Privacy Policy

Japam exists to help you practice in peace. Japam is operated by Jump Rivals LLC ("we," "us"), which is the data controller for the information described on this page. Our intention extends to your data: we collect only what the app needs to work, and we never sell your information. The few ads free members see are Japam's own devotional placements — never targeted at you, never built from your data. This page explains, in plain language, what we collect, why, and the choices you always have.

What we collect

When you use Japam, we collect and store:

• Account details — your email address, username, display name and any profile photo or bio you choose to add.
• Preferences — your app language, content language and, if you choose to share them, your country, city, zipcode and phone number. These location fields and the phone number are optional. To save you typing, your country may be pre-filled from your device's language and region settings; you can change or clear it, and you can leave the rest blank.
• Chanting activity — your chant counts, chant score, stars, and the Japam Poojas (schedules) you create. This is what powers your counter, your progress and the leaderboard.
• Things you share — posts, photos, videos, comments, likes, follows and messages you send to other devotees through Japam Social.
• Subscription status — if you subscribe to Japam Premium, we store whether the subscription is active, when the current period ends and which store product it came from. The payment itself is handled entirely by Apple or Google — we never see or store your card details.
• Diagnostics and usage — crash reports and error events (so we can fix what breaks), and a small number of named product events such as "chant session ended" or "pooja created" (so we can see which parts of Japam are used). These are tied to your account id only — never your email or name — and are used for reliability and improving the app, not for profiling or advertising. We do not record your screen or your taps.

We do not collect your precise device location, your contacts, or anything from other apps on your phone.

How we use it

• To create and secure your account, and to sign you in.
• To run the features you use — your mala counter, poojas, mantra library, social feed, temples and profile.
• To show content in your chosen languages and surface temples relevant to the region you told us about.
• To calculate chant scores, stars and community leaderboards.
• To keep the community safe — reviewing reported posts and enforcing our Terms of Use.
• To recognize an active Japam Premium subscription and unlock its features.
• To find and fix crashes, and to understand which features devotees actually use.
• To fix problems and keep the service reliable.

That is the whole list. We do not use your data for advertising, and we do not build advertising profiles. The devotional ads shown to free members are placed by Japam itself and are the same for everyone — at most varying by country, never chosen using your personal data.

Where your data lives

We rely on a small number of service providers to run Japam, each of which processes data on our behalf under its own security and data-protection commitments:

• Supabase — our database, authentication and file storage provider, where your account, preferences, chanting activity and posts are stored.
• Render — hosts the Japam backend API, which handles certain server-side actions (such as account deletion) and generates the brief diagnostic logs described above.
• RevenueCat — manages Japam Premium subscription status on our behalf. It receives an anonymous app identifier and the purchase receipt from Apple or Google — never your name, email or payment card.
• Sentry — receives crash reports and error events from the apps and our API, with your account id and the app's recent activity log, so we can reproduce and fix problems. Screenshots and personal details are never attached.
• PostHog — receives the named product events described above, tied to your account id. Session recording and automatic click tracking are switched off.

If you choose to sign in with Apple or Google, that sign-in is handled by Apple or Google, and the sign-in event and an identity token pass through that provider under its own privacy policy. Connections between the app and our services are encrypted in transit, and access to production data is limited to what is required to operate Japam.

What we never do

• We do not sell, rent or trade your personal information. Ever.
• We do not run third-party ad networks or trackers in Japam. The occasional ads in the free feed are Japam's own devotional placements, never personalized.
• We do not share your data with third parties, except for the service providers that host and operate the app for us — Supabase (database, authentication and storage), Render (API hosting and diagnostic logs), RevenueCat (subscription management), Sentry (crash reporting) and PostHog (product analytics) — the sign-in provider you choose (Apple or Google), the store that processes a Japam Premium purchase, or where the law requires it.

What others can see

Japam is a social space. Your profile, chant score, stars, and the posts you share are visible to other users unless you mark a post as followers-only. Direct messages are visible only to you and the person you are writing with. Please share with the same care you would in any community.

How we protect your data — honestly

We use reasonable technical and organizational safeguards: connections are encrypted in transit, production access is limited to what operating Japam requires, and we rely on established providers with their own security commitments. But we will not pretend otherwise: no app, ours included, can promise absolute security. If a breach ever affects your personal data, we will notify you and the relevant authorities as the law requires and move quickly to contain it. To the fullest extent permitted by law, Jump Rivals LLC is not responsible for unauthorized access caused by attacks or events beyond our reasonable control.

Deleting your account

You can delete your account at any time from inside the app (Profile → Settings → Delete Account). Deletion is immediate from your side: your account is closed, your profile, posts, comments, messages and chanting history disappear from Japam, and your email is freed — you can sign up again later as a brand-new account.

Behind the scenes we move a copy of the deleted account's data into a restricted internal archive, kept for record-keeping, fraud and abuse prevention, and legal compliance. The archive is not visible in the app, is not used for any other purpose, and is reviewed for permanent erasure. If you want your data completely erased rather than archived, email support@japam.app from the account's address and we will erase the archive copy too — that is your right, and exercising it is always free.

Your rights

Wherever you live, we extend the same rights to you, in the spirit of the GDPR (Europe) and the CCPA/CPRA (California):

• Access — ask for a copy of the personal data we hold about you.
• Correction — fix anything that is inaccurate (most details can be edited directly in the app).
• Deletion — erase your data, in-app or by request.
• Portability — receive your data in a common, machine-readable format.
• Objection and restriction — object to or limit certain processing of your data.
• No discrimination — exercising these rights never affects your ability to use Japam.

Because we do not sell personal information, there is nothing to opt out of under the CCPA's "Do Not Sell or Share" provisions. To exercise any right, email us — we respond within 30 days.

Children

Japam is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us and we will delete it promptly.

How long we keep data

We keep your data for as long as your account exists. When you delete your account, your data leaves the app immediately and moves to the restricted internal archive described above; short-lived backups and diagnostic logs expire on a rolling basis. Archived data is kept until it is reviewed for permanent erasure — or erased on your request, which we honor within 30 days.

International transfers

Japam is used around the world, and our service providers may store data in regions other than your own. Wherever your data travels, it remains protected by this policy and by our agreements with those providers.

Changes to this policy

If we change this policy in a meaningful way, we will update the effective date above and let you know in the app before the change takes effect.

Contact us

We read every message, and we answer with care. 🙏