We use your data to run Jiffy, sync your notes, and send reminders.
We do not sell your data and we do not use your note content to train AI models. This policy explains what we collect, why, and how you control it.
Who we are
Jiffy is a note and reminder app built by Shovelstone. If you have any questions about this policy or your data, email us at info@shovelstone.com.
Data we collect and why
| Data | Purpose |
|---|---|
| Account – email, name (if provided), and OAuth identifiers (Apple/Google). | Create and manage your account, sign-in, and sessions. |
| Notes – titles, content, categories, and reminder times. | Provide the app, reminders, and sync across devices. |
| Voice and audio – recordings you create in the app. | Transcription and note creation, titles, categories, and reminders. |
| Device and technical – device type, OS, app version. | Run the app, sync, and resolve issues. |
| Crash and error reports via Sentry. | Diagnose crashes and improve stability. |
| Security audit records – event times, action outcomes, route templates, and keyed fingerprints of account identifiers, email addresses, and affected resources. | Protect users, investigate abuse, and associate security events across account deletion or a new account using the same email address. |
| Push notification tokens. | Send the reminder notifications you configure. |
How we use your data
- Provide and improve Jiffy (notes, reminders, sync, transcription).
- Process notes with AI only to power features like titles, categories, and reminders. We do not use note content to train AI models.
- Sync your data across devices when you are signed in.
- Send you reminder notifications you configure.
- Comply with law and enforce our terms.
Where data is stored and processed
- Notes and account data are stored and processed on servers hosted with Hetzner.
- Voice processing and AI assistance may be handled by OpenAI or OpenRouter to transcribe and categorize notes.
- On supported devices, some processing can occur on-device; in those cases, note content is not sent to our servers for that processing.
Subprocessors
We use trusted partners to run Jiffy. Their privacy policies explain how they handle data.
Data retention
- We keep your notes and account data while your account is active.
- When you delete your account in Settings > Account > Delete my account, we delete your authentication account, sessions, personal notes, settings, memberships, invitations, and shared notes attributed to you. Group owners must delete their groups or transfer ownership first. The app clears its local notes, backups, and scheduled reminders on the device used for deletion. Offline copies on other devices may remain until cleared or the app is removed.
- Minimal security audit records remain after account deletion and expire 90 days after each event, with expired records removed by scheduled cleanup. These records contain keyed fingerprints rather than raw email addresses or account IDs. They do not contain note content, passwords, authentication tokens, or IP addresses. The fingerprints are pseudonymous personal data, not anonymous data. Access is restricted to authorized backend administrators.
- We process security audit records on the basis of our legitimate interest in protecting users and the service from unauthorized access and abuse. This retention does not keep your account active or allow it to be restored. Contact us if you wish to object to this processing or request erasure; we assess such requests against the applicable security need and your rights.
- Deleted data can remain in restricted backup copies until their rolling expiry: local snapshots are retained for 15 days and remote snapshots for 30 days. Expired audit records must be removed and account deletions reconciled before a backup is restored to active service. Historical archives are handled separately and are not used to operate deleted accounts.
- We retain data longer where required by law.
Your rights
- Access and correction: edit your notes and account details in the app.
- Deletion: use Settings > Account > Delete my account to delete server data.
- Export: email info@shovelstone.com to request an export.
- Opt-out of push: disable reminders in device settings or the app.
- EU/UK/California residents may have additional rights to access, portability, erasure, restriction, or objection. Contact us to exercise them.
Sign in with Apple
If you use Sign in with Apple, we support Hide My Email. Any private relay email address is used only for account and support purposes in line with this policy.
Children
Jiffy is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided data, contact us and we will delete it.
Changes
We may update this policy from time to time. The current version is always at shovelstone.com/jiffy/privacy. We will notify you of material changes in the app or by email when appropriate.
Contact
For privacy questions, requests, or complaints, contact us at info@shovelstone.com. Shovelstone operates Jiffy and is responsible for processing your data.