Effective 16 September 2026 · version 1.4
Your privacy in the Dearly research study
Dearly research is operated by MorfaDev through morfadev.com. This notice explains what we collect, why we use it, how long we keep it, and the choices available to you.Who is responsible
MorfaDev is responsible for the personal data used in this research study. For questions, access requests, corrections, objections, withdrawal, or deletion requests, email dearly@morfadev.com.
What we collect
Invitation requests
Your optional first name, email address, research-contact consent, and optional marketing consent.
Research responses
Parent and household profile answers, survey answers, study progress, and completion status.
Interaction measurements
Steps reached, timings, task actions, scroll depth, anonymous tap coordinates, language, browser and operating-system family/version, device type, viewport size, in-app-browser context, whether essential browser storage is available, invitation views, and whether a referral message was copied or shared.
Service protection
A short hashed key derived from IP address and browser information for rate limiting and login protection.
What the interactive demo does not send to us
Child names, birthdays, sample writing, keystrokes, uploaded media, filenames, and screen replay are not accepted by the research API. Sample content stays in your browser and is erased from its local study state when the journey is completed.
Please do not enter real identifying details about a child while trying the demo.
Why we use the data
- To review requests and issue personal, campaign, or referral research invitations.
- To run the study and understand usability, comprehension, trust, demand, pricing, and referral conversion.
- To protect the service, prevent abuse, and keep the operator area secure.
- To respond to questions and data-rights requests.
- To send product updates only when separate marketing permission was given.
We rely on your consent for research contact, participation, and optional marketing. We rely on our legitimate interests only for proportionate service operation, security, and abuse prevention. You may withdraw consent at any time without affecting processing already lawfully completed.
Storage and sharing
We use carefully selected service providers to host, operate, secure, and communicate about the study. They process personal data only as needed to provide those services. Access is limited to the operator and these necessary service-provider categories. Study data is not sold, used for advertising profiles, or sent to third-party analytics services.
Research data is hosted within the European Economic Area. If a future service requires an international transfer, this notice will be updated before that processing begins and an appropriate transfer safeguard will be used.
How long we keep it
- Pending invitation requests: up to 6 months after the latest request or update.
- Completed research answers and privacy-safe interaction measurements: up to 24 months.
- Participant follow-up contact details: up to 12 months after study completion.
- Marketing contacts: until you unsubscribe or withdraw permission.
- Rate-limit and login-attempt hashes: up to 30 days.
Protected backups may retain a deleted record until the relevant backup expires. A deleted record will not be restored for ordinary use; backups are used only for disaster recovery.
Your choices and rights
Depending on the circumstances, you may ask to access, correct, delete, restrict, or receive your personal data, object to processing, or withdraw consent. Email dearly@morfadev.com and include enough information for us to locate your request or study record.
You may also raise a concern with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, through its official complaint process.
What is required and how decisions are made
An email address and permission to contact you are required when you request a personal invitation. Campaign and participant-referral links can instead issue a separate personal study session when you press Start. Your first name and marketing permission are optional. The survey identifies required questions as you move through it. We do not use automated decision-making or profiling about you.
Browser storage and security
The participant journey uses essential browser storage so a personal invitation can resume and the interactive demo can keep sample content on the device. We do not use advertising cookies. The service uses HTTPS, restricted operator access, personal invitation tokens, and separation between contact details and research responses. No internet service can promise absolute security.