1. Who we are
Crisis Compass (the “Service”) is operated by Streamline Direct (“we”, “us”, “our”) as part of the Love Key HELP Network. Streamline Direct is the data controller for the limited data processed through the Service. You can reach us at support@lovekey.com.au.
2. Our privacy-first approach
Crisis Compass is designed to be used without an account. We do not ask for your name, email address, or any login, and we do not build personal profiles of you. The Service summarises official emergency guidance and points you to support options; most of it works entirely in your browser. The limited data described below is collected to keep the Service working and to understand which help options are useful.
3. What we collect
- Donation click events. When you click a “Donate to…” link, we record a randomly generated session identifier, the Australian state you have selected, the label and destination URL of the link, and your browser’s user-agent string. This helps us understand which support organisations people find useful. It is not linked to your identity.
- Routing signals (Respectful Synchronised Protocol). When you open an emergency-guidance flow, the Service sends an anonymous signal to the Love Key network containing the site (“crisiscompass”), the help stage (“respond”), your selected language and country (if set), and a tab-scoped anonymous session identifier. That identifier is random, is never tied to your identity, and is cleared when you close the tab. These signals coordinate help routing across the network.
- Local preferences. Your language, country, theme/dark-mode, accent colour, and any partner setting are stored only in your own browser (local and session storage). They stay on your device and are not sent to us as a profile.
- Technical data. Like any website, our hosting and content-delivery providers process standard request metadata (such as IP address and request headers) to serve pages and protect against abuse.
We do not use advertising cookies, ad networks, or third-party analytics suites such as Google Analytics. We do not sell personal data.
4. Donations and third-party links
Donation links take you to independent third-party organisations. When you donate, you leave Crisis Compass and transact on that organisation’s own website under their terms and privacy policy. We never see or process your payment details, and we are not the recipient or processor of any donation.
5. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Operating the Service and remembering your preferences | Legitimate interests |
| Understanding which support options are used (donation click events) | Legitimate interests |
| Coordinating anonymous help routing across the network (RSP signals) | Legitimate interests |
| Security, abuse prevention, and reliability | Legitimate interests |
| Responding to enquiries you send us | Legitimate interests |
| Compliance with legal obligations | Legal obligation |
6. Who we share data with
- Service providers / sub-processors: cloud hosting and database (Supabase / AWS) and content delivery.
- Love Key HELP Network: anonymous Respectful Synchronised Protocol routing signals as described above.
- Authorities: where required by law, court order, or to protect the rights, safety, and property of Streamline Direct, our users, or the public.
7. International transfers
Some service providers are located outside your country of residence, including in the United States and the European Economic Area. Where data is transferred outside the UK or EEA, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, UK International Data Transfer Addenda, or adequacy decisions where available.
8. Data retention
Donation click events are retained for analysis and then deleted or aggregated. Local preferences remain on your device until you clear your browser storage. The RSP session identifier is cleared automatically when you close the tab. We keep data only for as long as necessary for the purposes described here or as required by law.
9. Your rights
Depending on where you live, you may have rights to access, rectify, erase, restrict, or port your data, to object to processing, and to lodge a complaint with your local supervisory authority. Because the Service is largely anonymous and does not require an account, we may be unable to identify data relating specifically to you. To make a request, email support@lovekey.com.au.
10. Security
We use appropriate technical and organisational measures designed to protect data, including TLS encryption in transit, encryption at rest for our database, row-level security on stored records, and secrets managed outside the codebase. No method of transmission or storage is completely secure; we work to continuously improve our safeguards.
11. Children
The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
12. Changes to this notice
We may update this notice from time to time. Material changes will be communicated by updating the “Last updated” date and, where appropriate, by notice in the Service.
13. Contact
Streamline Direct — support@lovekey.com.au