Gather

Privacy notice

This notice says what Jenney Surelia collects when you take part, where it is kept, who can see it and how you can delete it. If you have a question, write to jenneysurelia@gmail.com.

Notice version 2026-10-12

Jenney Surelia is the controller of the personal data described here. In this notice, "we" means Jenney Surelia, which decides why and how the data is used.

Nothing you say or write is stored before you agree, on the first screen; opening your link records only that this phone opened it, so the link can be limited to two devices. Your agreement is what allows us to use what you give, and you can withdraw it at any time by deleting what you gave. After you agree, we collect:

  • your name, nickname, group and language, from the guest list held by the person who invited you;
  • your codename;
  • the pairing of your device with your personal link, which is made when you open the link, before you agree: a random cookie, a scrambled copy of that cookie (a hash) and the kind of device, such as "iphone";
  • the time you agreed and the version of the consent text you agreed to;
  • your answers, typed or spoken, and every earlier version of an answer you changed;
  • the topics you chose and which cards you turned over;
  • for each answer, your choice: private to the person who invited you, which is the default, or one that they may share;
  • photos or videos with a caption, only if you choose to send some. They are kept as they arrive, so they keep their date and location.

If you use the codename screen instead of your link, we also keep the codename and first name you tried, and a scrambled form of your network address (a keyed hash), so that attempts can be counted without keeping the address itself. These are used only to count attempts and to discourage guessing.

Drafts are kept on your device and on our server until you submit or discard them. A recording you discard before submitting is deleted at once.

The app and its database run on Railway in Amsterdam (EU West). Audio and media are stored in a private Railway bucket in Amsterdam, encrypted at rest.

Railway keeps its own request log, which includes the network address of each visitor, for 7 days on the plan we use. Railway states that this log is stored in the United States. Nothing else leaves the EU.

These companies process data on our behalf.

  • Railway hosts the app, the database and the private storage.
  • Recordings are turned into text inside the app itself, on the same server in Amsterdam, by an open speech model; nothing is sent to a speech company. Where the person who invited you has not recorded a question, it is read aloud by an open synthetic voice made on her own computer and shipped with the app. If a speech company is ever used instead, this notice will name it first.
  • Follow-ups are off unless the person who invited you switches them on. When they are on, Mistral, in the EU, receives only the question and your answer, never your name or codename, and writes one sentence back, which is shown to you on a later visit. Answers that touch grief or illness get a fixed kind word instead, with nothing sent.

The speech and writing services receive audio or text only, never your name or codename.

Only the person who invited you. Nothing from any guest is shown to another guest, in any form, including totals.

For twelve months from the day the census opened, then it is deleted. You can delete it earlier.

  • From your link you can review everything you gave and delete any of it, or all of it.
  • If you come in through the codename screen instead of your link, you can add new answers on that device but you cannot read earlier ones. For that you need your link.
  • For anything else, write to jenneysurelia@gmail.com.
  • You also have the right to complain to your data protection authority.

There are two cookies at most: one that keeps your place and ties this device to your link, and, only if you asked to join without a link, one that lets this phone collect your way in once the person who invited you says yes. If you leave a way to reach you on that form, only she sees it. There are no analytics, no trackers and no third-party assets, and the fonts are served from this site.

Anything that can be heard can be recorded again with another device. No app can prevent this.