Privacy Policy

Jar Date Insights

Effective date: 2026-09-15

This policy explains how this application handles information and how to contact us about privacy.

Information we process

Your private notes, quotations, person names and full meeting details are stored locally. When online insights are enabled, the app sends an installation identifier, jar identifiers, topic/tag counts and meeting aggregates to the backend. The aggregate API does not accept the private note text or person names as its insight payload. An installation-secret hash and operational request information support access control and service operation.

How we use information

The server computes deterministic reflections and relationships from the aggregates you submit and supplies weekly challenges. It does not send note text to a generative AI provider. Local content supports your personal journal, search, reminders and voice-entry features.

Service providers and sharing

The backend is hosted on Railway. Railway provides the hosting, networking and storage needed to operate the service and may process technical request information such as IP addresses, timestamps and connection details. The app does not include advertising or third-party analytics SDKs. Personal app content is not sold or used for targeted advertising. Information may also be disclosed when required by law or when necessary to protect users and the service. Hosting may process information outside your country.

Data retention

Local entries remain until you remove them. Submitted aggregates remain associated with your installation until remotely deleted; the backend limits retained aggregate records to the latest 1,000 per installation. Turning off future insight requests does not itself guarantee deletion of previously submitted aggregates. Operational logs and any infrastructure backups may remain separately until their normal rotation or expiry.

Deleting your information

In the privacy settings, use the server-data deletion control to remove the installation’s backend aggregates. Delete all local data to reset the device; the app also queues remote deletion for that action. Keep connectivity available until remote deletion is confirmed. Deleting one local note or uninstalling the app is not the same as requesting deletion of every server aggregate.

Permissions and your choices

Voice entry uses the microphone and Apple speech-recognition permission when you choose to dictate. The app requires on-device speech recognition and does not send dictation audio to its backend. Voice entry is unavailable when on-device recognition is unsupported; typed entry remains available without these permissions. Notification permission is optional for local reminders. Revoke access in iOS Settings and turn off online insights in the app to stop further insight submissions.

Your privacy rights

Depending on applicable law, you may request access, correction or deletion of your information, restrict or object to processing, or withdraw consent where processing relies on consent. Use the in-app controls where available, or contact the owner at the email below. We may need information sufficient to identify your installation and verify the request. Never send your device credential, recovery key or other secret by email. You may also complain to your local data protection authority.

Security

Connections to the hosted service use HTTPS. Private operations use installation-scoped credentials, and server credentials are not embedded in the app. Keep your device and any recovery credentials secure. No method of transmission or storage can guarantee absolute security. Losing an installation credential may make its remote data inaccessible; contact the owner if you need help with a privacy request.

Children’s privacy

The application does not ask you to provide an age or date of birth for a user account. Parents and guardians should supervise use by children and the information they enter or share. Do not provide personal information about a child unless you are entitled to do so. A parent or guardian who believes a child has provided information improperly can contact the owner to request review and deletion.

Changes to this policy

This policy may be updated when the application or its data processing changes. The effective date at the top identifies the current version. The current policy remains available at this address; material changes will be described in an updated policy.