Information We Collect

• Account information. When you sign in with Apple or Google, we receive your name and email address (or Apple's private relay address if you choose to hide your email). When you sign in with a one-time code sent by email, we receive your email address. This is stored in our authentication system (Supabase) to identify your account.
• Saved content. Your links and folders are stored on our cloud servers (Supabase) so they sync across your devices and between the iOS app and Chrome extension. This includes URLs, page titles, descriptions, preview images, and folder names you create.
• Usage & analytics data. We use Mixpanel (EU servers) to record how Jotta is used (e.g., app opens, links saved, folders created) to help us improve it. This applies to both the iOS app and the Chrome extension. In the Chrome extension, Mixpanel receives your user ID, name, and email address alongside usage events, and the website (for example, example.com) each saved link comes from. In the iOS app, events are recorded against a random identifier created on your device, and the event sent when you open the app also includes your user ID. From version 1.2, the iOS app does not send the links you save or the names of your folders. Earlier versions sent the address of each saved link and the name of each folder. You can disable analytics in the iOS app's Profile tab. That setting does not apply to the Chrome extension.
• Support messages. If you contact us via the support form on our website, we receive your email address and the content of your message through our website host (Netlify). If you send feedback from inside the iOS app, we receive your message, your email address if you provide it, your user ID, and your app version, also through Netlify. Versions of the app before 1.2 send feedback through a separate form provider (Formspree).

How We Use Information

• Provide and sync your saved links and folders across devices and platforms.
• Operate, maintain, and improve app and extension performance and features.
• Understand feature usage and prioritise improvements.
• Respond to support requests and communicate with you.
• Protect against abuse, troubleshoot, and ensure reliability.

Legal Bases (EEA/UK)

Where applicable:

• Account & saved content data is processed as necessary to perform the contract of providing the Jotta service to you.
• Analytics data is processed based on our legitimate interests in improving the app.
• Support communications are processed as necessary to perform a contract (providing support) or with your consent when you submit the form.

Sharing & Service Providers

• Supabase (cloud storage & authentication): stores your account information and saved links/folders on servers in the EU. Supabase Privacy Policy.
• Mixpanel (analytics): receives usage event data and account identifiers to provide analytics services. Data is stored on EU servers. Mixpanel Privacy Policy.
• Netlify (website, support & feedback): hosts our website and processes messages you submit via the support form or the feedback screen in the iOS app. Netlify Privacy Policy.
• Formspree (feedback from older app versions): processes feedback sent from versions of the iOS app before 1.2.
• We do not sell your personal information. We share data only with these providers to operate Jotta.

Data Retention

• Account & saved content: retained until you delete your account. You can delete your account at any time from the Profile tab in the iOS app, which permanently removes all your data from our servers.
• Analytics data: retained for as long as needed for app improvement, then deleted or aggregated.
• Support messages: kept as long as necessary to address your request, unless you ask us to delete them sooner.

Your Choices

• Delete your account: Open Jotta → Profile → Delete Account. This permanently deletes all your links, folders, and account data from our servers immediately.
• Analytics opt-out: Open Jotta → Profile → toggle off Analytics. You can also contact us to request deletion of any analytics data linked to your account.
• Support messages: Contact us to request deletion of previous support conversations.

Your Rights

Depending on your location, you may have rights to access, correct, delete, or port your data, and to object to or restrict certain processing. To exercise these rights, use the in-app account deletion option or contact us via the support form.

Children

Jotta is not directed to children under 13 (or the minimum age required by your jurisdiction). We do not knowingly collect personal information from children.

Data Transfers

Your account, saved content, and analytics data are stored and processed in the EU (Supabase EU region, Mixpanel EU servers). If you are located outside the EU, your data is transferred to the EU to provide the service. Support and feedback messages are handled by Netlify and Formspree, which are based in the United States, so these messages may be processed there.

Security

We use reasonable administrative, technical, and physical safeguards to protect your information, including encrypted connections (HTTPS) and row-level access controls so only you can access your own data. However, no method of transmission or storage is completely secure.

Contact

If you have questions or requests about this Policy, please reach out via the contact form on our Support page.

Changes to This Policy

We may update this Policy from time to time. We will change the "Last updated" date above when we do.