Privacy notice
Said & Heard, Safety in Relationships Oy Ltd (business ID 3621636-4). Version 1.0, 2026. We apply the GDPR globally as a baseline.
1. Controller and processors
The data controller is Safety in Relationships Oy Ltd (business ID 3621636-4). Processors are Supabase (database and authentication) and Vercel (hosting and analytics), bound by Article 28 data processing agreements. Privacy contact: kaisa@safetyinrelationships.com.
2. What data we process and on what basis
Data minimisation is the design starting point. We process only: the parents account identifier (email) to provide the account and login, session completions (which exercise and when) and the parents own descriptive rating of the moment (semantic differential and comparison, scale 1 to 7). The basis is the consent given at account creation and providing the service. We do not use five-point scales or invented overall scores.
3. Children
Children do not use the app themselves. We do not collect any data about children, we do not store childrens answers and we do not record audio. The app is a parent tool. The service is intended for adults.
4. Automated decisions and profiling
We do not carry out automated decision making or profiling. The app makes no interpretations about the user or the children.
5. Where your data lives and transfers
Data is stored on Supabase in the EU region (Frankfurt). Access is restricted by row level security (RLS) so each user sees only their own data. If data is transferred outside the EU, we use an appropriate transfer mechanism (for example Standard Contractual Clauses).
6. Retention and deletion
We retain data as long as your account exists. You can delete your account and all your data directly from the account and privacy screen. Deletion is immediate, requires no justification, and extends to processor systems.
7. Your rights
You have the right to access, correct, port and delete your data, to restrict and object to processing, and to withdraw consent at any time. We fulfil requests within the statutory period. You may also lodge a complaint with your data protection authority. Contact: kaisa@safetyinrelationships.com.
8. Security
Data is protected in transit (TLS) and at rest. Access is role based and limited to the minimum needed. The app does not store personal data in the browser cache.
9. Data breaches
We notify the supervisory authority within 72 hours where a breach is likely to risk your rights, and we notify you without undue delay where the risk is high.
10. Analytics
We use Vercel Web Analytics to understand site usage. It uses no cookies and collects no personally identifying data.
11. Changes
We update this notice as needed and communicate material changes.