Last updated 2026-11-07.
This policy explains what Jozzo collects, why, who can see it, and what you can do about it. It covers Jozzo on the web, on iPhone and iPad, and on Android. Aryan M is the data fiduciary under India's Digital Personal Data Protection Act, 2023.
Account: your email address, and - if you sign in with Google - your name, profile picture and account ID from Google. Jozzo never receives your Google password. If you sign in with an emailed code, we keep a scrambled (hashed) copy of each code for 15 minutes to check it.
Profile: your username, photo, background, bio, gender, age and city (required, so Jozzo can show you what's near you and keep to people 13 and over), and optionally your phone number and links to your other profiles.
What you create: Spaces and memberships, messages and what you send in them (photos, videos, voice messages, GIFs, reactions and replies), when you've read a chat and when you're typing, habit pacts and check-ins, photos (Quickies) and voice notes, shopping lists, events and RSVPs, expenses, splits and payment confirmations, Tally entries and who made or changed each one, investment entries, and any UPI IDs you add.
Your city from your location - only if you allow it: your phone's approximate location is turned into the city you're in, which is saved as your profile's city. The location itself is used once for that and never stored.
People you add by name: if you add someone to a Space before they join, we store the name you typed so they can be included in plans, habits and costs. When they join through their invite link, it becomes part of their account.
Free tools (bill splitter, aura check, flatmate report card): before showing a result we ask for a name and email, and use them only to tell you once when Jozzo opens. They aren't shared or sold, and you can ask us to delete them at any time.
Technical: a device sign-in token on each phone, a notification token for each device where you turn on notifications, basic request logs, and rate-limit counters that protect the service from abuse.
What we don't collect: UPI PINs, card numbers, bank passwords, your precise location, your contacts, or your photo library. Photos and videos you pick through your phone's picker are the only ones Jozzo can see.
To sign you in and run the features you use. To show shared records to the right people. To create and escalate reminders about things left open. To keep Jozzo secure and prevent abuse. To fix problems. We process this data with your consent and to provide the service you signed up for.
We don't sell your personal data, use it for advertising, or share it with data brokers.
Members of a Space see what is shared in it. Private Spaces are invisible to everyone else, including in search.
Other users can see your name, photo, bio and city. Search can match an exact email or phone number, but never shows either one.
Your UPI ID is shown only to people who owe you money, so they can pay you. A Tally vendor's details are visible only to you.
Quickies, check-in photos and voice notes are visible to people currently in the Space the pact belongs to - and, when that Space is public, also to your friends on Jozzo. A photo's link works only for them, when signed in - not for anyone it's forwarded to. Your age and gender are never shown to other people.
If you block someone, they stop seeing your messages, check-ins and Quickies, and you stop seeing theirs.
Photos, videos and voice messages sent in a chat can be opened only by people in that chat, when signed in. A view-once photo or video can be opened once by each of them, for a few minutes, and is never cached. A message you delete for everyone takes its photo or video with it.
A tally is visible to the people in the Space it lives in, with who logged and changed each entry.
Jozzo relies on a few providers, each handling only what its job needs: Google and Apple (sign-in), Neon (database, where photos are also stored when separate file storage isn't set up), Vercel (hosting, cookie-free page-view and page-speed measurement, and, where set up, file storage), Inngest (scheduled reminders), Google Firebase Cloud Messaging, Apple Push Notification service and your browser's push service (delivering notifications - they see a device token and the reminder text), and Resend (sending email), GIPHY (GIF search - it receives your search words, not who you are), and TMDB (film listings). Some of these providers may process data outside India, under their own security and privacy commitments.
Payments happen in your UPI app. What that app and your bank collect is governed by their own policies.
Notifications, alarms and full-screen alerts: so shared habit reminders can ring and new messages reach you. Microphone: only when you record a voice note or a voice message. Approximate location: only if you tap "Use my location", to set your city. Internet: to talk to the Jozzo server.
Jozzo never asks for your contacts, and nothing is asked for at launch. On iPhone, the camera and microphone are asked for when you first take a photo or video or record a voice note, location only if you choose "See what's around you", and adding to Photos only when you save a UPI QR; the photo library is read through the system picker, which needs no permission. On Android, photos and videos come through the system picker or the camera app, and saving a UPI QR on Android 10 and later needs no permission.
We keep your data while your account is active. Shared records stay while the Space or list they belong to exists, so other members' history and balances stay correct.
You can delete your account yourself in Settings, in the app or on the web. Deleting closes the account: you can't sign in to it again, and your profile, photos, voice notes, messages and personal details disappear from Jozzo for everyone straight away. Records other people depend on, such as a split they're owed, stay with your personal details removed.
When an account is deleted, Jozzo moves a copy of its data - profile details, UPI IDs, messages, check-ins with their photos and voice notes, lists, tallies, budgets and investment entries - into a restricted archive. Nobody using Jozzo can see it. It is used only to resolve disputes and abuse reports, keep the service secure and meet legal obligations, and is never shown in the app or used for marketing. We currently keep this archive without a fixed end date; you can ask for it to be erased as described under Your rights.
Reports you make, and what they were about, are kept so we can act on them and on repeat abuse. Security logs are kept for up to 30 days and then deleted.
You can see and edit your profile in Settings, remove UPI IDs, leave Spaces and lists, and delete many records yourself.
Under the DPDP Act you can ask us for a summary of your data, ask us to correct or erase it - including the archived copy of a deleted account - withdraw consent, and name someone to act for you. Email privacy@jozzo.in from the address you sign in with. We'll respond within 30 days. We may keep what the law requires us to, and will tell you what and why. If you're not satisfied, you can complain to the Data Protection Board of India.
Data travels over HTTPS. Access is checked on the server for every request. Sign-in tokens are stored privately on your device and can be revoked by signing out. No system is perfectly secure. If a breach affects your data, we'll tell you and the authorities as the law requires.
Found a security problem? Tell us privately at security@jozzo.in.
Jozzo is not meant for children under 18 without a parent's or guardian's consent. If you believe a child is using Jozzo without that consent, email privacy@jozzo.in and we'll delete the account.
If this policy changes, we'll update the date at the top and give notice in the app for significant changes. Questions: support@jozzo.in. Privacy requests (access, correction, erasure): privacy@jozzo.in. Grievances: Aryan M, Grievance Officer, grievance@jozzo.in.