Privacy Policy

Last updated: May 25, 2026

This Privacy Policy explains how Jaffaround (“Jaffaround”, “we”, “us”) collects, uses, and shares information when you use any of our products, including the JaffaPhoto iOS app. We aim to collect the minimum amount of personal data needed to operate the product you are using.

1. Information we collect

1.1 Account information

When you sign in with Apple, we receive the email address Apple chooses to share with us (which may be a private relay address) and a stable Apple-generated user identifier. We never see your Apple ID password.

1.2 Content you upload

When you use the JaffaPhoto Backup & Delete workflow, the photos you choose to back up — both the full-resolution original and a low-resolution preview — are uploaded to cloud storage that we operate. Each user’s uploads are stored in a per-user partition readable only by that user’s authenticated session.

Alongside each backup we store the metadata needed to restore the photo later (asset identifier, creation date, location coordinates if present, and album membership). We do not run face detection, classification, or any other machine-learning analysis on the photos you upload.

1.3 Usage records

We keep a count of how many free Backup & Delete runs and free Original-Retrieval runs your account has used, so we know when to present the paywall. We do not record which photos you reviewed, which you kept, or which you discarded.

1.4 Purchases

In-app purchases are processed by Apple. We use RevenueCat to validate and reconcile receipts. We receive the purchase identifier, transaction date, and entitlement status; we do not receive your payment method.

1.5 Support correspondence

If you contact us through the in-app support form or by email, we receive your message and the email address you choose to send it from.

2. Information we do not collect

We do not engage in cross-app or cross-site tracking, and we do not sell or rent personal information.

3. How we use information

4. Where data is stored

Account data, content uploads, and usage records are stored on Amazon Web Services in the us-east-2 region (Ohio, USA). If you are using JaffaPhoto from outside the United States, the data you upload will be transferred to and processed in the United States.

5. Service providers (subprocessors)

Each subprocessor receives only the information needed to perform its specific role.

6. Retention & deletion

Uploaded backups stay in storage until you delete them from within the app or request account deletion. Account deletion removes your Cognito identity, your UserQuota and CompletedWorkflow records, and the contents of your per-user storage partition. To request account deletion, email support@jaffaround.com from the address associated with your account.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal data we hold about you, and to object to or restrict certain processing. You can exercise these rights by emailing support@jaffaround.com.

8. Children

Our products are not directed to children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

9. Security

All data is encrypted in transit (TLS) and at rest. Access to backend resources is restricted to least-privilege roles. No system is perfectly secure; if we ever experience a breach that affects you, we will notify you in accordance with applicable law.

10. Changes to this policy

If we make material changes we will update the “Last updated” date above and, where appropriate, notify you in-app or by email.

11. Contact

Questions about this policy or our data practices — please email support@jaffaround.com.

Jaffaround · [Mailing address]