Privacy Policy

Introduction

JuJu Paranormal Pursuit ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application and website.

App Permissions Required

JuJu requires several device permissions to function properly. We request these permissions only when needed and explain why each is necessary. You can manage permissions in your device settings at any time.

Note: You can review and manage all permissions in the app's Settings → Permissions section, or in your device's system settings. Denying permissions will limit app functionality but will not prevent you from using basic features.

Information We Collect

We collect the following types of information. We do not sell your personal data to third parties. We only share data as necessary to provide our services, as described in this policy.

• •Account Information: Email address, name (if provided), authentication tokens from Google/Apple Sign-In
• •Device Information: Device ID, device type, operating system version
• •Investigation Data: Sensor readings (EMF, motion, temperature, gyroscope, barometric pressure, ambient light, proximity, etc.), location coordinates (GPS), investigation timestamps, anomaly detections, investigation notes
• •Media Files: Photos, videos, and EVP recordings you capture using the app. Media metadata (file sizes, timestamps, durations, GPS coordinates from EXIF) is also collected.
• •Usage Data: App preferences, feature usage, subscription tier, API key usage (stored locally on device, not on our servers)
• •Communication Data: Messages sent to Michael AI assistant, chat history (stored locally on device)

How We Use Your Information

We use your information to:

• •Provide app functionality and features
• •Store your investigation data and evidence
• •Enable AI-powered analysis (Michael AI assistant)
• •Improve app performance and user experience
• •Manage your subscription and account
• •Send technical updates and important notifications

Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. We only share your data in the following circumstances:

• •Service Providers: With third-party service providers who help us operate our services (as listed in the Third-Party Services section above). These providers are contractually obligated to protect your data and only use it for the purposes we specify.
• •Legal Requirements: When required by law, court order, or government regulation, or to protect our rights, property, or safety, or that of our users.
• •Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity, subject to the same privacy protections.
• •With Your Consent: When you explicitly consent to sharing your data, such as when you enable anonymous data collection for research purposes.

Note: Anonymous research data (if you opt-in) is shared in aggregated, anonymized form and cannot be traced back to you.

Data Storage and Retention

Your data is stored as follows:

• •Local Storage (Device): Photos, videos, and EVP recordings are stored locally on your device by default. Free tier users store all media locally.
• •Cloud Storage (Pro/Pro+): Investigation data, sensor readings, metadata, and uploaded media files are stored in our secure cloud database. Pro users have 5GB storage, Pro+ users have 50GB storage.
• •Backend Database: Account information, investigation metadata, sensor data, and evidence records are stored on our backend servers.

Data Retention:

• •We retain your data for as long as your account is active or as needed to provide services
• •If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal purposes
• •Anonymous research data (if opted-in) cannot be deleted as it cannot be linked to your account

Third-Party Services

We use the following third-party services that may process your data:

• •
  OpenAI: For AI-powered analysis (Michael AI assistant), speech-to-text (EVP transcription), and text-to-speech (Michael's voice). When you use OpenAI features, your API key is stored locally on your device and data is sent to OpenAI according to their privacy policy. We do not store your OpenAI API key on our servers.
• •
  Google Gemini: Alternative AI service option for Michael AI assistant. Your API key is stored locally on your device and data is sent to Google according to their privacy policy. We do not store your Gemini API key on our servers.
• •
  Google Maps: For the Hot Zone Map feature in the members area. Location data may be processed by Google Maps API. See Google's Privacy Policy for details.
• •
  Google Sign-In / Apple Sign-In: For authentication. Authentication tokens are stored securely. We receive your email address and name (if provided) from these services. See Google's Privacy Policy and Apple's Privacy Policy for details.
• •
  Resend: For email communications (newsletter signups, support emails, account notifications). Email addresses are stored in Resend's system. See Resend's Privacy Policy for details.
• •
  Railway (Backend Hosting): Our backend API and database are hosted on Railway. Your data is stored on Railway's infrastructure. See Railway's Privacy Policy for details.
• •
  Vercel (Website Hosting): Our website is hosted on Vercel. See Vercel's Privacy Policy for details.

These services have their own privacy policies. We encourage you to review them. We are not responsible for the privacy practices of these third-party services.

Third-Party Data Protection: We only share your data with third-party services that provide the same or equivalent level of data protection as stated in this Privacy Policy. All third-party services we use are compliant with industry-standard security practices and applicable privacy laws (including GDPR, CCPA, and other regional regulations).

Anonymous Data Collection (Opt-In)

JuJu offers an optional Anonymous Data Collection feature that protects your privacy at the cryptographic level.

Your Rights

You have the right to:

• •Access: Request a copy of your data by contacting us at privacy@jujuparanormal.com
• •Export: Download your investigation data and evidence through the app's export features (Pro+ tier) or by contacting support
• •Delete: Request deletion of your account and data by emailing privacy@jujuparanormal.com. We will delete your personal data within 30 days of your request, except where we are required to retain it for legal purposes.
• •Rectify: Request correction of inaccurate or incomplete data by contacting us
• •Opt-Out: Disable anonymous data collection at any time in Settings → Privacy. You can also opt-out of marketing communications by unsubscribing from emails.
• •Revoke Consent: Withdraw your consent for data processing at any time by disabling features or deleting your account
• •Review Permissions: Manage app permissions in your device settings or in the app's Settings → Permissions section
• •Lodge a Complaint: If you are in the EU, you have the right to lodge a complaint with your local data protection authority

Note: To exercise any of these rights, please contact us at privacy@jujuparanormal.com. We will respond to your request within 30 days.

Data Security

We implement industry-standard security measures to protect your data:

• •Encryption in transit (HTTPS/TLS) for all data transmission
• •Encryption at rest for sensitive data
• •Secure authentication using industry-standard OAuth protocols
• •Regular security audits and updates
• •Access controls and authentication for backend systems

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our website:

• •Essential Cookies: Required for authentication and session management
• •Analytics Cookies: Help us understand how visitors use our website (if implemented)
• •Third-Party Cookies: Used by third-party services (Google Maps, authentication providers)

You can control cookies through your browser settings. Note that disabling cookies may affect website functionality.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using our services, you consent to the transfer of your information to these countries. We take appropriate safeguards to ensure your data is protected in accordance with this Privacy Policy.

Children's Privacy

JuJu Paranormal Pursuit is not intended for children under 13 years of age (or 16 in the EU). We do not knowingly collect personal information from children under 13 (or 16 in the EU). If you believe we have collected information from a child under the applicable age, please contact us immediately at privacy@jujuparanormal.com and we will delete such information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically.