Privacy Policy
Effective date: October 1, 2026
This policy explains what personal data Ikigai Master ("the service", "we") collects, why, who processes it for us, and the choices and rights you have. We collect only what the service needs to work. We do not sell your personal information.
Who we are
The service is operated by the Ikigai Master team (the "controller" under the GDPR, the "operator" under Russian and Kazakh law). Contact for any privacy question or request: hi@ikigai-master.com.
What we collect and why
| Data | When | Why | Legal basis | Kept for |
|---|---|---|---|---|
| Anonymous session id, progress, funnel events (which steps you completed) | When you press Start | To run your session and count how many people finish each step | Contract; legitimate interest in improving the service | Until you ask us to delete it |
| What you write in the four circles and in the AI chat | While you fill in the circles or chat | To build your map, directions and first step, and to answer in the chat | Contract | Until you ask us to delete it |
| Your rating of the result (1–5) | On the result screen | To measure how useful the result is | Legitimate interest in improving the service | Until you ask us to delete it |
| Email address, consent time and consent wording version | When you ask for the PDF of your circle | To email you the PDF and prove you agreed | Consent | Until you withdraw consent |
| Consent to occasional emails | Only if you tick the separate box | To send occasional notes on finding your direction | Consent | Until you unsubscribe or withdraw consent |
| Email address and your answer to "what convinced you" | Only if you leave them on the Get Full screen and tick the consent box | To tell you when Get Full is ready and understand what people need | Consent | Until you withdraw consent |
| IP address and request details | On every request | To deliver pages and keep the service secure | Legitimate interest in security | As long as our hosting provider keeps its logs |
You do not have to give us your email: without it you can still complete a session and see your result. Without the text you enter, the service cannot build your map.
The documents behind the consents: Consent to the processing of personal data and Consent to receive emails.
Content you add
We store what you write in the circles and the chat so the service can do what you asked. It is yours; we do not look at it except to fix a problem you reported or when the law requires it. Please do not enter sensitive information such as health details; email addresses and phone numbers in your text are masked before it is sent for AI processing.
AI processing
To suggest questions, build your map and directions and answer in the chat, the text you enter is sent to AI service providers, which process it on our behalf and return the result. We only use providers that do not store your text after processing and do not use it to train models. The results are generated automatically and can be wrong; they do not produce decisions with legal or similarly significant effects on you.
Analytics
We measure how the site is used with a privacy-friendly analytics tool that does not use cookies and anonymizes the data it collects. We see aggregated numbers (pages viewed, referring sites, country, device type), not individual people.
Cookies and browser storage
We use only cookies and browser storage that are strictly necessary for the service: to keep your session and progress, the sprint timer and your music settings, and, where these features exist, to keep you signed in, protect your account and process payments. We do not use advertising or cross-site tracking cookies. Strictly necessary cookies do not need your consent; you can delete them in your browser settings at any time, but parts of the service may stop working, for example access to your session from that browser.
Technical data
Our hosting provider processes your IP address and request details to deliver the pages and keep the service secure. Our own application logs record which page or API route was called, never the text you write or your email address.
Messages you send us
If you email us, we keep the correspondence so we can answer and refer back to it.
Who processes your data
We do not sell or share personal information for advertising. We use service providers ("processors") that may process data only on our instructions and for the purposes above:
- hosting and database providers, to run the service and store your data;
- AI service providers, to generate questions, maps, directions and chat answers;
- an email delivery provider, to send the PDF and the emails you agreed to;
- a cookie-free web analytics provider, to count visits.
We may disclose data when required by law or a valid legal request, or to protect the rights and safety of our users and the service. If the service is transferred to another operator, we will tell you before your data becomes subject to a different policy.
Where data is processed
Your session data is stored on servers in Germany. Our providers process data in the European Union, the United States and, for AI processing, possibly other countries.
Your rights
Wherever you live, you can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct it;
- delete it;
- stop or limit using it;
- withdraw consent you gave, at any time, without affecting earlier processing.
Send the request to hi@ikigai-master.com. We answer within 30 days, or sooner where the law of your country sets a shorter deadline. We may need to confirm it is really you, for example by the email address you used.
If you are in the United States
We do not sell your personal information or share it for cross-context behavioral advertising, and we do not use it for targeted advertising. California and other US state residents have the right to know what we collect, to access, correct and delete it, and to opt out of sale or sharing; we honor these rights for everyone and will not treat you differently for using them.
We do not track you across other sites, so Do Not Track and Global Privacy Control signals have nothing to switch off; we honor them by default.
If you are in the EU, EEA or UK
We process your data on the legal bases listed in the table above. Where we rely on legitimate interests, it is to keep the service working, secure and improving; you can object at any time.
You also have the right to data portability and to lodge a complaint with the data protection authority of your country of residence or work. We would appreciate the chance to address your concern first.
Some of our providers are located outside the EEA. For transfers to them we rely on the safeguards in their data processing terms: the EU–US Data Privacy Framework where the provider is certified, otherwise the European Commission's Standard Contractual Clauses.
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
If you are in Russia
We process personal data in line with Federal Law No. 152-FZ "On Personal Data". Consent is given as a separate document: Consent to the processing of personal data and Consent to receive emails.
You can ask for information about how your data is processed, ask us to correct, block or destroy it, and withdraw consent by writing to hi@ikigai-master.com. We answer within 10 working days; we may extend this by 5 working days and will tell you why. You can also contact Roskomnadzor or a court.
Cross-border transfer: data is transferred to Germany (a country with adequate protection of personal data) and to the United States and other countries where our AI service providers operate (countries without adequate protection under the Roskomnadzor list).
Where data is stored: servers of our hosting provider in Germany.
If you are in Kazakhstan
We process personal data in line with the Law of the Republic of Kazakhstan "On Personal Data and Their Protection". Consent is given as a separate document and can be withdrawn by writing to hi@ikigai-master.com.
Cross-border transfer: to Germany, the United States and other countries where our AI service providers operate, with your consent.
Where data is stored: servers of our hosting provider in Germany.
Children
The service is not directed at children under 13, and it is meant for people aged 18 or older. If you believe a child has given us personal data, contact us and we will delete it.
Security
Data travels over encrypted connections (HTTPS). Access to production systems is limited to the people who run the service. Your text and email are never written to our logs. No method is perfectly secure; if a breach affects you, we will notify you and the authorities as the law requires.
Changes
We will update this page when our practices change and adjust the effective date at the top. For significant changes we will give notice on the site before they take effect.
Contact
The Ikigai Master team · hi@ikigai-master.com