Privacy Policy

1. Introduction

JarUp ("we," "us,") respects your privacy. This policy explains how we collect, use, and protect your data. We comply with applicable privacy laws including GDPR (EU) and CCPA (California).

2. Data We Collect

• Account data: email, password (hashed), display name
• Usage data: goals, challenges, check-ins, progress
• Analytics: page views, events (via PostHog, when you consent)
• Payments: processed by Stripe; we do not store card numbers

3. How We Use Your Data

We use your data to provide the Service, improve our product, send transactional emails, and (with consent) analyze usage. We do not sell your data to third parties.

4. Cookies and Tracking

We use cookies and similar technologies for authentication, preferences, and (with consent) analytics. You can manage cookie preferences via our cookie banner.

5. Your Rights (GDPR / CCPA)

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data (via account deletion)
• Export your data (data export feature, when available)
• Opt out of analytics/tracking
• Withdraw consent at any time

To exercise these rights, use the in-app options or contact us. We will respond within 30 days.

6. Data Retention

We retain your data while your account is active. After account deletion, we remove your data within 30 days, except where we must retain it for legal or operational purposes.

7. Third-Party Services

We use Supabase (database/auth), Stripe (payments), and PostHog (analytics). Each has its own privacy policy. We recommend reviewing them.

8. Contact

For privacy requests or questions, contact us at the email provided in the app.