Your privacy

Rauha provides everyday grief support for adults aged 18 and over. It is not a therapy service, social network or crisis service. This notice explains how information is handled; it is not a claim of UK GDPR compliance or certification.

Information is used to provide the app, remember your preferences, evaluate voluntary feedback, and deliver, secure and maintain the service. We do not sell personal information or use it for advertising. The controller’s contact details, applicable lawful bases and any condition for processing special category information still require confirmation.

You do not need to register or create an account. Rauha saves journal entries, mood check-ins, positives, contacts and activity records in your browser’s local storage. The app does not send these entries to its database or a translation service. Language and appearance preferences are also saved in your browser.

Saved entries do not automatically move to another device or browser. Clearing browser data or losing access to browser storage may remove them. Anyone with access to the same device and browser profile may be able to read them. Browser storage is not a separately encrypted private vault.

Feedback is voluntary and used to evaluate and improve Rauha. We do not ask for your name, email address or account details. Answers are stored in Rauha’s database through Lovable Cloud, with a randomly generated reference and a precise submission timestamp. Feedback is not completely anonymous: written answers may identify you or someone else.

Feedback is private and is not displayed publicly. Dashboard access requires the moderation password, checked on the server for every request. Anyone who knows that password can access the dashboard; authorised project/backend administrators and relevant hosting providers may also have access in their roles.

Avoid names, contact details and unnecessary sensitive personal information, including details of your bereavement. Filters reject common email addresses, phone numbers and links, but cannot guarantee that identifying information is removed.

A daily deletion process is configured to remove feedback older than 12 calendar months from its submission timestamp. Successful runs also catch up overdue records after missed runs. Deletion may therefore occur after the anniversary, normally within the next daily run. Run history should be checked; outages can delay deletion. Older database backups may temporarily retain deleted records.

Rauha is hosted using Lovable Cloud. The live database is configured in AWS eu-central-2 (Europe, Zurich, Switzerland). This does not mean all information is processed or stored in Switzerland. Lovable and its infrastructure providers process information needed to deliver, secure and maintain the app.

Technical information may include IP/network information, browser and device information, timestamps, page requests and technical logs. The exact retention periods and locations of all technical logs, monitoring information and backups have not been confirmed. Not every provider’s involvement in this app has been established.

The published app has been observed sending visitor/event tracking requests. Optional visitor analytics have not been verified as disabled. This is separate from security, hosting and error monitoring, which remain in place. We cannot claim that all tracking or technical logging has stopped, or that technical data is genuinely anonymous.

A cookie named __dpl was observed on the published site. Earlier checks also identified session-related identifiers and a session-id cookie; it was not present in the latest check. The exact purpose and retention of every platform cookie remain unconfirmed. This notice does not claim that Rauha is cookie-free. Browser-local preferences and private entries are separate from cookies.

The updated app serves Fraunces, Nunito Sans and Cormorant Garamond font files through Rauha’s hosting, without requests to Google Fonts. This change has been verified in the updated preview, but the older published version still contacts Google Fonts until the update is published; Google may receive IP and browser request information from that version.

Get support links to independent organisations such as Samaritans and Cruse Bereavement Support. Their own privacy policies apply when you visit or contact them. Only public app wording is translated using local dictionaries; personal reflections and submitted feedback are not sent for translation.

Where applicable, UK data protection law gives you rights to request access, correction, erasure, restriction of or objection to processing, and data portability. Some rights depend on the processing and its lawful basis. You may complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

Controller contact details have not yet been provided for this notice. This needs to be resolved so you can make privacy enquiries and rights requests directly. We will not invent contact details. Because feedback has no account or required contact field, locating a particular response may be difficult; it is not necessarily impossible if suitable information is available. Do not send additional sensitive information to identify a response.

UK Information Commissioner’s Office (ICO)