Privacy Notice
Last updated 1 September 2026
Who we are
Jälki is operated by Shabnam Islam, a sole trader based in Western Australia, Australia. For the personal data described here, Shabnam Islam is the data controller — we decide what is collected and why. Contact: hello@jalki.app.
What Jälki holds about you
Your entries are the heart of the app, and they are personal. We hold: your account data (email address, login credentials handled by our auth provider, plan and subscription status); your journal content (emotion pins, shades and emoji, triggers, notes, voice-note transcripts, body traces, diary and gratitude entries, reflections, Arc checkpoints, grounding rounds, and your Yes/Maybe/No verdicts on insights); support messages you send us; and limited technical data (device type, browser, IP address, error logs, basic usage events such as which screens load).
Why we hold it, and on what basis
Account data — to create your profile and give you access to the tier you chose (performance of our contract). Journal content — to provide the app itself: storing your pins, syncing them across your devices, and generating your patterns, recap and vocabulary (performance of our contract). Support messages — to answer you (contract and our legitimate interest in supporting users). Technical data — to keep the service secure, prevent fraud and abuse, and fix faults (legitimate interests). Any marketing email beyond the welcome message is sent only with your consent, withdrawable at any time. Where we must retain records for tax or legal reasons, the basis is legal obligation.
Sensitive content
Entries about your feelings and mental state can be sensitive. We do not use your journal content for advertising, we do not sell it, and we do not use it to train third-party AI models. Pattern detection runs on your own data to serve only you.
Who we share it with
Only where needed: service providers / subprocessors — hosting, database and authentication, transcription of your voice notes, email delivery, and error monitoring; Paddle.com, our Merchant of Record, for the sale of the product, subscription management, payments, tax compliance and invoicing (Paddle collects your payment details directly — we never see your card number); professional advisers such as accountants or lawyers where necessary; and authorities where the law requires it. Providers act on our instructions under contract.
International transfers
Some providers process data outside Australia, including in the EEA, the UK and the United States. Where data leaves your region we rely on appropriate safeguards — standard contractual clauses or an adequacy decision — and require providers to protect it to the standard described here.
How long we keep it
Your journal content is kept while your profile is open, because its whole purpose is looking back over time. If you delete an entry we remove it, and backups age out within 30 days. If you delete your profile we delete or anonymise your data within 30 days, except records we must keep for tax and accounting (generally up to 7 years) and minimal fraud-prevention records.
Your rights
You can ask for access to your data, correction, erasure, restriction of processing, portability (an export of your entries), or object to processing based on legitimate interests, and you can withdraw consent at any time. Email hello@jalki.app and we will respond within one month. You may also complain to your data protection authority — in Australia, the Office of the Australian Information Commissioner; in the UK or EEA, your local supervisory authority.
Security
We use appropriate technical and organisational measures: encryption in transit and at rest, row-level access rules so your entries are readable only under your own account, restricted administrative access, and monitoring. No system is perfectly secure, but we treat this content as private by default.
Cookies and local storage
Jälki uses essential cookies and browser storage only — to keep you signed in, remember your backdrop and reminder preferences, and hold your entries offline so the installed app works without a connection. We do not run advertising or marketing cookies. You can clear this at any time through your browser settings, which will sign you out and remove locally cached entries.
Children
Jälki is not intended for children under 16, and we do not knowingly collect their data.
Changes
If this notice changes materially we will tell you in the app or by email before the change takes effect.