Everything we can see. Everything we can’t.
What reaches us
| Data | Can Jelly see it? | Why, and how it’s handled |
|---|---|---|
| Your email address | Yes | To sign you in, send receipts and handle deletion requests. |
| An account ID | Yes | A random number that links your account to your subscription. |
| Your subscription | Yes | Which plan you’re on and when it renews (through Apple or Google). |
| Crash reports | Yes, unless you switch them off | Technical details when the app crashes. Scrubbed of memory text, file names and your email before they’re sent. |
| App usage counts | Yes, unless you switch them off | A short, fixed list of events, like “a memory was saved with 3 photos”. Never what the memory says or shows. |
| Your photos, videos and voice notes | Never | They stay on your phone. Backups and sharing will be end-to-end encrypted. |
| What you write, and transcripts | Never | Same as above. |
| Your children’s names and birthdays | Never | Stored on your phone only. |
| Faces Jelly learns | Never | Face matching is optional, runs on your phone, and is never uploaded or synced. |
| Where photos were taken | Never | Locations are rounded on your phone and kept inside your encrypted memories. |
| A book or calendar you order | Only the print lab, only for that order | See printing & your privacy. |
We do
- Keep your memories on your phone by default.
- Encrypt anything that leaves your phone before it leaves (backup and Family Circle, being built now).
- Ask for a clear yes before every print order, and show you what will be sent.
- Let you switch off crash reports and usage counts in Settings → Privacy.
- Let you delete your account and everything in it from inside the app.
- Publish this page, and update it when anything changes.
We never
- Sell or rent your data. To anyone. Ever.
- Show ads, or let advertisers track you in the app.
- Read, scan or train AI on your memories.
- Give children accounts, or collect anything from children.
- Post anything publicly on your behalf.
- Build a “reset” that would let us unlock your encrypted memories.
Built vs. being built
We’d rather show you the plan than pretend it’s done. This list changes as each piece ships.
- Morning CatchupIn first release
- On-device storage, works offlineIn first release
- On-device voice transcriptionIn first release
- On-device face matchingIn first release
- Season books on your phoneIn first release
- Streaks and remindersIn first release
- Encrypted backup to your own cloudBeing built
- End-to-end encryption for anything that leaves your phoneBeing built
- Family Circle sharingBeing built
- Premium and Family subscriptionsBeing built
- Printed books and calendarsBeing built
- Sign in with Apple and GoogleBeing built
The usage counts, word for word
The app can only send these events. Anything not on this list is dropped before it leaves your phone. Switch them off any time in Settings → Privacy.
app_opened
memory_saved { photos, videos, has_audio, has_text, people, scope }
catchup_started { days, range }
catchup_completed { days, moments }
streak_extended { streak } · streak_milestone { days } · streak_freeze_used
ai_assist_installed { vision }
book_previewed { books, current_season }
Every value is a number, a yes/no, or one of a few fixed words. Never a name, a caption or a photo.
Companies we work with
| Company | What for | What they get |
|---|---|---|
| Apple and Google | App delivery, sign-in options, subscriptions | Account and purchase details they already handle |
| Supabase | Accounts | Email address and account ID |
| Cloudflare | This website; encrypted Family Circle storage (coming) | Website visits are anonymous; stored memories are scrambled data we can’t read |
| Sentry | Crash reports | Scrubbed technical details and a random account ID |
| PostHog (EU) | App usage counts | The fixed event list above, with IP addresses discarded |
| RevenueCat | Subscriptions (coming) | Account ID and purchase status |
| Prodigi | Printing and shipping (coming) | The pages you chose to print and your shipping address, for that order only |
| Stripe | Payments for printed products (coming) | Payment and billing details |
| Resend | Sign-in and receipt emails | Your email address |
This website has no ad trackers and no cookies for marketing. We count visits with cookie-free, anonymous analytics.
Log yesterday’s photos in two minutes.
Morning Catchup turns the photos you already took into memories you’ll actually keep. Private by design, offline first.