Jornio
Privacy policy
Jornio stores what you put into your trips so the app can work and so you can share trips with others. We do not sell your data and we do not show ads.
Who is responsible
Jornio is operated by Devon Group AB (Devon), Sweden. Contact for any privacy question: devon@devon.se.
What we collect
- Account: your email address, your display name and a password. The password is stored only as a salted hash, never in readable form.
- Trip content you create: trips, itinerary days and items, places, bookings, expenses and payments, checklists, and ratings of published trips.
- Sharing and members: the email addresses you invite to a trip, the members of a trip and their roles, and the public share links you create.
- Legal acceptance: which version of the terms and privacy policy you accepted, and when.
- Technical data: your app language setting, sent with each request, and standard server logs and error telemetry (such as request time, error details and your account ID) used to run and fix the service. This is processed with Azure Application Insights and kept for 90 days.
Why we use it
- To provide the app: sign you in, store your trips and sync them between your devices.
- To let you collaborate: send trip invitations, show trip members the shared content, and serve public share links you choose to create.
- To send the emails the app needs: invitations, password reset and similar service messages. We send no marketing email.
- To keep the service secure and working.
The legal basis is the performance of the service you asked for (GDPR article 6.1.b), and our legitimate interest in running a secure service (article 6.1.f).
Who can see your data
- Members of a trip can see that trip's content.
- Anyone with a public share link you created can see the content that link shows. You can remove the link at any time.
- Trips you publish to Explore are visible to other Jornio users.
- Nobody else sees your trips. We do not sell or rent personal data.
Service providers
- Microsoft Azure hosts the API, the database and the logs, in the Sweden Central region (EU).
- Resend delivers our service emails. It receives the recipient address and the message content.
The app contains no advertising or third-party analytics tracking.
How long we keep it
We keep your data for as long as your account exists. You can delete your account in the app under Settings. That permanently deletes your login (email, name and password hash) and your sign-in sessions, and handles your trips like this:
- Private trips only you were part of are deleted, with everything in them.
- Private trips shared with others pass to the member who joined first, and you are removed from them.
- Trips you published to Explore stay available to other users. They are shown as made by "Jornio traveler", and nothing links them back to you.
- Your memberships and checklist assignments are removed.
Notes, titles, place names and other text you wrote in a published trip are kept as you wrote them. If you put personal details in that text, they remain visible, so do not write them there. Public share links to such trips keep working. Trips other users copied from yours are theirs and are not affected. Backups are overwritten on a regular cycle.
Your rights
Under the GDPR you can ask for access to your data, correction, deletion, a copy in a portable format, and you can object to or ask us to restrict processing. Email devon@devon.se and we will answer within 30 days. You can also complain to the Swedish Authority for Privacy Protection (IMY), imy.se.
Children
Jornio is not directed at children under 16, and we do not knowingly collect their data.
Changes
If we change this policy in a way that matters, we will update the date above and ask you to accept the new version in the app.