Privacy Policy

Jao ("we", "our", or "us") operates the Jao mobile application and the website getjao.com. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

Information We Collect

• Account information: email address, display name, username, and an optional profile photo.
• Location: your precise or approximate location while the app is open, used only to verify check-ins at places on bingo cards and hunts. We do not track you live and we do not collect location in the background.
• Photos: images you choose to take or pick from your library for your profile picture or check-ins. Camera and photo library access are optional and controlled by your device's permission settings.
• Purchases: when you buy a one-time unlock, Google Play processes the payment. We receive and store the order ID and purchase token so we can verify and restore your purchase. We never see or store your card details.
• Device identifiers: a device ID (Android ID on Android, identifier for vendor on iOS) used to limit free trial content to one claim per device.
• User content: bingo cards you create, photos and notes you attach to check-ins, and activity posts you share. You can report content and block users at any time.
• Usage data: feature usage, XP and progress, and events that help us understand how the app is used and improve it.
• Diagnostics: crash and error reports, device type, and OS version.
• Notifications: a push token if you allow notifications, used only for updates you opt into (such as the weekly digest).

Permissions We Ask For

We do not request background location, contacts, microphone access, or an advertising ID.

• Location (while using the app): to confirm you are at a place when you check in. You may grant approximate location instead; check-in accuracy is reduced accordingly. You can deny this and still browse the app.
• Notifications (optional): for digest and activity updates you opt into.
• Camera and photo library (optional): only when you add a profile photo or a photo to a check-in.

How We Use Your Information

• To provide core features: bingo cards, check-ins, hunts, leaderboards, follows, and the activity feed.
• To verify check-ins at physical locations.
• To process and restore one-time purchases.
• To send notifications you have opted into.
• To detect and prevent abuse, including fake check-ins and repeated trial claims.
• To diagnose crashes and improve the app.

Data Storage and Security

Your data is stored on Supabase infrastructure (AWS regions). We use industry-standard encryption in transit (TLS) and at rest. Passwords are hashed and never stored in plain text.

Service Providers

We do not sell your personal information. We share data only with providers that operate the service on our behalf:

We may also disclose information when required by law or to protect our rights and our users' safety.

• Supabase — hosting, database, and authentication.
• Google — Maps and Places for map display and place search, and Google Play Billing for purchases. Place searches and the related location queries are sent to Google.
• Expo — push notification delivery.
• Sentry — crash and error reporting.
• PostHog — optional product analytics.

Data Retention

We keep your account data, content, and purchase records for as long as your account exists. Deleting your account removes your profile, content, entitlements, and check-ins from our servers and clears account data stored on your device. Crash reports and usage analytics are retained without account identity where possible.

Your Rights and Account Deletion

• In-app: Settings → Danger zone → Delete account (you must confirm by typing DELETE).
• Web: https://getjao.com/delete — the same flow if you no longer have the app. You can also email privacy@getjao.com from the address on your account.
• Deletion is permanent.
• You can update your profile in Settings → Profile Settings, control who sees your activity in Settings → Privacy & Security, and manage notifications in Settings → Notifications.
• For data access, correction, or deletion requests under India's DPDP Act, the GDPR, or similar laws, contact privacy@getjao.com. We respond within 30 days.

Children's Privacy

Jao is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe a child under 13 has provided us information, contact privacy@getjao.com and we will remove it.

Changes

We may update this policy from time to time. Continued use of the app after changes constitutes acceptance of the updated policy. The current version is always at https://getjao.com/privacy.

Contact

For questions or data deletion requests: privacy@getjao.com