Privacy policy
Updated 25.10.2026
This is a translation of the Finnish privacy policy. If the versions differ, the Finnish version applies.
Controller
tukihaku.fi, business ID 2280106-0, no separate business premises (contact by email). Privacy matters: tuki@tukihaku.fi.
In brief
Most of your information never leaves your device. Your answers in the calculator and the personal details you write on the forms, such as your personal identity code and account number, are processed only in your browser. We do not store them on a server. The filled PDF is created on your device.
What information we process and why
| Information | Where | Purpose and legal basis |
|---|---|---|
| Answers in the calculator | Only in your device's browser storage | Showing the results. You can delete them by starting over or clearing your browser data. |
| Answers on the forms (unfinished application) | Only in your device's browser storage, for at most 14 days | You can stop filling in and continue later. Your personal identity code, account number and signature are not saved. You can delete the data at any time with the link "Delete my saved data from this device" on the front page. The data is not sent to us. |
| Personal identity code, account number and signature | Only in the browser while you use it | Filling in the form. These are not saved or sent to us. |
| Payment information | Stripe | Processing the payment (contract). Stripe acts as an independent controller for payments. We do not see your card details. We keep the information needed for bookkeeping (amount, time, receipt email) for the period required by the Finnish Accounting Act. |
| Text sent to AI: wording, answers to clarifying questions and questions about the form | Passed on to Anthropic, not stored by us | When you ask for AI help, AI can explain a question on the form, ask clarifying questions and put your answer into clear wording. AI receives the text you wrote, the form's question and its instructions, and the language you use the app in. The text may contain health information, so we ask for your explicit consent before the first time it is sent (Article 9(2)(a) of the EU General Data Protection Regulation). You can withdraw your consent with the link "Delete my saved data from this device" on the front page or by clearing your browser data. Consent is then asked again before the next submission. |
| Answers sent for the AI check | Passed on to Anthropic, not stored by us | When you ask for a check before downloading the form, the form's questions and your answers are sent to AI to look for contradictions and missing information. Names, personal identity codes, addresses, account numbers and children's details are not sent, and identified personal identity codes and account numbers are removed from the text. The answers may contain health information, so we ask for separate explicit consent for this (Article 9(2)(a) of the EU General Data Protection Regulation). The check is optional. |
| Decision help: the decision as an image or a PDF file | Passed on to Anthropic, not stored by us | When you use decision help, the decision you attach is sent to AI, which explains it and tells you what is worth checking. The decision contains your name, personal identity code, income details and possibly health information, so we ask for your explicit consent before it is sent (Article 9(2)(a) of the EU General Data Protection Regulation). The file is processed only to produce the answer and is not stored on your device or on our server. The comparison details you enter (housing costs, income, family size and a free-text note) are sent along, as is the calculator's estimate if you have used the calculator. |
| Anonymous feedback: the answers you choose and an optional wish for a missing form | Our server (Cloudflare) and our email (Domainhotelli) | Developing the service (legitimate interest). No name or contact details are attached to feedback unless you leave an email address for a reply (see the next row). Please do not write personal data in the text field. Kept for at most 12 months. |
| Reply address for feedback (optional email address) | Only the developer's email (Domainhotelli); not stored on the server | Replying to your feedback (legitimate interest). The address is not used for marketing or any other purpose. Deleted after replying, at the latest after 6 months. You can request deletion at any time at tuki@tukihaku.fi. |
| Number of completed calculations per day: only the count, language and version (web or app). No answers, IP address or identifier. | Our server (Cloudflare) | Developing the service (legitimate interest). Nobody can be identified from the count. |
| Technical logs | Cloudflare | Security and functioning of the service (legitimate interest). |
| Reminders: the browser's notification address, the time and text of the reminder | Our server (Cloudflare), until the last reminder has been sent, at most 3 years and 2 months | When you choose a reminder (e.g. about an unfinished application), we send it as a push notification (consent). Your answers are not stored. You can stop reminders on the front page or in your browser settings, and the data is then deleted. For a reminder that you add to your calendar, we store nothing. |
| Google Play purchase (app version) | Google Play; we receive only the purchase receipt identifier | Processing and verifying the payment (contract). Google acts as an independent controller for the payment. We do not see your payment details. |
| Organisation licence: organisation code and a random device identifier (hash) | Our server (Cloudflare), device identifier for at most 45 days | Verifying access and counting devices as agreed in the contract (contract). The identifier is not linked to a person or to answers; only the number of devices is reported to the organisation. |
Processors and data transfers
We use the following service providers: Cloudflare (server), Domainhotelli (email), Stripe (payments) and Anthropic (AI wording, checks and Decision Help). Some of them may process data outside the EU and the EEA, for example in the United States. Transfers are based on standard contractual clauses approved by the European Commission or on the EU–US Data Privacy Framework. Data processing agreements (DPA) are in place with the service providers as part of their terms of service. Anthropic retains material sent to the AI for no more than 30 days and does not use it to train its models.
Cookies
We do not use tracking or advertising cookies. Only the information needed for the service to work is stored in your browser: your answers, the details of an unfinished application (for at most 14 days), access to the paid service, AI consents and your language choice.
Your rights
You have the right to know what information about you is processed and to ask for it to be corrected or deleted. You can also object to the processing or ask for it to be restricted. Contact us at the address above. You can lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).
See also the terms of use.