Privacy Notice

The Service is for adults. We do not knowingly collect personal data from children, and we design the Service so that children's details are not needed: accounts contain only the adult's email and password; saved cards and earned badges live only in your own browser storage on your device; and recordings made with word cards stay on your device and are never uploaded. The AI question feature is intended for general adult questions, not personal details about a child. If you believe a child has provided us with personal data, contact us and we will delete it.

• Account data — your email address, password (stored only as a secure hash), and sign-in method when you create an account.
• Membership and payment records — your plan, subscription status, and order references. Card numbers and bank details are collected and processed by our payment provider, not by us.
• Device and usage data — IP address, browser type, device identifiers, pages visited, and features used, collected to run and improve the Service.
• Support and communications data — messages you send us, such as support emails.
• AI question data — when members use Ask Joey AI, we save each question and the generated answer together with your account email. Our team reviews them to improve answers and the sources Joey uses. Please keep questions general and never include a child's name or personal details. Ask by Age topics are not saved. You can ask us to delete your saved questions at any time.

We do not collect data about specific children. Local features such as saved cards, word-card badges, and recordings are stored in your browser or on your device and are not transmitted to us.

• Creating and managing your account, and providing the Service (contract performance).
• Processing memberships and entitlements through our payment provider (contract performance).
• Securing the Service, preventing fraud and abuse (legitimate interests).
• Improving the Service and understanding how features are used (legitimate interests).
• Answering support requests (contract performance or legitimate interests).
• Sending service emails such as sign-up confirmations and password resets (contract performance).
• Complying with legal obligations such as tax and accounting rules (legal obligation).
• Sending marketing updates, only with your consent, where applicable (consent).

We share personal data only with:

• Service providers that help us operate the Service, such as hosting, database, email delivery, and AI-model providers, each under contracts that limit their use of your data.
• Stripe, our payment processor, for membership payments, subscription management, and invoicing. Stripe handles card details directly; we never see or store your full card number.
• Professional advisers such as lawyers and accountants, when needed.
• Authorities, where required or permitted by law.

We do not sell personal data or use it for third-party advertising.

Our service providers may process data in countries other than your own. When data leaves the UK, EEA, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision, as applicable.

We keep personal data only as long as needed for the purposes above: account data for as long as your account is active; membership records for the period required by tax and accounting law; usage data in aggregated or anonymized form where possible. When data is no longer needed, we delete it or anonymize it.

Depending on where you live, you may have rights to access, correct, or delete your personal data, restrict or object to certain processing, port your data, and withdraw consent. Residents of some U.S. states have additional rights, such as knowing what data we hold, deletion, and opt-outs from targeted advertising (which we do not do anyway). You may also have the right to complain to your local supervisory authority.

To exercise any right, email hello@ja-oh-ee.com. We respond within the time required by applicable law, typically within one month for rights under European law.

We use appropriate technical and organizational measures to protect personal data, including encryption in transit, access controls, and least-privilege access for our systems. No method of transmission or storage is perfectly secure, but we work continuously to protect your information.

We use a small number of essential cookies (and equivalent browser storage) to keep you signed in and to remember your preferences. We do not currently use advertising or third-party analytics tracking cookies. You can clear cookies and local storage in your browser settings at any time; clearing them may sign you out or reset local features such as saved cards and badges.

We may update this notice as the Service evolves; the date above shows the latest version. Questions or privacy requests: hello@ja-oh-ee.com, or write to MyCityCopilot LLC.