Privacy

Last updated · 18 October 2026

Who we are. This notice covers the QodeX website and the booking of personal DeQode sessions. The person responsible for your data is Shani Kuper, trading as QODEX by Shani Kuper, Breitistrasse 1, 8118 Pfaffhausen, Switzerland. For anything to do with your data, write to shani@qodex.academy and we will answer within 30 days.

What we collect when you book. To hold a time for you and prepare your session we store your name, your email address, your date of birth, the question you write, whether you chose Zoom or WhatsApp, your language and your time zone. If you choose WhatsApp we also store your phone number. We record the IP address the booking came from, only to stop automated abuse of the calendar. Your date of birth is the material Shani reads from, so it is kept with the booking. We also keep which session you booked, what you paid and in which currency, any discount code you used, and a reference number for the payment. Your card details are handled entirely by Stripe and we never see or store them. We also note where you found us, for example an Instagram post or a link someone sent you, when the link you came through says so.

The question you write. What you type as your session focus is stored with your booking, repeated back to you in your confirmation, sent to Shani so she can prepare, and written into the calendar entry for your session. Please keep medical, psychiatric, financial and legal details out of that box. Bring anything sensitive to the session itself, where it is not written down.

Waiting list and messages. If you join the waiting list we store your name, email, language, any note you add and your IP address, so Shani can tell you when a time opens. If you write through the contact form we store nothing: your name, email and message go straight to Shani’s inbox. If you ask for your Qode by email on the numerology page or the Relationship QODE calculator, we store your email address, your language, the numbers shown and where you found us, so we can send that one email and so Shani can see you asked. Your date of birth is not sent and not stored. If an AI assistant asks our site for the numbers of a date of birth, the date is used only for that one answer and is not kept in our database.

Anonymous measurement. We count how many people open the calendar, how many tap through to WhatsApp and which language the site was shown in. Our hosting provider Vercel also collects anonymous statistics such as page views, country, device type and loading speed. None of this carries your name, your email address or any identifier, and none of it can be traced back to you.

Why we use it. We use your details only to do what you asked for: to schedule and deliver your session, to send your confirmation, your reminder and your calendar invitation, to take payment, to answer you, and to meet our tax and accounting duties. The basis is our contract with you for everything to do with your booking, your consent for the waiting list, and our legitimate interest in keeping the calendar free of abuse. We do not sell your data and we run no advertising. Shani keeps a simple client record so she can look after you: what you booked, studied or bought, her own notes and reminders, and labels she adds herself, such as the course you asked about. She may use your date of birth to write to you near your birthday, when your personal year changes. No decision about you is ever made automatically.

Who else is involved. A small number of providers act on our behalf. Supabase stores the booking, Stripe takes the payment, Vercel hosts the site and provides the anonymous statistics, Resend sends our email, and Google Calendar holds the appointment and sends your calendar invitation, which means Google receives your email address. Your session itself runs on Zoom or on WhatsApp, which is part of Meta, depending on what you chose. Some of these process data outside Switzerland, including in the United States, under recognised safeguards such as the Standard Contractual Clauses. If you pay through a payment link Shani sends you, Stripe collects your name, email address and phone number on its own page and passes them to us with the payment. If you turn on class reminders on your phone, the reminder travels through your browser’s own push service (Google, Apple, Mozilla or Microsoft), which sees only that a message is being delivered.

Emails we send you. After you book we send a confirmation with a calendar invitation, and a reminder before your session unless you turn reminders off. A few hours afterwards we send one message to thank you and ask how it was. If you started a booking and did not finish paying, we may send one message to say your time is still open. If you joined the waiting list we write once when something frees up. Every one of these carries a link to stop them, and you can also write to shani@qodex.academy at any time. Now and then Shani may also write to people who have booked, studied or bought from her, about a new course or a session that could suit them. That email carries the same link to stop it, and once you use it you get no more of them. We give your address to nobody. After a session Shani may email you a short summary of what you looked at together. The message after your session lets you rate it with one tap; your rating and anything you write are kept with your booking, and Shani quotes your words only if you tick that she may, and only after she has read and approved them. If you ask for it, we send one letter on the first of each month with your Personal Month, worked out from your date of birth; you can stop it from the letter or from your QodeX page. Booking a session or joining a course gives you a private link to your own QodeX page with your sessions, your courses, Shani's notes and your numbers. The link alone does not open the page: on each new device you type a code we send to your email. If the link reaches someone else, tell us: we send you a new one and the old link stops working at once.

Cookies and local storage. This website sets no cookies, with one exception: when you open your Academy course and type the code we emailed you, one cookie remembers that phone or computer for the length of the course, so you are not asked for a code every time. It is used for nothing else. We use no advertising, no cross-site tracking and no third-party marketing scripts. Three small things are kept in your browser: the language you chose, so the site opens the way you left it; one marker that lasts only as long as your visit, so a single visit is not counted twice; and, for 90 days, the name of the site or post that sent you here (for example Instagram), which reaches us only as part of the visit count or with a booking or sign-up. When you pay, you are taken to Stripe’s own secure page, where Stripe may set cookies of its own for fraud prevention. If you turn on class reminders, your browser keeps a small script from this site that does nothing but show those reminders; turning reminders off, or clearing the site’s data, removes it.

How long we keep it. Nothing is deleted on a timer. We keep your bookings, your date of birth, the question you wrote and Shani’s notes while you are a client, so that Shani can pick up where you left off if you come back, and we delete them whenever you ask (see Your rights). Swiss accounting law requires us to keep the record of every payment for ten years: your name, email, the amount, the date and the receipt. Those stay even after you ask us to delete the rest, and are used for nothing else. Waiting-list entries are removed when you ask. The anonymous counters hold no personal data.

Children. QodeX sessions are meant for adults, and we do not knowingly collect information about anyone under 18. If a young person has booked without a parent knowing, write to shani@qodex.academy and we will remove everything we hold.

Your rights. You can ask us for a copy of what we hold, correct it, have it deleted, object to a use, or withdraw a consent you gave. Write to shani@qodex.academy from the address you booked with and we will do it. You may also complain to the Swiss Federal Data Protection and Information Commissioner, or to the data protection authority where you live. When we delete your data we keep only what Swiss accounting law requires (see How long we keep it), and we answer within 30 days.

QodeX Academy. If you take a place in an Academy course we store your name, email address, language, time zone, the phone number you choose to give, what you paid and how, and the IP address the sign-up came from, which we keep for 90 days after the course ends and use only against abuse. To open your course you type a code we email you; we then remember that phone or computer, with its browser name, so we can show you which devices have opened your course and sign one out. Your personal Zoom link is made in your name, and after each class Zoom tells us who joined and for how long, which we keep as your attendance. Recordings are hosted by Bunny.net, which also makes the subtitles and transcript; while you watch, we record how much of each class you have seen, so the recording counts towards your certificate. The questions you ask Shani are shown to the whole group with your first name only, unless she keeps them private. Every PDF you download carries your email address and order number. Your certificate carries the name you chose and a random reference, and anyone with that reference can see that it is valid. If Shani sends you something personal, such as notes or a chart, it is stored with your course and shown only on your course page, and we note when you first open it. As with bookings, we note where you found us when the link you came through says so. We also keep where you stopped in each recording, so it carries on from there on any device. If you turn on reminders on your phone, we keep the address your browser gives us for them, and only for that, until you turn them off or the course ends. All of this is kept for the length of the course and your access to the recordings, and after that as with sessions.