Privacy notice

Relazioni Autentiche (relazioniautentiche.it) · version of 7 November 2026

This is a translation. If the two versions differ, the Italian one applies. Informativa privacy in italiano

In this app you write personal things: how you feel, what moves you, what you are going through. Here you find, in plain words, what we do with them. Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).

1. Who the controller is

Michele Pierangeli (Relazioni Autentiche), via Ripamonti 195, Milano. For any question about your data: info@relazioniautentiche.it.

2. What data we process

• Account: name, email, password (stored only in encrypted, unreadable form), date of sign-up and of approval.
• Profile: city, photo, passions, skills, themes you are working on, ikigai, Johari window adjectives, if you fill them in.
• What you write while you train: check-ins (mood, emotions, gratitude, reflections), actions and goals, answers to the paths, self-assessments, tools, wheel of life, inner parts and dialogues, “Show me that…” and evidence.
• Peer feedback: name and email of the people you ask for feedback, their answers and the ones you give to others.
• Reviews: if you give us permission in the feedback after a meeting, your answer for people who are thinking of coming, with your first name and, if you have an account, the city and photo from your profile.
• “How to work with me” (on trial): if we send you the link, the name we invited you with, your answers, the results and the card you write.
• Notifications on your phone: if you turn them on from your space, the technical address your browser gives us so we can send you the question of the day (it does not say who you are or where you are). You can turn them off whenever you want, from your space or from your phone settings.
• Technical data: a session cookie to keep you logged in, the IP address and the page requested in the server’s technical logs. Your choice of light or dark theme stays in your browser only.

Mood, emotions and reflections can reveal something about your health: for this reason we process them only with your explicit consent, which we ask for when you sign up.

3. Why and on what basis

• To give you the service (account, access, exercises, journal): performance of the contract, Art. 6(1)(b) GDPR.
• To keep what you write about your emotional state: your explicit consent, Art. 9(2)(a) GDPR.
• To send feedback requests to the people you name: your request and our legitimate interest in making the feature work, Art. 6(1)(f). Whoever receives the invitation can decline with one click.
• The mirror of the month (a reading made with artificial intelligence): a separate, optional consent, which you can withdraw at any time from the page itself.
• Security and prevention of abuse (technical logs, limits on login attempts, backups): legitimate interest, Art. 6(1)(f).
• Service emails (password reset, feedback notices): performance of the contract.
• “How to work with me”: your consent, which you give by ticking the box before saving your answers and withdraw by deleting them from the results page (Art. 6(1)(a)).
• Notifications on your phone: your consent, which you give by turning them on and withdraw by turning them off (Art. 6(1)(a)).
• To publish your review on the site: your consent, which you give by ticking the permission in the feedback and withdraw whenever you want (Art. 6(1)(a)).

We do not use your data for advertising, we do not sell it and we do not use it to train artificial intelligence models.

4. Who can see it

• You. Your content is visible only to you.
• Visitors to the site see the reviews you have allowed us to publish and that we have chosen, with your first name and, if you have put them in your profile, your city and photo. Your profile photo is not shown anywhere else.
• People who give you feedback see only your request. People who receive feedback from you see your name and your answers.
• Whoever sent you the “How to work with me” link sees your answers, the results and the card, and can put them next to those of another person you work with, to understand how you work together. No one else sees them.
• The administrator sees name, email, dates and activity counts (for example how many check-ins), not the content. Whoever runs the server could technically access the database: they do so only for maintenance and security.
• Providers who work on our behalf (processors, Art. 28): Hostinger International Ltd. for server, database and email, with servers in France. The fonts are on our server: when you open a page you do not call anyone else.
• Your browser’s notification service (Apple, Google or Mozilla, depending on the phone), only if you turn notifications on: it delivers the notification to your device and sees its text.
• Whoever handles payments and donations: if you pay or donate by card or Revolut, Revolut does; with PayPal, PayPal does; with a bank transfer, your bank and ours. They are independent controllers of the data you give them; we receive the amount, the payment reference and the name of the person paying.
• Artificial intelligence provider, only if you activate the mirror of the month: it receives the texts of the last 30 days without name or email. The provider and the country it operates in are shown on the mirror page before you consent.

Except for the mirror of the month, notifications on your phone and payments (which follow the rules of whoever handles them), your data stays in the European Union.

5. For how long

• Account and content: for as long as you keep the account. When you delete it, they disappear from the database straight away.
• Backups: we keep them for 14 days at most, then they are overwritten. The hosting provider keeps its own copies according to its technical schedule.
• Server technical logs: 14 days.
• Event registrations: seven years from the last time you take part (the count starts again at every event). They are needed to keep the history of attendance and to know who has already used the free first time. After that, name, email and invoicing data are deleted automatically; the feedback stays, without a name, to measure the impact of the meetings. You can ask to delete them earlier whenever you want, with the link at the bottom of our emails. Published reviews stay until you withdraw permission or until your name and email are deleted. We keep invoices separately, for the time the law requires.
• Contacts for upcoming dates: until you ask to be removed (the “Stop notifying me” link removes them straight away).
• Notifications on your phone: until you turn them off, or until the browser rejects them; then they are deleted automatically.
• The answers to “how much do you recognise yourself” in the self-assessment: without a name, for as long as we need them to improve it.
• “How to work with me”: until you delete them yourself from the results page, or until whoever sent you the link deletes them.
• Feedback requests to people who are not registered: they stay in the account of the person who sent them and are deleted with it.

6. Your rights

You can ask to access your data, correct it, delete it, restrict its use, receive it in a readable format and object to the processing. You can withdraw consent whenever you want, without consequences for what happened before. For everything else write to info@relazioniautentiche.it: we reply within 30 days.

If you believe your data is being processed improperly you can lodge a complaint with the Garante per la protezione dei dati personali (the Italian data protection authority).

7. The public site

The pages open to everyone (home, path, events, articles, self-assessment, wheel of life) do not use tracking cookies or external analytics services: that is why there is no banner. We count how many times each page is viewed and which site people come from, in aggregate form, without IP address and without identifying anyone. The self-assessment and the wheel of life done without an account are not saved; the self-assessment done with your account stays in your space. If you tell us how much you recognise yourself in the profile (and a comment, if you want), we save it without knowing who you are. Events are published and you sign up for them directly here.

Event registrations: first name, surname, email, the choice (first time, evening, path), how you pay and, for the path, the invoicing data (encrypted). They are needed to keep your place, send you confirmation, reminders and, the day after, the link to the feedback; they also tell us whether you have already used the free first time (performance of the contract, Art. 6(1)(b)); we keep the history for our legitimate interest (Art. 6(1)(f)), and you can object at any time. The feedback you leave stays linked to your registration and only we read it. Reviews: in the feedback we also ask what you would say to a friend who is thinking of coming. That answer goes on the site only if you tick the permission and only if we choose it, with your first name (never your surname) and, if you have an account, the city and photo from your profile, if you have added them (your consent, Art. 6(1)(a)). You upload the photo yourself from your profile: we keep it on our server, reduced to a small square and without the file’s hidden data (such as the place and time it was taken), and outside our team it is shown only next to a review of yours that we have chosen. You can remove or change it from your profile whenever you want, and it is deleted with the account. You withdraw the permission to publish from the feedback page, while the link is valid, or by writing to info@relazioniautentiche.it: the review comes off the site. This also happens automatically if you ask to delete your data. Upcoming dates: if you leave your name and email (after the self-assessment or from the box on the home page) and, when we ask you, what interests you and which themes you would like to practise, we use them only to tell you about the meetings; if you come from the self-assessment, with the result alongside so we can suggest the right one (your consent, Art. 6(1)(a)). When we publish a new date we may send you an email with the date and the link to sign up: we decide on it and reread it ourselves, one per date, not automatically. At the bottom of every notice there is the “Stop notifying me” link, which removes you from the list; you can also reply to one of our emails or write to info@relazioniautentiche.it. Having an account or having signed up for an event is not enough to receive the notices: we send them only to those who asked for them. To people signed up for an event we do write, instead, about that event (confirmation, reminders, changes of programme, the feedback). Your record: to organise the meetings we keep one record per person that brings together registrations, account and self-assessment, and may include phone, city and a few notes from the organisers (legitimate interest, Art. 6(1)(f)). Only the administrators see it; it follows the same retention times as registrations and if you ask to be deleted it goes with the rest. If you ask for your data, the notes are included too.

The video starts only if you start it, from YouTube in cookieless mode. If you write from the contact form, name, email and message reach the controller by email and are used only to reply to you.

8. Other information

• The app is reserved for people aged 14 or over.
• We do not take automated decisions that have legal effects on you. The mirror of the month is a reading that you ask for and that stays with you.
• The app is training, not therapy. If you are going through a hard time you will find useful contacts on the Help page.
• If this notice changes substantially we tell you at your first login and ask for your consent again.