Privacy policy
Last updated: 2026-08-05
Controller
matd agSonnmattstrasse 11
CH-9532 Rickenbach (TG)
Schweiz
This policy covers the website nordstern.coach and the Nordstern.Coach apps for iOS and Android.
The website and the app are treated differently
The analytics and marketing services listed below (Google Analytics, Tag Manager, Google Ads, Meta pixel, TikTok) run on the website only. They are fully disabled in the iOS and Android apps — there is no advertising or reach measurement there, and no advertising ID is used.
What data we process
Account data. Email address, name and, if you upload one, your profile picture. If you sign in with Apple, Google or Facebook, we receive your email address and name from them.
Your content. Everything you create in the app: life vision, wishes, yearly, quarterly, weekly and daily goals, reflections, gratitude entries, insights and your conversations with the coach. This content is private and not visible to other users. Some questions relate to your wellbeing and health; we treat your answers like any other content.
Voice input. If you use the voice coach, your voice is processed during the conversation to turn your words into text. We do not store the recording of your voice — only the resulting conversation text is stored.
Spoken answers. If you have the coach read its answers aloud, an AI service generates an audio file from them. We keep that file so the same text does not have to be voiced again every time. It is retrievable only by you and is deleted together with your account.
Usage and device data. Views, clicks, device and browser details and your IP address, so we can run the service, find errors and improve it.
Subscription and payment data. Which subscription you have, since when and until when, and where you bought it. We never see your card details — those stay with the payment provider.
Who we pass data to
We use service providers that process data on our behalf and on our instructions. We do not sell data.
Operation and storage
Running the application, sign-in, database, file storage and protection against overload. These services see your account data and your content because they store it.
- Supabase — Supabase, Inc. · provider privacy policy
- Vercel — Vercel Inc. · provider privacy policy
- Upstash — Upstash, Inc. · provider privacy policy
Coach responses and voice
Generating the coach’s responses as well as speech output and voice conversations. These services receive the content of your conversations and the context needed from your entries; the voice coach additionally receives your voice input.
- OpenRouter — OpenRouter, Inc. · provider privacy policy
- ElevenLabs — ElevenLabs Inc. · provider privacy policy
Payments and subscriptions
Processing and managing your subscription. Purchases on the website go through Stripe, purchases inside the app through the respective store; RevenueCat links your subscription to your account.
- Stripe — Stripe, Inc. · provider privacy policy
- RevenueCat — RevenueCat, Inc. · provider privacy policy
- Apple App Store — Apple Inc. · provider privacy policy
- Google Play — Google LLC · provider privacy policy
Sending account and system messages and, if you consented, newsletters and product information.
- Brevo — Sendinblue GmbH · provider privacy policy
- Resend — Resend, Inc. · provider privacy policy
Product analytics
Understanding which features are used and where errors occur, in order to improve the service.
- PostHog — PostHog, Inc. · provider privacy policy
Security and consent management
Detecting automated access to forms and managing your cookie preferences on the website.
- Cloudflare Turnstile — Cloudflare, Inc. · provider privacy policy
- iubenda — iubenda s.r.l. · provider privacy policy
Reach measurement and advertising(website only)
Measuring how our advertising performs and showing relevant ads. These services load only after your consent and run on the website only.
- Google Analytics, Tag Manager, Ads — Google Ireland Ltd. · provider privacy policy
- Meta-Pixel — Meta Platforms Ireland Ltd. · provider privacy policy
- TikTok-Pixel — TikTok Information Technologies UK Ltd. · provider privacy policy
Embedded content and lookup services(website only)
Videos, appointment booking, placeholder images and postal code lookup. When such content loads, the respective provider receives your IP address.
- YouTube — Google Ireland Ltd. · provider privacy policy
- Calendly — Calendly, LLC · provider privacy policy
- Unsplash, DiceBear, RandomUser — Bildquellen für Platzhalter und Avatare
- Zippopotam — Postleitzahl-Nachschlag
All providers listed above act on our instructions (processing on behalf of the controller under Art. 28 GDPR). Your coaching content is processed by the language model providers solely to generate your answer and is not used to train models.
Where a provider is based outside the EU or EEA, we rely on the European Commission’s standard contractual clauses.
Legal bases
Account management, coaching features and subscription handling rest on performance of the contract (Art. 6(1)(b) GDPR). Abuse prevention, debugging and product analytics on our legitimate interest (lit. f). Newsletters as well as reach measurement and advertising on your consent (lit. a), which you can withdraw at any time.
Not a medical device
Nordstern.Coach is a coaching service, not a medical application. It does not diagnose and does not replace therapy. The app automatically detects statements that suggest an acute crisis and then shows references to professional help. This detection serves your protection only; no automated decision with legal effect is made.
Retention and deletion
We store your data for as long as your account exists. You can delete it yourself at any time — in the app under "Profile" or as described at nordstern.coach/konto-loeschen.
After deletion, only invoices under statutory retention periods remain, plus a pseudonymised deletion log (hashed email address, timestamp, deleted categories) as proof that deletion was carried out properly.
Cookies and consent
On the website we set technically necessary cookies required for sign-in and security. All other cookies — reach measurement and advertising — load only after your consent in the cookie banner. You can change your choice there at any time. No marketing cookies are used in the iOS and Android apps.
The individual cookies, with name, purpose and lifetime, are listed in the cookie policy maintained and continuously updated by our consent provider: View cookie policy
Your rights
- Access to the data we process about you
- Correction of inaccurate data
- Deletion of your data
- Restriction of processing and objection to it
- Receiving your data in a portable format, and lodging a complaint with a supervisory authority
Just get in touch: mail@nordstern.coach
Changes to this policy
We update this policy when the service or the legal situation changes. The date above shows the current version.