Privacy Policy — Family North Star

Who we are

Family North Star is operated by Inge Steemans Coaching and Consulting, registered with the Dutch Chamber of Commerce (KVK) under number 93502702 and VAT number NL005022720B18, with its registered office at Prinses Marijkestraat 75, 2595 TL Den Haag, The Netherlands.

For all matters relating to your personal data, Inge Steemans Coaching and Consulting acts as the data controller. You can reach us at support@yournorthstar.today.

What we collect

We collect only the data you actively provide or that is necessary to run the service:

Account data — email address, hashed password, name (if provided).
Family workspace data — your workspace name, invited partner and member roles.
Journey data — your responses to the workshop exercises across the weekend, including reflections, values, vision statements, and uploaded files.
AI outputs — generated insights, headlines and family story drafts created from your inputs.
Subscription data — when you subscribe, our payment provider (Paddle) shares the subscription status, customer ID, and billing-country tax data with us.
Anonymous usage events — aggregated, non-identifying events (e.g. chapter completed, blueprint generated) used to measure product health. No content is logged.

We do not use advertising identifiers, device fingerprints, or third-party tracking.

Why we collect it & legal basis

To provide the service (legal basis: performance of contract) — account, family workspace, journey data, subscription status.
To generate AI-assisted insights based on your inputs (legal basis: performance of contract).
To secure the service and prevent fraud (legal basis: legitimate interests).
To measure product health via aggregated, anonymous statistics (legal basis: legitimate interests).
To meet legal obligations such as tax and accounting (legal basis: legal obligation).

How the AI features work

AI features generate responses using only the data you and your partner enter in the app.
Your data is never used to train AI models.
AI providers process your inputs only for the active request and do not retain them beyond that.
The AI never fabricates stored data — it only works with what you actually entered.

Who we share data with

We share data only with the providers strictly required to operate the service:

Hosting & database — our cloud backend stores your account and journey data with row-level security.
AI providers — used to generate insights, headlines and your family story. Inputs are not retained for training.
Paddle.com (Merchant of Record) — handles all payments, billing, VAT collection, invoicing and refunds for our subscriptions and gifts. Paddle's privacy notice: paddle.com/legal/privacy.
Authorities — only where required by law.

We never sell or rent your personal data.

International transfers

Some of our service providers (e.g. AI providers, Paddle) may process data outside the EU/EEA. Where this happens, transfers are protected by Standard Contractual Clauses (SCCs) or equivalent safeguards.

Data retention

Account, family workspace and journey data are kept for as long as your account exists.
After your subscription expires, your Blueprint remains available in read-only form so you can still revisit it.
Billing records are kept for 7 years to comply with Dutch tax law.
When you delete your account, we permanently remove your journey data within 30 days.

Your rights (GDPR)

Under the GDPR you have the right to:

Access — get a copy of your data.
Rectification — correct inaccurate data.
Erasure — delete all your data.
Portability — export your data (your Blueprint is always exportable as PDF).
Restriction & objection — limit or object to certain processing.
Withdraw consent — at any time, where consent is the legal basis.
Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

We respond to verified requests within 30 days. Email support@yournorthstar.today to exercise your rights.

Security

All data is transmitted over HTTPS (encrypted in transit).
Stored in an authenticated database with row-level security — only you and your invited partner can access your family workspace.
Passwords are securely hashed and never stored in plain text.

Cookies

We use only essential cookies needed to keep you signed in and to operate the payment checkout. We do not use advertising or third-party tracking cookies.

Children's privacy

This service is intended for adults (partners and parents). We do not knowingly collect data from children under 16.

Changes

If we update this policy, we'll note the date above. For material changes we'll notify you in the app.

Contact

Inge Steemans Coaching and Consulting
Prinses Marijkestraat 75, 2595 TL Den Haag, The Netherlands
KVK 93502702 · VAT NL005022720B18
support@yournorthstar.today

See also: Terms of Service · Refund Policy