Privacy Policy

1. Introduction

Welcome to JL ATOZ SOLUTIONS ("Company", "we", "our", "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use any of our software products, applications, websites, and related services (collectively, "Services"), including but not limited to BuyWhat, BleepGo, and InLetter.

By using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not access or use our Services.

2. Information We Collect

Information You Provide

We may collect information that you voluntarily provide, including but not limited to:

• Account registration information (name, email address, password)
• Profile information (display name, avatar, preferences)
• Content you create, upload, or store using our Services (trip plans, expenses, photos, checklists)
• Communications with us (support requests, feedback)
• Payment and billing information (when applicable)

Information Collected Automatically

When you use our Services, we may automatically collect:

• Device information (device type, operating system, unique identifiers)
• Usage information (features accessed, actions taken, time spent)
• Log data (IP address, browser type, access times, pages viewed)
• Performance and diagnostic data (crash reports via Firebase Crashlytics)

Location Information

Certain Services, such as BleepGo, may collect precise location data from your device when you grant location permission. This includes:

• GPS coordinates: Latitude, longitude, heading, speed, and accuracy of your device
• Location history: Short-term breadcrumb trails showing recent movement (retained for up to 5 minutes)

Location data is collected only while the app is open and in the foreground, and only when you have explicitly granted location permission. Location data is shared only with members of your trip group and is not used for advertising, analytics, or any purpose beyond the core location-sharing feature. You may revoke location permission at any time through your device settings.

Push Notification Tokens

If you enable push notifications, we collect your device's push notification token (e.g., Firebase Cloud Messaging token) to deliver notifications relevant to your trips, such as location ping requests from group members. You may disable push notifications at any time through your device settings.

Information from Third Parties

We may receive information about you from third-party authentication services (such as Google Sign-In or Apple Sign-In) if you choose to use them to create or log into your account.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our Services
• Process your transactions and manage your account
• Facilitate group collaboration features (shared itineraries, expense tracking, location sharing)
• Deliver push notifications you have opted into (trip updates, location pings)
• Improve, personalize, and expand our Services
• Communicate with you about updates, support, and promotional offers
• Ensure security and prevent fraud or abuse
• Analyze usage patterns to enhance user experience
• Comply with legal obligations

4. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Your data may be stored locally on your device, on our servers, or with trusted third-party cloud service providers (including Supabase and Firebase), depending on the specific Service and features you use. All data transmitted between your device and our servers is encrypted using industry-standard TLS encryption.

Row-Level Security (RLS) policies are enforced at the database level to ensure users can only access data they are authorized to view (e.g., trip data is accessible only to trip members).

While we strive to use commercially acceptable means to protect your information, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in these circumstances:

• Within Your Groups: When you join a trip or group in our Services, certain information (display name, avatar, itinerary contributions, expenses, and live location when enabled) is shared with other members of that group. You control which groups you join.
• Service Providers: With trusted vendors who assist in operating our Services (e.g., Supabase for database hosting, Firebase for authentication and notifications, RevenueCat for subscription management)
• Legal Compliance: When required by law or to respond to legal processes
• Protection of Rights: To protect our rights, privacy, safety, or property
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: For any other purpose with your explicit permission

6. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request a copy of the data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data and account
• Export: Request a portable copy of your data
• Opt-Out: Unsubscribe from marketing communications
• Location: Disable location sharing at any time through your device settings
• Notifications: Disable push notifications through your device settings
• Withdrawal: Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us at joe@jlatozsolutions.site.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide you with our Services. We may also retain and use your information to comply with legal obligations, resolve disputes, and enforce our agreements.

Live location data is ephemeral and is automatically deleted shortly after being transmitted. Breadcrumb trail data is retained for no more than 5 minutes. Trip data, expenses, and itinerary content are retained for the duration of your account.

When your data is no longer needed, we will securely delete or anonymize it in accordance with our data retention practices.

8. Third-Party Services

Our Services may contain links to or integrate with third-party websites, services, or applications. Key third-party services we integrate with include:

• Supabase: Database hosting, authentication, and real-time data sync
• Firebase: Push notifications (FCM), crash reporting (Crashlytics), and authentication
• RevenueCat: In-app subscription and purchase management
• Google/Apple Sign-In: Third-party authentication providers

We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

9. Children's Privacy

Our Services are not intended for individuals under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If we learn that we have collected information from a child, we will take steps to delete it promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. Our cloud service providers may store data in various regions globally. We take appropriate measures to ensure that your data receives adequate protection in accordance with this Privacy Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of our Services after any changes indicates your acceptance of the updated policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us:

JL ATOZ SOLUTIONS

Email: joe@jlatozsolutions.site