Privacy Policy

This Privacy Policy explains how Jinko Apps Inc. (“Jinko Apps”, “we”, “us”) handles personal information across everything we make: the jinkoapps.com website, JinkoUp (our team project-management service), and Jinko (our parental controls & family-safety app). Where a practice applies to only one product, we say so.

The short version

• We collect the least we need to run each product, and we say plainly what that is.
• We do not sell your personal information, and we don't run third-party advertising in our apps.
• Sensitive content in the Jinko parental app is encrypted, and you can delete it for real - deletion destroys the key, so the data can't be recovered.
• The Jinko app is never covert: the monitored phone always shows a visible icon and a persistent notice.
• We never collect a child's text messages (SMS) or call logs, and we never store anyone's passwords to other services.
• You can access, export or delete your data at any time - see Delete your account & data.

Information we collect

Across both products

• Account information - your name, email address, and the identifier from your sign-in provider (e.g. Google, Microsoft, GitHub, or Apple) when you use one.
• Device & log data - basic technical information such as app version, device model and operating-system version, and error logs, used to keep the service working and secure.
• Support messages - anything you send us when you ask for help.

JinkoUp (project management)

• Workspace content you create: projects, tasks, comments, custom fields, and files or links you attach.
• Team & membership data: who is in your workspace and their roles.
• Integration data: when you connect tools (such as Slack, GitHub, or an AI assistant over the Model Context Protocol), the information needed to deliver that integration, with your permission and under your sign-in.

Jinko (parental controls)

The Jinko app is set up by a parent or legal guardian on a device they own or control, for their own child. Under the parent's direction, the app may process:

• Child profile the parent provides: a display name, age range, and monitoring settings.
• On-screen message text from chat and social apps the child uses, read on the device to check for safety risks (such as bullying, contact from strangers, sexual content, or self-harm). This is analyzed to produce alerts.
• Safety alerts and short evidence excerpts - when something looks unsafe, we create an alert with a brief quote and an explanation. Evidence is stored encrypted.
• Location (approximate and precise) and place arrival/departure, app-usage time, and web/domain activity - for the location, screen-time and web-filtering features the parent turns on.
• Device coverage status - which protections are on or off, so the parent is never misled about what's covered.

What the Jinko app does not do: it does not read SMS text messages or call logs; it does not act on the device or type on anyone's behalf; it does not operate hidden; and it never collects or stores the child's passwords to other services.

How we use information

• To provide, maintain and improve each product's features.
• To generate safety alerts and the context that explains them (Jinko).
• To authenticate you, keep accounts secure, and prevent abuse.
• To send essential service messages (such as alerts, digests you opt into, or billing notices).
• To provide support and respond to your requests.
• To meet legal obligations.

We do not use your workspace content or a child's captured content to advertise to you, and we do not sell personal information.

Children's privacy

Our products are not directed to children for independent sign-up, and a child does not create a Jinko account. The Jinko app is operated by a parent or guardian who provides consent for, and controls, the processing of their own child's information. We act as a processor of that data on the parent's behalf, apply data minimization, encrypt sensitive content, and support deletion at any time.

We design the Jinko app to comply with children's privacy laws in the regions we serve, including the U.S. Children's Online Privacy Protection Act (COPPA), Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and Québec's Law 25. A parent can review and delete their child's information at any time; see Delete your account & data.

How we protect your information

• Encryption in transit everywhere (HTTPS/TLS).
• Encryption at rest for sensitive content. In the Jinko app, captured message excerpts and alert evidence are encrypted with a per-family key (AES-256-GCM). The key is itself protected, and destroying it renders the data permanently unrecoverable - which is exactly how deletion works.
• Access controls. Data is isolated per family / per workspace, enforced at the database layer, so one customer cannot see another's data.
• We limit staff access and keep it to what's necessary to run and support the service.

How long we keep it

• Jinko raw captures: the default is to keep nothing - captured content is analyzed and then discarded; only the resulting alert is kept. If a parent turns on retention, a hard 30-day maximum applies, enforced by the system.
• Jinko alerts: kept until the parent deletes them or deletes the family's data.
• JinkoUp content: kept while your workspace exists; deleted when you delete it.
• Account & limited billing records: kept as long as your account is active, and afterward only as required for legal, tax or fraud-prevention purposes.

When we share information

We do not sell personal information. We share it only in these cases:

• Service providers (sub-processors) who help us operate, under contract and only as needed - for example cloud hosting and database (Supabase), push notifications (Google Firebase Cloud Messaging / Apple Push), and transactional email (Resend). Payments are handled by the Apple App Store and Google Play; we never receive your full card details.
• Within your own team or family - e.g. workspace members see shared projects; a parent sees their child's alerts.
• Legal & safety - to comply with the law, or to protect the rights, safety and security of people and our service.
• Business transfers - if we're ever involved in a merger or acquisition, with notice and the same commitments.

Your choices and rights

You can access, correct, export, or delete your personal information. Depending on where you live (including under PIPEDA, Québec Law 25, the GDPR/UK GDPR, and U.S. state laws), you may have additional rights such as objecting to or restricting certain processing. To exercise any of these:

• Use the in-app controls (Settings) to edit or delete data directly, or
• Follow Delete your account & data, or
• Email privacy@jinkoapps.com.

We'll respond within the time required by applicable law, and we won't charge you for a reasonable request.

Where your data is processed

Our infrastructure is hosted in the United States. If you use our products from Canada or elsewhere, your information may be processed in the U.S. and other countries where our service providers operate, with appropriate safeguards for international transfers.

Changes to this policy

We may update this policy as our products evolve. We'll change the “Last updated” date above and, for material changes, give notice in the app or by email.

Contact us

Questions or requests? Email privacy@jinkoapps.com, or write to Jinko Apps Inc., Montréal, Québec, Canada.