Report 2 HR is designed so that what you write stays with you. There is no account, advertising, analytics, tracking or crash reporting, and no AI service reads your records.
What is stored, and where
Incidents, shift records, reports and evidence files are stored only on your device. On Android they are encrypted with a key kept in the device’s secure keystore and excluded from cloud backups. In a web browser they are kept only in the open tab until you create a passphrase-protected vault; then they are stored encrypted in the browser’s storage.
Nothing, unless you choose “Send to HR online”, review exactly what will be sent, and authorize it. Online sending is not enabled in published versions of Report 2 HR yet; until it is, nothing leaves your device.
When online sending is enabled, the Report 2 HR server turns the report you reviewed into one email and a PDF and sends them from reports@notify.report2hr.com to the HR address you entered twice. It includes your name and the contact details you typed on the send screen only if you choose “With my name”; anonymous reports include none of your details. Evidence files (photos, recordings, documents) are never sent — the report only lists them. You do not need an account or an email address.
The server keeps no copy of your report text after the email is handed to the mail service. If sending has to be retried, an encrypted copy of the email waits on the server for at most 24 hours and is then erased. What remains is a short record of the sending — the reference number, the date, the HR address in encrypted form, the report title encrypted with a key only your access code can unlock, and the delivery status — so you can check the status or delete the record. Your device identifiers, purchase information and the rest of your journal are never sent. The server does not store your network address; it keeps short-lived, scrambled counters to prevent abuse. Network providers in between may keep their own connection logs. Once delivered, the email and PDF are under the control of the HR mailbox and your employer, not Report 2 HR. The hosting provider’s own backups may keep encrypted copies of server records until those backups expire; that period is set by the provider and is being confirmed.
Sending anonymously leaves your name out, but it cannot make you completely unidentifiable: the details of what happened may identify you to people who know the situation. Report 2 HR cannot protect you from retaliation. A report contains your own account and allegations; it is not a finding that anyone did anything wrong. Sending it to your employer through Report 2 HR is not a complaint to a government agency, does not start a legal claim, and does not meet any filing deadline.