Privacy Policy
Jagraaj (“Jagraaj”, “we”, “us”) is a personal memories and social platform where you save photos and videos and share them with the world, with only your friends, or keep them private. This policy explains what we collect, how we use it, and the control you have. Questions? Email jagrajhero@gmail.com.
1. Information we collect
- Account information — your name, username, email address, and a securely hashed password. If you sign in with Google, we receive your name, email, and profile picture from Google.
- Content you create — the photos, videos, memories, albums, comments, and messages you upload or write. Uploaded media is automatically compressed.
- Social connections — your friends, follows, group memberships, likes, and reactions.
- Location (only if you choose) — if you turn on location sharing, we store only your latest location (no history). It is off by default and shared per-friend only.
- Technical data — session and device information (browser, approximate IP) used to keep your account secure and show your active sessions.
2. How we use your information
- To provide the service — store and display your memories according to your visibility settings.
- To enable social features — friends, chat, albums, notifications.
- To keep your account secure — sign-in, session management, rate limiting, and abuse prevention.
- To send account emails — email verification and password resets. We do not send marketing email.
We do not sell your personal data or your content.
3. Visibility & sharing — you are in control
Every memory and album is Public, Friends-only, or Private, and you choose which. Friends-only and private content is enforced on our servers — people without access cannot see it, and its existence is not revealed to them. You can change any item’s visibility at any time.
4. Location sharing
Location sharing is entirely optional and off by default. When enabled, you control it per friend, it is one-directional (sharing with someone does not reveal their location to you), and only your most recent point is stored. You can delete your stored location, or turn off the master switch, at any time.
5. Cookies
We use a secure, httpOnly session cookie to keep you signed in and a CSRF token to protect forms. We do not use third-party advertising or tracking cookies.
6. Service providers
We share limited data with providers that help us run Jagraaj:
- Google — optional “Sign in with Google” (OAuth).
- Email provider — to deliver verification and password-reset emails.
- Hosting — our servers store your account, content, and media.
These providers process data only to provide their service to us.
7. Data retention & your rights
- Download your data — export your memories, media, and comments as a ZIP from Settings → Account.
- Delete your account — permanently removes your profile, memories, media, messages, and location data from Settings → Account.
- You can edit or delete individual memories, comments, and your location at any time.
8. Security
Passwords are hashed with bcrypt, private media is access-controlled on the server, sessions can be revoked individually or all at once, and repeated failed logins are rate-limited.
9. Children & family accounts
Jagraaj is not directed to children under 13, and we do not knowingly let them create an account. If you are under 13 you cannot sign up; a parent must create and manage a supervised account for you.
People aged 13–17 may join only with verifiable parental consent. At sign-up we ask for a date of birth and a parent or guardian's email. The account stays inactive until the parent approves it from a secure link we email them; we record who consented, when, and to which version of this policy. If consent is not given, the account and all its data are automatically deleted within 7 days.
To protect minors, accounts for people under 18:
- cannot post publicly — memories can only be shared with friends or kept private;
- are not discoverable in search by people who are not already their friends;
- have location sharing and online/last-seen presence turned off, and locked off;
- can be set so that new friend requests need a parent or guardian's approval.
A parent or guardian can review and manage the account, and can withdraw consent at any time from the Family area — doing so permanently deletes the account and all of its data. We collect from a minor only what is needed to run the service (name, username, email, and the memories they choose to save).
9क. बच्चे और परिवार खाते (हिन्दी)
जागराज 13 वर्ष से कम उम्र के बच्चों के लिए नहीं है, और हम जानबूझकर उन्हें खाता नहीं बनाने देते। यदि आप 13 वर्ष से कम उम्र के हैं तो आप स्वयं साइन-अप नहीं कर सकते; आपके माता-पिता को आपके लिए एक निगरानी वाला खाता बनाना और संभालना होगा।
13 से 17 वर्ष के लोग केवल माता-पिता की सत्यापित सहमति के साथ ही जुड़ सकते हैं। साइन-अप पर हम जन्म तिथि और माता-पिता या अभिभावक का ईमेल माँगते हैं। जब तक माता-पिता ईमेल किए गए सुरक्षित लिंक से खाते को स्वीकृति नहीं देते, खाता निष्क्रिय रहता है; हम दर्ज करते हैं कि किसने, कब और इस नीति के किस संस्करण के लिए सहमति दी। सहमति न मिलने पर खाता और उसका सारा डेटा 7 दिनों के भीतर स्वतः हटा दिया जाता है।
18 वर्ष से कम उम्र के खातों के लिए, बच्चों की सुरक्षा हेतु:
- सार्वजनिक पोस्ट नहीं कर सकते — यादें केवल मित्रों के साथ साझा या निजी रखी जा सकती हैं;
- खोज में उन लोगों को नहीं दिखते जो पहले से उनके मित्र नहीं हैं;
- स्थान साझा करना और ऑनलाइन/अंतिम-बार-देखा उपस्थिति बंद और लॉक रहती है;
- नई मित्र-अनुरोध के लिए माता-पिता या अभिभावक की स्वीकृति आवश्यक की जा सकती है।
माता-पिता या अभिभावक खाते की समीक्षा और प्रबंधन कर सकते हैं, और किसी भी समय सहमति वापस ले सकते हैं — ऐसा करने पर खाता और उसका सारा डेटा स्थायी रूप से हट जाता है।
10. Changes to this policy
We may update this policy; we’ll revise the “Last updated” date above when we do.
11. Contact
For any privacy question or request, email jagrajhero@gmail.com.