← back

privacy policy

effective date: july 11, 2026

this privacy policy describes how jeins world ("we," "us," or "our") collects, uses, and protects your information when you use our mobile application and web service (collectively, the "service"). by using the service, you agree to the practices described in this policy.

1. developer information

jeins world is developed and operated by an independent developer. for questions, concerns, or requests regarding your data, contact us at:

email: support@jeins.world

2. data we collect

we collect only the minimum data necessary to provide the service. here is what we collect, organized by apple's data type categories:

data linked to your identity

  • user content: journal entries, replies, and heart reactions you create within your garden
  • identifiers: your username, display name, and a system-generated user ID
  • other data: garden name, garden code, and your preferred display name

data not linked to your identity

  • identifiers: push notification device token (if you opt in to notifications)
  • other data: your timezone preference and reminder time setting

data we do NOT collect

  • email addresses or phone numbers
  • precise or coarse location data
  • contacts or address book data
  • health or fitness data
  • financial or payment information
  • browsing history or search history
  • photos, videos, or audio (other than text entries you write)
  • advertising identifiers or tracking data
  • analytics or diagnostics data
  • device identifiers beyond push notification tokens

3. how we use your data

we use your data solely to provide and maintain the service:

  • user content: to display your journal entries to you and your garden partner, and to enable the shared flower mechanic
  • identifiers: to authenticate you and distinguish between users in a garden
  • push tokens: to deliver notifications you have opted into (daily reminders, partner activity alerts)
  • timezone/preferences: to calculate when new flowers appear and when to send reminders

we do not use your data for advertising, marketing, analytics, or any purpose beyond providing the core journaling service.

4. data sharing and third-party services

we do not sell, rent, or trade your personal data. we share data only with the following service providers, strictly to operate the service:

these providers process data on our behalf and are contractually bound to protect it. we do not share data with any advertising networks, data brokers, or other third parties.

5. data security

  • all data is transmitted over HTTPS (TLS encryption in transit)
  • your PIN is never stored in plain text — it is hashed using PBKDF2 before storage
  • authentication tokens (JWTs) are signed with a secret key and expire
  • database access is restricted to authenticated API requests only
  • on iOS, your authentication token is stored in the device's encrypted keychain via expo-secure-store

while we take reasonable measures to protect your data, no method of transmission or storage is 100% secure. we cannot guarantee absolute security.

6. push notifications

push notifications are entirely opt-in. you can enable or disable them at any time in the app's settings. when enabled:

  • your device's push token is stored on our server
  • we send notifications only for: daily reminders at your chosen time, new flower availability, and partner activity (entries, replies)
  • push tokens are delivered to apple's push notification service (APNs) via the expo push service
  • if you disable notifications, your push token is deleted from our servers

7. data retention and deletion

we retain your data for as long as your account exists and the service is active.

account deletion: you can delete your account at any time from the settings screen within the app. when you delete your account:

  • all your journal entries are permanently deleted
  • all your replies and heart reactions are permanently deleted
  • your push notification subscriptions are deleted
  • your user profile (username, display name) is permanently removed
  • if you are the last user in a garden, the entire garden and all its data is deleted

deletion is permanent and cannot be undone. there is no recovery period.

you may also request deletion by contacting us at support@jeins.world.

8. children's privacy

the service is not directed at children under 13 years of age. we do not knowingly collect personal information from children under 13. if we become aware that a child under 13 has provided us with personal data, we will take steps to delete that information. if you believe a child under 13 is using the service, please contact us at support@jeins.world.

9. your rights

depending on your jurisdiction, you may have the following rights:

  • access: request a copy of the data we hold about you
  • deletion: delete your account and all associated data (available in-app)
  • correction: update your display name and settings at any time in the app
  • portability: request your data in a machine-readable format
  • opt-out: disable push notifications at any time

california residents (CCPA/CPRA)

if you are a california resident, you have the right to:

  • know what personal information we collect and how it is used
  • request deletion of your personal information
  • opt out of the sale of personal information — we do not sell your data
  • non-discrimination for exercising your privacy rights

to exercise these rights, use the in-app account deletion feature or contact us at support@jeins.world.

european residents (GDPR)

if you are in the european economic area, our legal basis for processing your data is:

  • contract performance: processing necessary to provide the journaling service you signed up for
  • consent: for optional push notifications (which you can withdraw at any time)

10. international data transfers

your data is stored on cloudflare's globally distributed infrastructure. by using the service, you consent to the transfer of your information to servers that may be located outside your country of residence. cloudflare maintains appropriate safeguards for international data transfers.

11. tracking and advertising

we do not track you. we do not use advertising identifiers. we do not participate in ad networks. we do not use cookies for tracking purposes. the app does not request app tracking transparency permission because no tracking occurs.

12. changes to this policy

we may update this privacy policy from time to time. when we make material changes, we will update the "effective date" at the top of this page. your continued use of the service after changes constitutes acceptance of the updated policy. we encourage you to review this policy periodically.

13. contact us

if you have questions about this privacy policy, your data, or wish to exercise your privacy rights, contact us at:

email: support@jeins.world