Privacy Policy

Effective date: September 28, 2026

This Privacy Policy explains how Jaraza (“Jaraza,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you visit jaraza.com (the “Site”) or use any mobile application we publish on the Apple App Store or Google Play (each an “App,” and together with the Site, the “Services”). By using the Services, you agree to the practices described here.

Jaraza LLC is being formed as a limited liability company in the United States. Until its formation is complete, “Jaraza,” “we,” “us,” and “our” mean the business operating under the Jaraza name. Once formed, Jaraza LLC will assume this Privacy Policy and the commitments in it.

1. Summary

• We collect only the information needed to provide, support, and improve our Services.
• We do not sell or “share” your personal information (as those terms are defined under California law), and we do not use it for targeted advertising. We will update this policy before any advertising is ever introduced.
• This website uses no cookies, no analytics, and no third-party trackers.
• Each App’s App Store and Google Play listing describes the specific data that App collects.
• You can ask us to access, correct, or delete your data at any time by emailing privacy@jaraza.com.

2. Our website

The Site is a static website. It does not use cookies, local storage, analytics, advertising, embedded third-party content, web fonts, or tracking scripts, and it has no forms or user accounts.

The Site is hosted on Amazon Web Services (AWS) using Amazon S3 and Amazon CloudFront. Like most web servers, these services may automatically record standard request information in access logs, such as your IP address, the date and time of the request, the page requested, your browser’s user-agent string, and the referring page. We use this information only to operate, secure, and troubleshoot the Site, and we do not use it to identify or profile individual visitors. Where we enable such logs, we keep them for no longer than 90 days unless needed to investigate a security incident.

If you email us, we receive your email address and the contents of your message, which we use to respond to you. Our email is hosted by Google Workspace.

3. Information our apps collect

Our Apps are designed to collect as little personal information as possible. What an App collects depends on its features, and each App’s store listing (the App Store “App Privacy” section and the Google Play “Data safety” section) describes its specific practices. In general, an App may collect the following categories:

Information you provide

• Account information — if an App offers accounts, such as your name, email address, and sign-in credentials (or an identifier from “Sign in with Apple” or Google Sign-In).
• Content you create — data you enter or save in an App, so the App can store and sync it for you.
• Support communications — information you send when you contact us.

Information collected automatically

• Diagnostics — crash reports and performance data (for example, device model, OS version, App version, and error details) used to fix bugs.
• Usage data — limited, aggregated information about how App features are used, where an App’s store listing discloses it.
• Device identifiers — such as an app-specific identifier or push-notification token, where needed to provide a feature.

Purchases

In-app purchases and subscriptions are processed by Apple or Google. We do not receive your full payment card details. We may receive information needed to confirm a purchase, such as a transaction identifier, the product purchased, and subscription status.

Permissions

If an App requests access to device features such as the camera, photos, location, contacts, or notifications, it will ask your permission first and use that access only for the feature described. You can change permissions at any time in your device settings.

4. How we use information

We use information to:

• Provide, maintain, and improve the Services, including syncing your content and restoring purchases;
• Respond to support requests and communicate with you about the Services;
• Diagnose crashes and fix bugs;
• Protect the security and integrity of the Services and prevent fraud or abuse;
• Comply with legal obligations and enforce our Terms of Use.

We do not use your information for targeted advertising, and our Apps do not track you across apps or websites owned by other companies. If we ever decide to introduce advertising in any of the Services, we will update this Privacy Policy before doing so and, where required, ask for your permission first (for example, through Apple’s App Tracking Transparency prompt).

5. Third-party services and SDKs

Our Apps may use third-party services (“service providers”) to help operate them — for example, for cloud hosting and storage, crash reporting, authentication, or subscription management. These providers process information on our behalf, under contracts that limit their use of it to providing services to us.

The specific third-party software development kits (SDKs) and services used by each App are disclosed in that App’s store privacy details and, where relevant, in the App itself. Current service providers for the Site and our operations include:

• Amazon Web Services — website hosting and content delivery;
• Google Workspace — email;
• Apple and Google — app distribution, purchases, and (where enabled by you) platform services such as iCloud or Google sign-in.

6. How we share information

We do not sell or share personal information (as “sell” and “share” are defined under California law), and we do not use it for targeted or cross-context behavioral advertising. We disclose information only:

• With service providers who process it on our behalf, as described above;
• With Apple or Google as needed to process purchases and distribute our Apps;
• When required by law, subpoena, or other legal process, or to protect the rights, property, or safety of Jaraza, our users, or others;
• In connection with a merger, acquisition, or sale of assets, in which case this policy will continue to apply to your information;
• With your consent or at your direction.

7. Data retention

We keep personal information only as long as needed for the purposes described in this policy. In general:

• Account data and content are kept while your account is active and deleted within 30 days after you delete your account or ask us to delete it.
• Diagnostic data is kept for up to 90 days.
• Support emails are kept for up to 2 years so we can follow up on recurring issues, unless you ask us to delete them sooner.
• Website access logs, where enabled, are kept for up to 90 days.
• Transaction and legal records may be kept longer where required by law (for example, for tax or accounting purposes) or to resolve disputes.

Backups are overwritten on a rolling basis, so deleted data may persist in backups for a limited additional period before it is permanently removed.

8. Account and data deletion

You can delete your account and associated data at any time. Where an App offers accounts, you can delete your account from within the App. You can also request deletion by emailing privacy@jaraza.com. Full instructions, including what is deleted and what may be retained, are on our account and data deletion page.

9. Your privacy rights

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• Access — to know what personal information we hold about you and receive a copy;
• Correction — to correct inaccurate information;
• Deletion — to have your information deleted;
• Portability — to receive your information in a portable format;
• Objection and restriction — to object to or limit certain processing;
• Withdraw consent — where we rely on your consent, to withdraw it at any time;
• Opt out of the sale or sharing of personal information or of targeted advertising (we do none of these).

California residents

Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the “CCPA”), California residents have the right to know, delete, and correct personal information, and to opt out of its sale or sharing. We do not sell or share personal information as defined by the CCPA, and we do not use or disclose sensitive personal information for purposes that would give rise to a right to limit. We will not discriminate against you for exercising your rights. You may use an authorized agent to submit a request on your behalf.

Users in the EEA, UK, and Switzerland

Under the GDPR and similar laws, we process personal information on the following legal bases: to perform our contract with you (providing the Services), our legitimate interests (securing and improving the Services, responding to inquiries), compliance with legal obligations, and your consent where required. You have the rights listed above and the right to lodge a complaint with your local data protection authority.

How to exercise your rights

Email privacy@jaraza.com from the email address associated with your account, if any, and tell us which right you want to exercise and which App it relates to. We may need to verify your identity before responding. We will respond within 30 days, or within the time required by applicable law.

10. Children’s privacy

Our Services are not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect personal information from children under 13, consistent with the U.S. Children’s Online Privacy Protection Act (COPPA). If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete it promptly. If you believe a child has provided us with personal information, please contact privacy@jaraza.com.

If we ever publish an App designed for children, we will describe its specific practices in a separate notice and comply with COPPA, Apple’s Kids Category guidelines, and Google Play’s Families policies.

11. Security

We use reasonable administrative, technical, and physical safeguards to protect personal information, including encryption in transit (HTTPS/TLS), access controls, and least-privilege access for our systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we learn of a security incident affecting your personal information, we will notify you as required by law.

12. International users

We are based in the United States, and our service providers may process information in the United States and other countries. Where required, we use appropriate safeguards, such as standard contractual clauses, for international transfers of personal information.

13. Changes to this policy

We may update this Privacy Policy from time to time, and we will always update it before any advertising is introduced in the Services. When we do, we will change the effective date above and, if the changes are material, provide additional notice (for example, in the App or on this Site) before they take effect.

14. Contact us

If you have questions about this Privacy Policy or our privacy practices, contact us at: