Privacy Policy

theNaru is operated by Naru LLC, a Pennsylvania limited liability company ("theNaru", "we", "us"). This policy explains how we handle personal information on our websites, thenaru.app and app.thenaru.app, where funeral homes and families create and share online memorial pages.

theNaru is a service for the United States. Memorials may be created only by funeral homes located in the United States and by people who live in the United States. Anyone may view and share a published memorial.

This policy is provided in English and Korean. If the two versions differ, the English version controls.

Some of this information is given to us by someone else. For example, a funeral director may enter a family member's email address, a family may name living relatives on a memorial, and a church may list its contact people.

We do not show ads.

Service emails can go to people who did not sign up themselves, such as a family member whose email a funeral director entered, or a church's contact people.

theNaru does not send text messages.

Funeral directors who use theNaru may receive occasional emails with news about theNaru. Every such email will let you unsubscribe at any time.

Everyone else, including families and flower buyers, receives marketing emails from theNaru only if they choose to.

We never use the email addresses of RSVP guests, people who report a memorial, people who send privacy requests, or church contacts for marketing.

We do not sell or rent email addresses.

We do not sell personal information, share it for cross-context behavioral advertising, or give it to any other business for its own marketing.

These companies receive personal information to provide their services to us. Some, such as Stripe and Kakao, also handle it under their own privacy policies.

We use cookies and your browser's storage only to run theNaru: to keep you signed in, to remember your language, and to make pages work, for example by saving a draft you have not finished or noting that a page view was already counted. We do not use advertising or third-party analytics cookies.

Some pages load scripts from the companies listed above. Kakao's sharing script loads only when you use the Share button, and Stripe's script loads on the identity-check page and, when flower ordering is available, on payment pages. These companies may set their own cookies or collect your IP address and device details under their own privacy policies.

Do Not Track and Global Privacy Control: we do not track you across other websites, and we do not sell or share personal information for advertising, so these browser signals do not change how theNaru works.

We count, for each published memorial, how many times its page is opened and shared each day, and roughly where visitors came from, for example a search engine, an AI assistant, KakaoTalk, a social network or a direct link.

These counts use no cookies, no visitor IDs and no IP addresses, and we cannot tell who visited. Your browser also sends us basic page-speed measurements without identifiers. We do not share these counts with anyone.

If you create a memorial without a church or funeral home partner, you may be asked to verify your identity before the memorial can be shared publicly. Families of a church-affiliated memorial may also choose this option. The check is run by Stripe Identity, theNaru's identity verification provider.

What Stripe collects: a photo of your government-issued ID and a selfie; the details it reads from your ID (such as your name, date of birth, ID number and address); and information about the device you use, including through cookies. Stripe uses your selfie and the photo on your ID to create face data (biometric identifiers), compares them to confirm the ID is yours, and compares new selfies with past submissions to detect fraud. theNaru asks for your consent before the check begins.

What theNaru shares with Stripe: your email address and internal reference numbers for the memorial and your account, so Stripe can run the check and tell theNaru the result.

How long it is kept: Stripe keeps your ID photos, selfie and the details from your ID in theNaru's Stripe account, typically for 7 years, unless theNaru deletes them sooner. Stripe keeps the face data for up to one year to detect fraud. theNaru staff can view your ID photos, selfie and ID details in theNaru's Stripe account, but theNaru does not copy them into its own systems. A deletion request to theNaru does not currently delete the ID photos, selfie and ID details held in theNaru's Stripe account; they are kept for the period above. The email address theNaru shares with Stripe also stays with the check in theNaru's Stripe account; a deletion request to theNaru does not currently delete it.

Stripe's own copy: Stripe also keeps this information as an independent controller — for fraud prevention and security (including recognizing you in other interactions with Stripe or businesses that use Stripe) and its legal obligations — and uses it to operate and improve its services; only if you agree to it in Stripe's own consent screen does Stripe use your images and face data to improve its verification technology. This is under Stripe's own privacy policy (https://stripe.com/privacy). To ask Stripe to delete its copy or to stop using your face data, email privacy@stripe.com.

What theNaru keeps in its own systems: whether the check succeeded and when, a reference to the Stripe session, how many attempts were made, a record of your consent (the consent notice, its version, and when you agreed), and a reference to any fee payment request. These records are kept after a deletion request, as the record of how the memorial was verified.

When sympathy flower ordering is available, orders placed on a memorial page are fulfilled by Florist One, our nationwide partner florist network. Florist One is the merchant of record for these orders: they process the charge and email your order confirmation and receipt directly.

To fulfill your order, the following information is shared with Florist One:

Card payments for sympathy flower orders are processed by Authorize.Net, Florist One's payment processor. Your card details are entered in Authorize.Net's secure hosted payment form and never touch theNaru's servers. Florist One does not use your information to market to you.

Our service providers keep copies, such as logs, error reports and staff alerts, according to their own settings. Some copies, such as stored photo files and these provider copies, may remain after information is removed from theNaru.

To ask us to delete your information, you can use the form on our Do Not Sell My Info page, linked at the bottom of every page on app.thenaru.app. For any request, including to see or correct your information, email privacy@thenaru.app. Someone else may make a request for you as your authorized agent; we may ask for proof that they are allowed to act for you.

We will confirm we received your request by email within 10 business days and ask you to reply from the email address we have on file, so we know the request is yours. We will complete the request within 45 days, or tell you if we need more time as the law allows.

Deleting your information removes or overwrites your contact details. It does not erase memorial content: a memorial you created yourself is taken offline permanently, and a memorial managed by a funeral home stays online. Some copies may remain, as described above. We will tell you what we removed and anything we could not remove.

We do not sell personal information or share it for advertising, so there is nothing to opt out of; the Do Not Sell My Info link remains available. We use sensitive information, such as religious affiliation shown on a memorial, only to provide theNaru. We will not treat you differently for using any of these rights.

Information travels between your browser and theNaru over encrypted connections. Our database and stored photos are encrypted, and we remove location and camera data from photos before storing them. Database rules keep each funeral home's information separate, and only authorized theNaru staff can see information across funeral homes. Families and funeral directors do not have theNaru passwords: families sign in with one-time email links and funeral directors with Google. We limit how often anyone can sign in or submit forms, to block abuse.

Our database and photos are stored in the United States, in Amazon Web Services' Northern Virginia region, and our servers run in the United States. Some of the companies we work with may handle information in other countries; for example, Kakao, which provides KakaoTalk sharing, is a Korean company.

No way of storing or sending information is completely secure, but we work to protect yours.

You must be at least 18 years old to create or manage a memorial or to place an order. Guests may view memorials, RSVP and share them.

theNaru is not directed at children. We do not knowingly collect personal information from children under 13. If we learn that we have, we will delete it. If you believe a child under 13 has given us personal information, contact privacy@thenaru.app.

When we change this policy, we post the new version on this page and update the date at the top. Changes apply from that date. If we want to use information we already hold in a new way that this policy does not describe, we will ask for your consent first.