Privacy Policy

JOL runs this service and decides how your personal information is handled. Under South Africa’s Protection of Personal Information Act (POPIA) that makes us the responsible party.

Address: 18 Canterbury Lane, Paradyskloof, Stellenbosch, Western Cape, 7600. Information Officer: Igor Bes. You can reach us at hello@thejol.co.za.

Your email address. We need it to sign you in and to send you the one-time code. It is the only thing we ask for outright.

Your name and profile picture, if you sign in with Google. Google passes these to us along with your email. We ask Google for nothing else — no contacts, no calendar, no files.

What you save in the app. The places you keep, the route you are building, and a short history of routes you have made. Each history entry holds the place, the title, how many stops it had, and when you made it.

Your location, only if you allow it. If you grant location access, the app uses your coordinates to build a route around where you actually are. Those coordinates stay on your device and are not sent to our servers.

Ordinary technical records. Our hosting keeps the usual server logs — things like IP address and browser type — for security and diagnosis.

Usage information. Google Analytics records pages viewed, approximate location, device and browser information, referral source, and engagement. We do not send your account ID, email, saved places, routes, or precise location to Analytics.

We do not use advertising trackers or third-party marketing pixels. We do not sell your personal information, share it for anyone else’s marketing, or build a profile of you to sell to a third party.

We hold your email because you asked us to sign you in — that is the contract between us. We hold what you save because saving it is the point of the feature. Where the law asks for your consent, such as location access, you give it in the moment and can take it back in your browser settings. We use general analytics to understand and improve the service while limiting the information sent to Google.

We keep the list short on purpose. Each of these acts on our instructions, not their own:

Supabase stores your account and what you save, and sends your sign-in codes. Vercel hosts the site and serves it to you. Google handles sign-in if you choose that route, and provides the maps and the place information you see on the cards. If you allow analytics, Google also processes usage events for us through Google Analytics.

Some of these operate outside South Africa. Where your information crosses a border, it goes to providers whose own terms commit them to protecting it to a comparable standard.

We keep your account and what you saved for as long as your account exists. Ask us to delete it and we delete it, along with your saved places and route history. Server logs age out on their own within a short period. Google Analytics retains usage data according to the retention settings of our Analytics property.

POPIA gives you real rights here, and you do not need a reason to use them. You can ask what we hold about you, ask us to correct it, ask us to delete it, and object to how we are using it. Write to hello@thejol.co.za and we will act on it.

If you think we have handled your information badly, you are entitled to complain to the Information Regulator of South Africa. We would rather you told us first, but that door is yours either way.

We set a cookie to keep you signed in. Google may set its own cookies where maps appear, under its own policy. Google Analytics also sets first-party cookies such as_ga to distinguish visits and sessions. You can block or clear these in your browser settings.

JOL is built for adults and is not directed at children under 18. If you believe a child has given us their information, tell us and we will remove it.

If we start collecting something new, this page changes before we do, and the date at the top moves. If the change is significant, we will say so in the app rather than hope you re-read this page.