Privacy Policy

1. Controller

Huuman Life GmbH, Türkenstraße 92, c/o Yilmaz, 80799 Munich, Germany. Email: dna@huuman.life.

2. Scope

This privacy policy covers the huuman website at huuman.life, including the marketing pages and the blog at huuman.life/blog. For the huuman iOS app, additional privacy information is provided in the App Store and within the app.

3. Hosting and server logs

Our marketing pages are hosted via Lovable, the blog is hosted via Webflow Inc., and content is delivered through the Cloudflare content delivery network. When you visit the site, these providers process technical connection data (IP address, date and time, browser information) in server logs to deliver the site securely and reliably. Legal basis: our legitimate interest in a secure and functional website (Art. 6 (1) (f) GDPR). Where providers process data in the USA, safeguards such as the EU-U.S. Data Privacy Framework or standard contractual clauses apply.

4. Cookies and consent

We use a consent banner. Essential cookies are required to run the site. Optional cookies and similar technologies such as your browser's local storage (marketing) are only used after your consent (Art. 6 (1) (a) GDPR, Section 25 TDDDG) and you can withdraw your consent at any time via the Cookie settings link at the bottom of the page.

5. Meta Pixel and Conversions API

On the marketing pages we use the Meta Pixel of Meta Platforms Ireland Ltd. only after your consent. It helps us measure and improve our advertising, including conversion measurement. With the same consent, our server also reports certain actions to Meta through the Meta Conversions API, such as joining a waitlist, applying for a program or the steps of the Prime-Score check. We send your email address, if you entered one, only as a one-way hash, plus your IP address, browser information, Meta's cookie and click identifiers and, where available, the campaign parameters of your visit. Also only with this consent, we store in your browser which campaign brought you to us (campaign parameters and Meta's click identifier). Data may be transferred to Meta in the USA under the EU-U.S. Data Privacy Framework. You can withdraw your consent at any time via Cookie settings.

6. Google Analytics

On the blog we use Google Analytics 4 of Google Ireland Ltd. only after your consent, to understand how the blog is used. IP addresses are truncated. Data may be transferred to Google in the USA under the EU-U.S. Data Privacy Framework. You can withdraw your consent at any time via Cookie settings.

7. Google Fonts

We load fonts from Google servers to display the site consistently. When fonts are loaded, your IP address is transmitted to Google. Legal basis: our legitimate interest in a consistent presentation (Art. 6 (1) (f) GDPR).

8. Application and contact forms

If you apply for a huuman program or contact us via a form, we process the data you provide (such as name, email address and your answers) to handle your application or request (Art. 6 (1) (b) GDPR). The data is stored in our infrastructure (including Supabase and Google Workspace) and deleted when it is no longer needed for this purpose.

9. Email contact

If you email us, we process your message and contact details to answer you (Art. 6 (1) (b) and (f) GDPR).

10. App Store links

Our site links to the Apple App Store. When you follow such links, Apple's privacy terms apply.

11. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw any consent at any time with effect for the future. You can lodge a complaint with a data protection supervisory authority, for example the Bavarian State Office for Data Protection Supervision (BayLDA).

12. Storage periods

We store personal data only as long as necessary for the purposes described here or as required by law.

13. Changes

We may update this privacy policy when our website or legal requirements change. The current version is always available on this page.

14. Prime-Score check

When you use our Prime-Score check, we process your answers, your result, technical data (device type, language) and, if you provide it, your email address. The legal basis is Art. 6 (1) (b) and (f) GDPR. We only send your report and further tips after a double opt-in. For sending emails we use the email service AgentMail (USA) as a processor. Marketing events are only sent to Meta with your consent given via our cookie banner. You can unsubscribe at any time using the link in every email.

15. Newsletter (The huuman Weekly)

If you subscribe to our weekly newsletter, we process your email address, your language and the page you signed up on. The legal basis is your consent (Art. 6 (1) (a) GDPR). We use the double opt-in procedure: you only receive the newsletter after you confirm your subscription by email. To prove your consent, we store the time, IP address and browser of your signup and of your confirmation, and the version of the consent text (Art. 6 (1) (c) in conjunction with Art. 7 (1) GDPR).

We do not use open tracking or per-person link tracking; we only count clicks per issue, without knowing who clicked. You can withdraw your consent at any time through the link in every email.

Processors: Cloudflare (hosting and database, data stored in the EU) and Resend (email delivery), each under a data processing agreement and the EU Standard Contractual Clauses.

Unconfirmed signups are deleted after 30 days. After you unsubscribe, we erase your address after 30 days and keep only a one-way hash to honor the opt-out; the proof of consent is kept for 3 years. Details: huuman.life/en/newsletter/privacy.

16. Shop waitlist and app feature waitlists

If you join the waitlist for one of our products on our shop pages, we, Huuman Life GmbH (section 1), process your email address, the product and plan you chose (every 30 days or one box), your language, your marketing cookie choice and, if present, the source tag of the link you came from and the campaign parameters (UTM) of your first visit. We use your address for one email only: when the product ships, we send you your code for the discount on your first box. The legal basis is your consent (Art. 6 (1) (a) GDPR). To prove your consent, we store the time, page and browser of your signup and the version and exact wording of the consent text (Art. 6 (1) (c) in conjunction with Art. 7 (1) GDPR).

We use the product, plan, source tag and campaign parameters to see which products and plans are in demand and which of our channels and ads lead to signups; for this, our team receives a notification email for each signup. The legal basis for this is our legitimate interest (Art. 6 (1) (f) GDPR).

If you have allowed marketing cookies, we also report your signup as a conversion to Meta Platforms Ireland Ltd., through the Meta Pixel (section 5) and the Meta Conversions API. We send your email address only as a one-way hash, plus your IP address, browser information, Meta's cookie and click identifiers and the campaign parameters. This helps us measure our advertising. The legal basis is your consent (Art. 6 (1) (a) GDPR), which you can withdraw at any time via Cookie settings; data may be transferred to Meta in the USA under the EU-U.S. Data Privacy Framework.

You can withdraw your consent to the email at any time with effect for the future, for example by email to dna@huuman.life. Your other rights are set out in section 11.

Processors: Lovable (website hosting, including the server function on Supabase that receives the form), Google (Google Workspace, where we keep the list in a spreadsheet and receive the notification emails), AgentMail (USA, notification emails to our team) and Resend (sending the launch email). Where these providers process data in the USA, safeguards such as the EU-U.S. Data Privacy Framework or standard contractual clauses apply.

We delete your data 30 days after the launch email, when your code expires, or earlier if you withdraw your consent. If the product has not shipped 12 months after your signup, we delete it then. We keep the proof of your consent for 3 years after that.

This section applies in the same way when you join the waitlist for an upcoming feature of the huuman app on our Coming soon pages, with these differences: instead of a product and plan, we store the feature, and we use your address for one email only, when the feature is available in the app. We delete your data 30 days after that email, or earlier if you withdraw your consent. If the feature is not available 12 months after your signup, we delete your data then. We keep the proof of your consent for 3 years after that.