Your Privacy Rights
Last Updated: October 5, 2026
Overview
theNaru, operated by Naru LLC, does not sell your personal information or share it for advertising. This page explains the privacy rights we offer to everyone in the United States, including rights under the California Consumer Privacy Act, and lets you ask us to delete your information. Our Privacy Policy has the full details.
Information We Collect and Why
This table lists the kinds of personal information we collect, why we use them, and how long we keep them. Our service providers keep copies, such as logs, error reports and staff alerts, according to their own settings. Some copies, such as stored photo files and these provider copies, may remain after information is removed from theNaru.
| Category | Purpose | How long we keep it |
|---|---|---|
| Account information (names, email addresses, phone numbers, and funeral home business details) | To sign you in, run your account and send service emails. Funeral directors may also receive occasional theNaru news (unsubscribe anytime); everyone else receives marketing only if they choose to. | While your account exists, or until you ask us to delete it |
| Memorial content, which can show a family's religious affiliation | To display, verify and run the memorial, and to review reports about it | While the memorial exists |
| Guest responses (RSVP names and counts; reports, with an optional email) | To show RSVP totals and review reports | With the memorial; your name on an RSVP and a report's email are removed if you ask us to delete your information |
| Partner contact details (funeral home and church contacts) | To verify memorials and work with funeral homes and churches | Until you ask us to remove them |
| Government ID images, selfie and ID details (collected by Stripe Identity), and the email address theNaru shares with Stripe for the check | Identity verification and fraud prevention | Kept by Stripe in theNaru's Stripe account, typically 7 years unless theNaru deletes them sooner (a deletion request to theNaru does not currently delete them); face data up to 1 year; Stripe also keeps its own copy. theNaru itself keeps only the result and time, the session reference, the attempt count, the consent record and any fee payment-request reference, including after a deletion request |
| Order details, when flower ordering is available (sender, recipient and delivery details, card and ribbon messages) | To fulfill orders | As long as needed for accounting and legal obligations |
| Privacy requests (name and email) | To handle your request and show how we handled it | Reviewed for deletion two years after the request is closed |
| Technical information (IP address and browser details; information used to prevent abuse) | To keep theNaru secure and prevent abuse | Abuse-prevention records: kept in coded form, with no fixed end date. Our providers keep logs according to their own settings |
Your Rights
Wherever you live in the United States, you have these rights:
Know and access
You can ask what personal information we hold about you, and for a copy.
Correct
You can ask us to correct personal information that is wrong.
Delete
You can ask us to delete personal information we hold about you, subject to exceptions the law allows.
Opt out of sale or sharing
theNaru does not sell personal information or share it for cross-context behavioral advertising, so there is nothing to opt out of. Browser signals such as Global Privacy Control would not change what we do.
Limit use of sensitive information
We use sensitive information, such as religious affiliation shown on a memorial, only to provide theNaru, so there is no further use to limit.
Equal treatment
We will not treat you differently for using any of these rights.
Authorized agent
Someone else may make a request for you as your authorized agent. We may ask for proof that they are allowed to act for you, and may ask you to confirm the request.
Companies that help us run theNaru
These companies receive personal information to provide their services to us. Some, such as Stripe and Kakao, also handle it under their own privacy policies.
- Stripe: processes card payments for Korean wreath orders, when flower ordering is available.
- Stripe Identity: runs identity checks. We send Stripe your email address and reference numbers for the memorial and your account.
- Florist One and Authorize.Net: Florist One sells and delivers sympathy flowers, when that ordering is available, and Authorize.Net processes the card payment.
- Kakao: provides KakaoTalk sharing. Kakao's sharing script loads only when you use the Share button, and Kakao can then see your IP address and browser details. When you share a memorial with the KakaoTalk button, the share card, which can include the deceased's name, the name of the chief mourner (상주) and service details, is sent through Kakao's sharing API under theNaru's registered app key.
- Google: provides sign-in for funeral directors.
We also use these kinds of service providers:
- Hosting and infrastructure providers, which run our website and servers, store our database and photos, and carry network traffic.
- An error-monitoring provider, which receives error reports that can include your IP address, browser details and details of what went wrong. Before reports are sent, we remove most names, email addresses, phone numbers and sign-in tokens.
- An internal staff-alert tool, which receives the names and contact details in new funeral director sign-ups, privacy requests and flower orders.
- Email delivery and mailbox providers, which send our emails and hold the emails you send us.
How to Make a Request
To ask us to delete your information, use the form below or email privacy@thenaru.app. For any other request, including to see or correct your information, email privacy@thenaru.app.
We will confirm we received your request by email within 10 business days and ask you to reply from the email address we have on file, so we know the request is yours. We will complete the request within 45 days, or tell you if we need more time as the law allows.