Privacy Policy for JRNE App

1. Information We Collect

We collect various types of information to provide you with a functional and personalized experience.

a. Personal Identifiable Information (PII)

We may collect:

• Full name
• Email address
• Profile display name and bio
• Phone number (optional, for support/contact)
• User-generated content (e.g., item notes, transfer messages)

b. Account & Authentication Data

• Encrypted password hashes (where applicable)
• Login method metadata (e.g., social login tokens)
• Internal user ID (UUID) assigned upon account creation

c. NFC-Linked Product Data

• Unique ID of NFC chip when scanned
• Metadata associated with the jewellery (e.g., certificate of authenticity, material information, custom art/IP provenance)
• Timestamped claim and transfer records
• NFC interaction logs for ownership verification

d. Device & Technical Information

• Device type, OS version, device identifiers (e.g., IDFA/GAID)
• IP address
• Language preferences
• App crash logs and performance metrics
• Access timestamps and session duration

e. Usage Analytics

• Navigation behavior within the app (e.g., pages visited, actions taken)
• Frequency of NFC taps, product views, and connection attempts
• Marketplace browsing and cart activity

We may collect this data directly or via third-party analytics tools (e.g., Firebase Analytics, Sentry, or similar platforms).

2. How We Use Your Information

We use your information to:

• Register and manage user accounts
• Facilitate NFC interactions and verify jewellery authenticity
• Display product details and digital provenance cards
• Enable peer-to-peer connections via NFC phone taps
• Process ownership transfers securely
• Provide customer support and respond to inquiries
• Improve our services and user experience
• Detect fraud, misuse, or suspicious activity
• Send important service updates (e.g., transfer confirmations, policy updates)
• Maintain legal compliance and fulfill regulatory obligations

3. Legal Bases for Processing (for EU/EEA Users)

If you are located in the European Union or European Economic Area, we rely on the following legal bases to process your personal information:

• Consent: When you voluntarily provide data or allow NFC scans
• Contractual necessity: To provide app services and transfer features
• Legal obligations: For tax, regulatory, and compliance-related purposes
• Legitimate interests: To prevent fraud and maintain app security

4. Sharing of Information

We do not sell your personal data. We may share data in the following scenarios:

a. Service Providers

With vendors helping us operate the app—e.g., cloud hosting (AWS, Vercel), analytics (Firebase), payment partners (if integrated), and support tools.

b. Legal & Regulatory Authorities

If required by law, court order, or to comply with legal obligations, we may disclose user data.

c. Peer Users (Limited)

During peer-to-peer features (like NFC friend connect or ownership transfer), your display name, public bio, and item metadata may be visible to the other party.

5. Data Storage & Retention

We retain your information as long as your account remains active or as needed for business or legal purposes. Ownership logs and certificates may be retained for longer periods to maintain integrity of the authenticity registry.

• Personal data is stored securely on encrypted servers
• All sensitive actions (ownership claims, transfers) are recorded with timestamps
• Upon account deletion, most personal data is anonymized or removed within 30 days

6. Data Security

We implement robust measures to protect your information, including:

• End-to-end encryption for sensitive operations
• Secure storage of cryptographic item metadata
• Role-based access to internal admin systems
• Regular vulnerability scans and access audits

Despite best efforts, no system is 100% secure. We encourage users to use strong passwords and be cautious about phishing or impersonation.

7. Your Rights and Choices

Depending on your location, you may have the right to:

• Access or export your personal data
• Correct inaccurate information
• Delete your account and associated data
• Object to processing or withdraw consent (where applicable)

To exercise any of these rights, email app@jrneofficial.com with your request. We may ask for verification before fulfilling the request.

8. Children's Privacy

JRNE is not intended for children under 13 (or equivalent minimum age in your jurisdiction). We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will take steps to delete such information.

9. Third-Party Links and Services

The app may contain links to third-party websites or external content (e.g., NFT marketplaces, blockchain explorers). We are not responsible for the privacy practices of these entities. We recommend reviewing their policies independently.

10. Updates to This Privacy Policy

We may update this Privacy Policy periodically. You will be notified of major changes via:

• In-app notifications
• Email (if you've provided one)

Continued use of the app after changes means you accept the updated policy.

11. Contact Us

For questions, concerns, or requests related to this Privacy Policy:

JRNE LIMITED

Email: app@jrneofficial.com

Website: https://www.jrneofficial.com