Privacy Policy

Effective date: May 14, 2026
App name: Jit App
Operating address: Kyiv, Ukraine
Contact: jit.app27@gmail.com

This Privacy Policy explains how Jit App (“we,” “us,” or “our”) processes information when you use the Jit App application and related website or embedded web experiences (together, the “Services”). We operate from Ukraine and intend to serve users internationally, including in regions with prominent privacy regimes (such as the European Economic Area, United Kingdom, Canada, and United States).

1. Summary

• Many features rely on processing primarily on your device (for example, preferences saved in local storage).
• Optional sign-in (for example Sign in with Apple or Google) may be offered where features need an account, entitlement association, or cross-device subscription (Pro) sync.
• Depending on Apple/Google consent choices, withholding email may impair entitlement sync across devices as described below.
• The website / web builds may use analytics and performance tools operated by vendors such as Vercel, as summarized in Section 5.
• We use processors (for example, authentication providers, hosting providers, storefronts/payment intermediaries); their handling is partly governed by their own policies.

2. Data controller / contact

For personal data governed by applicable privacy laws referenced in Sections 11–13, unless a separate controller is expressly identified elsewhere, Jit App, operated from Ukraine at the operating address listed above (see contact email), acts as data controller for processing described here.

Privacy requests: include “Privacy Request,” your approximate account email if applicable (if any), country/region, and a concise description of your request.

3. Information we collect (categories)

Depending on how you use the Services and platform/build, categories may include:

• Identifiers and account data: email (or relay email permitted by providers), OAuth subject identifiers supplied by Apple/Google if you authenticate, billing-related identifiers surfaced by storefronts or payment intermediaries when needed for entitlements or support.
• Profile data you choose: name fields returned by SSO providers consistent with consent screens you approve.
• Location-related selections: geographic inputs you explicitly provide or save for calculations (for example chosen city/coordinates/time zone)—not ambient continuous GPS tracking by default.
• Preferences and UI state: language, themes, astro/panchang display choices and similar selections (often retained locally on device).
• Technical / usage telemetry (limited): on web builds, aggregated page views / performance timings via tooling described in Section 5 (not intended to personalize cross-site advertising).
• Communications: content you email to us voluntarily for support.

4. How we use information (purposes)

We use information for:

• Providing core astrology/calendar/computation features respecting your selections and stored preferences,
• Establishing authentication sessions and administering accounts when offered,
• Associating subscriptions (for example Pro), renewing/canceling entitlement state, diagnosing billing sync issues tied to SSO email choices,
• Security and abuse mitigation reasonably necessary to protect accounts and integrity,
• Service improvement, including reliability and aggregated performance telemetry on web deployments,
• Legal compliance, dispute resolution, and enforcing our Terms/Policies,

and (only if expressly offered in-product and compliant with law) supplemental communications such as transactional notices unrelated to unsolicited marketing.

Automated timings, scores, or visualizations are described in our Terms as informational; we do not use app outputs alone to automate decisions with GDPR-style legal/similarly significant effects about you unrelated to provisioning the informational product described in those Terms.

5. Cookies, local technologies, analytics

• Local storage equivalents on device/browser persist UI preferences absent account sync.
• Operational cookies/session mechanisms may be used when networked authentication or API integrations require persistence under modern SameSite/third-party partitioning rules.
• Our website / web deployments integrate Vercel Analytics and Vercel Speed Insights. These vendors process aggregated web usage and coarse performance telemetry under their documented practices. Blocking certain storage may degrade session persistence where applicable without blocking purely local computational features.

6. Disclosure to third parties (“processors”) and onward transfers

We disclose information strictly as needed:

• Apple / Google (authentication and account identifiers),
• platform storefronts/payment intermediaries (Apple, Google Play, or other storefronts/checkout providers consistent with purchases),
• cloud/hosting/CDN/security vendors (potentially globally distributed),
• Vercel, Inc. and related infra for deployments where used.

These parties operate under contracts and legally required mechanisms (see transfers). Additional processors may replace or augment infra as we evolve; material changes prompting user notification will align with Terms update practices.

Law enforcement / regulator requests processed only upon valid legal demands and narrowed to applicable scope.

Sales / targeted advertising disclosures (U.S.)

We do not sell your personal information to data brokers. As of this Policy’s Effective Date, analytic tooling herein is oriented to aggregate product reliability, not monetized behavioral advertising personalization. Should we materially change practices (for example monetized personalized ads relying on CPRA-covered “sharing”), we update this Policy and provide required choices.

7. International transfers

Infrastructure and subprocessors may process data outside your country—including in Europe, the United Kingdom, the United States, Ukraine, and multi-region CDN edges. Where GDPR / UK GDPR / Swiss adequacy or transfer assessments insufficient, appropriate safeguards may apply—for example contractual clauses endorsed by supervisory authorities supplemented by diligence required by regulators (actual vendor mechanism stack depends on current vendor documentation—request summary details via privacy contact). Storefront purchase records remain partly under platform operators’ domains.

8. Retention

We retain data only as long as reasonably necessary for the purposes above, including:

• account data while account active + limited post-closure window for fraud/tax/legal consistency,
• support emails as needed to resolve issues,
• device preferences until cleared by you,
• aggregate analytics according to vendor retention windows.

Specific retention tables may be refined operationally; contact us for deletion requests.

9. Security

We apply reasonable technical and organizational measures proportionate to risk (for example transport encryption where applicable, access minimization, vendor diligence). No method is perfect—protect credentials and devices.

10. Children

Not directed to children under 13 (U.S. orientation) or under digital consent ages applicable in your region (for example 16 in many EU contexts unless lowered locally). Guardians must supervise minors. If you believe we inadvertently collected a child’s personal data, contact us for prompt review & deletion subject to verification.

11. Rights for individuals in the EEA, UK, and Switzerland (GDPR-style)

You may have rights including access, rectification, erasure, restriction, portability, objection to certain processing on legitimate-interest grounds, withdraw consent where processing relied on consent, and lodge a complaint with a supervisory authority. We respond within timelines required by law (often one month, extendable for complex requests). Before fulfilling access/deletion, we may request reasonable identity confirmation to prevent fraud.

Typical lawful bases (illustrative, not exhaustive matrix): performance of a contract (account + paid entitlements), legitimate interests balanced against your rights (security hardening, minimal aggregate analytics), consent where required (for example future marketing beyond core service if introduced), legal obligations (tax/fraud).

12. Rights for individuals in California and certain other U.S. states

Depending on applicable state law, residents may have rights to know/access, delete, and correct certain personal information, and to opt out of certain sales or sharing for cross-context behavioral advertising. As stated, we do not sell personal information for money and do not operate cross-context behavioral advertising at Effective Date. If practices change, we update disclosures and honor opt-out mechanisms required by law.

You may designate an authorized agent where permitted; proof may be required.

13. Rights for individuals in Canada

Canadian privacy laws (federal PIPEDA and certain provincial statutes) generally provide rights to access personal information we hold, request correction where inaccurate, and challenge our compliance; file complaints with the Office of the Privacy Commissioner of Canada or provincial authorities as applicable.

14. Rights for individuals in Ukraine

Under Ukrainian personal data legislation, you may have rights to know processing scope, access, rectification, deletion in defined cases, restrict processing, withdraw consent when processing is consent-based, and object in scenarios provided by law. Contact us as above.

15. Changes to this Policy

We may update this Policy; the Effective Date will change. Where required, we provide additional notice or collect renewed consent. Material restrictions on your rights are unlikely without an appropriate legal basis and notice path.

16. Contact

Privacy questions or rights requests:

• Email: jit.app27@gmail.com
  Kyiv, Ukraine