Privacy policy

Last updated: 6 November 2026

Draft. This page describes the app as it works today and is still being checked by a lawyer before the public launch.

In short

You can use Jæja without an account. Then your progress is stored only on your device and we never receive it.
If you choose to save your progress, we store your e-mail address and your learning progress on our server so you can use it on other devices. Our servers are in the EU.
You can export or delete your account and all its data yourself, in the app under Me → Account. Deletion is immediate.
No ads, no tracking across apps or websites, no selling of data, no analytics and no microphone access in the app today.

Who is responsible

The controller responsible for your personal data is:

[Company legal name, address — to confirm]
E-mail: support@jaeja.io

Write to the address above about anything in this policy.

What stays on your device

The app works offline: lessons, stories and their audio are included in the app. While you learn, the app keeps on your device (in the app's own database on iOS and Android, in the browser's storage for the web app):

Your learning history — each answer you give in an exercise (what you chose or typed, whether it was right, how long it took, whether you used a hint), lessons and stories you finished, words you saved, and your review schedule.
Learning settings — daily goal, streak style, review strength, how strictly accents are checked, and the reasons for learning you picked in the introduction (for example work, citizenship or travel).
Device settings — appearance, sounds, vibration, reminder on/off and time, and the "can't listen / can't speak now" pauses.
Your time zone, so a learning day ends at midnight where you are.
A random device ID, created when the app is installed. It is not your phone's advertising ID or serial number; it only tells your own devices apart when you sync.

Reminders are local notifications: your phone schedules them itself (at most one a day, at the time you choose). The app asks for permission only when you turn them on, and no push service or server of ours is involved.

This data stays on your device until you delete the app or clear the browser's data for the web app. We cannot see it or recover it.

If you save your progress (account and sync)

Save your progress and Sync now (under Me → Account) are optional. They are being introduced step by step; where your version of the app says "Online accounts are not available in this version yet", nothing described in this section applies to you.

When you use them, our server stores:

Account details — your e-mail address (none if you only back up as a guest), an internal account ID, when the account was created, and default settings (interface language, time zone).
Your learning history and learning settings as listed above, so each of your devices can rebuild the same progress. Device settings, such as your reminder time, stay on the device.
Sign-in sessions — for each device you are signed in on: when the session started and expires, the IP address it was started from and the device/browser type (user agent). The app keeps its session key in the iOS Keychain or Android Keystore, or in the browser's storage on the web.

Sign-in e-mails. To sign in, you get a one-time link by e-mail. It works once and expires after 5 minutes; we store only a scrambled (hashed) version of it. The e-mail is sent by our e-mail provider (see processors). We send no other e-mails: no newsletters and no marketing.

A guest who taps Sync now without an e-mail address gets a guest account identified only by its random ID. If you later save your progress with your e-mail, the guest's history moves into that account.

App updates

When the app starts, it checks whether a newer version of its code and content is available and downloads it. These checks go to Expo (650 Industries, Inc., USA), the service we use to publish updates. The request contains technical data: the app's version and update channel, your platform (iOS or Android), a random ID for the installation that Expo uses to count devices, and your IP address, as with any internet request. It contains no learning data and nothing that names you. [Expo data processing agreement and transfer safeguards — to confirm]

This website

This website (jaeja.io) sets no cookies and uses no analytics, trackers or third-party fonts. Like any web server, ours sees your IP address and browser type when you visit. [whether the server keeps access logs, and for how long — to confirm]

The web app (app.jaeja.io) stores your progress in your browser as described above. This storage is needed for the app to work and is not used to track you.

What we do not do

We show no ads and do not track you across other companies' apps or websites.
We do not sell or rent your data, or share it for advertising.
The app has no analytics or crash-reporting service today, and no access to your microphone, camera, contacts, photos or location.
We do not use your data to make automated decisions that affect you legally.

Apple (App Store, TestFlight) and Google (Google Play) handle downloads, store accounts and — if you choose to send them — crash reports and beta feedback under their own privacy policies.

Purposes and legal bases

What for	Data	Legal basis (GDPR)
Your account, backup and sync between your devices; export and deletion	E-mail, account ID, learning history and settings	Performing our contract with you (Art. 6(1)(b))
Sending you sign-in links	E-mail address	Contract (Art. 6(1)(b))
Keeping accounts secure and spotting misuse	Sign-in sessions: IP address, device type, times	Our legitimate interest in a secure service (Art. 6(1)(f))
Delivering fixes and new content quickly	Update checks (technical data, IP address)	Legitimate interest (Art. 6(1)(f))
Answering your messages	Your e-mail and what you write to us	Contract, or our legitimate interest in helping you (Art. 6(1)(b), (f))
Meeting legal obligations (for example bookkeeping, once payments exist)	What the law requires	Legal obligation (Art. 6(1)(c))

What stays on your device (including reminders) is not sent to us, so we do not process it. Where you have a right to object to processing based on legitimate interest, write to us.

Who processes data for us

These companies process data on our behalf, under contracts that oblige them to protect it and to use it only for us:

Service	Provider	Data	Status
Server and database (accounts, sync); this website	[hosting provider and EU country — to confirm]	Everything listed under "account" above; website requests	Website live; accounts being introduced
Sign-in e-mails	[Brevo (France) or another EU provider — to confirm]	Your e-mail address and the sign-in link	With accounts
App updates	Expo (650 Industries, Inc., USA)	Technical data of update checks, IP address	Live

Where your data is stored

Our server and database are in the European Union [data centre provider and country — to confirm]. Where a provider is outside the EU/EEA (today: Expo, for update checks), the transfer is covered by the EU–US Data Privacy Framework or the European Commission's standard contractual clauses. [which mechanism applies to Expo — to confirm]

How long we keep data

Data	How long
Progress and settings on your device	Until you delete the app, clear the browser's data, or delete your account
Account, learning history and settings on our server	As long as the account exists; deleted immediately when you delete it. [period after which inactive accounts and guest backups are deleted — to confirm]
Sign-in sessions (IP address, device type)	Until the session ends — it expires one year after you last used the app on that device — or the account is deleted. [when expired sessions are purged — to confirm]
Sign-in links	Valid for 5 minutes, used once; unused ones are removed when the account is deleted
Backups of the database	[backup retention window — to confirm] — a deleted account disappears from backups when they expire
E-mails you send us	As long as needed to help you [maximum period — to confirm]

Your rights: export, delete and more

Under the GDPR you have the right to:

access your data and receive a copy (portability) — in the app: Me → Account → Export my data gives you everything stored about your account as a JSON file;
erasure — in the app: Me → Account → Delete my account deletes your account and all its data on our server at once, and then wipes the app on that device;
rectification of wrong data, restriction of processing, and to object to processing based on legitimate interest;
withdraw consent at any time where we ask for it (for example notification permission, in your phone's settings);
complain to a data protection authority, in particular in the EU country where you live or work. [our lead supervisory authority — to confirm]

Without the app, or for anything else, write to support@jaeja.io from the e-mail address of your account. We answer within one month. See also how to delete your account.

If you never saved your progress, we hold nothing about you: deleting the app (or clearing the browser's data) removes everything.

Security

All connections between the app and our server use HTTPS.
There are no passwords to leak: you sign in with one-time links, which we store only in hashed form.
On phones the session key sits in the system's secure storage (iOS Keychain, Android Keystore).
Deleting your account is a real deletion, not a hidden flag.

Children

Jæja is meant for adults and is not directed at children under 16. We do not knowingly collect data from children under 16. If you believe a child has created an account, write to support@jaeja.io and we will delete it.

Planned features

These features are not in the app yet. When one arrives, we will update this policy before it goes live, and ask for your consent where the law requires it.