1. Introduction
JEL UP ("we", "our", "us") operates a social networking platform for real-world activities — users post plans, join nearby activities and events, and coordinate in group chats. This Privacy Policy explains what data we collect, why we collect it, and your rights regarding that data.
By creating an account or using the JEL UP application, you agree to the practices described in this policy. If you do not agree, please do not use our services.
2. Information We Collect
a) Information You Provide
| Data | Purpose |
|---|---|
| Phone number | Account creation & OTP-based authentication |
| Display name & bio | Profile personalization |
| Profile picture | Help other users recognize you |
| Interests & visibility preferences | Suggest relevant activities; control whether you're discoverable |
b) Information Collected Automatically
| Data | Purpose |
|---|---|
| Precise GPS location (latitude & longitude) | Show activities and events near you; core feature |
| Online/offline status & last-seen timestamp | Real-time presence indicators in chats |
| Device information (OS, app version) | Bug diagnosis & compatibility |
c) Information Created During Use
| Data | Purpose |
|---|---|
| Activities & join requests | Plans you host or ask to join |
| Group chat messages | Coordination inside activities and communities you've joined |
| Vibe Checks, Vibe Ups & trust score | Post-activity feedback and reliability signals |
| Block list | Safety — prevent unwanted interactions |
3. How We Use Your Information
- Provide the Service: Surface nearby activities that match your interests, deliver join requests and notifications, enable real-time group chat.
- Safety & Moderation: Enforce blocks, detect abuse, and protect the community.
- Improve the Product: Analyze aggregated, anonymized usage patterns to improve features.
- Communicate: Send service-critical messages (OTP, security alerts). We do not send marketing SMS.
4. Location Data
Location is central to JEL UP. Your precise coordinates are used only to show activities near you and to let your plans reach nearby users. We do not build location history profiles or track your movements over time.
- Location is collected only when you are actively using the app (foreground).
- You can disable location sharing by toggling visibility off or revoking OS-level location permissions.
- Your raw coordinates are never exposed to other users — they only see an activity's meeting place and an approximate distance.
5. Data Sharing
We share data only in these limited circumstances:
- Other Users: Your display name, bio, profile picture, online status, and approximate distance are visible to nearby users (subject to your visibility settings).
- Service Providers: OTP delivery via Fast2SMS (receives your phone number only). Cloud infrastructure providers that host our servers.
- Legal Requirements: If required by law, court order, or to protect safety.
6. Data Retention
- Account data: Retained while your account is active.
- Chat messages: Stored persistently until the chat is deactivated or you delete your account.
- Soft-deleted accounts: When you delete your account, it is deactivated (soft-deleted). Your data is retained for up to 30 days for recovery purposes, after which it may be permanently purged.
- OTP records: Automatically expire after 5 minutes.
7. Your Rights & Choices
- Access & Correction: View and update your profile data anytime via the app settings.
- Visibility Control: Toggle your discoverability on or off at any time (Incognito).
- Block Users: Block any user to prevent them from seeing you or contacting you.
- Delete Account: Soft-delete your account from the app settings. This deactivates your profile, hides you from all users, and disables your chats.
- Data Portability: Contact us to request an export of your data.
8. Security
We take reasonable technical and organizational measures to protect your data:
- All API and WebSocket communication is encrypted via TLS (HTTPS/WSS).
- Authentication uses JWT tokens with short-lived access tokens (1 hour) and refresh tokens (7 days).
- Passwords are never stored in plaintext; OTP-based login eliminates password-related risks.
- Rate limiting is enforced on authentication and activity endpoints.
No system is 100% secure. If you become aware of a security vulnerability, please contact us immediately.
9. Children's Privacy
JEL UP is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account, please contact us and we will promptly deactivate it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Effective" date at the top and, for material changes, notify you via in-app notification.
11. Contact Us
If you have questions about this Privacy Policy or your data, reach out to us:
Subject line: Privacy Inquiry — [Your Username]