Privacy Policy

1. Introduction

Jointly ("we," "our," or "us") operates the website at jointly-app.com, the web application at app.jointly-app.com, and the Jointly mobile applications (collectively, the "Service"). This Privacy Policy explains how we collect, use, store, and protect your information when you use our Service.

By using Jointly, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

You must be at least 18 years old to use Jointly.

2. Information We Collect

Account Information

When you create an account, we collect your email address, and optionally your first name, last name, and profile picture. You may sign up using email and password, Google OAuth, or a magic link sent to your email. Authentication is handled by our provider, Supabase — we do not store your password.

Financial Data You Enter

Jointly is a manual expense tracker — we never connect to your bank and never ask for bank credentials. All financial data is entered by you, including:

• Transactions (amount, currency, category, and optional description)
• Account names and balances
• Budgets and spending limits
• Savings goals
• Recurring transactions

Device and Usage Data

We collect anonymized usage analytics to improve the Service. On the web app, we use Vercel Analytics and Vercel Speed Insights. On the mobile app, we use Firebase Analytics. These services collect page views, performance metrics, and general interaction data. We do not use advertising trackers.

Local Device Data

Certain preferences are stored locally on your device and are not transmitted to our servers. These include your display theme, preferred currency, privacy mode setting, and view preferences.

Biometric Data

The mobile app supports fingerprint and face recognition for unlocking the app. Biometric data is processed entirely on your device by your operating system. We never receive, transmit, or store your biometric data.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Generate financial insights and summaries using third-party AI services. Only anonymized, aggregated summaries are sent — never your raw transaction data or personal information
• Convert currencies using third-party exchange rate services. Only currency codes are transmitted — no financial or personal data
• Send you service-related communications (e.g., account verification, security alerts)
• Analyze aggregated, anonymized usage data to improve the product

4. Shared Projects

Jointly is designed for shared financial tracking between partners. When you create or join a project, all members of that project can see the transactions, accounts, budgets, savings goals, and insights within it.

You invite others to a project using invite codes that expire after 5 minutes. You are responsible for sharing invite codes only with people you trust.

Accounts marked as "private" are visible only to the person who created them and the project owner.

5. Third-Party Services

We use the following third-party services to operate Jointly:

• Supabase — authentication and profile image storage
• AI services — optional financial insights generation using anonymized summaries only
• Exchange rate provider — currency conversion rates. No user data is transmitted, only currency codes
• Vercel — web analytics and performance monitoring
• Firebase — mobile analytics

We do not sell, rent, or share your personal data with advertisers, data brokers, or any third party for marketing purposes.

6. Data Storage & Security

Your data is stored in secure databases. We protect your information using industry-standard measures including:

• JWT-based authentication for all API requests
• HTTPS encryption for all data in transit
• API rate limiting to prevent abuse
• No bank credentials are ever collected or stored

While we take reasonable steps to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention & Deletion

You can delete your account at any time from within the app. When you delete your account:

• Your authentication data is deleted immediately
• Your financial data is marked for deletion in our database
• To request permanent erasure of all your data, contact us at support@jointly-app.com

Data stored locally on your device (preferences, settings) is cleared when you uninstall the app or clear your browser data.

8. Your Rights

You have the right to:

• Access, correct, or delete your personal data
• Request a copy of the data we hold about you
• Withdraw consent for optional data processing (such as AI-powered insights)

If you are a resident of the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including the right to data portability, the right to restrict processing, and the right to object to processing.

To exercise any of these rights, contact us at support@jointly-app.com.

9. Children's Privacy

Jointly is intended for users aged 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected data from a minor, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and notify you through the app or by email. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

11. Contact

If you have any questions about this Privacy Policy or your data, contact us at support@jointly-app.com.