Legal
Privacy Policy
Last updated: May 5, 2025
Who we are
Journavibe is a time tracking application for solopreneurs and freelancers. The service is operated as an independent product. If you have questions about this policy, contact us at privacy@journavibe.app.
Data we collect
We collect the minimum data necessary to provide the service:
- Account data:Your name and email address, collected when you sign in with Google via OAuth. We do not store your Google password.
- Time entries:The text you enter when logging work (e.g. "wrote blog post for 90 minutes"), the parsed duration, the AI-assigned category, and the timestamp. This data is stored in Supabase and is visible only to you.
- Usage data:Basic product analytics (page views, feature usage events) collected to understand how the product is used. This data is anonymized where possible.
- Payment data:If you subscribe to a paid plan, payment is processed by Stripe. Journavibe does not store your credit card number. Stripe retains billing data under their own privacy policy.
How we use your data
- –To authenticate you and maintain your session.
- –To store, display, and export your time entries.
- –To process your entries through AI categorization (OpenAI API) and return structured results. Your entry text is sent to OpenAI for inference and is subject to OpenAI's data usage policy. We do not use your entries to train AI models.
- –To process subscription payments via Stripe.
- –To send transactional emails (account confirmation, password reset) if applicable.
- –To analyze aggregate, anonymized usage patterns for product improvement.
Data sharing and third parties
We do not sell, rent, or trade your personal data. We share data only with the following sub-processors necessary to operate the service:
OpenAI
AI inference for entry categorization. Entry text is sent to OpenAI's API for processing.
Privacy policy →Your rights (GDPR)
If you are located in the European Union, you have the following rights under GDPR:
- –Right of access — request a copy of the personal data we hold about you.
- –Right to rectification — request correction of inaccurate data.
- –Right to erasure — request deletion of your account and all associated data.
- –Right to data portability — export your time entries as CSV at any time from within the app.
- –Right to object — object to processing based on legitimate interests.
- –Right to lodge a complaint — with your national data protection authority.
To exercise any of these rights, email privacy@journavibe.app. We will respond within 30 days.
Data retention
Your data is retained as long as your account is active. If you delete your account, all personal data and time entries are permanently deleted within 30 days. Stripe may retain billing records as required by financial regulations.
Security
All data is encrypted in transit via HTTPS/TLS. Data at rest is encrypted by Supabase's infrastructure. Authentication is handled via OAuth (Google Sign-In) — we never handle or store passwords. If you discover a security vulnerability, please report it to security@journavibe.app.
Changes to this policy
We may update this policy when the product or legal requirements change. Material changes will be communicated by email or by an in-app notice. The date at the top of this page reflects the latest revision.