Privacy policy
How we handle your information.
This policy explains what we collect when you visit xyzcompass.com, join the waitlist, download The Love Blueprint or, once it opens, use the XYZ² app ("XYZ", "we", "us"). It is written to be read, not skimmed past. If anything is unclear, write to us at the address at the end.
1. Who is responsible
XYZ² is operated by XYZ Compass Inc., [registered address] (the "controller" in data-protection terms). Contact for anything in this policy: privacy@xyzcompass.com.
2. What we collect, and why
2.1 When you join the waitlist
- Full name, email address, phone number. Used to send you The Love Blueprint, to tell you when your access wave opens, and to contact you about XYZ by email or by phone/WhatsApp. Phone contact is limited to XYZ matters; we don't cold-call.
- What you'd like to explore (your relationship, someone you're dating, your own needs, still exploring), if you choose to tell us. Used to show you the parts of XYZ that fit your situation. This is optional and you can leave it blank.
- Where you signed up from (which form on the page, and which audience tab or preview topics you picked, if any). Used to understand which parts of the page people respond to.
- Technical details: the time of signup and, if our hosting records it, your IP address. Used to protect the form from abuse and to de-duplicate signups.
2.2 When you browse the site
The site does not use advertising cookies or third-party tracking scripts. It stores two small things in your own browser (local storage, not a cookie): which stars you have lit on the sky, and nothing else. That information never leaves your device and you can clear it in your browser settings. Fonts are loaded from Google Fonts, which means Google receives your IP address when the page loads; see Google's privacy policy. If we add analytics later, we will update this policy and ask for consent where the law requires it.
2.3 When you use the app (after it opens)
The app asks questions about your life, your needs and your relationship, including topics that are personal by nature (your relationship status, what you want from a partner, affection and intimacy, beliefs and values, health habits, whether you want children). Some of this is special-category data under European law. We process it only because you choose to give it to us, to produce your profile, your compatibility readings and your growth plan. We will ask for your explicit consent in the app before you answer those sections, and you can withdraw it by deleting your account. The app's own in-product privacy notice will add detail when the app opens; this policy covers the website and waitlist until then.
3. The legal basis we rely on
- Consent: for the waitlist, the guide, phone/WhatsApp contact, and for personal and special-category data in the app. You can withdraw consent at any time (section 7).
- Legitimate interests: for keeping the signup form safe from abuse, de-duplicating records and understanding which parts of the site work. We don't use your data for anything you wouldn't reasonably expect.
- Contract: once the app opens, to provide the service you asked for.
4. Where your data lives and who can see it
We use a small number of providers to run the site and the waitlist. Each one processes data on our instructions and under its own contractual commitments:
- Google (Google Sheets, Google Apps Script, Gmail/Google Workspace) — the waitlist is stored in a spreadsheet, and the welcome email with your guide is sent from a Google account. Google may store data in the EU and the US.
- Hostinger — hosts the website and the guide file. Server logs may record your IP address.
- [Email / messaging tools you add later, e.g. a newsletter service, WhatsApp Business] — if we move the waitlist into a mailing tool, we'll list it here.
We don't sell your data, and we don't share it with advertisers. We may disclose it if the law requires it, or to a successor if XYZ is acquired, in which case this policy continues to apply.
Your partner never sees your individual answers. In the app, compatibility readings describe how two sets of answers fit without showing either person's raw responses.
5. International transfers
Our providers may process data outside the country you live in, including in the United States. Where data leaves the EU/EEA, UK or Switzerland, we rely on the providers' standard contractual clauses or an adequacy decision. You can ask us for details.
6. How long we keep it
- Waitlist records: until the app has opened to your wave and for 12 months after, or until you ask us to delete them, whichever is sooner.
- App data: for as long as you have an account, and up to 30 days after deletion for backups.
- Server logs: as set by our host, typically a few weeks.
7. Your rights
Depending on where you live (including the EU/EEA, the UK, Switzerland, Albania and some US states), you have the right to:
- ask for a copy of the data we hold about you;
- correct it if it's wrong;
- have it deleted ("right to be forgotten");
- object to or restrict how we use it, and withdraw consent;
- receive it in a portable format;
- complain to your data-protection authority (in the EU, the authority of the country you live in; in the UK, the ICO; in Albania, the Commissioner for the Right to Information and Personal Data Protection).
To use any of these rights, email privacy@xyzcompass.com from the address you signed up with, or reply to any email we've sent you with "delete me" or "unsubscribe". We answer within 30 days and we don't charge for it. Every email we send includes a way to opt out.
8. Children
XYZ is for adults. You must be 18 or older to join the waitlist or use the app. We don't knowingly collect information from anyone under 18; if you think we have, tell us and we'll delete it.
9. Security
The site is served over HTTPS. The waitlist spreadsheet and the email account are protected by two-factor authentication and are accessible only to the people who run XYZ. No system is perfectly secure; if a breach ever affects your data, we'll tell you and the relevant authority as the law requires.
10. Changes to this policy
When we change this policy we'll update the date at the top. If a change affects how we use data you've already given us, we'll email you before it takes effect.
11. Contact
XYZ² · XYZ Compass Inc., [registered address]
privacy@xyzcompass.com