Privacy policy

The app works without us

Jonna works without an account and sends us no telemetry. The only requests the app makes to our servers are the ones for signing in and for reading your profile, and only if you choose to sign in.

Your AI keys and requests

AI requests go from your computer directly to the provider you chose, with your own key or on your own machine. They never pass through us. We never ask for, store or relay your keys, your prompts or your code.

What we store if you make an account

• Your profile: your email address, your display name, the address of your profile picture (from Google or GitHub, if you sign in with them), your plan and the date the account was created.
• How you sign in: which method you use (Google, GitHub, or email and password). Passwords are handled by Google's Firebase Authentication; we never see or store them in readable form.
• Sign-in sessions: for each time you sign in from the app, a record with a scrambled (hashed) copy of the session's tokens and the dates it was created and expires. We don't record your device's name or details.

The one-time codes used during sign-in expire after two minutes and are then deleted. A session ends when you sign out, and otherwise expires after at most one year.

Your profile picture

If you sign in with Google, the app loads your picture through our server rather than from Google directly. We pass the image along and don't keep a copy.

Server logs

Like most hosted services, our hosting provider keeps standard request logs, which include the IP address and the time of a request, for about 30 days. We use them only to keep the service running and secure.

Where it's stored, and who helps us run it

Account data is stored with Google Cloud (Firebase) in the United States. The companies that process data for us are Google (hosting, sign-in and the database) and GitHub (only if you choose to sign in with GitHub). We don't sell your data, and we don't share it with anyone else unless the law requires it.

Cookies and tracking

This site has no analytics, advertising or tracking scripts, and sets no tracking cookies. Signing in keeps what it needs in your browser's storage. The site also remembers two small things on your device: your theme choice, and your name and picture so the header can show them. To sign you in, the site loads Google's sign-in code from Google's servers.

Your choices

• Sign out at any time, from the app or from this site.
• Ask for a copy of what we hold about you, or ask us to correct it.
• Ask us to delete your account. We remove your profile and sessions, normally within 30 days.

For any of these, write to hello@jonna.dev from the address on your account.

Changes to this policy

If what we collect changes, we will update this page and the date at the top before the change takes effect.

Contact

Privacy questions: hello@jonna.dev.