A privacy policy worth reading.

What we hold about you

Two things, unless you leave an email for the occasional letter. Your account details — an email address and a password (the password is hashed by our authentication provider; we never see it). And what you write in the app: your reflections, the thread between you, the joint note, and the names you enter when you set the archive up. No payment details, no address book, no location.

How it’s protected

Your archive lives in a managed database (Supabase) behind row-level security — a rule enforced by the database itself, not just by our code, that every row belongs to the pair. The two of you can read it. Nobody else can. We don’t read it either: there is no feature that needs us to, and no advertising or training pipeline it feeds. But because we host it, we hold it — which is exactly why this policy exists.

The archive you export

When you open the printable archive document, it is generated in your browser from your own data and handed straight to you. Where you save it, post it, or frame it is entirely your business. We don’t keep a copy of the export.

What lives on your device

• A small cache of your profile (the names, not your answers) so the app opens faster. It is cleared when you sign out.
• An unsent draft of a reflection stays in that browser until you save it — so navigating away doesn’t lose your words.
• On a shared device, signing out is what closes the archive. Do sign out.

The occasional letter

If you leave an email on a public page, we hold it to send an occasional letter — when the companion book is ready, when there is a new chapter, when there is something worth writing. It is not required to use the archive, and it is not tied to what you write there. Until a list provider is wired, those addresses are logged so we can write back; they are not sold and not added to anyone else’s list.

How we count visits

There is no advertising and no social-media tracker. Vercel records an anonymous page-view count on every page — these public pages and the signed-in archive — so we can see whether anyone found us. It does not set a cookie and is not tied to your archive or what you write. Our hosting provider also keeps standard, short-lived server logs (IP address, page requested) to keep the site running.

Your rights, under UK GDPR

You have all the usual rights — access, correction, deletion, portability. You can open a printable document of the archive from the app whenever you like. Write to us and we’ll delete your account and everything in it — the law gives us 30 days; it rarely takes us more than one. If you write to us, we’ll hold your email only as long as it takes to reply properly.

If you need us

Write to hello@rarestform.com or to Rarest Form Limited (UK company number 17433459), 26 Cromwell Road, Ascot, SL5 9DG, United Kingdom. A real person answers — often the same day.