Privacy Policy

December 4, 2025

• Added Build Information section (vehicle details, parts, investment tracking)
• Added Build Engagement Data section (views, favorites, ratings)
• Added Build Visibility Levels explanation (public, unlisted, private)
• Added Affiliate Links disclosure for parts catalog
• Added Build Analytics tracking disclosure
• Added Build Data Controls to user rights
• Updated CCPA categories to include vehicle and financial information

November 8, 2025

• Added Mobile App Data Collection section
• Added GDPR and CCPA compliance sections
• Added detailed account deletion process

October 26, 2025

• Initial privacy policy

Account Information

• Email address (via OAuth providers like Google, Microsoft)
• Display name and profile picture (from OAuth provider)
• User ID (auto-generated for internal use)

Duck Tracking Information

• Duck IDs and custom names you assign to your ducks
• Notes you add when adopting, placing, or receiving ducks - private to you only, never shared with other users
• Location data (approximate city-level location, not precise GPS)
• Timestamps of duck-related events
• Duck ownership history (public journey timeline)

Duck journey events are visible to all users but are completely anonymous. Your name, email, and profile are never shown on duck journeys. Other users cannot identify who placed, received, or adopted a duck.

Wave Logger Information (PRIVATE)

• Wave events you log (given/received waves) - private to you only
• Notes about wave exchanges - never shared with other users
• Location data (approximate city-level location) - private to you only
• Wave statistics and streak information - private to you only

All wave data is completely private. Other users cannot see your waves, wave locations, or wave notes.

Location Information

When you choose to capture location data, we store only the city name and approximate city center coordinates. We do NOT store your exact GPS location or street address. Location capture is always optional and requires your explicit consent.

Build Information

• Build names, descriptions, and notes you create
• Vehicle details (year, make, model, trim) for each build
• Parts and modifications you add to builds (names, categories, manufacturers)
• Part status tracking (planned, installed, removed) with timestamps
• Part origin (factory, dealer, aftermarket)
• Investment data: prices you enter, vendor information, quantities
• Build visibility settings you choose (public, unlisted, private)

Build Engagement Data

• View counts on public builds
• Favorites received from other users
• Ratings (1-5 stars) from other users
• Build fork relationships (if you fork another user's build)

What We Share Publicly

• Duck journey timelines (events like adopted, placed, received)
• Approximate location data (city-level only)
• Timestamps of duck events

What We Keep Private

• Your email address and OAuth provider information
• Your personal notes on ducks and waves
• Duck names you assign (only visible to you)
• Precise GPS coordinates (we don't collect them)
• Duck PINs (only exposed when you view your own QR codes)

Build Visibility Levels

You control the visibility of each build you create:

• Public builds: Visible in gallery, searchable, can be featured, forked, rated, and favorited. Your display name is shown as the owner.
• Unlisted builds: Accessible only via direct link. Not shown in gallery or search results.
• Private builds: Visible only to you. Cannot be featured, forked, rated, or viewed by others.

What We Share About Builds

• Public build details (name, vehicle info, parts list, investment totals)
• Your display name on public builds
• Aggregate engagement metrics (views, favorites, ratings)

What Remains Private About Builds

• Builds marked private or unlisted (except via direct link for unlisted)
• Your personal notes on parts
• Exact prices (unless you export with prices enabled)
• Your browsing and favoriting activity

Data Storage and Third-Party Sharing

Important Distinction: Per Google Play policy, "third party" means external entities separate from the app developer. Our own backend servers are NOT considered third parties.

PUBLIC DATA (Visible to All Users)

• Duck Journey History: When you place, receive, or adopt a duck, the event becomes part of the duck's public journey timeline
• Location Data: City-level locations (approximate coordinates) for duck events
• Timestamps: When duck events occurred

IMPORTANT: Duck journey events are completely ANONYMOUS - no user identification is shown. Other users cannot see who placed, received, or adopted a duck. No names, email addresses, or profile information is visible on duck journeys.

PRIVATE DATA (Only Visible to You)

• All Wave Data: Your wave logs, statistics, and history are NEVER shared with other users
• Wave Locations: Wave locations are stored but never visible to anyone except you
• All User Notes: Both wave notes and duck notes are private and never shared with other users
• Your Email and Profile: Email address, OAuth provider information, and profile details
• Duck Names: Custom names you assign to ducks are only visible to you
• Duck PINs: Only exposed when you view your own QR codes

NO INTER-USER COMMUNICATION

JeeperLife does not provide any way for users to communicate with each other. There are no messaging features, comments, forums, or social features. Users cannot see each other's notes or contact information.

Google Analytics

We use Google Analytics 4 to understand how visitors use our website and to improve our services. Google Analytics collects information about your use of JeeperLife through cookies and similar technologies.

What Google Analytics Tracks

• Pages you visit and time spent on each page
• How you arrived at our site (search engine, direct link, etc.)
• Your approximate location (city/region level, not precise GPS)
• Device type, browser, and operating system
• User actions (duck adoptions, wave logging, QR code scans, build creation, etc.)

Build Analytics

We track aggregated, non-identifying metrics about build features:

• Popular vehicle models and parts
• Average build sizes and investment ranges
• Feature usage patterns (exports, forks, ratings)

Privacy Protections

• IP Anonymization: Google Analytics anonymizes your IP address
• No Personal Data: We never send your email, name, or personal notes to Google Analytics
• Aggregated Data: Analytics data is aggregated and cannot identify individual users
• Cookie Control: You can disable cookies in your browser settings

Opting Out

You can opt out of Google Analytics tracking by:

• Installing the Google Analytics Opt-out Browser Add-on
• Disabling cookies in your browser settings
• Using browser privacy features like Do Not Track

For more information about how Google uses data, visit Google's Privacy Policy.

Camera Access

• Purpose: QR code scanning for duck tag identification
• Optional: Camera permission is optional - you can manually enter duck IDs instead
• Not Stored: Photos and videos are NOT stored or transmitted. Camera data is processed locally only for QR decoding.

Firebase Analytics (Mobile Only)

The mobile app uses Firebase Analytics (Google) for crash reporting and app improvement.

• Device Identifiers: Firebase automatically collects device IDs and IP addresses
• App Interactions: Wave logs, duck events, and user actions are tracked for analytics
• Third-Party Service: Firebase Analytics is operated by Google LLC
• Opt-Out: You can disable analytics in the mobile app settings

Location Precision

Mobile apps use coarse location (ACCESS_COARSE_LOCATION on Android, reduced accuracy on iOS):

• Accuracy: 1-5 km (city-level, not street-level)
• No GPS tracking or precise coordinates
• Location capture is optional for all features

Offline Queue

The mobile app stores wave logs and duck events locally when offline:

• Maximum 100 entries in offline queue
• Data automatically syncs when network is restored
• Queue entries older than 7 days are automatically deleted

Android Auto Integration

Android Auto allows hands-free wave logging while driving:

• Voice-first interface for driver safety
• Same data collection as mobile app (waves, optional location)
• No additional permissions required beyond mobile app

Active Account Data

• Profile Information: Retained while your account is active
• Wave Logs: Retained indefinitely while your account is active
• Duck Ownership Records: Retained indefinitely while your account is active
• Build Data: Retained indefinitely while your account is active (vehicle info, parts, investment data)
• Authentication Tokens: 30-day expiration with automatic refresh

Mobile App Offline Queue

• Queue Size: Maximum 100 entries stored locally on your device
• Automatic Cleanup: Entries older than 7 days are automatically deleted
• Sync: Data syncs to server when network is restored, then removed from local queue

Account Deletion

When you delete your account, all of your personal data is permanently removed:

• Profile information (name, email, Google ID)
• All wave logs, notes, and statistics
• Duck ownership records and duck notes
• All builds, parts data, and investment information
• All ratings and favorites you've given
• Authentication tokens and session data

Important: Anonymous duck journey events (place/receive timestamps and locations) remain visible on public duck timelines after account deletion. These events contain no personally identifying information and cannot be linked back to you.

Legal Obligations

In some cases, we may retain certain information to comply with legal obligations, resolve disputes, enforce our agreements, or as otherwise permitted by law.

You have the right to:

• Access your personal information
• Request correction of inaccurate data
• Request deletion of your account and data
• Opt out of location capture (it's always optional)
• Export your duck, wave, and build data

Build Data Controls

• Change build visibility (public, unlisted, private) at any time
• Delete builds and all associated data
• Export your builds in multiple formats for sharing
• Remove ratings and favorites you've given

How to Delete Your Account

You can request permanent deletion of your JeeperLife account and all associated personal data at any time.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: You consent to data collection when creating an account and using features
• Contract Performance: Processing necessary to provide JeeperLife services
• Legitimate Interests: Analytics and service improvement (anonymized where possible)

Your GDPR Rights

Under GDPR, you have the right to:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restriction: Request limitation of processing in certain circumstances
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time (does not affect prior processing)

Data Transfers

Your data is stored on servers located in the United States (Azure cloud infrastructure). We ensure appropriate safeguards are in place for international data transfers in compliance with GDPR.

Supervisory Authority

You have the right to lodge a complaint with your local data protection authority if you believe we have not complied with GDPR.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at privacy@jeeperlife.com. We will respond to your request within 30 days as required by GDPR.

Personal Information We Collect

We collect the following categories of personal information:

• Identifiers: Name, email address, user ID, device ID
• Geolocation Data: Approximate location (city-level, 1-5 km accuracy)
• Internet Activity: App usage, wave logs, duck events, build creation and modification
• Profile Information: Google OAuth profile picture
• Vehicle Information: Vehicle year, make, model, trim for builds
• Financial Information: Part prices and investment data you enter (user-provided, not verified)

Your CCPA Rights

Under CCPA, you have the right to:

• Right to Know: Request disclosure of personal information we collect, use, and share
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of sale of personal information (we do NOT sell personal information)
• Right to Non-Discrimination: Equal service regardless of exercising CCPA rights

We Do Not Sell Personal Information

JeeperLife does NOT sell your personal information to third parties. We do not share personal information for monetary or other valuable consideration.

Third-Party Sharing

We share limited data with the following third parties for service provision:

• Google LLC: Authentication (Google OAuth) and analytics (Firebase Analytics for mobile)
• Nominatim/OpenStreetMap: Location geocoding

This sharing is for service provision only, NOT for sale or marketing purposes.

Exercising Your Rights

To exercise any of your CCPA rights, please contact us at privacy@jeeperlife.com. We will respond to your request within 45 days as required by CCPA.

Authorized Agent

You may designate an authorized agent to make requests on your behalf. We will require verification of both your identity and the agent's authority.