JouraLast updated: September 15, 2026. This Privacy Policy explains how Wandering Castle LLC ("Wandering Castle," "we," "us") handles information in connection with the Joura mobile application and the joura.wandering-castle.com website (together, the "Service"). By using the Service you acknowledge this Policy. If you do not agree, please do not use the Service. If you are in the EU, EEA, or UK, please also read our EU / UK Privacy Notice; California residents, see the California section below.
The short version
- Your child's information and the moments you write are encrypted and kept on your device. They are not transmitted to us and we cannot read them.
- Joura works with no account and no login. We use a random, pseudonymous identifier, not your name or email.
- We collect a small amount of anonymous, non-content diagnostic and usage data (which screens are used, whether the app crashed) to keep Joura working. This diagnostic and usage data never includes your child's information. If you choose to type a hard moment into a website demo or send feedback, we receive what you write, so please leave out personal details.
- If you subscribe, our payment partners process your purchase. If you send feedback, we receive what you chose to write.
- We do not sell your information, we do not use it for advertising, and we never use your family's private entries to train AI models.
The sections below are the full, controlling detail.
1. Who we are
The Service is provided by Wandering Castle LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, USA, a Wyoming company, which is the data controller for the limited information described here. You can reach us at contact@wandering-castle.com for any privacy question or to exercise your rights. Given the small volume and anonymous nature of the data we process, we are not required to appoint a data protection officer and have not appointed one.
2. What stays on your device (and never reaches us)
Joura is built privacy-first. The sensitive content of your use, including the moments you write, your notes, your child's name and details, and the suggestions and journal Joura builds for you, is stored in an encrypted database on your own device. This content is not sent to our servers, and we have no ability to access or read it. If you use voice input, your speech is transcribed to text on your device; the audio is not sent to us.
3. What we collect, why, and who processes it
To keep the Service running, safe, and improving, we and a small set of service providers process the limited information below. None of it includes the on-device content described in Section 2.
| What | Why | Contains | Processor |
|---|---|---|---|
| Product analytics | Understand which features are used so we can improve the app | Structural events only (e.g. "app opened," "screen viewed," counts, yes/no flags), tied to a random, pseudonymous identifier, not your name or your child's details. Our analytics provider may derive an approximate, coarse location from your device's regional setting or network connection. Never your child's name, and never the private notes you keep inside the app. | PostHog; Supabase |
| Crash & error diagnostics | Detect and fix crashes and errors so the app stays reliable | Technical, structural information about where an error occurred. The crash tool is configured with personal identifiers off, so it does not store your IP address, and it never carries your typed content or your child's information. | Sentry |
| Subscriptions (only if you buy Joura Pro) | Provide, restore, and manage a paid subscription | Purchase and subscription status tied to an anonymous identifier. Your actual payment details are handled by the app store, not by us. | RevenueCat; Apple App Store; Google Play |
| Feedback (only if you choose to send it) | Read and act on problems and ideas you send us | What you type, plus app version/platform and the pseudonymous identifier, plus an email address only if you choose to give one for a reply. | Supabase |
| Onboarding note & error reports (only if you choose to send them) | Understand what brought you to Joura; receive a report when something breaks | The optional free text you type at the "what brought you here" step, or an optional note on a one-tap error report, plus (for an error report) structural error details, and an optional email if you choose to give one. Never your child's information. | Supabase |
| Product updates / contact (website) | Send occasional product updates if you opt in, or reply to you | The email address you submit. | Supabase; email provider |
| Website analytics | Understand general website traffic | Privacy-conscious, aggregate page analytics. Inputs are masked; we do not record your screen. | PostHog; Vercel |
| Interactive website demo (only if you use it) | Learn what parents actually need so we can improve Joura | If you type a hard moment into a demo on our website to see a suggestion, we save the words you type. This only happens when you submit the demo, and only if you have accepted analytics. Please do not include names or other personal details. | PostHog; Supabase |
These service providers act as our processors under contract and only process information to provide their service to us. Where a provider offers model-training on submitted data, we do not enable it for your content. The current list of providers, what each handles, and the safeguards in place is on our Subprocessors page, and the website's use of cookies and analytics is described in our Cookie Policy.
Automated decisions and AI
Joura runs on a deterministic, on-device engine, not an AI system or a chatbot. It does not use a large language model; its suggestions are drawn from published guidance by named child-development and pediatric sources, selected and phrased by that engine on your device, not generated by AI. The content you enter is not sent to us or to any outside AI service, and we do not make decisions about you by solely automated means that produce legal or similarly significant effects. Joura never diagnoses your child, and its suggestions are general information for you to weigh with your own judgment. If we ever add a generative-AI feature, we will update this section and tell you plainly before it ships.
4. What we do not do
- We do not require an account and do not ask for your name to use the app.
- We do not sell or rent your information, and we do not "share" it for cross-context behavioral advertising as those terms are defined by U.S. state privacy laws.
- We do not send your child's information to advertising networks.
- We do not use your family's private, on-device entries to train artificial-intelligence models.
5. Children's information
Joura is a tool for parents and caregivers, who must be adults. It is not directed to children and we do not knowingly let children use it or knowingly collect personal information from children. A parent may choose to record information about their own child; that information is kept encrypted on the parent's device as described in Section 2 and is not collected or read by us. Because the anonymous diagnostic data in Section 3 contains no content and no identifiers, it does not include information about your child. If you believe a child has provided us information directly, contact us and we will delete it.
6. Legal bases (for users in the EEA / UK)
Where the GDPR or UK GDPR applies, we rely on: legitimate interests (keeping the Service secure and reliable, and improving it, using the anonymous, non-content data in Section 3); performance of a contract (providing a subscription you purchase); and consent (for optional feedback you choose to send, and any future optional features that would change this). You may object to processing based on legitimate interests as described in Section 8.
7. Where information is processed, and international transfers
We operate primarily on servers located in the United States. If you use the Service from outside the United States, information described in Section 3 will be processed in the United States and other countries where our providers operate. Where required, transfers of personal data out of the EEA or UK are covered by appropriate safeguards such as Standard Contractual Clauses and data-processing agreements with our providers.
8. Your rights and choices
You can:
- Access, correct, export, and delete your on-device information directly in the app at any time. Deleting the app removes its data from your device.
- Turn feedback off simply by not sending it, and unsubscribe from our product-update emails using the link in our emails or by contacting us.
- Depending on where you live (including under the GDPR/UK GDPR and U.S. state laws such as the California CPRA), request access to, correction of, deletion of, or a copy of the limited information we hold that is linked to your anonymous identifier; object to or restrict certain processing; and withdraw consent. Because we design for anonymity and hold no account or name, we may be unable to link a request to a specific person without additional information, and in some cases cannot identify your data at all; we will explain if that is the case.
- We do not sell or "share" personal information, so there is nothing to opt out of in that respect.
To make a request, email contact@wandering-castle.com. We will not discriminate against you for exercising your rights. If you are in the EEA or UK you may also lodge a complaint with your local data-protection authority; see the EU / UK Privacy Notice for detail.
California residents (CCPA / CPRA)
If you live in California, this is our notice at collection and your rights. In the past 12 months we have collected, at most, identifiers (an anonymous identifier), internet or other electronic activity (structural, non-content app and site usage), commercial information (subscription status), and, only if you choose to send it, the content of your feedback, an onboarding note or one-tap error-report note, the words you type into an optional website demo, and an optional email. We collect it for the business purposes described above and keep it as described in the Retention section. You have the right to know/access, delete, and correct this information, to receive a copy, and to opt out of the sale or sharing of personal information and to limit the use of sensitive personal information.
We do not sell or "share" (for cross-context behavioral advertising) your personal information, and we do not use or disclose sensitive personal information for purposes that require a "limit" option, so there is nothing to opt out of or limit in those respects. We still honor Global Privacy Control (GPC) signals on our website. We respond to verifiable California requests within 45 days (extendable once). You may use an authorized agent, and we will not discriminate against you for exercising your rights.
9. Retention
We keep information only as long as we need it, using these guides:
| Information | How long we keep it |
|---|---|
| On-device content (your moments, notes, your child's details, journal) | Until you delete it in the app or remove the app; it is never sent to us |
| Anonymous product analytics | Up to 14 months, then deleted or aggregated |
| Crash and error diagnostics | Around 90 days |
| Feedback and error reports you send (and any optional email) | While needed to resolve the issue, and up to 24 months, then deleted |
| Subscription records | While your subscription is active and as required to meet legal, tax, and accounting obligations (generally up to 7 years) |
| Newsletter email | Until you unsubscribe |
When information is no longer needed for these purposes, we delete or anonymize it, unless a longer period is required by law.
10. Security, and your part in it
We use encryption on your device (an encrypted local database) and reputable providers with their own safeguards for the limited data in Section 3. No method of storage or transmission is 100% secure, and we cannot guarantee absolute security. You are responsible for the security of your device and passcode/biometrics, and for keeping any recovery phrase Joura gives you private and safe; if you lose your device or recovery phrase, we may be unable to recover your on-device information for you.
11. Third-party services and links
The app stores (Apple, Google) and the providers named in Section 3 have their own terms and privacy policies that govern their handling of information. We are not responsible for the practices of third parties. If we link to another site or service, this Policy does not apply to it.
12. Changes to this Policy
As Joura grows and adds features, we will update this Policy and the "Last updated" date above. If a change materially expands what we collect, we will take reasonable steps to notify you and, where required, obtain your consent. Continuing to use the Service after an update means you acknowledge the current Policy.
13. Contact
Questions, requests, or concerns about privacy: contact@wandering-castle.com.
14. Governing language
This Policy is written in English. Any translation is provided for convenience only; the English-language version is the authoritative and legally controlling version, and prevails in the event of any conflict.