Retirement notes · Plain language
What is collected when somebody leaves a retirement note, how moderation works, what may become public, and how a guest can ask the family to correct or remove it.
Last updated 13 August 2026
The family administrator for A Life Above decides how retirement notes are collected, reviewed, displayed, corrected, and removed.
For access, correction, or removal requests, email privacy@life-above.com. This public alias forwards privately without exposing the owner's personal address.
The form collects a displayed name, an optional relationship such as friend or colleague, the retirement note, and a record that the guest agreed to this notice and when.
The form does not ask for an email address, telephone number, account, or precise location. Guests should not include private operational, health, financial, or contact information in a note.
An AI-assisted language check looks for foul, profane, vulgar, or obscene wording. A clearly safe note may appear immediately. If a note is flagged, the check is uncertain or unavailable, or the daily cost limit has been reached, the note stays private until the family reviews it. This can mean that it takes a little longer to appear.
The family can approve, reject, return, pin, correct, or remove a note. This includes manually approving an AI-flagged note when the language is harmless in context or the automated check made a mistake. The automated result does not create a legal or similarly significant decision about the guest.
Only an approved displayed name, relationship, message, and message date are returned by the public website. Moderation scores, internal reasons, reviewer identity, and blocked notes remain in the private family workspace.
A guest can withdraw permission or ask for access, correction, or removal. The family will verify enough information to identify the correct message before acting on a request.
The message system keeps a one-way connection marker and an hourly attempt count to limit repeated submissions. The raw IP address is not saved with the retirement message. Normal internet services still process the network information needed to deliver and protect the form.
Approved messages remain while the tribute is active, subject to a yearly family review and removal on a verified request. Pending and flagged notes are deleted after 90 days; rejected notes are deleted 30 days after the family decision. Short-lived connection controls are cleared after 24 hours.
Guests may also contact Portugal's data-protection authority, the CNPD ↗, about their data-protection rights.