Privacy Policy

Jorelle is operated by Jorelle Media Ltd, a company registered in the United Kingdom ("we", "us"). This policy explains what personal data we collect when you use the Jorelle website and mobile apps (the "Service"), why we collect it, and the rights you have over it.

The short version

We collect what we need to run your account and subscription, and nothing more. We do not sell your data. Our visitor analytics are cookieless and anonymous. Our advertising cookies (the Meta and TikTok pixels) are off unless you accept them, except in the United States, Canada (outside Quebec) and Australia, where they are on unless you opt out.

What we collect

• Account details. Your email address, display name if you set one, and your password (stored in hashed form; we never see it). If you sign in with Apple or Google, we receive your email address and basic profile from them; Apple may give us a private relay address instead of your real one.
• Free access. If we grant you a complimentary membership (for example as a collaborator), we record that on your account.
• Subscription and billing. Your subscription status, trial dates, and renewal dates. Payments are processed by Stripe; we never see or store your full card number. We hold a reference to your Stripe customer record.
• Free-trial record. When you start a free trial we store a one-way hash of your email address, a one-way hash of a random identifier kept in a cookie on your device, a one-way hash of your connection's IP address, and, if you add a card, an anonymous reference to it (never the card number). This is how we make sure the free trial is offered once per person rather than repeatedly to the same person. None of these values can be turned back into your email address, your device, your IP address or your card, and we keep them for three years.
• Listening activity. Which episodes you play, your progress in them, your favourites, and your finished stories. This is what powers Continue Listening and your Library.
• Device push token. If you allow notifications in the mobile app, we store the device token needed to deliver them. Declining notifications is always available and nothing else changes.
• Support messages. If you email us, we keep the correspondence so we can help you.

We do not collect your precise location, contacts, photos, or anything from your device beyond the above.

Why we collect it (legal bases)

• To provide the Service you signed up for: account, playback, Library, subscription (performance of a contract).
• To bill you correctly and prevent fraud (performance of a contract; legitimate interests).
• To make sure a free trial is used once per person rather than claimed repeatedly (legitimate interests).
• To send you service emails about your account, trial, and subscription (performance of a contract).
• To send the one-off launch announcement to waitlist members who requested it (consent, withdrawable in one tap).
• To understand overall site traffic through anonymous, cookieless analytics (legitimate interests).
• To measure our advertising through the Meta and TikTok pixels (consent in the UK and EU, withdrawable at any time; in the United States, Canada (outside Quebec) and Australia, until you opt out).

Cookies

We keep cookies to the minimum the Service needs to function:

• Session cookies that keep you signed in to your account. Strictly necessary.
• A functional cookie used only for site preview access before launch. Strictly necessary.
• Stripe cookies set during checkout for payment security and fraud prevention. Strictly necessary.
• A free-trial cookie holding a random identifier, set when you start a free trial, so the free trial is offered once per device. It is used only to prevent misuse of the free offer and lasts one year. Strictly necessary.
• A short-lived sign-in cookie set when you choose Sign in with Apple or Google, so we can return you to the right page afterwards. It lasts ten minutes. Strictly necessary.
• Analytics: none. Our visitor statistics (Vercel Analytics) are cookieless and do not identify you.
• Advertising cookies (optional). The Meta Pixel and the TikTok Pixel set cookies that tell us whether our ads on Facebook, Instagram and TikTok brought you here. Outside the United States, Canada (outside Quebec) and Australia, they only load after you press Accept in the cookie banner. Choosing Reject all under Manage options keeps them off. In the United States, Canada (outside Quebec) and Australia they load by default; you can turn them off with the Cookies link in the site footer, and we respect your browser's Global Privacy Control setting. Your choice is remembered for one year and you can change it at any time from the link in the site footer.

Who processes your data

We use a small number of service providers to run Jorelle, each bound by data-processing agreements:

• Supabase: database, authentication, and file hosting.
• Stripe: payment processing.
• Resend: sending our emails.
• Vercel: website hosting and cookieless analytics.
• Expo: delivery of mobile push notifications.
• Sentry: error monitoring on the website. When something breaks, it receives technical details such as your browser, device and IP address so we can fix it.
• Meta (Facebook): advertising measurement on the website, only if you accept cookies, or in the United States, Canada (outside Quebec) and Australia unless you opt out.
• TikTok: advertising measurement on the website, only if you accept cookies, or in the United States, Canada (outside Quebec) and Australia unless you opt out.

We share data with them only as needed to provide the Service. We do not sell or rent personal data to anyone.

How long we keep it

Your account data is kept while your account exists. If you delete your account, we delete or anonymise your personal data within 30 days, except records we must keep for legal reasons (for example, billing records, which are kept for the period required by UK tax law) and the hashed free-trial record described above, which is kept for three years so a deleted account cannot be used to claim another free trial. Waitlist entries are deleted after the launch period ends.

Your rights

Under UK and EU data protection law you can ask us to:

• Access a copy of the personal data we hold about you.
• Correct it if it is wrong.
• Delete it.
• Restrict or object to certain processing.
• Export it in a portable format.

Email [email protected] and we will respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk) if you believe we have mishandled your data.

Age

Jorelle is for adults. You must be at least 18 to create an account, and we do not knowingly collect data from anyone under 18.

Changes

If we make material changes to this policy, we will email account holders before the changes take effect.

Contact

Jorelle Media Ltd, London, United Kingdom. Questions about privacy: [email protected].