Privacy Policy

Harma is a family memory platform that helps families capture voice notes, photos, written thoughts, and messages so that children can one day discover who their family truly was.

This service is operated by James Bell (“Harma”, “we”, “us”, “our”), based in Sydney NSW 2096, Australia.

You can contact us at: Jameslbell.uk@gmail.com

When you join our waitlist, we collect:

• Your first name
• Your email address
• The date and time you signed up and gave consent
• The version of this privacy policy you agreed to

When you visit our website, we may also automatically collect your IP address, browser type, pages visited, and referral source via analytics tools.

We use your information to:

• Add you to our waitlist and reserve your spot
• Send you occasional product updates and launch announcements
• Understand how people find and use our site so we can improve it
• Comply with our legal obligations

We will never sell your personal information. We will never use it for purposes beyond those above without asking you first.

We process your personal information on the basis of consent — you have actively opted in by completing our waitlist form. You may withdraw consent at any time by unsubscribing or contacting us.

We also rely on legitimate interests for website analytics, where we have assessed that this interest does not override your rights.

We share your data only with trusted service providers who process it strictly on our behalf:

• Supabase — database hosting (United States, AWS us-east-1)
• Vercel — website hosting and analytics (United States)
• Gmail (Google LLC) — sending product update emails (United States)

All providers are bound by data processing agreements. We do not share your data with advertisers or data brokers.

Your personal information may be transferred to and processed in the United States. Where we transfer data outside the UK or EEA, we use Standard Contractual Clauses approved by the UK ICO. Where we transfer data outside Australia or New Zealand, we ensure overseas recipients handle your information consistently with local privacy principles.

• Waitlist name and email — until you unsubscribe or request deletion, or 3 years after our last contact, whichever is sooner
• Consent records — 3 years from the date of consent
• Analytics data — 26 months, aggregated and anonymised where possible

Regardless of where you live, you can unsubscribe from our emails at any time using the link in any email, or by contacting us at Jameslbell.uk@gmail.com. You can also request deletion of your data at any time.

Additional rights by region:

To exercise any right, email Jameslbell.uk@gmail.com. We will respond within 30 days.

When you join our waitlist, you will receive a confirmation and occasional product updates. Every email clearly identifies Harma as the sender and includes a one-click unsubscribe link. Our address is included in every email as required by the US CAN-SPAM Act: James Bell, Sydney NSW 2096, Australia.

We use encrypted data storage (Supabase on AWS), HTTPS for all data in transit, and access controls limiting who can access personal data. If we become aware of a breach likely to affect your rights, we will notify you and the relevant authority as required by law.

Harma is not directed at children under 13 (or under 16 in the UK). We do not knowingly collect personal information from children. Our platform is designed for adults capturing memories for children — the children themselves are not data subjects at this stage.

When we update this policy, we will update the date above and increment the version number. For material changes, we will notify you by email before the change takes effect.

Questions, concerns, or requests about this policy:

• Email: Jameslbell.uk@gmail.com
• Address: James Bell, Sydney NSW 2096, Australia

We will acknowledge within 5 business days and resolve within 30 days. If you are not satisfied with our response, you have the right to escalate to your local data protection authority (see Section 8).