Privacy policy

Self-hosted software

Oclin Home AS publishes relaii as free, self-hosted software, and also runs hosted Spaces for organisations that ask us to. We do not receive the content of independently operated installations or decide how it is used. The organisation behind each Space, hosted or not, is responsible for its own data handling.

Company

Oclin Home AS

Organisation no.

916 749 724

Privacy contact

privacy@oclin.no

This policy covers relaii.app and the related download endpoints at install.relaii.app and releases.relaii.app, the relaii client apps, hosted Spaces, and the optional gateway at notifications.relaii.app.

Your self-hosted server is separate

An organisation that runs relaii controls its own server, database, storage, user accounts, messages, and files. Oclin does not receive that content simply because the organisation uses relaii. The operator of that server decides why and how personal information is handled and should provide its own privacy information to its users.

If two operators choose to federate, their servers exchange the information needed for the channels they deliberately share. That exchange is between those operators; it does not pass through the relaii website. Questions about information held in a particular installation should be directed to that installation's operator.

Hosted Spaces

When an organisation asks us to run its Space, we operate the server on its behalf. The organisation is the controller for the accounts, messages, files and technical records in that Space, and we are its processor under a data processing agreement. We use that information only to run, secure, back up and support the Space, not for our own purposes. If you use a hosted Space, direct questions about your account or its content to your organisation.

Each hosted Space runs on a server of its own at Hetzner Online GmbH in Helsinki, Finland. Nightly encrypted backups are kept in a separate data centre in the EU for 30 days. When an agreement ends, the server is deleted within 30 days and the remaining backups within a further 30 days.

For the agreement itself, we are the controller of the names, email addresses and phone numbers of the organisation’s contact people, its invoicing details, and our correspondence with it. We use that information to deliver the service, invoice it and keep the records Norwegian bookkeeping law requires.

The relaii apps

Your chosen Space

The app connects to the server address you enter. Sign-in details, your name and profile, account identifiers, messages, reactions, files, photos and other attachments are sent to that Space when you use the corresponding features. Searches are sent to the Space to retrieve results. Your Space operator controls access, moderation, storage and retention, and should give you its own privacy information. These uses provide the features you request; the apps do not include advertising or a cross-company tracking SDK.

Information on your device

The Apple app stores saved credentials in Keychain. Saved Spaces, preferences, drafts and cached conversation data are held on your device so the app can restore your session and display your conversations. Removing a Space from the app removes its local account connection; it does not delete the account or messages stored by the Space operator.

Voice and video calls

If your Space supports calls, microphone, camera and screen-sharing data are used when you enable those features. Call media travels through WebRTC to the other participants, directly or through the relay infrastructure configured for the Space. Connection setup involves network addresses and call identifiers. Your device asks for the relevant permissions. The relaii notification gateway does not receive call audio or video.

Optional push notifications

When you enable push notifications for a compatible Space, the app registers with notifications.relaii.app. Oclin Home AS operates this gateway to deliver activity and incoming-call alerts. It stores a platform push token encrypted at rest, an opaque registration identifier, the Space installation identifier, a hashed account binding, a random account hint, language, app platform and environment, registration timestamps, enabled status and the time of the last successful delivery. These identifiers connect the notification destination with the correct saved account.

Your Space sends the identifiers needed to route an alert to the right conversation, message or call. The gateway passes the alert to Apple Push Notification service for Apple devices or Firebase Cloud Messaging for Android. Optional message previews are encrypted by your Space and decrypted on your device; the gateway and push provider receive the encrypted preview, without its decryption key. The gateway does not receive plaintext message bodies, sender names, channel names, attachments or passwords.

Delivery records contain the device registration, installation, provider, result, processing time and timestamp for operational troubleshooting. They do not store message content. Registration records remain until removed; disabling notifications marks a registration inactive and does not immediately erase its stored record. To request deletion of gateway information, contact privacy@oclin.no. Contact your Space operator separately about accounts, messages and files held on its server.

You can change notification preferences in the app and revoke notification permissions in your device settings. Apple and Google process the push delivery data under their respective service and privacy terms; processing may take place outside the EEA.

Information handled by the website

Delivering pages and downloads

Like any web server, our infrastructure receives an IP address, the requested address, time, browser request headers, and basic protocol information long enough to return a page or file. Limited technical records may be kept when needed to secure the service, prevent abuse, and diagnose errors. We do not use those records to build a visitor profile.

Update checks from relaii servers

Unless its administrator turns it off, a relaii server fetches releases.relaii.app/stable/latest.json about once a day to learn the latest version. The request carries the server's IP address and a User-Agent naming its relaii version, and nothing else: no server name, domain, account, or content.

We use it to count how many installations are active and which versions they run. The address is not stored in the count or written to an access log; like any request to this site, it can appear in the short-lived technical error records described above under “Delivering pages and downloads”. For counting, it is used only to compute a keyed hash (HMAC-SHA-256) under a random key that exists for one calendar month, so that the same server is counted once per day and once per month. Within an hour after the month ends, the hashes and the key are deleted, and only the number of installations per day, per month, and per version is kept. After that, the counts cannot be connected to an address or to a particular installation.

Administrators can turn the automatic check off under Administration → Server → Updates. A manual check from the Status page sends the same request.

Aggregated analytics

We use an Oclin-operated Plausible Analytics endpoint at plausible.oclin.dev to understand which pages are useful. It measures page paths, referral sources, permitted campaign parameters, and broad browser, operating-system, device, and country categories. It does not set analytics cookies, store raw IP addresses, create persistent identifiers, or follow a visitor across websites or days. Read more about the Plausible measurement method.

Your theme preference

If you choose light, dark, or system appearance, the site saves that choice in your browser's local storage as relaii.theme. It stays on your device, is used only to restore the appearance you selected, and can be removed through your browser's site-data controls.

When you contact us

If you email us, we receive the address, name, message, and any other information you choose to include. We use it to respond, follow up on the matter, and, where necessary, keep a record of decisions or protect legal rights. Please do not send secrets, live access tokens, private keys, or personal chat content in a support request.

Purposes and legal bases

Where the information above is personal data, we rely on our legitimate interests in delivering and securing the website, publishing dependable downloads, understanding aggregate use, counting active relaii installations, and routing the optional notifications you request, and answering enquiries. Contact and invoicing information for a hosted Space, and any enquiry about entering into or performing an agreement, is processed because it is necessary for that agreement. Accounting records are kept because Norwegian bookkeeping law requires it. We may also retain or disclose information when Norwegian or European law requires it.

We do not use website information for automated decisions that have legal or similarly significant effects, advertising profiles, or the sale of personal data.

Service providers and disclosure

Hosting, network, analytics, and email providers may process limited information for us where that is necessary to operate the website, notification gateway or answer an enquiry. Hosted Spaces run at Hetzner Online GmbH, listed with any other subprocessors in the data processing agreement. Push delivery also uses the platform providers described above. Providers may use information only under their applicable agreements and legal obligations. We may also disclose information when required by law or when reasonably necessary to establish, exercise, or defend legal claims. We do not share visitor information with advertising companies.

If a provider processes personal data outside the European Economic Area, we require a lawful transfer mechanism, such as an adequacy decision or the European Commission's standard contractual clauses, where the law requires one.

How long information is kept

We keep technical security and error records only for as long as they are useful for operation, security, and troubleshooting. Plausible statistics are aggregated and cannot be retrieved as a history about a named visitor. Update-check hashes and their key are deleted within an hour after the calendar month ends; the per-day, per-month, and per-version installation counts are kept. Correspondence is kept until the enquiry and reasonable follow-up are complete, and longer only when needed to comply with law or establish, exercise, or defend a legal claim. Invoices and other accounting records for hosted Spaces are kept for as long as Norwegian bookkeeping law requires, currently five years after the end of the financial year. Your theme choice remains in your browser until you change it or clear the site's storage.

Your rights

Depending on the circumstances, you may have the right to ask for access, correction, deletion, restriction, or portability of your personal data, and to object to processing based on legitimate interests. Because our website analytics and installation counts do not contain a named or persistent record, we may be unable to connect an entry in them to you.

To exercise a right or ask a privacy question, email privacy@oclin.no. You may also complain to the Norwegian Data Protection Authority.

Changes to this policy

We will update this page when the data handling described here changes. The effective date above shows when this version began to apply.