JaiflowPrivacy Policy
Last updated 8 October 2026
This Privacy Policy explains how Jaiflow Team ("we") collects, uses, and protects your personal data when you use Jaiflow, in line with Thailand's Personal Data Protection Act (PDPA).
1. Data we collect
Account data: your username and, if you choose to add one, your email address. Wellbeing data: your mood check-ins and journal notes. Activity data: your island, owned items, streaks, and progress. Payment data: your subscription and purchase status — payments on the web are handled by Stripe, and in the app by Google Play or the App Store through RevenueCat; we do NOT store your card or bank details. Technical data: basic device/browser information and cookies needed to keep you signed in.
2. How we use your data
To provide and maintain the Service, save your island and progress, process your subscription, keep your account secure, improve the app, and — if you add an email — send service messages such as receipts or renewal reminders.
3. Legal basis
We process your data based on your consent and to perform our contract with you (to provide the Service), as permitted under the PDPA.
4. Sharing
We share data only with service providers who help us run Jaiflow: Supabase (database and authentication), Cloudflare (hosting), Stripe (web payments), Google Play, the App Store and RevenueCat (in-app purchases), and PostHog (product analytics). We do not sell your personal data.
5. Your mood & journal entries
Your check-ins and notes are personal to you. We store them only to provide the Service to you and do not share them with other users or sell them.
6. Retention
We keep your data while your account is active. When you delete your account, your associated data is deleted.
7. Your rights (PDPA)
You may access, correct, delete, or port your data, withdraw consent, or object to processing, and you may lodge a complaint with the Personal Data Protection Committee. To exercise your rights, contact [email protected].
8. Security
We use reasonable measures including row-level access controls and encryption in transit. No method of transmission or storage is 100% secure.
9. Children
Jaiflow is not directed to children under 13. If you believe a child has provided us data, contact us and we will remove it.
10. International processing
Your data may be processed on our providers’ servers located outside Thailand.
11. Changes & contact
We may update this Policy and will notify you of material changes. Questions: [email protected]