Privacy Policy

• Account info — email and, if you sign up via Google or Apple, your name + profile photo.
• What you do in the app — plans you make, places you add, friends you invite, RSVPs, items you "love."
• Receipts you scan for bill splitting. The photo is sent to our AI provider for parsing, then discarded. We store the parsed items + amounts only.
• Approximate location, if you grant permission, so we can recommend places walking-distance from you. We don't track you in the background.
• Device + app diagnostics — crash logs, performance, what app version you're on. No fingerprinting.

• To run the app — saved plans, friend graph, receipt splits, notifications.
• To make the AI better — your reactions (loved, lock plan, swap suggestion) train the locals-joint ranking. Aggregated, never tied to your identity in any output we generate.
• To prevent abuse — spam detection, rate limiting.
• To talk to you when you ask us to — magic links, account emails, the occasional product update if you opt in.

Only the third-party services that make JumpOff work, and only the minimum they need:

• Anthropic — your messages to the AI and receipt photos for parsing. Their data policy applies to that processing.
• Supabase — stores your account, plans, activity. Hosted on AWS US.
• Ticketmaster, Yelp, Google Places — venue + event data flows from them to you. We send them no personal info.
• Apple / Google — only if you sign in via them; standard OAuth.

We never sell your data to advertisers. We don't have ads.

• Delete your account — email privacy@jumpoff.app from your account email and we'll wipe everything within 30 days.
• Export your data — same email, we'll send you a JSON dump.
• See what we have — your profile page shows your account + activity in plain text.
• Revoke camera / location / notifications — iOS Settings → JumpOff.
• EU / California residents — full GDPR/CCPA rights apply. Same email above.

• HTTPS everywhere. TLS to all backend services.
• Row-Level Security on every table — your data is only readable by you, your friends (where you've explicitly added them), or yourself.
• Magic-link auth + Apple/Google OAuth + password — never plaintext passwords on our side.
• No third-party tracking pixels, no Facebook SDK, no Google Analytics. Just functional cookies for the session.

JumpOff is not for users under 17. If we learn we've collected data from a minor, we delete it.

If we materially change this policy, we'll email you and post it in-app before the change takes effect.

Questions, requests, complaints: privacy@jumpoff.app.

JumpOff is operated by Justin Johnson, Atlanta, GA.