Privacy Policy

Flockjar is operated by Jose Chipana, Madrid, Spain. He is the data controller for the personal data described here. Contact: hello@flockjar.com.

• The name you use in each jar, and your profile photo if you add one. When you create a jar while signed in, we start with your account's name and photo.
• What you add to a jar: photos, videos, voice memos, notes, songs, comments, reactions, votes and quiz answers.
• An optional place name on a memory, typed by you or looked up when you tap it. A lookup sends your phone's location to Apple's or Google's map service to find the name; we store the place name, not your coordinates.
• Photos and videos can contain location data your camera saved in the file. Flockjar doesn't remove it yet, so turn off location in your camera if you don't want to share it.
• Your email address and name if you make an account (sign-in is handled by Clerk).
• For guests without an account, a random identity kept on your device. We store only a scrambled (hashed) copy of it.
• Push notification tokens for your devices, if you turn notifications on, with your quiet hours and time zone.
• Reports you file (the reason and any note) and the people you block.
• If you make an account, your answer to "What's your next jar for?".
• Technical data: your IP address and basic device and browser information, which our hosting, sign-in and rate-limit services see with each request, used to keep Flockjar secure and stop abuse.
• Basic usage events, such as joining a jar or opening a reveal, tied to your member id or a per-device key, never to your name.

• To run the service you asked for: showing your jars, your memories and your people (contract).
• To keep jars safe, with reports, blocks and limits on how fast anyone can post (legitimate interest).
• To send the notifications you turn on (consent). You can turn them off at any time in Profile or for one jar.
• To understand whether features work, from the usage events above (legitimate interest).

You need to give a name to join a jar; everything else is optional. Without a name you can't join, and without an account you can still use Flockjar as a guest.

Only the people in that jar, and us when we review a report. Memories in a sealed jar stay hidden, even from its hosts, until the reveal. Your photos appear in other people's Jar Wrapped only if you turn that on. Hosts learn that something in their jar was reported, never who reported it.

Anyone with a jar's invite link sees its title, how many people are in it and up to three faces before joining. People in a jar can download or share its memories (Save memories, Wrapped cards, the recap email with the jar's photos); deleting something doesn't recall copies they already have.

We don't sell your data, show ads or use third-party analytics.

These companies process data for us, only to run Flockjar:

• Vercel (United States): hosts the website and the app's server, with short request logs.
• Neon (United States): our database.
• Amazon Web Services S3 (United States): stores photos, videos and voice memos in a private bucket.
• Upstash (United States): live updates, rate limits (counted per IP address or member) and scheduled reveals.
• Clerk (United States): accounts and sign-in, including the device and IP address you sign in from.
• Resend (United States): emails, such as a recap with the jar's photos after it closes, and report notices to us.
• Expo, Apple and Google: deliver push notifications to your phone.
• Your browser's push service: delivers web notifications.
• Spotify: song search, plus the album art and previews your device loads directly from Spotify, so Spotify sees your device's IP address when a song shows.
• Apple and Google map services: turning your location into a place name, only when you tap to look it up.

When data leaves the EU, these providers rely on the European Commission's standard contractual clauses or the EU–US Data Privacy Framework.

We keep a jar's memories for as long as the jar exists, or until you delete them or your account. Usage events go with their jar. Reports are kept as a record of our decision for as long as the reported memory or comment exists. Request logs and rate-limit counters last a short time. Our database and storage providers keep backups that expire after a limited time, so deleted data can remain in them until then.

• See, correct or download your data. Save memories in a jar downloads what's in it.
• Delete everything: Profile → Delete account (or Delete my data if you have no account). Your memories, comments and reactions go from every jar; copies other people already downloaded or shared aren't recalled.
• Object to or restrict how we use your data, and withdraw consent for notifications at any time.
• Complain to the Spanish data-protection authority, the Agencia Española de Protección de Datos (aepd.es).

Write to hello@flockjar.com for anything else. We answer within one month.

Flockjar is for people 14 and older. If you think someone younger has an account or added memories, write to hello@flockjar.com and we'll remove them.

When this policy changes, the date below changes too. For important changes we'll also tell you in the app. See also our Terms of Use.