Privacy Policy

What we collect, why we collect it, and what you can ask us to do with it. Written to be read, not to be survived.

Last updated 28 July 2026

Who is responsible

JOL runs this service and decides how your personal information is handled. Under South Africa’s Protection of Personal Information Act (POPIA) that makes us the responsible party.

Address: 18 Canterbury Lane, Paradyskloof, Stellenbosch, Western Cape, 7600. Information Officer: Igor Bes. You can reach us at hello@thejol.co.za.

What we collect

Your email address. We need it to sign you in and to send you the one-time code. It is the only thing we ask for outright.

Your name and profile picture, if you sign in with Google. Google passes these to us along with your email. We ask Google for nothing else — no contacts, no calendar, no files.

What you save in the app. The places you keep, the route you are building, and a short history of routes you have made. Each history entry holds the place, the title, how many stops it had, and when you made it.

Your location, only if you allow it. If you grant location access, the app uses your coordinates to build a route around where you actually are. Those coordinates stay on your device and are not sent to our servers.

Ordinary technical records. Our hosting keeps the usual server logs — things like IP address and browser type — for security and diagnosis.

What we don’t do

We do not use analytics, advertising trackers, or third-party pixels. We do not sell your personal information, and we do not share it for anyone else’s marketing. We do not build a profile of you to sell to a third party.

Why we are allowed to hold it

We hold your email because you asked us to sign you in — that is the contract between us. We hold what you save because saving it is the point of the feature. Where the law asks for your consent, such as location access, you give it in the moment and can take it back in your browser settings.

Who else processes it

We keep the list short on purpose. Each of these acts on our instructions, not their own:

Supabase stores your account and what you save, and sends your sign-in codes. Vercel hosts the site and serves it to you. Google handles sign-in if you choose that route, and provides the maps and the place information you see on the cards.

Some of these operate outside South Africa. Where your information crosses a border, it goes to providers whose own terms commit them to protecting it to a comparable standard.

How long we keep it

We keep your account and what you saved for as long as your account exists. Ask us to delete it and we delete it, along with your saved places and route history. Server logs age out on their own within a short period.

What you can ask for

POPIA gives you real rights here, and you do not need a reason to use them. You can ask what we hold about you, ask us to correct it, ask us to delete it, and object to how we are using it. Write to hello@thejol.co.za and we will act on it.

If you think we have handled your information badly, you are entitled to complain to the Information Regulator of South Africa. We would rather you told us first, but that door is yours either way.

Cookies

We set a cookie to keep you signed in. That is what it does and that is all it does — we do not run advertising or tracking cookies. Google may set its own cookies where maps appear, under its own policy.

Children

JOL is built for adults and is not directed at children under 18. If you believe a child has given us their information, tell us and we will remove it.

When this changes

If we start collecting something new, this page changes before we do, and the date at the top moves. If the change is significant, we will say so in the app rather than hope you re-read this page.