Privacy policy

In short

• You don’t need an account.
• What you enter in the app stays on your own phone or computer. It never goes to our server. If you speak, your voice does pass through the company that makes your browser (see ‘Speaking’).
• We don’t use trackers, ads or anything that measures what you do.
• We only know your email address if you email us.
• We don’t sell data. To anyone.

Who we are

Just make peace is a product of Marketing Solutions XL, Olieslagerspoort 4, 2312 VX Leiden, the Netherlands. Chamber of Commerce (KvK) number 62675567, VAT number NL002237924B31.

Marketing Solutions XL is responsible for the data we process ourselves. In law, that’s called the ‘controller’.

Questions about your privacy? Email [email protected].

What stays on your device

Everything you do in the app is kept in your browser’s storage, on the device you’re using. We can’t get to it.

• What you type or say, and the name and number of your emergency contact, are encrypted (AES, 256-bit). The key is created on your device and can’t leave it. This helps if someone copies your browser’s files. It doesn’t help if someone opens the app on your unlocked device. The PIN is a lock on the app.
• Your numbers, the date and the buttons you choose are not encrypted. They also stay on your device.
• A few small settings, such as ‘motion off’, are kept in your browser’s local storage. These are not cookies, and they don’t track you.

Because we can’t get to it, we can’t restore anything either. If you clear your browser data or lose your device, your answers are gone. Note for iPhone: if you haven’t added the app to your home screen, Safari may delete your answers when you don’t open the app for seven days. So add it to your home screen.

Under Settings › Your data you can delete everything. You can also set a PIN there. Without a PIN, anyone holding your unlocked device can open the app.

You can export your sessions as a file. That file is readable text, without encryption. Only keep it somewhere that’s yours.

Speaking

Speaking goes through your browser’s speech recognition. We don’t receive the audio. But your browser usually sends the audio to the company that makes it, to turn it into text: Chrome sends it to Google, Edge to Microsoft, Safari sometimes to Apple. What they do with it is set out in their privacy policy. Don’t want that? Type your answer instead. The resulting text is then stored encrypted on your device, just like what you type.

Your emergency contact

In the app you can set one person you can call at a difficult moment. Their name and number are encrypted on your device. If you call them, the call goes through your device’s phone app. We don’t see who it is, or that you call.

When you visit the website

The website and the app run on Railway, an American hosting company. Our servers are in Amsterdam (EU). As with any website, the server sees technical data: your IP address, the time, the page you request and the type of browser. We only use this to keep the site safe and working. We may do so because we have a legitimate interest in it. We don’t link it to you. Railway deletes it after 30 days at most. Railway may also process data in the US. For that, we have a data processing agreement with Railway, with the EU standard contractual clauses.

Traffic to the website goes through Cloudflare, also an American company. Cloudflare protects the site against attacks and sees your IP address to do so. Cloudflare is covered by the EU-US Data Privacy Framework for this.

The fonts are served from our own server. Your browser doesn’t request them from Google or any other company.

The log (coming later)

The log will later become a paid subscription. When that happens, we’ll update this policy. You’ll see that from the date at the top.

Who we share data with

Only with companies we need to make Just make peace work:

• Railway, for hosting the website and the app.
• Cloudflare, for protecting the website and for forwarding email to us.
• Google (Gmail), the service behind our mailbox, for emails you send us.

We have a data processing agreement with Railway and with Cloudflare. It says they only use your data for us and keep it secure. If data goes to the US through them, the EU standard contractual clauses or the EU-US Data Privacy Framework apply.

If you email us at [email protected], your message arrives in a Gmail inbox run by Google. We only use your email to reply to you. We may do so because we have a legitimate interest in it. Google’s privacy terms apply to Gmail. Google may store your email in the US and is covered by the EU-US Data Privacy Framework for that. Data from the app only ends up there if you put it in your email yourself.

How long we keep data

• What’s on your device: for as long as you leave it there. We can’t see it or delete it.
• Emails you send us: until your question has been dealt with, and 12 months after that at most.
• Technical server data: 30 days at most.

Your rights

You can ask which data we hold about you. You can have it corrected, deleted or temporarily put on hold. You can object, withdraw your consent and ask for your data to be transferred. Email [email protected]. We reply within one month.

What’s on your device is yours to manage: we can’t get to it. You can export or delete it yourself.

Not happy with how we handle your data? You can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), or to the data protection authority in your own country.

Age

Just make peace is meant for people aged 16 and over. Younger and struggling with something? Talk to someone you trust. In the Netherlands you can call De Kindertelefoon free on 0800-0432.

Security

The connection to the website is encrypted (https). What you type or say is encrypted on your device. The weak spot is a device that isn’t locked. So turn on a screen lock, and if you like, the PIN in the app.

If this policy changes

If anything changes, we’ll put the new version on this page, with the date. The date at the top shows which version you’re reading.