Privacy Policy
Maybejar is an app for saving links, posts, reels, copied messages and screenshots, which it sorts into categories for you. This policy explains what information Maybejar collects, why, who processes it on our behalf, and the choices you have. Maybejar and the maybejar.com website are provided by Fedar Trukhan, IE (“Maybejar”, “we”, “us”), the seller of the app on the App Store and the controller of your personal information.
1. Information we collect
Account information
You sign in with Apple. We receive a stable account identifier from Apple and, if you choose to share them, your name and email address (which may be an Apple private relay address). We also store your interface language and the time your account was created.
What you save
Everything you add to Maybejar: links, text you share or paste, captions, and images or screenshots you choose to upload. You choose what to add; the app only reads the photos you pick.
Information we derive from what you save
To sort an item, our server reads the public page behind a link (its title, description, preview image and text), and the AI model produces a title, a short summary, a category, tags and details such as places, dates, prices or contacts mentioned in the content. If our server can’t open a link, the app may load the page on your phone and send its text to our server instead. We store these results with the item.
Shared jars
If you create or join a shared jar, we store its name, its members and their roles, invite codes, and which member added each item. Other members of a shared jar can see everything saved in it and your display name.
Notifications
If you allow notifications, we store a push token for your device so we can tell you about activity in your jars, for example when someone adds an item to a shared jar. A notification may include the name of a jar or an item.
Purchases
Subscriptions are bought and paid for through Apple. We never see your payment card details. We use Adapty to check whether your subscription is active; our server also asks Adapty for your subscription status and receives status updates from it, linked to your Maybejar account identifier. Adapty receives your Maybejar account identifier, App Store transaction and subscription information, and basic device and app information (such as device model, OS version, app version and country or region).
Usage and technical data
For each call to the AI model we record counters: the type of task, the model, token counts, cost, duration and status. These records contain no text, links or images from your items; we use them to keep costs under control and to enforce fair-use limits. Our servers and Cloudflare, which carries traffic to them, process technical data such as IP addresses and request times to deliver the service and protect it from abuse. Our application logs are designed not to contain links or the text of your items.
What we don’t collect
- No advertising identifiers, no tracking across other apps or websites, and no analytics or advertising SDKs.
- No location data. Places on maps come from the content you save.
- No calendar data. When you add a saved event to your calendar, the app opens the system calendar on your device; we don’t read your calendar.
- No contacts or photo library access beyond the images you pick.
2. How we use information
- To provide the app: store your items, sort and summarize them, find duplicates, show them on your devices and in shared jars, and add saved events to your calendar when you ask.
- To sign you in and keep your account secure.
- To send the notifications you allowed.
- To provide Maybejar Plus and restore purchases.
- To keep the service running, prevent abuse and control costs.
- To answer your support requests.
We don’t sell your personal information, share it for cross-context behavioral advertising, or use it to build advertising profiles. Where the GDPR or similar laws apply, we process your data to perform our contract with you (providing the app), for our legitimate interests (security, abuse prevention, cost control), and to comply with legal obligations.
3. AI processing
Maybejar uses OpenAI’s API to understand and sort what you save. For each item we send the content needed to sort it: the link and the text read from its page, your caption or text, any images you uploaded with it, your language, and the names of your jar’s categories. We send it with the API’s response storage turned off. Under OpenAI’s API terms, data sent through the API is not used to train OpenAI’s models; OpenAI may keep it for a limited time to monitor for abuse, as described in OpenAI’s privacy policy. AI-generated titles, summaries and categories can be wrong; you can change an item’s category and dates in the app.
4. Who processes your data
We use these service providers to run Maybejar. They process data on our instructions and only for the purposes above.
- Hetzner Online (Germany): our server and database, located in Nuremberg, Germany.
- Cloudflare: storage of uploaded images and previews (Cloudflare R2, Eastern Europe region), encrypted database backups, DNS and network protection for our domains.
- OpenAI (United States): AI processing of saved content, as described above.
- Apple: Sign in with Apple, in-app purchases, and delivery of push notifications.
- Expo (650 Industries, United States): relays push notifications to Apple.
- Adapty: subscription status.
When you save a link, our server fetches that link from the website it points to (and uses Reddit’s API for Reddit links), so that website sees a request from our server, not from your device. We may also disclose information if required by law, or to protect the rights and safety of our users or others, or as part of a sale or reorganization of the service, in which case this policy continues to apply to your data.
5. International transfers
Our server and storage are in the European Union. Some providers, including OpenAI, Apple and Expo, process data in the United States and other countries. Where required, these transfers rely on safeguards such as the European Commission’s Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.
6. Retention and deletion
- Items stay in your jar until you delete them. Deleting an item removes it and its uploaded images from our storage.
- Jars: deleting a jar deletes everything in it for all members.
- Push tokens are removed when you sign out on that device.
- Backups: we keep encrypted database backups for up to about 8 weeks. Deleted data disappears from backups as they expire.
- AI usage counters are kept for cost accounting. When your account is deleted they are no longer linked to you.
Deleting your account. You can delete your account in the app: Settings › Account › Delete account (it is also available on the subscription screen). Deletion happens right away and removes your account, your sign-in details and sessions, your personal jar, every item you saved (including items you added to shared jars), the images you uploaded, your notification tokens and your subscription profile at Adapty. A shared jar you created is deleted if nobody else is in it; otherwise it passes to its longest-standing member, without your items. Copies in encrypted backups expire as described above. If you can’t use the app, email support@maybejar.com from the address linked to your account and we will delete it within 30 days. Deleting your account does not cancel a subscription: cancel it in your Apple ID settings.
7. Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal information, to object to or restrict certain processing, and to withdraw consent. You can edit or delete your items and jars in the app at any time. For anything else, contact us at the address below; we will respond within 30 days. If you are in the EEA or the UK, you can also complain to your local data protection authority. We will not discriminate against you for exercising your rights.
8. Security
Data travels over encrypted connections (HTTPS). Uploaded files are private and accessible only through short-lived signed links. Backups are encrypted. Sessions use short-lived access tokens and refresh tokens that we can revoke. No system is perfectly secure, but we work to protect your information and limit who can access it.
9. Children
Maybejar is not directed to children under 13, or under the minimum age required in your country to use online services without parental consent, and we don’t knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.
10. Changes to this policy
We may update this policy as Maybejar changes. We will post the new version on this page with a new effective date and, for significant changes, notify you in the app or by other reasonable means.
11. Contact
Data controller: Fedar Trukhan, IE. Questions or requests about privacy: support@maybejar.com.