: retained until you unsubscribe; unsubscribe and data-deletion requests are honored immediately.
7. Your Rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you (Art. 15)
- Request correction of inaccurate data (Art. 16)
- Request erasure of your data (Art. 17)
- Request restriction of processing (Art. 18)
- Receive your data in a portable format (Art. 20)
- Object to processing based on legitimate interest (Art. 21)
To exercise any of these rights, contact us through our support form. We aim to respond within 30 days as required by law.
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or your local supervisory authority.
8. Cookies
See our Cookie Notice for details on the technical storage we use.
For any privacy inquiry or compliance request, contact us through our support form.