Back to home

Privacy Policy

Last updated: 4 April 2026

Introduction

Passage ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our bereavement support service at getpassage.co.uk.

We understand the sensitive nature of bereavement and handle your data with the utmost care and respect.

Information We Collect

Information You Provide

  • Account Information: Name, email address when you create an account
  • Bereavement Details: Information about the deceased person (name, date of death), your relationship to them, estate details, and whether there was a will
  • Task Information: Tasks you create, complete, or modify
  • Messages: Drafts of letters and emails you create using our service
  • Check-in Data: Your mood and energy scores, journal entries, and our AI-generated responses
  • Communications: When you contact our support team

Information Collected Automatically

  • Usage Data: Pages visited, features used, time spent on the service
  • Device Information: Browser type, operating system, IP address
  • Cookies: We use essential cookies for authentication and session management, plus optional analytics cookies (see below)

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your experience and understand how Passage is being used. You have full control over which cookies we use.

Essential Cookies (Always Active)

These cookies are necessary for the service to function and cannot be disabled:

  • Authentication: Keeps you logged in securely (provided by Clerk)
  • Session management: Remembers your preferences during your visit
  • Cookie consent: Stores your cookie preferences

Analytics Cookies (Optional - Requires Your Consent)

With your permission, we use analytics cookies to understand how people use Passage and make improvements:

  • Google Analytics: Tracks page views, user journeys, and feature usage to help us understand what's helpful and what needs improvement
  • Google Ads: Measures the effectiveness of our advertising and helps us reach families who might benefit from Passage
  • Meta Pixel: Tracks conversions and measures ad effectiveness across Meta platforms (Facebook, Instagram)
  • Vercel Analytics: Basic performance and usage metrics to ensure the service runs smoothly

Managing Your Cookie Preferences

You can control analytics cookies in several ways:

  • Cookie banner: When you first visit Passage, you can accept or reject analytics cookies
  • Change your mind: Clear your browser cookies for getpassage.co.uk to see the banner again and make a new choice
  • Browser settings: Most browsers let you block or delete cookies entirely (though this may affect essential functions)

Rejecting analytics cookies does not affect your ability to use Passage — all features remain fully functional. We respect your privacy choices.

How We Use Your Information

We use your information for the following purposes:

  • To provide our service: Create personalized task lists, generate AI guidance, and help you manage bereavement-related tasks
  • To improve our service: Understand how users interact with Passage to make it more helpful
  • To communicate with you: Send service updates, respond to inquiries, and provide support
  • To ensure security: Protect against fraud, abuse, and unauthorized access
  • To comply with legal obligations: Respond to legal requests and prevent harm

Lawful Basis (UK GDPR): We process your data based on:

  • Your consent (which you can withdraw at any time)
  • Performance of a contract (providing the service you signed up for)
  • Legitimate interests (improving our service, preventing fraud)

How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

  • Service Providers: We use third-party services to operate Passage:
    • Clerk - Authentication and user management
    • Supabase - Database hosting (EU region)
    • Anthropic - AI-powered guidance and responses
    • Vercel - Website hosting and infrastructure
  • Legal Requirements: If required by law, court order, or government request
  • Protection of Rights: To protect the rights, property, or safety of Passage, our users, or others

AI and Data Processing

When you use our AI-powered features (task guidance, message drafting, check-in responses), we send relevant information to Anthropic's Claude AI service. This may include:

  • Task descriptions and your questions about them
  • Context about your bereavement case (deceased name, relationship)
  • Your mood scores and journal entries for check-ins

Anthropic does not train their models on your data. Your information is processed to generate responses and then discarded. See Anthropic's Privacy Policy for more information.

Data Retention

We retain your information for as long as your account is active or as needed to provide you services. You can delete your account at any time, which will remove your personal data from our systems within 30 days.

We may retain certain information for longer if required by law or for legitimate business purposes (e.g., fraud prevention, resolving disputes).

Your Rights (UK GDPR)

Under UK data protection law, you have the following rights:

  • Access: Request a copy of the personal data we hold about you
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your personal data ("right to be forgotten")
  • Portability: Receive your data in a structured, machine-readable format
  • Restriction: Request we limit how we use your data
  • Objection: Object to our processing of your data
  • Withdraw Consent: Withdraw consent for data processing at any time

To exercise any of these rights, please contact us at support@getpassage.co.uk.

Data Security

We implement appropriate technical and organizational measures to protect your personal information:

  • All data transmitted over HTTPS (encrypted connections)
  • Database encryption at rest
  • Secure authentication via Clerk
  • Regular security updates and monitoring
  • Access controls limiting who can view your data

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Children's Privacy

Passage is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

We encourage you to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: support@getpassage.co.uk