01Privacy Policy

Privacy Policy

Last updated: April 8, 2026

1. Controller and contacts

Data controller: Jourloy LLC (Russian Federation). Data requests: support@jourloy.com. Data localization: servers in the Russian Federation.

2. Data we process

We apply data minimization and process only what is needed for service operation.

  • Account data: username, hashed password, verified unique account email (encrypted at rest), and email verification metadata.
  • Financial data: records on accounts, transactions, categories, budgets, goals, subscriptions, and debts/credits.
  • Technical data: IP address, request timestamps, session tokens, error logs, device/browser type, language, and timezone.
  • Analytics data: cookies/pixels and usage events for product measurement.
  • Advertising data: ad identifiers and segments for ad personalization and performance measurement.
  • Payment data: processed by a payment provider; we receive technical statuses only and do not store full payment credentials.

3. Legal basis

  • Performance of the user agreement and service functionality.
  • User consent, including consent to personalized advertising.
  • Legitimate interest: security, abuse prevention, and service stability.
  • Compliance with applicable law in the Russian Federation.

If you withdraw consent required for mandatory personalized advertising, we may not be able to continue providing the Service.

4. Processing purposes

  • Service operation and storage of user records.
  • Account security, email verification, password recovery, and fraud prevention.
  • Display of personalized and contextual advertising.
  • Product improvement based on analytics.

5. Marketing and advertising

  1. Personalized ads are shown continuously as part of the Service.
  2. Personalization uses technical identifiers and usage events; financial record content is not used for ad targeting.
  3. We may transfer limited data to ad and technology partners as needed for ad delivery and measurement.
  4. Ad materials are labeled and placement data is transferred to required registries under applicable law.

6. Anonymized and aggregated data

We may use and share anonymized/aggregated data if it cannot reasonably identify a specific user.

7. Payments and recurring charges

Before payment, we request a billing email for receipts and service payment notices and pass it to the payment provider with payment parameters. Separately, users must maintain a verified unique account email for continued access and password recovery.

You can disable auto-renewal in the Service interface. Future charges stop after disabling, while access remains until the paid period ends.

8. Retention periods

Data is stored while your account exists and/or as necessary for processing purposes, then deleted or anonymized within a reasonable period.

9. Security

We use organizational and technical safeguards, including encrypted transport, encrypted-at-rest storage for verified unique account email addresses, access controls, and hashed password storage.

10. User rights

You may request information about processing, correction, blocking, or deletion of data, and withdrawal of consent.

Withdrawing consent for mandatory personalized advertising results in termination of Service use and account deletion.

11. Minors

The Service is not intended for users under 18. If such use is detected, the account and related data are removed.

12. Cookies, local storage, and pixels

Browser-level cookie controls may limit some tracking, but in-service ad personalization remains active.

  1. Strictly necessary: authentication, security, and technical settings.
  2. Analytics: usage metrics and product statistics.
  3. Advertising: ad personalization and campaign measurement.

13. Communications

For privacy and service questions, contact support@jourloy.com.

14. Policy updates

We may update this Policy; the current version is published in the Service.