1. Who is responsible
[CONTROLLER NAME — REPLACE BEFORE PUBLISHING], operating Jiak as an individual in the United Kingdom, is the controller responsible for the personal information described in this notice.
For privacy questions or requests, email privacy@jiak.app. For general help, email support@jiak.app.
2. What Jiak collects
Account and profile information
Authentication identifiers and details you provide when creating or managing an account, such as your email address, username, display name and chosen food avatar. Clerk provides authentication.
Your private diary content
Restaurant check-ins, mandatory 0.0–10.0 ratings, notes, dishes, cost and group-size details, meal type, visit date and time, collections, place labels and private Snapshots.
Photos and place information
Photos you choose to attach, plus the selected restaurant’s name, address, Google place identifier and coordinates. Photos are stored privately and delivered using short-lived signed links.
Location, camera and photo library
Jiak asks for foreground precise location only while you use the restaurant picker to find nearby places. It does not request background location. Device coordinates are not retained after the selected restaurant coordinates are copied to your check-in. Camera and photo-library access occur only when you choose to attach photos.
Analytics and diagnostics
PostHog receives an opaque Clerk user identifier and limited app-lifecycle events. It does not receive your email address or username, and screen and touch autocapture are disabled. Sentry receives error and technical diagnostic information needed to identify and fix faults; this may include device, app-version, network and event context.
Messages you send
If you contact Jiak, the message, your contact details and information needed to handle your request will be processed. Do not send passwords or unnecessary sensitive information.
3. Why Jiak uses information
| Purpose | Information | UK lawful basis |
|---|---|---|
| Provide and secure your account | Account, authentication and security information | Contract; legitimate interests in security and preventing misuse |
| Save and display your private diary | Check-ins, ratings, notes, photos, collections, labels and Snapshots | Contract |
| Find nearby restaurants when requested | Foreground device location and place search details | Steps you request to provide the service; your device permission and choice |
| Maintain and improve reliability | Limited lifecycle analytics and error diagnostics | Legitimate interests in understanding app operation, fixing errors and protecting the service |
| Answer requests and meet legal duties | Support, privacy and deletion correspondence | Legitimate interests; legal obligation where applicable |
Where processing relies on legitimate interests, Jiak considers the need for the processing against its effect on you. You may object as described under “Your rights”.
4. Services that help run Jiak
- Clerk — authentication and account identity.
- Supabase — application database and private photo storage.
- Railway — hosting for Jiak’s FastAPI backend.
- Google Places — restaurant and place search data.
- PostHog — limited lifecycle analytics linked to an opaque user identifier.
- Sentry — error monitoring and technical diagnostics.
These providers process information to supply their services under their own terms and data-processing arrangements. Jiak may also disclose information when required by law, to protect legal rights or in connection with a properly managed transfer of the service.
5. International transfers
Some service providers may process information outside the United Kingdom. Where UK personal information is transferred internationally, Jiak will use an applicable UK adequacy regulation or appropriate contractual and organisational safeguards required by UK data-protection law, depending on the provider and destination.
Production regions and provider transfer arrangements must be reviewed before this draft is published. You may contact privacy@jiak.app for information about the safeguards applying to a particular transfer.
6. How long information is kept
Jiak keeps account and diary information while your account remains open and it is needed to provide the service. Individual memories and photos remain until you delete them or delete your account.
After deletion, information is removed from active Jiak systems. Limited residual copies may remain temporarily where required by backup cycles, service-provider deletion processes, security needs, dispute handling or legal obligations. Those copies are protected and are not used for ordinary product purposes.
Support, privacy and deletion-request correspondence is kept only for as long as needed to handle and evidence the request or meet legal obligations. Analytics and diagnostic records are kept according to configured provider retention settings and reviewed so they are not kept longer than necessary.
7. Your rights
Depending on the circumstances, UK data-protection law gives you rights to:
- ask for access to your personal information;
- correct inaccurate or incomplete information;
- ask for deletion or restriction;
- object to processing based on legitimate interests;
- receive certain information in a portable format; and
- withdraw consent where processing relies on consent.
Email privacy@jiak.app to exercise a right. Jiak may need to verify your identity and will respond within the period required by applicable law.
8. Deleting your information
You can delete individual check-ins and photos in the app. To delete the whole account, use Profile → Settings → Delete account. Jiak first removes stored photos and application records, then asks Clerk to delete the authentication account and signs you out.
If you cannot use the app, follow the external deletion-request instructions. Storage problems may temporarily prevent deletion; if that happens, Jiak retains the relevant records and asks you to retry so that it does not leave untracked photo files behind.
9. Security
Jiak uses measures intended to protect personal information, including authenticated API access, owner-scoped records, private photo storage, short-lived signed photo links, input and upload validation, rate limiting and reduced public database exposure. No online service can guarantee absolute security.
10. Children
Jiak is not designed specifically for children. This draft does not yet set a minimum user age. Before public launch, Jiak must document its intended audience and assess whether the service is likely to be accessed by people under 18, including any age-assurance, parental-consent or age-appropriate design measures required by UK law.
If you are under 18, review this notice and the terms with a parent or guardian before using Jiak. A parent or guardian with a concern may contact privacy@jiak.app.
11. Changes to this notice
This notice may change when Jiak’s features, suppliers or legal obligations change. The date at the top will be updated, and material changes will be communicated where appropriate.
12. Contact and complaints
Privacy contact: privacy@jiak.app
Controller: [CONTROLLER NAME — REPLACE BEFORE PUBLISHING]
If you remain concerned, you may complain to the UK Information Commissioner’s Office. Visit ico.org.uk/make-a-complaint for current contact and complaint information.