Privacy Policy

In short

This website uses no analytics or advertising services and loads no fonts or scripts from third-party servers, with one exception: only when you click "Start conversation" in the conversation window on the Power Move Finder page or its landing page does the security check from Cloudflare load (section 6a). If you only read here, you leave nothing behind but a server log entry, and there's no cookie banner.

Personal data arises in exactly six places: when you book and pay for the blueprint, when you submit the Power Move Finder, when you go through it in conversation with the assistant, when you sign in to the member area, when you write in the book area, and when you write to us by email. All six are active decisions.

1. Controller

Guidance and Blessings International, McKee & Ruhs GbR

Avianna McKee & Winfried Ruhs

Bayernstr. 18, 86836 Klosterlechfeld, Germany

Email: mail@winfriedruhs.com

Phone: +49 179 4411615

2. Hosting and server logs

This website is hosted on Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, represented in the EU by Cloudflare Germany GmbH, Rosental 7, 80331 Munich, Germany.

When a page is requested, Cloudflare processes technically necessary connection data: IP address, date and time, the address requested, the amount of data transferred, browser type and operating system, and where applicable the referring page. This data is required to deliver the page at all and serves to defend against attacks.

Cloudflare operates a global network and serves the page from the nearest data center, so transfers to third countries including the USA are possible. Cloudflare is certified under the EU-US Data Privacy Framework; in addition, a data processing agreement with standard contractual clauses is in place.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is the technically sound and secure operation of the website.

Retention: In the configuration we use, Cloudflare retains these logs only briefly for attack mitigation. We don't analyse them and keep no permanent logs ourselves.

Cloudflare's privacy policy: cloudflare.com/privacypolicy

3. No analytics, and a single cookie

There's no Google Analytics, no Meta pixel, no advertising or tracking scripts. Nobody is recognised across this site, which is why no cookie banner is needed.

A single cookie is set, and only once you sign in to the member area: it's called `wr_sitzung`, contains nothing but a random string, and keeps you signed in. See section 7. Without signing in, no cookie is set and nothing is stored in your browser. In the book area, the app additionally stores data on your device after you sign in so that it also works offline (section 7a).

What does exist is a conversion report to Meta, sent only when you submit the Power Move Finder, and only if you arrived through an ad. It goes from server to server. No script is loaded for it, no cookie is set, and nothing is stored on your device. See section 6.

If analytics are introduced in future, this policy will be updated beforehand.

4. Fonts

The typefaces Fraunces and Inter are served from our own server, not via Google Fonts. Loading the page therefore creates no connection to Google and transmits no IP address to Google.

5. Booking and paying for the blueprint

The blueprint is booked on a page of its own. It opens with a declaration you have to confirm before the booking window appears at all. That confirmation happens entirely in your browser. It's stored nowhere and sent nowhere; it merely unlocks the window. The time of your declaration is recorded only as part of the booking itself.

The booking window is provided by Funnelbox, a service built on HighLevel, Inc. (400 North Saint Paul St., Suite 920, Dallas, TX 75201, USA). It only loads once you have confirmed the declaration. Until then, no connection to Funnelbox is made and no data is sent there. From the moment the window loads, Funnelbox processes your IP address and may set its own cookies.

In the window you pick a time, enter your details (typically name, email address, phone number and time zone) and pay. We process these details in order to arrange the call, produce the blueprint and reply to you.

Payment is handled by Stripe (Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland), embedded through Funnelbox. Your payment details, card number and the like, go straight to Stripe. We never see them and never store them; all that reaches us is the fact of payment, the amount and your contact details.

Legal basis: Art. 6(1)(b) GDPR (performance of the contract with you and steps prior to entering it), and for loading the booking window Art. 6(1)(a) GDPR (your consent by confirming).

Retention: Booking enquiries that don't lead to a contract are deleted within twelve months at the latest. Where a contract comes about, statutory commercial and tax retention periods of up to ten years apply.

A data processing agreement with Funnelbox is in place. Transfers to the USA are based on standard contractual clauses.

6. Power Move Finder

On the Power Move Finder page you answer questions about your business. The answering itself happens entirely in your browser. As long as you don't submit the form at the end, your answers never leave your device and we learn nothing about them. The Power Move Finder is also available as a conversation with my AI assistant, for which section 6a applies.

When you submit the form, we transmit your first name, your email address, your answers, the two optional extra questions on capacity and scale, the three optional free text fields and the web address you gave to our server at Cloudflare. From there they go to up to three recipients, depending on how you got here:

Anthropic PBC (548 Market St, PMB 90375, San Francisco, CA 94104, USA) receives this information in order to write your personal report. If you give a web address or name one in the free text, Anthropic fetches up to three pages of that address and uses their publicly available content in the report. A single web search about the offer you named may also take place. Anthropic doesn't use data submitted through the API to train its models. A data processing agreement is in place.

Funnelbox (see section 5) receives your first name, your email address, the result as tags, your entries as a note on the contact, and the written report, so that we can send it to you and write to you about our offer.

Meta Platforms Ireland Limited (Merrion Road, Dublin 4, Ireland) receives a report that this request took place, but only if you arrived through an ad on Instagram or Facebook. That is recognised by the click identifier Meta appends to the address of the ad landing page. Without it, nothing goes to Meta.

What is transmitted: your email address as an irreversible checksum (SHA-256), your IP address, your browser identifier, the click identifier and the address of the page you submitted from. The transmission happens server side through the Conversions API; we do not use a counting pixel in the browser. The sole purpose is measuring which ad led to a request.

The legal basis is your consent under Art. 6(1)(a) GDPR, which you give by submitting the form after being informed at the submit button. You can withdraw it at any time with effect for the future; for reports already sent, write to us and we will ask Meta to delete them. For the collection and transmission of this data, we and Meta are joint controllers under Art. 26 GDPR. Meta also processes the data in the USA.

All free text fields, both extra questions and the address are optional. You can submit the form without them. You see the fixed result on the result page in any case, whether or not the written report comes through. The written report is sent by email only.

Legal basis: Art. 6(1)(a) GDPR (your consent by submitting the form) and Art. 6(1)(b) GDPR for providing the report you requested. For promotional email we rely on your consent, which you can withdraw in every email.

Retention: as in section 5. Your entries aren't permanently stored on our server. Only two counters live there: one for your IP address, limiting calls per hour and expiring after two hours, and one for a hash of your email address, limiting you to two written reports per address and expiring after 30 days. The hash can't be reversed, and the address itself isn't stored.

Transfer to the USA is based on standard contractual clauses.

6a. Power Move Finder in conversation

On the Power Move Finder page and on the landing page "The Last Human Skill" you can also go through it in conversation with my AI assistant. It is an alternative to the form and leads to the same evaluation. Until you click "Start conversation", nothing is transmitted to us or to third parties.

Before the conversation you give your first name, your email address and your phone number, and tick a box. The page then loads the check from Cloudflare Turnstile (Cloudflare, see section 2), which determines whether a person is operating the window. This is the only case in which this website loads anything from a third-party server, and it happens only after your click. Your browser then asks for access to your microphone.

Your voice is transmitted live to our server. It runs at Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany) in Nuremberg. From there your speech, or the conversation text, goes to three services in the USA: Deepgram, Inc. turns your speech into text. Anthropic PBC (address in section 6) writes the assistant's replies, matches your answers to the questions at the end and writes the evaluation. ElevenLabs, Inc. generates the voice from the assistant's text. No audio is stored.

After the conversation your first name, your email address, your phone number, your answers and the optional details go into the same process as the form (section 6, including Funnelbox). The conversation text reaches us by email, which Resend, Inc. (USA) sends. If an email doesn't get through, the text appears, as an exception, in our server's system log until the log is overwritten in rotation. Otherwise the log contains no conversation content.

Legal basis: your consent (Art. 6(1)(a) GDPR), which you give with the tick box under the fields after being told about the processing in the USA and that you are talking to my AI. We base the transfer to the USA on this explicit consent (Art. 49(1)(a) GDPR). The evaluation and sending it to you serve to fulfil your request (Art. 6(1)(b) GDPR).

Call back and emails: with the same tick you allow us to call you back on the number you gave and to write to you about the program. Without this permission we do not call. We note it on the contact in Funnelbox. You can withdraw it at any time, informally, by email to mail@winfriedruhs.com, and for emails also via the unsubscribe link.

Ad measurement: If you come from an ad on Instagram or Facebook, we tell Meta when the conversation starts that this enquiry came about, in the form described in section 6: your email address as an irreversible hash, your IP address, your browser identifier, the click identifier and the address of the page. This happens as soon as the conversation has begun, not at its end, and the evaluation at the end does not report it again. The legal basis is your consent with the tick box (Art. 6(1)(a) GDPR). We and Meta are joint controllers for this data, as in section 6. Without an ad click nothing goes to Meta.

Protection against abuse: our server counts conversations per IP address, per hash of your email address (the address cannot be recovered from it) and in total per day, so that a single machine cannot overload the service. The counters expire automatically.

Retention: the conversation text and your details stay in our mailbox and in Funnelbox (see section 5) for as long as they are needed for your request and our follow-up, at most until you withdraw consent or ask for deletion. They are not stored permanently on our server.

7. Member area

At members.winfriedruhs.com there's an area where you find your report again and see which step comes next. It's accessible only after signing in.

Signing in works without a password. You enter your email address and we send you a button and a six-digit code. Both last thirty minutes and work once. A new code invalidates older ones, and after three wrong entries the code is blocked. If there's no contact with us under your address, no mail goes out; the answer on the page is the same either way, so that this form can't be used to find out who's a client.

The sign-in mail is sent by Resend (Plus Five Five, Inc., 2261 Market Street, San Francisco, CA 94114, USA) via servers in Ireland. What's transmitted is your address, your first name and the two tokens. A data processing agreement is in place.

In our own database at Cloudflare (D1, Western Europe) we keep: the two tokens with your address and the time, a counter of failed attempts to stop guessing, and the running session. Nothing more lives there; who you are lives in Funnelbox and is read from there on every request.

The cookie is called `wr_sitzung`, is set by the server, can't be read by scripts and lasts 400 days from last use. It holds nothing but a random string pointing at the session in our database. It's strictly necessary: without it you would have to sign in again on every click. Signing out deletes it and the session.

What the area displays is fetched on each visit from your contact in Funnelbox (see section 5): first name, the tags and the written report. Two tags are updated on the contact in the process, namely that you have used the area and which step is next for you.

Legal basis: Art. 6(1)(b) GDPR. The area is part of what we owe you, and signing in is what keeps anyone else from reading your report.

Retention: tokens expire after thirty minutes, failed attempts after 24 hours, an unused session after 400 days.

7a. Book area

If you have access, you can write a book at book.winfriedruhs.com (German: buch.winfriedruhs.com, also reachable through the member area), alone or with co-authors. Signing in works the same way as in the member area (section 7).

What is stored. Your email address and the name you use in a book. The contents of your books: table of contents, chapters, drafts and their earlier versions, notes, back cover text, writing voice, cover images, and the thoughts you type or record. Who belongs to which book. Keys for Claude only as a checksum, never in plain text. The database is hosted by Cloudflare under EU jurisdiction and stored encrypted.

Voice recordings. When you record a thought, the recording is sent to our server and turned into text there with Cloudflare Workers AI. The recording is then discarded, not stored. Only the text is stored. According to Cloudflare, it does not keep the recording beyond the request and does not use it for training. The transcription may take place in a data center outside the EU (see section 2). We count how many minutes you record per month, not what you say.

Chapter suggestions. So the app can suggest chapters that fit a thought, the thought and the chapter descriptions are briefly sent to Workers AI (a text comparison, not writing). Nothing is stored there either. Books in the vault get no such suggestions.

No AI-written text, no training. The app does not have an AI write any text. Your content is not used to train AI models.

Vault (end-to-end encryption). You can move a book into the vault. Its texts are then encrypted on your device before they leave it, and only become readable again on the members' devices. The key only opens with Face ID or your recovery code; we only hold it locked. For a book in the vault, neither we nor anyone who breaks into our database can read the texts. Cover images, numbers such as word counts and prices, and who is a member remain unencrypted. Even in the vault, the server briefly hears voice recordings to turn them into text, then discards them, and only your device encrypts the text. If you lose Face ID and the recovery code, nobody can open the book anymore. Database backups still contain the state from before the move into the vault for up to 30 days.

Who can access your content. Only the members of each book, whom you invite yourself. The server checks this on every request. For books outside the vault, the operator technically has access to the database. We do not look at content unless you explicitly ask us to, for example because of an error.

Claude. You can create a key yourself that lets Claude (Anthropic PBC, see section 6) read your book and suggest changes through your own Anthropic account. This only happens if you set it up, and on your behalf; processing at Anthropic is governed by your agreements with Anthropic. Keys are valid for 90 days and can be revoked at any time.

On your device. So that recording and writing also work offline, the app stores data in your browser's storage after you sign in: recordings and notes until they are sent; the last loaded state of your books and chapters (not for books in the vault); drafts that are not yet saved; settings such as the app language. This data only leaves your device toward our server. Signing out deletes it, except for recordings that have not been sent yet.

Access log. For each book, we record who was in it on which day, with which kind of device (such as iPhone, Mac), from which country, and whether via Face ID, code, or key. The IP address is only evaluated briefly for this, not stored. All members of the book see this log. Entries are deleted after 90 days.

Email notices. So you notice if someone gains access, you get an email for every new sign-in, when Face ID is set up on a device, when a key for Claude is created, when someone is invited to your book, and after several wrong sign-in codes. Invited co-authors get an email with the name of the person who invited them, without the book title and without a link.

Who is involved. Cloudflare (section 2) runs the servers, the database, and Workers AI. Resend (section 7) sends the sign-in and notice emails. Funnelbox (section 5) holds your contact and the note that you have access to the book area; no book content is stored there.

Legal basis: Art. 6(1)(b) GDPR, to provide the book area to you. The access log and email notices also serve the security of your content (Art. 6(1)(f) GDPR; legitimate interest: protection against unauthorized access).

Retention and deletion. Your books remain stored until you ask us to delete them. You can download any book in full at any time (in the book under "Settings", "Data"). An email to mail@winfriedruhs.com is enough to have it deleted. If a book has co-authors, deletion affects the whole book; on request, we delete your own contributions to someone else's book individually. Anything you discard is first only hidden, so a mistake can be undone, and is deleted together with the book.

7b. Face ID and Touch ID

In addition to the code by email, you can sign in with Face ID, Touch ID, or a comparable device feature (passkey). This creates a key pair on your device. Your face or fingerprint never leaves the device; we receive nothing of it.

We only store the public part of the key, the kind of device, and when it was set up and last used. For the vault (section 7a), your device also derives a key from the passkey that locks your vault key; that never leaves the device either.

You can remove passkeys at any time in your profile (tap your picture at the top right). Legal basis: Art. 6(1)(b) GDPR.

7c. Usage of the book area

So we can see which features help and where things get stuck, the app reports which areas are opened and which steps are taken (for example recording started, suggestion accepted, print PDF created), along with the device type, app version and technical errors.

Your content is never part of it: no text, no titles, no chapter names, nothing from your books. The server only accepts values from a fixed list and discards everything else.

Without your consent this happens anonymously: we only store how often something happened on a given day, with no link to you and no IP address. Only if you agree (profile, “Share usage”) do we store these steps together with your email address, so we can understand where things got stuck for you. For beta testers this is on by default, because testing is the purpose; they are told the next time they open the app and can turn it off at any time.

The data is kept in the same database as the books (Cloudflare, EU jurisdiction), without third parties, and deleted after 13 months. If you withdraw your consent, we delete what was stored right away. Legal basis: Art. 6(1)(a) GDPR, Section 25(1) TDDDG.

8. Contact by email

If you write to mail@winfriedruhs.com, we process your message and your sender address in order to reply.

That address is a forwarding address via Cloudflare Email Routing to a mailbox at Google (Gmail). Your message therefore passes through systems operated by Cloudflare, Inc. and Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Legal basis: Art. 6(1)(f) GDPR for general enquiries, Art. 6(1)(b) GDPR where the enquiry concerns a contract.

Retention: until the matter is settled and no retention obligations remain.

9. External links

This website links to external offerings in a few places. Their content and their handling of data are the sole responsibility of the respective providers. Nothing is requested from them until you click the link.

No social media plugins are embedded that would transmit data merely by loading the page.

10. Your rights

Under the GDPR you have the following rights towards us:

• Access to the data we process about you (Art. 15)
• Rectification of inaccurate data (Art. 16)
• Erasure (Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Objection to processing based on legitimate interest (Art. 21)
• Withdrawal of consent with effect for the future (Art. 7(3))

11. Right to complain

You may lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht, Promenade 27, 91522 Ansbach, Germany.

You may also contact the authority where you live or work.

12. Changes

We update this policy when the website or the legal situation changes. The version published here applies.