A privacy policy worth reading.

What we hold about you

Two things, unless you leave an email for the occasional letter. Your account details — an email address, and a password if you choose to set one (it is hashed by our authentication provider; we never see it). And what you write in the app: your reflections, the thread between you, the joint note, and the names you enter when you set the archive up. If someone invites you and gives us your email address, we use it to make your account and send you the invitation and your sign-in links — nothing else. Membership is paid through Stripe, so we never see card details; the person who is invited pays nothing. No address book, no location.

How it’s protected

Your archive lives in a managed database (Supabase) behind row-level security — a rule enforced by the database itself, not just by our code, that every row belongs to the pair. The two of you can read it. Nobody else can. We don’t read it either: there is no feature that needs us to, and no advertising or training pipeline it feeds. But because we host it, we hold it — which is exactly why this policy exists.

The archive you export

When you open the printable archive document, it is generated in your browser from your own data and handed straight to you. Where you save it, post it, or frame it is entirely your business. We don’t keep a copy of the export.

What lives on your device

• A small cache of your profile (the names, not your answers) so the app opens faster. It is cleared when you sign out.
• Unsent drafts — of answers and of thread lines — stay in that browser until you keep them, so navigating away doesn’t lose your words. They are cleared when you sign out, and the app warns you before it does.
• On a shared device, signing out is what closes the archive. Do sign out.

The occasional letter

If you leave an email on a public page, we hold it to send an occasional letter — when the companion book is ready, when there is a new chapter, when there is something worth writing. It is not required to use the archive, and it is not tied to what you write there. Until a list provider is wired, those addresses are logged so we can write back; they are not sold and not added to anyone else’s list.

How we count visits

There is no advertising and no social-media tracker. Vercel records an anonymous page-view count on the public pages — the homepage, the questions, the two comparison pages, and pages like this one. A signed-in browser is not counted, and the archive, an invitation link and what you write are never sent. It does not set a cookie. In aggregate it records the page, where the visit came from, the country and the kind of device. Our hosting provider also keeps standard, short-lived server logs (IP address, page requested) to keep the site running.

For visitors who are not signed in, we also count selected button clicks on those public pages, and two things about the occasional-letter form: that someone started typing, and that we accepted the request. Only fixed labels are sent. The address and what was typed are not. Accepting the request does not mean the letter was delivered, and clicking through to membership does not mean an account or a payment was completed.

Your rights, under UK GDPR

You have all the usual rights — access, correction, deletion, portability. You can open a printable document of the archive from the app whenever you like, and edit or delete anything you wrote. To leave an archive or delete your account, use the buttons under “Leaving” on your profile, or write to us — one login covers every Weave app, so we confirm with you by email before deleting it. The law gives us 30 days; it rarely takes us more than one. If you write to us, we’ll hold your email only as long as it takes to reply properly.

If you need us

Write to hello@rarestform.com or to Rarest Form Limited (UK company number 17433459), 26 Cromwell Road, Ascot, SL5 9DG, United Kingdom. A real person answers — often the same day.