Jewel Connect

Privacy Policy

Effective 6 August 2026 · Controller contact: privacy@joinjewel.app

Jewel Connect (“we”, “the app”) is a real-time social discovery messenger. This policy explains what personal data we process, why, how long we keep it, and your rights under the EU General Data Protection Regulation (GDPR) and similar laws.

1. Who we are

The data controller for Jewel Connect is the operator of joinjewel.app. For privacy requests email privacy@joinjewel.app (or support@joinjewel.app).

2. What we collect

Data	Purpose	Retention
Display name; optional mood / interest tags	Show you in the online list and match sessions	Until you Leave or the session expires (typically ≤ 24 hours)
Session token (authSessionId) and internal user id	Authenticate API / WebSocket access	Revoked on Leave; otherwise expires with the session TTL
Chat messages	Ephemeral messaging during a live session	Cleared when the session ends; not stored permanently on our servers
Microphone / camera media	Voice and video calls you start or accept	Peer-to-peer or encrypted TURN relay; we do not record calls
Technical connection data (e.g. IP in short-lived logs, device/OS headers)	Operate connections, security, rate limits	In memory while connected; operational logs kept as short as practical

We do not require an account, email, or phone number to use the app. We block sharing of phone numbers in chat.

3. Legal bases (GDPR)

• Contract / service delivery — presence, matching, chat, and call signaling so the app works as you request.
• Legitimate interests — security, abuse prevention, and reliability (balanced against your rights).
• Consent — microphone and camera access via your device permission prompts.

4. How we use data

• Operate presence, matching, chat, and call signaling
• Enforce safety rules (rate limits, phone-number blocking)
• Improve reliability (aggregate connection errors — no chat content in production logs)

5. Sharing & processors

We do not sell personal data. We use service providers (“processors”) to run the product:

• Cloud hosting (e.g. Railway) — API and WebSocket servers
• DNS / edge (e.g. Cloudflare) — domain and network protection
• TURN relay (e.g. Metered) — encrypted call media when peer-to-peer is not possible (DTLS-SRTP)
• App stores (Apple / Google) — distribution only; they process data under their own terms when you download the app

Some processors may be outside the EEA. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) or an adequacy decision.

6. Your choices & GDPR rights

• Leave anytime in the app — your session token is revoked and you disappear from presence
• Deny microphone or camera — calls will not work; chat still works
• Access, erasure, restriction, objection, portability — email privacy@joinjewel.app. Because we do not keep durable accounts, Leave usually erases what we hold about your live session; we will still help with residual log questions
• Complaint — you may contact your local EU/EEA supervisory authority

We aim to respond to privacy requests within 30 days.

7. Children

Jewel Connect is not directed at children. In the EU/EEA you must meet the digital consent age in your country (often 16; never under 13). Do not use the app if you are under the applicable age.

8. Changes

We may update this policy; the effective date above will change. Material changes will be reflected on this page. Continued use after an update means you accept the revised policy.

9. Contact

Privacy: privacy@joinjewel.app
Support: support@joinjewel.app