Privacy Policy

This Privacy Policy explains what personal data JiPro processes, why, on what legal basis, who receives it, how long it is kept, and how you can exercise your rights. It applies to the JiPro apps for iOS and Android, the website jipro.app and related services (together, the "Service"). It is written to meet the transparency requirements of Articles 12 to 14 of the EU General Data Protection Regulation (GDPR).

1. Controller and contact

The controller is Enerik Bishani, an individual developer established in Belgium who operates JiPro ("JiPro", "we", "us"). Privacy contact: privacy@jipro.app. General support: support@jipro.app.

When the company that will operate JiPro is registered, it will become the controller. We will update this section and inform you in advance (section 16). We are not required to appoint a Data Protection Officer; all privacy matters are handled at privacy@jipro.app.

2. In short

• We collect what is needed to run the features you use, and nothing for advertising. We do not sell your data and do not use advertising or cross-app tracking tools.
• New accounts are private by default: only people you approve can follow you and see your shared content.
• Your data is stored in the EU (Germany). Some providers outside the EU receive limited data, under the safeguards in section 9.
• You can export your data and delete your account at any time from Settings.

3. The data we process

3.1 Data you provide

• Account: email address; password (stored by our authentication provider only as a secure hash). If you use Sign in with Apple or Google: the account identifier and the email address the provider shares (Apple may share a private relay address). We never receive your Apple or Google password. Providing an email address is necessary to create an account; without it we cannot provide the Service.
• Profile: display name, profile photo, and whether your account is private or public.
• Trips: destinations, dates, flight times, airports, stops and flight numbers, day plans, stays and places, quick plans, packing lists, proposals and votes.
• Expense records: expenses, split bills, shares, settlements, payment requests and claims, and receipt photos you attach. JiPro does not process payments and never asks for bank or card details.
• Booking scans: screenshots or text of flight or accommodation bookings you choose to scan (section 5).
• Shared content: photos and videos in stories, highlights, trip photos and passport photos, captions, comments on trip legs, direct messages, trip group chat messages, poll votes and likes.
• Safety reports: reports you submit about messages or users, with the reason and details you give.
• Correspondence: emails you send us.

3.2 Data generated when you use the Service

• Location (foreground): with your permission, your device location is used while the app is open to show you on the map, measure distances and suggest places nearby, and to check whether you are in the country of a trip in progress. This location is used on your device and sent to map providers to render maps; it is not stored in your account and is not shown to other users.
• Location (background, Travel Tracker): the app contains a Travel Tracker feature that can record your route in the background during a trip. It is currently not available in the app and no background location is collected. If we make it available, it will be off by default, you will have to switch it on for a specific trip after an explanation, the recorded route will be visible to that trip's members, and we will update this Policy before launching it.
• Photo location and date: when you add a photo or video, the app may read its embedded date and location (EXIF) to place it on your trip. That location is stored with the photo and shown to the people who can see the photo. For passport auto-detect, the app reads the locations of photos in your library on your device only to find countries you have visited; those photos and their locations are not uploaded.
• Social activity: follows and follow requests, trip memberships and invitations, story views and likes.
• Technical data: push-notification token, app version, operating system, device model, language and IP address (processed by our infrastructure providers when your device connects).
• Diagnostics: crash reports and error logs with technical context and your account identifier, and performance measurements (how long screens and requests take) for a sample of sessions. Diagnostics are configured not to collect your email address or IP address.

3.3 Data kept on your device

• To work offline and load quickly, the app keeps copies of your trips, packing lists, expenses, settings and the results of passport auto-detect on your device. When you sign out, most of this is removed from the device; your packing lists and your passport auto-detect results are kept on the device for when you sign in again. Uninstalling the app removes all of it.

3.4 Data from others

• Other users may invite you to a trip, add you to a split bill, message you, report you or share content that shows you.
• Apple or Google, if you sign in with them.

4. Purposes and legal bases

• Providing the Service (account, trips, maps, plans, expenses, packing, passport and stamps, sharing, messaging, invitations, reminders and notifications you enable): performance of a contract, Art. 6(1)(b) GDPR.
• Device permissions (location, camera, photo library, notifications): the access itself relies on your consent through your device's permission prompts, Art. 6(1)(a) GDPR, and on Art. 5(3) of the ePrivacy Directive as implemented in Belgium; the data obtained is then used to perform the contract. You can withdraw consent at any time in your device settings; this does not affect earlier processing.
• AI-assisted booking import: performance of a contract (you ask us to read your booking), Art. 6(1)(b).
• Safety, moderation, abuse and fraud prevention, rate limiting, including handling reports, blocking and suspensions: our legitimate interest in a safe service, Art. 6(1)(f), and our obligations under the EU Digital Services Act, Art. 6(1)(c).
• Crash reporting and fixing errors: legitimate interest in a reliable service, Art. 6(1)(f).
• Service communications (email confirmation, password reset, important changes): contract and legitimate interest.
• Legal compliance and legal claims: legal obligation, Art. 6(1)(c), and legitimate interest in establishing, exercising or defending claims, Art. 6(1)(f).

Where we rely on legitimate interests, you have the right to object (section 11). We do not carry out automated decision-making, including profiling, that produces legal or similarly significant effects (Art. 22 GDPR).

5. AI-assisted booking import

When you scan a flight or accommodation booking, the image or text you submit is sent through our own server (hosted by Cloudflare) to Google's Gemini API, solely to extract trip details: airports, flight numbers, dates and times, or a stay's name, address and dates. We do not send your name, email address or account identifier with it, and we do not store the submitted image or text on our servers; only the details you confirm are saved to your trip.

Google processes the content under its Gemini API terms. Google retains API content for a limited period for abuse monitoring, and when the API is used without a paid plan, Google's terms allow it to use the content to improve its products, which may include human review. Please do not submit documents you do not want processed in this way, such as passport scans, and crop out unnecessary personal details where you can.

6. Sharing within JiPro: who can see what

• Trip members see the trip, its plan, members, group chat, polls, split bills, receipts and trip photos.
• Message recipients see the messages you send them.
• Followers (approved followers if your account is private; anyone if it is public) can see your profile, stories for 24 hours, highlights you pin, trips you mark as visible to followers, and your passport stamps if you switch "Public stamps" on.
• Anyone using the app can find you in search by your display name, or by your email address if they type it exactly; they then see your display name and profile photo. Your email address is never shown or sent to other users. Accounts scheduled for deletion do not appear (section 8).

People who can see your content can take screenshots or otherwise copy it; we cannot control that.

7. Recipients: our service providers

We use the following providers. Where they act as our processors, they process data only on our instructions under data processing terms (Art. 28 GDPR).

• Supabase: authentication, database, file storage and server functions. Data hosted in the EU (Frankfurt, Germany).
• Sentry: crash and error reporting. EU (Germany) data region.
• Cloudflare: our server for AI import and place search, website hosting, and forwarding of emails sent to our @jipro.app addresses.
• Google: Gemini API for booking import (section 5); Google Sign-In if you choose it.
• Apple: Sign in with Apple if you choose it; Apple Push Notification service (notifications on iPhone).
• Google Firebase Cloud Messaging: delivery of notifications on Android devices.
• Expo (650 Industries): delivery of push notifications (receives your push token and the notification text).
• Mapbox: maps, geocoding and directions. Receives the map area, coordinates and searches needed to render maps and may collect technical usage data under its own policy.
• Foursquare: place search and recommendations, queried through our server (receives the search and the area, not your account).
• Public data services: OpenStreetMap Nominatim and GeoNames (place and city search), Wikipedia/Wikimedia (destination photos), flagcdn (country flags) and open.er-api.com (exchange rates). They receive the search term or destination being looked up and your device's IP address, but no account data.

We may also disclose data to authorities when legally required, to protect the rights and safety of users or others, or in connection with legal claims, and to a successor (such as the company that will operate JiPro) under this Policy.

When you open an external app or link, such as Apple Maps, Google Maps or Waze for directions, that provider's privacy policy applies.

8. How long we keep data

• Account data and your content: while your account exists, unless you delete individual items earlier.
• Requesting deletion: in Settings → Delete account. You are signed out on that device and your account is scheduled for deletion.
• During the next 30 days: your account is hidden: other users cannot find you in search, see your profile, stories or highlights, find you in follower lists, or start following you. Trips, group chats, split bills and direct-message conversations you already share with others stay visible to their members until the final deletion, so their records keep working. Your data is kept unchanged so you can come back.
• Restoring: if you sign in during the 30 days, JiPro shows the date your account will be deleted and asks whether you want to restore it. Choosing "Restore my account" cancels the deletion and makes your account visible again; choosing to keep the deletion signs you out. Signing in alone does not cancel the deletion.
• After 30 days: an automated process that runs every day permanently deletes your account and, with it: your profile and profile photo; trips you own, for all their members, including their plans, group chats, photos and receipts; photos and videos you added to other people's trips, your stories, highlights and passport photos; every direct-message conversation you took part in, for both participants; messages you sent in trip group chats; your follows, likes, votes, invitations and trip memberships; and your settlements, payment requests and shares in split bills, so the balances of the trips concerned no longer include you. Split bills that you paid in other people's trips stay in those trips' records, without your name. If a step fails, the process retries it the next day.
• Deletion record: we keep a minimal record that deletion was requested and carried out (dates and any reason you typed), no longer linked to your account, to demonstrate that we honoured the request.
• Backups: deleted data can remain in backups held by our hosting provider only until those backups expire on their regular cycle. We do not restore deleted accounts from backups.
• Stories are visible for 24 hours and then kept in your private archive until you delete them or your account.
• Booking scans are not stored by us (section 5).
• Crash reports: up to 90 days.
• Safety reports: until the report is handled and while needed to protect users; reports are deleted when the reporting or the reported account is deleted.
• Support emails: while needed to handle your request and up to 2 years afterwards.

9. Transfers outside the European Economic Area

Your account and app data are stored in the EU. Some providers in section 7 (for example Google, Apple, Cloudflare, Expo, Mapbox and Foursquare) are based in or may access data from the United States or other countries. For such transfers we rely on the European Commission's adequacy decision for the EU–U.S. Data Privacy Framework where the provider is certified, or on the Commission's Standard Contractual Clauses (Art. 46 GDPR). You can request information about these safeguards at privacy@jipro.app.

10. Security and privacy by design

We use encryption in transit (TLS), encrypted storage of your login session on your device, row-level access rules in our database so that each user can only reach data they are allowed to see, server-side rate limits, and no advertising or analytics trackers. New accounts are private by default. If a personal data breach is likely to result in a risk to your rights, we will notify the competent authority and, where required, you (Art. 33 and 34 GDPR).

11. Your rights and how to use them

• Access and portability (Art. 15 and 20): Settings → Export my data creates a JSON file with your account email and all database records linked to your account (such as your profile, trips you own, trip memberships, expenses, messages you sent, follows and votes), plus download links for your photos that are valid for 7 days. Records that identify who reported or blocked you are left out to protect other people's rights (Art. 15(4)). For anything not included, email privacy@jipro.app.
• Rectification (Art. 16): edit your profile, trips and content in the app, or ask us.
• Erasure (Art. 17): Settings → Delete account (section 8), or delete individual items in the app.
• Restriction (Art. 18) and objection (Art. 21) to processing based on legitimate interests: email privacy@jipro.app.
• Withdrawing consent: in your device settings, at any time.
• Complaint: you can lodge a complaint with a supervisory authority, in particular in the EU country where you live, work or where an infringement took place. In Belgium: Data Protection Authority / Gegevensbeschermingsautoriteit / Autorité de protection des données, Drukpersstraat 35 / Rue de la Presse 35, 1000 Brussels, dataprotectionauthority.be.

We answer requests without undue delay and within one month; for complex or numerous requests this can be extended by two further months, in which case we tell you why within the first month. Requests are free, unless they are manifestly unfounded or excessive. We may ask for information to confirm your identity.

12. Children

The Service is not intended for children. You must be at least 16 years old to create an account, and if you are under 18 you need the permission of a parent or legal guardian (Terms of Service, section 3). We do not knowingly process data of children under 16; if you believe a child has created an account, contact privacy@jipro.app and we will delete it.

13. Device permissions

The app asks for each permission only when a feature needs it: location (map, distances, nearby suggestions), camera (photos and videos for your trip, photographing a booking), microphone (sound when you record a video), photo library (adding photos, scanning bookings, passport auto-detect) and notifications (messages, invitations, trip and packing reminders). You can change them at any time in your device settings; the related features then stop working.

14. Our website

jipro.app uses no cookies, analytics or trackers and loads no third-party resources: fonts and images are served from jipro.app itself. Cloudflare, our hosting provider, processes technical data such as your IP address to deliver the site securely.

15. Users outside the EU

We do not sell or share personal information for cross-context behavioural advertising as those terms are defined in U.S. state privacy laws, and we will not discriminate against you for exercising your privacy rights.

16. Changes to this Policy

We will publish any change here with a new version number and date. For significant changes we will inform you in the app or by email before they take effect. Previous versions are available on request.

17. Contact

Privacy: privacy@jipro.app · Support: support@jipro.app