Last updated: 19 August 2026
Welcome to myJRNY. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how JRNY, Inc. ("myJRNY," "we," "us," or "our") collects, uses, discloses, and safeguards your information when you use our mobile applications, our website at myjrny.app, and the public post-sharing pages we host (collectively, the "Services").
Please read this policy carefully. If you disagree with its terms, please discontinue use of our Services. By accessing or using the Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.
We collect information you provide when you create an account, use our Services, or communicate with us, including:
When you use our Services, we automatically collect certain technical and usage data, including:
We may also receive information about you from third parties, such as:
Every account is verified before it can be used. Verification is carried out inside the app by our provider, Didit.
Adults photograph a government-issued identity document and take a selfie. Where your document supports it, the app can also read the document’s NFC chip. We receive back your first and last name, date of birth, gender, and the city, region and country shown on the document. These values populate your profile and cannot be edited by you afterwards. If the verification also confirms your email address, that confirmed address replaces the one you signed up with.
A child account is verified by estimating age from a selfie. Where the estimate is inconclusive, the app asks for an identity document instead. An account assessed as at or above our child age limit cannot continue as a child account.
Facial images used for verification and age estimation are biometric data. They are captured and processed by Didit, not by us. We receive only the outcome of the check, the identity fields listed above, a session reference, the status of the check and the number of attempts made. Where consent is required for biometric processing we rely on the consent given before verification begins; for a child account, a parent or guardian gives that consent.
We use the information we collect to provide, improve, and personalize our Services. Specifically, we use your information to:
Where UK or EU data protection law applies, our legal bases are: performance of our contract with you, to operate your account and provide the Services; our legitimate interests in keeping the Services safe, secure and working; compliance with our legal obligations; and your consent, which we rely on for identity and age verification (including the biometric processing it involves) and for push notifications. You can withdraw consent at any time, though withdrawing consent to verification means the account can no longer be used.
myJRNY does not show advertising. We do not run ads on the Services, we do not use advertising networks or advertising identifiers, and we do not build advertising profiles. We do not sell your personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined under United States state privacy laws.
If this ever changes we will update this policy and give notice in the app before any advertising is introduced.
We keep your personal information for as long as your account exists. You can delete your account at any time from Settings. Deletion takes effect immediately and is not reversible: your account record, your posts and their photos and videos, your comments, reactions and saved posts, your notifications, your device and push-notification records, and your verification records are erased. Where your name or photo appears inside another person’s content — in a comment thread, for example — it is replaced with an anonymous placeholder rather than removed, so that the other person’s content still makes sense. We may keep a limited record where we are required to for legal or compliance purposes, to prevent fraud, or to resolve a dispute.
This section is our data retention policy, and it applies to children’s personal information as well as adults’. We do not retain personal information indefinitely: we keep each category only for as long as it is needed for the purpose it was collected for, and delete it on the schedules set out here.
Some records are deleted automatically on a fixed timer: a sign-up that is never verified is deleted after 24 hours; a revoked share link is deleted 7 days after it is revoked; a parental approval request that is never answered expires after 14 days; and a password reset link expires after 60 minutes.
Server and crash logs held by our infrastructure providers are retained on those providers’ standard schedules. They are not used to build any profile of you.
Depending on your location, you may have the following rights with respect to your personal information:
To exercise any of these rights, contact us at privacy@myjrny.app, or in the app through Settings → Help → Contact Support. We will respond within the period the applicable law allows — one month under UK and EU law, and 45 days under United States state privacy laws. We may need to verify your identity before fulfilling your request. A parent or guardian may exercise these rights on behalf of a linked child.
myJRNY is designed to be used by children, with a parent or guardian involved. This section applies in addition to the rest of this policy.
A child account cannot be used until it is linked to a verified adult. The adult completes identity verification with a government-issued document before the link can be made, and must expressly approve the child’s account. We treat that approval as verifiable parental consent under the Children’s Online Privacy Protection Act (COPPA), and as the consent of the holder of parental responsibility under Article 8 of the UK and EU GDPR.
We collect from a child only what the Services need: their name, username, profile photo, city, gender, date of birth, the activities they choose, the content they post, and the technical records described in Section 2.2. A child account does not need a personal email address. We do not require a child to provide more information than is reasonably necessary in order to take part.
A child’s age is verified before their account becomes active. Section 2.4 explains how that verification works and who performs it.
A linked parent or guardian may at any time review the personal information we hold about their child, correct it, require us to delete it, refuse to permit any further collection or use of it, and control what the child can do in the app through parental controls — including whether the child’s account is public, whether they can post publicly, and whether they can connect with other users. These controls are in Settings; requests can also be sent to privacy@myjrny.app.
Facial images used for age estimation, and the details read from an identity document, are biometric identifiers and government-issued identifiers. We treat them as personal information subject to this policy and to the protections described in Section 2.4.
On a child account we collect technical information only to the extent needed to operate and protect the Services — what COPPA calls support for the internal operations of the service. Specifically, we use it to authenticate the account, deliver the notifications the account has enabled, keep the Services working and diagnose faults, understand how the Services are used so that we can improve them, and detect and investigate fraud, abuse and behaviour that puts a child at risk. This is the minimum required to keep children safe on the Services and is not optional. We do not use that information to contact a child individually, to build an advertising or marketing profile, or for any purpose beyond those operations, and advertising features and advertising identifiers are switched off in the analytics we use.
We do not show advertising to children, we do not use a child’s personal information for marketing, and we do not disclose it to any third party for targeted advertising or for training artificial intelligence models. We do not sell it. It is disclosed only to the service providers listed in Section 4.2.
JRNY, Inc. is a Delaware corporation headquartered in New Jersey, United States, and your information is processed in the United States. If you use the Services from outside the United States your information will be transferred there, and United States data protection law may differ from the law where you live. For transfers from the United Kingdom, the European Economic Area or Switzerland we rely on the European Commission’s Standard Contractual Clauses and the UK Addendum, together with the equivalent terms in our providers’ data processing agreements.
We protect your personal information with technical and organisational measures appropriate to its sensitivity. Data is encrypted in transit and at rest by our infrastructure provider, and access to production data is restricted. Photos and videos are stored privately: they are never given a permanent public address, and are served only through links that expire — after 12 hours in the app, and after 6 hours on a share page.
We maintain a written information security program overseen by a member of our team which covers children’s personal information. The program covers the risks to children’s data, the safeguards we put in place against those risks, and a review of how well those safeguards are working, each revisited at least once a year.
While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We encourage you to use a strong, unique password and to keep your device locked.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons. When we make material changes we will notify you by posting the updated policy at myjrny.app/privacy and in the app, updating the "Last updated" date, and — where required by law — seeking your consent or the consent of a linked parent or guardian. We encourage you to review this policy periodically.
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Privacy Team:
JRNY, Inc.JRNY, Inc. is the data controller for personal information processed through the Services. If you are in the United Kingdom or the European Economic Area, you may also lodge a complaint with your local data protection authority.