JouraLast updated: September 29, 2026. This Privacy Policy explains how Wandering Castle LLC ("Wandering Castle," "we," "us") handles information in connection with the Joura mobile application and the heyjoura.com website (together, the "Service"). By using the Service you acknowledge this Policy. If you do not agree, please do not use the Service. If you are in the EU, EEA, or UK, please also read our EU / UK Privacy Notice; California residents, see the California section below.
The short version
- Your child's information and the moments you write are encrypted and kept on your device. They are not transmitted to us unless you choose to send something (like feedback, a poll answer, or a moment you send so we can add a tip), and we cannot read what stays on your device.
- Joura works with no account and no login. We use a random, pseudonymous identifier, not your name or email. If you choose to save an account (with Google, Apple, or your email), we keep your email address and a sign-in ID so your subscription can follow you to a new phone. If you use Google, Google also shares the name and profile picture link on your Google account with us. Your notes and your child's details are never part of your account; they stay on your phone.
- We collect a small amount of anonymous, non-content diagnostic and usage data (which screens are used, whether the app crashed) to keep Joura working. This diagnostic and usage data never includes your child's information. If you choose to type a hard moment into a website demo, send feedback, answer a poll, or send us a moment so we can add a tip, we receive what you send, so please leave out personal details.
- If you subscribe, our payment partners process your purchase. If you send feedback, we receive what you chose to write.
- We don't sell your information, and we never send your child's details or anything you write to advertising companies. To measure our own ads, the app shares a few app events (install and open, finishing setup, viewing the subscription screen, starting a trial, a purchase's price and currency) and your phone's advertising ID (on iPhone only if you allow tracking) with Meta and TikTok. We never use your family's private entries to train AI models.
The sections below are the full, controlling detail.
1. Who we are
The Service is provided by Wandering Castle LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, USA, a Wyoming company, which is the data controller for the limited information described here. You can reach us at support@heyjoura.com for any privacy question or to exercise your rights. Given the small volume and anonymous nature of the data we process, we are not required to appoint a data protection officer and have not appointed one.
2. What stays on your device (unless you choose to send it)
Joura is built privacy-first. The sensitive content of your use, including the moments you write, your notes, your child's name and details, and the suggestions and journal Joura builds for you, is stored in an encrypted database on your own device. This content is not sent to our servers unless you choose to send part of it (see Section 3), and we have no ability to access or read what stays on your device. If you use voice input, your speech is transcribed to text on your device; the audio is not sent to us.
3. What we collect, why, and who processes it
To keep the Service running, safe, and improving, we and a small set of service providers process the limited information below. None of it includes the on-device content described in Section 2, except anything you choose to send us yourself.
| What | Why | Contains | Processor |
|---|---|---|---|
| Product analytics | Understand which features are used so we can improve the app | Structural events only (e.g. "app opened," "screen viewed," counts, yes/no flags), tied to a random, pseudonymous identifier, not your name or your child's details. Our analytics provider may derive an approximate, coarse location from your device's regional setting or network connection. Never your child's name, and never the private notes you keep inside the app. If you saved an account, this identifier is linked to it. | PostHog; Supabase |
| Crash & error diagnostics | Detect and fix crashes and errors so the app stays reliable | Technical, structural information about where an error occurred. The crash tool is configured with personal identifiers off, so it does not store your IP address, and it never carries your typed content or your child's information. | Sentry |
| Subscriptions (only if you buy Joura Pro) | Provide, restore, and manage a paid subscription | Purchase and subscription status tied to a pseudonymous identifier (and to your account, if you saved one). Your actual payment details are handled by the app store, not by us. | RevenueCat; Apple App Store; Google Play |
| Feedback (only if you choose to send it) | Read and act on problems and ideas you send us | What you type, plus app version/platform and the pseudonymous identifier, plus an email address only if you choose to give one for a reply. | Supabase; Slack (our team's internal feedback digest) |
| Onboarding note & error reports (only if you choose to send them) | Understand what brought you to Joura; receive a report when something breaks | The optional free text you type at the "what brought you here" step, or an optional note on a one-tap error report, plus (for an error report) structural error details, and an optional email if you choose to give one. The error details never include your child's information. The notes are sent as you type them, so please leave out names. | Supabase |
| Poll answers (only if you answer a poll) | Decide what we build next | Your answer and the pseudonymous identifier (linked to your account, if you saved one). Never your notes. | Supabase; Slack (poll totals only) |
| A moment you choose to send us (only if you tap send) | Add a tip for a moment Joura couldn't help with | The words of that one moment (we replace your child's name with [child]), basic app information like the version, and the pseudonymous identifier. Never your journal or your other moments. | Supabase; Slack (our team's internal feedback digest) |
| Your account (only if you choose to save one) | Sign you in, keep your subscription with you on a new phone, and let you delete your account | Your email address, how you signed in (Google, Apple, or email), and the sign-in ID from that service. With Google, also the name and profile picture link on your Google account. With Apple, you can share a private relay address instead of your real email. Your notes, your child's details, and your journal are not part of your account and stay on your phone. | Supabase; Resend (sends the sign-in code). Sign-in is handled by Google or Apple under their own terms (Section 11). |
| Email updates (only if you ask for them) | Tell you what we decide after a poll and, only if you tick the box, send tips and updates | The email you give us, where you gave it (a poll, your account, or Settings), and whether you said yes to tips. We include an unsubscribe link in every update we send. | Supabase; Resend |
| Product updates / contact (website) | Send occasional product updates if you opt in, including a one-time check-in asking whether a suggestion helped, or reply to you | The email address you submit. | Supabase; email provider |
| Text messages (only if you give your number and check the box) | Send occasional tips and updates by text | Your mobile number, plus a record of your consent (when you agreed, the exact wording you agreed to, the page, and your IP address). Message frequency varies; message and data rates may apply. Reply STOP to cancel at any time, or HELP for help. Consent is not a condition of any purchase. We never sell your number. | Supabase; our text-message provider (when we start texting) |
| Website analytics | Understand general website traffic | Privacy-conscious, aggregate page analytics. Inputs are masked; we do not record your screen. | PostHog; Vercel |
| Advertising measurement (app) | Measure whether our own ads work | A few app events (install and open, finishing setup, viewing the subscription screen, starting a trial, a purchase's price and currency) and your phone's advertising ID (on iPhone only if you allow tracking). Never your child's details or anything you write. The Settings analytics switch does not change these; to limit them, reset or delete your phone's advertising ID (on iPhone, don't allow tracking), or email us. | Meta Platforms; TikTok |
| Advertising measurement (website) | Measure whether our ads bring visitors to the website | The TikTok Pixel records page visits and clicks on this site. Outside the EU, EEA, UK and Switzerland it runs by default and you can turn it off under Cookie settings; in those places it runs only after you accept; it never runs if your browser sends Global Privacy Control. | TikTok |
| Interactive website demo (only if you use it) | Learn what parents actually need so we can improve Joura | If you type a hard moment into a demo on our website to see a suggestion, we save the words you type. This only happens when you submit the demo, and only if you have accepted analytics. Please do not include names or other personal details. Word patterns from what you type (never your name) help the Joura Attunement Engine understand how parents describe hard moments. We never connect what you type to your email address or phone number. | PostHog; Supabase |
| Comments on our social media posts (only if you comment) | Reply to you, send you one tip, and improve Joura's tips and how the Joura Attunement Engine understands the way parents describe hard moments | When you comment on a Joura post on Facebook or Instagram, Wandering Castle LLC (not Meta) receives the comment through Meta's tools. The Joura Attunement Engine picks a reply from Joura's own tip library, and on Facebook we may send you that tip in a private message. We keep the comment text without your name, handle or profile details, never sell it, never quote it publicly, and never send it to outside AI services. We delete the text within 90 days, sooner if you delete the comment or ask. We may keep short word patterns that can't identify anyone (for example, "won't get in the car seat") to help the engine recognize how parents describe problems. We never connect what you comment to your email address or phone number. To stop replies or ask us to delete your comment data, reply STOP or email us. | Meta (Facebook, Instagram); Supabase |
Except for Meta and TikTok, which receive the advertising-measurement data under their own terms and privacy policies, these service providers act as our processors under contract and only process information to provide their service to us. Where a provider offers model-training on submitted data, we do not enable it for your content. The current list of providers, what each handles, and the safeguards in place is on our Subprocessors page, and the website's use of cookies and analytics is described in our Cookie Policy.
Automated decisions and AI
Joura runs on a deterministic, on-device engine, not an AI system or a chatbot. It does not use a large language model; its suggestions are drawn from published guidance by named child-development and pediatric sources, selected and phrased by that engine on your device, not generated by AI. The content you enter is never sent to any outside AI service and reaches us only if you choose to send it, and we do not make decisions about you by solely automated means that produce legal or similarly significant effects. Joura never diagnoses your child, and its suggestions are general information for you to weigh with your own judgment. If we ever add a generative-AI feature, we will update this section and tell you plainly before it ships.
4. What we do not do
- We do not require an account, and the app never asks for your name. (If you choose to save an account with Google, Google shares the name on your Google account with us, as described in Section 3.)
- We do not sell or rent your information. The advertising measurement described in Section 3 may count as "sharing" for cross-context behavioral advertising under some U.S. state privacy laws; you can opt out as described in Section 8.
- We do not send your child's information to advertising networks.
- We do not use your family's private, on-device entries to train artificial-intelligence models.
5. Children's information
Joura is a tool for parents and caregivers, who must be adults. It is not directed to children and we do not knowingly let children use it or knowingly collect personal information from children. A parent may choose to record information about their own child; that information is kept encrypted on the parent's device as described in Section 2 and is not collected or read by us unless the parent chooses to send it (for example, a moment sent so we can add a tip, with the child's name replaced by [child]). Because the diagnostic and usage data in Section 3 contains no content, it does not include information about your child. If you believe a child has provided us information directly, contact us and we will delete it.
6. Legal bases (for users in the EEA / UK)
Where the GDPR or UK GDPR applies, we rely on: legitimate interests (keeping the Service secure and reliable, and improving it, using the anonymous, non-content data in Section 3); performance of a contract (providing a subscription you purchase, and an account if you choose to save one); and consent (for optional feedback, poll answers, and moments you choose to send, for email updates and tips, and any future optional features that would change this). You may object to processing based on legitimate interests as described in Section 8.
7. Where information is processed, and international transfers
We operate primarily on servers located in the United States. If you use the Service from outside the United States, information described in Section 3 will be processed in the United States and other countries where our providers operate. Where required, transfers of personal data out of the EEA or UK are covered by appropriate safeguards such as Standard Contractual Clauses and data-processing agreements with our providers.
8. Your rights and choices
You can:
- Access, correct, export, and delete your on-device information directly in the app at any time. Deleting the app removes its data from your device.
- Turn feedback off simply by not sending it, and unsubscribe from our product-update emails using the link in our emails or by contacting us.
- Depending on where you live (including under the GDPR/UK GDPR and U.S. state laws such as the California CPRA), request access to, correction of, deletion of, or a copy of the limited information we hold that is linked to your anonymous identifier; object to or restrict certain processing; and withdraw consent. If you saved an account, you can delete it and the data tied to it in the app (Settings, then your account, then Delete my account), or email us from that account's email address. Without an account we hold no name, and an email only if you gave us one, so we may be unable to link a request to a specific person without additional information, and in some cases cannot identify your data at all; we will explain if that is the case.
- We do not sell personal information. To opt out of the advertising measurement in Section 3, reset or delete your phone's advertising ID (on iPhone, don't allow tracking for Joura), turn off the website pixel under Cookie settings (or use Global Privacy Control), or email us and we will help.
To make a request, email support@heyjoura.com. We will not discriminate against you for exercising your rights. If you are in the EEA or UK you may also lodge a complaint with your local data-protection authority; see the EU / UK Privacy Notice for detail.
California residents (CCPA / CPRA)
If you live in California, this is our notice at collection and your rights. In the past 12 months we have collected, at most, identifiers (an anonymous identifier, your phone's advertising ID, your email address and, if you give it, your phone number, and, only if you save an account, a sign-in ID and the name on your Google account if you sign in with Google), internet or other electronic activity (structural, non-content app and site usage), commercial information (subscription status), and, only if you choose to send it, the content of your feedback, your poll answers, a moment you choose to send us, an onboarding note or one-tap error-report note, the words you type into an optional website demo, comments you post on our Facebook or Instagram posts, and an optional email. We collect it for the business purposes described above and keep it as described in the Retention section. You have the right to know/access, delete, and correct this information, to receive a copy, and to opt out of the sale or sharing of personal information and to limit the use of sensitive personal information.
We do not sell your personal information. The advertising measurement described in Section 3 (app events and your phone's advertising ID sent to Meta and TikTok, and the TikTok Pixel on our website) may be "sharing" for cross-context behavioral advertising under California law. You can opt out by resetting or deleting your phone's advertising ID (on iPhone, don't allow tracking for Joura), by using Global Privacy Control or Cookie settings on our website, or by emailing us. We do not use or disclose sensitive personal information for purposes that require a "limit" option. We honor Global Privacy Control (GPC) signals on our website. We respond to verifiable California requests within 45 days (extendable once). You may use an authorized agent, and we will not discriminate against you for exercising your rights.
9. Retention
We keep information only as long as we need it, using these guides:
| Information | How long we keep it |
|---|---|
| On-device content (your moments, notes, your child's details, journal) | Until you delete it in the app or remove the app; it reaches us only if you choose to send part of it (see Section 3) |
| Anonymous product analytics | Up to 14 months, then deleted or aggregated |
| Crash and error diagnostics | Around 90 days |
| Feedback and error reports you send (and any optional email) | While needed to resolve the issue, and up to 24 months, then deleted |
| Subscription records | While your subscription is active and as required to meet legal, tax, and accounting obligations (generally up to 7 years) |
| Newsletter email | Until you unsubscribe |
| Your account (email, sign-in ID, and the name Google shared) | Until you delete your account. Deleting in the app removes it right away; a request by email is handled within 30 days |
| Email updates and your tips choice | Until you unsubscribe, delete your account, or ask us to delete it |
| Phone number and text-message consent record | Until you reply STOP or ask us to delete it; the consent record itself is kept up to 5 years after that to show you agreed |
| Social media comment text | Up to 90 days, sooner if you delete the comment or ask; de-identified word patterns that can't identify anyone may be kept |
| Website demo text | Up to 12 months, then deleted; de-identified word patterns may be kept |
When information is no longer needed for these purposes, we delete or anonymize it, unless a longer period is required by law.
10. Security, and your part in it
We use encryption on your device (an encrypted local database) and reputable providers with their own safeguards for the limited data in Section 3. No method of storage or transmission is 100% secure, and we cannot guarantee absolute security. You are responsible for the security of your device and passcode/biometrics, and for keeping any recovery phrase Joura gives you private and safe; if you lose your device or recovery phrase, we may be unable to recover your on-device information for you.
11. Third-party services and links
The app stores (Apple, Google) and the providers named in Section 3 have their own terms and privacy policies that govern their handling of information. If you save an account with Google or Apple, that sign-in is provided by Google or Apple under their own terms and privacy policies; they are independent services, not our processors. We are not responsible for the practices of third parties. If we link to another site or service, this Policy does not apply to it.
12. Changes to this Policy
As Joura grows and adds features, we will update this Policy and the "Last updated" date above. If a change materially expands what we collect, we will take reasonable steps to notify you and, where required, obtain your consent. Continuing to use the Service after an update means you acknowledge the current Policy.
13. Contact
Questions, requests, or concerns about privacy: support@heyjoura.com.
14. Governing language
This Policy is written in English. Any translation is provided for convenience only; the English-language version is the authoritative and legally controlling version, and prevails in the event of any conflict.