Privacy
Privacy Policy
What we collect, why we need it, who can see it, and how you can delete it.
Scope and our role
This Privacy Policy explains how 家屿 Jiayu (“Jiayu,” “we,” “us,” or “our”) handles personal information when you use the Jiayu mobile app and this website.
Jiayu is a private family space. It is not an advertising platform, data broker, emergency service, or public social network.
Information we collect
Account and identity
Email address, display name, internal user identifier, authentication provider, and provider identifiers when you choose Apple or Google sign-in. We do not receive your Apple or Google password.
Family and content
Family name, membership and role, invitation records, memories, titles, notes, dates, optional ratings, comments, likes, collections, and photos or other media you explicitly choose to upload.
Location you choose to share
Precise or approximate coordinates, accuracy, sharing mode, consent time, expiry time, and update time. Jiayu does not collect family location unless you actively enable sharing and grant system permission.
Security and operational data
Session and device security records, request timestamps, IP address, basic device or network information, email-delivery status, and limited logs needed to prevent abuse, diagnose failures, and operate the service.
Device permissions
- Photos: used only for media you choose through the system picker.
- Location: used only after you start family location sharing. Background permission supports updates while the app is not open.
- Face ID: the operating system tells Jiayu whether authentication succeeded. Jiayu does not receive or store your face scan or biometric template.
- Local network: development builds may request this to connect to a developer computer. It is not used to discover family devices in the release service.
How we use information
- Authenticate you and secure your account and sessions.
- Create and operate the private family spaces you join.
- Store, display, and synchronize content you choose to share.
- Provide consent-based family location sharing.
- Send login codes and essential service communications.
- Detect abuse, investigate failures, and protect users.
- Comply with law and enforce our Terms of Use.
Location sharing safeguards
Location sharing is off until you turn it on. You choose precise or approximate sharing and a duration. Approximate coordinates are rounded again by the server. Only current members of the selected family can access an active share.
When the server receives a stop request, it removes the active location. If a device cannot deliver the stop request immediately, a location becomes unavailable no later than 15 minutes after its last secure update. Expired consent and locations are cleaned automatically.
Background updates may be delayed or stopped by the operating system, connectivity, battery settings, or device state. Jiayu is not an emergency-location service and must not be relied on to locate someone in an emergency.
Retention and deletion
Account and family content is generally kept while your account remains active or as needed to provide the service. Active location rows have the short expiry described above. Security, delivery, and operational logs are kept only for limited periods appropriate to their purpose and provider schedules.
You can permanently delete your account inside Jiayu. Deletion removes your login, profile, authored memories and comments, private uploads, and location records. If you own a family with other members, ownership transfers safely; an empty family is deleted. Apple-linked accounts must complete Apple confirmation so Jiayu can revoke the Apple sign-in credential before deletion.
Limited copies may remain temporarily in encrypted backups or where retention is legally required. They are isolated from normal product use and removed or overwritten under applicable retention schedules.
Security
Jiayu uses encrypted transport, private storage, row-level access controls, server-side authorization, short-lived sessions, and device-secure storage. Sensitive device actions can require Face ID, and account deletion requires server confirmation.
No system is perfectly secure. Protect your device and email account, use device passcode and biometric protection, and report suspected unauthorized access promptly.
Your choices and rights
You can decline optional permissions, choose approximate location, stop sharing, leave a family where available, sign out other sessions, and delete your account. Depending on where you live, you may also have rights to access, correct, delete, restrict, or receive a copy of personal information, and to appeal or complain to a regulator.
Contact us to exercise a right. We may need to verify your identity and may retain limited records of the request where required.
Children and families
Jiayu is designed for family coordination but is not directed to children who are below the minimum age to consent to online services in their location. A minor should use Jiayu only with permission and supervision from a parent or legal guardian. Contact us if you believe a child’s information was provided without appropriate authorization.
International processing
Our providers may process information in countries other than where you live. Where required, we use contractual and technical safeguards for international processing. Local mandatory privacy rights continue to apply.
Changes and contact
We may update this policy as Jiayu changes. We will update the effective date and provide additional notice when required.
Privacy questions and requests: privacy@jiayu.app