Privacy Policy

Effective date: April 20, 2026

This Privacy Policy explains how Team Jimu, BC, Canada ("Jimu", "we", "our", or "us") collects, uses, and protects your information when you use the Jimu mobile app and website (the "Service").

We built Jimu to help you create content quickly. We collect only what we need to make that work, and we tell you exactly who we share it with.

1. Information We Collect

We collect the following categories of information:

  • Account information: your email address, password (stored as a salted hash), and display name.
  • User content: photos, videos, and voice recordings you submit, together with the text, titles, tags, and descriptions you or our AI produces from them.
  • Device and usage data: device model, operating system, app version, crash reports, approximate location (from IP), and in-app events (screens viewed, buttons tapped, errors). Collected via PostHog.
  • Payment information: if and when paid plans are introduced, payments will be processed by Apple (in-app purchase) or a PCI-compliant provider. We do not store full card numbers.

2. How We Use Your Information

  • To provide the Service: create your account, store your content, and render posts / posters / slides.
  • To run AI features: your photos, voice, and prompts are sent to our AI provider (see Section 4) to generate captions, titles, layouts, and translations.
  • To maintain and improve the Service: fix bugs, monitor performance, measure which features are used.
  • To communicate with you: transactional emails (password reset, security notices), and — if you opt in — occasional product updates.
  • To comply with law: respond to valid legal requests and enforce our Terms.

3. Legal Bases for Processing (EU/UK users)

Where GDPR applies, we rely on: (a) contract performance — to deliver the Service you signed up for; (b) legitimate interests — to secure, maintain, and improve the Service; (c) consent — for optional marketing emails and any sensitive processing; (d) legal obligation — where required by law.

4. Third Parties We Share Data With

We share the minimum necessary data with the following processors:

  • Google (Gemini AI): your photos, voice transcripts, and text prompts are sent to Google Gemini for content generation and translation. Governed by Google's API terms and privacy policy.
  • Amazon Web Services (AWS S3 and CloudFront): stores your uploaded media and caches it for delivery. Data is hosted in the us-west-2 region (Oregon, USA).
  • Neon (managed Postgres): stores account data, logs, tags, and generated content metadata. Hosted in the United States.
  • PostHog: product analytics and error monitoring. Hosted in the United States (us.i.posthog.com).
  • Apple: if you purchase via the App Store, Apple handles billing.

We do not sell your personal information, and we do not share it with advertisers.

5. International Data Transfers

Your data is processed in Canada and the United States. If you are located outside these countries, your information will be transferred to and processed there. We use Standard Contractual Clauses and equivalent safeguards where required.

6. Data Retention

  • Account and content data: retained while your account is active.
  • On account deletion: we delete your personal data and user content within 30 days, except where we are required to retain records (e.g. tax, fraud prevention) for a limited period.
  • Server logs: up to 14 days.
  • Analytics events: up to 12 months.

7. Your Rights

Depending on where you live, you may have the right to: access your data, correct it, delete it, export it, restrict or object to certain processing, and withdraw consent.

To exercise any of these rights, email us at support@jimu.ca. We will respond within 30 days.

California residents (CCPA): you additionally have the right to know what we collect, request deletion, and opt out of any "sale" of personal information (we do not sell).

8. Account Deletion

You can delete your account at any time from inside the Jimu app: Settings → Account → Delete Account.

You may also request deletion by emailing support@jimu.ca from the address on file.

Deletion removes your user content, profile, and associated metadata within 30 days.

9. Security

We use HTTPS/TLS for all data in transit, encryption at rest for databases and object storage, and follow the principle of least privilege for internal access. Passwords are stored as salted hashes (never in plain text). No system is perfectly secure — please use a strong, unique password.

10. Children

Jimu is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us data, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy. If changes are material, we will notify you in the app or by email before they take effect. The "Effective date" above always reflects the most recent version.

12. Contact Us

Questions, concerns, or requests? Email support@jimu.ca.

Team Jimu, BC, Canada

Jimu
© 2026 Jimu