Privacy

RH IQ is created and supplied by Matt Laframboise, in Ontario, Canada. That is the person accountable for the information described here, and the person who answers when you write.

Contact: matt@theraspberry.ca

No company is registered for this business yet. When one is, this page names it and the change is dated here rather than made quietly.

Almost nothing, and it is worth being specific rather than reassuring. This site does not:

• set cookies of any kind, including “essential” ones;
• run analytics of ours — no Google Analytics, no Plausible, no Fathom;
• have accounts, sign-in or passwords;
• have a database or any server-side store;
• use tracking pixels, advertising tags or social embeds;
• write anything to your browser’s local storage;
• load fonts from anyone else — the typefaces are compiled into the site and served from this domain, so your browser never contacts a font provider.

There is no cookie banner on this site because there is nothing of ours to consent to. A banner would be theatre.

This site is hosted on GoDaddy shared hosting, and GoDaddy inserts its own traffic script into the HTML on the way out. It is not in our source, it is not something we configured, and it is not removable from our side. Your browser therefore contacts img1.wsimg.com when you load this page.

We do not receive that data, do not have a dashboard for it and do not use it. But you asked a browser for our page and it also talked to someone else, and you are entitled to know that from us rather than from your developer tools. What GoDaddy does with it is governed by GoDaddy’s own privacy policy, not this one.

We asked GoDaddy to turn it off. It cannot be turned off on this hosting, so this section stays, because the alternative is a privacy page that is wrong in the one direction that matters.

The RH IQ product is served from the same host, and GoDaddy inserts the same script into it. There, your browser refuses it. The product carries a security policy that lets your browser load code only from the product’s own address, so the script is blocked before it loads and never runs beside your records. One line of GoDaddy’s set-up code still runs. It holds the host’s server details and sends nothing.

Web hosts keep request logs. Those typically record your IP address, the page requested, the time, and your browser’s user-agent string. That is standard for any website and it is not something we switch off or read routinely — but it is real, and a privacy statement claiming “we collect nothing at all” would be false.

We do not combine those logs with anything else, do not use them to build a profile of you, and do not share them.

The form on the home page does not submit to us over the internet. It assembles what you typed into a message and opens your own email program with it ready to send. Nothing leaves your machine until you press send in your own mail client, and if you close it instead, we never see anything.

When you do send it, we receive an ordinary email — your name, your organisation, your email address and whatever you wrote. We use it to answer you and keep it in the mailbox as any business keeps correspondence. Ask us to delete it and we will.

• Sell, rent or trade personal information. There is no version of this business that involves that.
• Send marketing email to someone who did not ask us to.
• Pass your details to a third party, because there are no third parties in this arrangement.

The product is not a website. It is a folder of files that runs entirely inside your browser: a web host delivers the files, and nothing on any server receives or stores what you do in it. Everything it records (your progress, your notes, your completed modules, your certificate) is written to that browser’s local storage on that machine. It is never transmitted, because there is nowhere for it to go. And no code from another host runs beside it: the product’s security policy tells your browser to refuse it, wherever the product is installed. We hold no copy and could not produce one if you asked.

Three consequences follow, and they are the practical ones: each browser is a separate installation, so progress on one machine is not visible on another; clearing site data destroys it, and there is no copy anywhere else; and this build has no backup or restore feature, so an upgrade is one-way.

Two tools capture information about people other than the user. The Investigation Planner records the nature and date of an allegation, who reported it, witness names and roles, evidence notes, the respondent’s account, findings and recommendations. The Case File Generator records a subject’s name, position, site and employee ID. In a retirement-home context a record of that shape is very often a report-of-harm matter under s. 75 of the Retirement Homes Act, 2010.

That information is stored unencrypted, in the browser. On a shared workstation or a kiosk, a staff member who opens the tool can read what the previous person entered. It is held separately from learner progress and is cleared when the user signs out. Advise staff to sign out on shared machines; that is what clears it.

Because it never reaches us, we are not the custodian of it — the residence is. Anything you enter into those tools is your record to retain, disclose and dispose of under your own obligations.

This build ships with three built-in accounts, one of which is an administrator, and their passwords are constants in the shipped JavaScript. Anyone who reads the source can sign in. There is no first-run setup and no self-registration.

That is a demonstration arrangement, not a deployment one. Before RH IQ holds real information about real people, create real accounts and take a deliberate decision about the built-in three. Accounts created through the admin screens are handled differently: their passwords are hashed with PBKDF2-SHA256, a per-password random salt and 100,000 iterations.

The operator decides who is enrolled and can see their staff’s progress within the product. We are not in that loop and receive nothing about it. Questions about what your employer can see are properly addressed to your employer.

Ontario and federal privacy law give you rights of access, correction and deletion over personal information an organisation holds about you. We honour those for the only thing we hold: email you have sent us.

For everything the product stores, the limit is structural rather than a matter of policy. We cannot show you your data, correct it or delete it, because we have never had it. It is on your machine, and you can do all three yourself by clearing the site’s data in your browser.

Changes are dated at the top. Material ones — a new category of information, a new recipient, a change to the host script in section 3 — will be described here rather than folded in quietly.

2 October 2026. The RH IQ product now refuses our host’s script (section 3), and section 7 says how. GoDaddy has told us the script cannot be turned off, so this website still runs it.

Write to matt@theraspberry.ca. If you are not satisfied with the answer, you can complain to the Office of the Privacy Commissioner of Canada, or to the Information and Privacy Commissioner of Ontario where provincial law applies.