Privacy Policy
Effective date: 11 October 2026
1. Introduction
This policy explains what information jambi Inc. ("jambi", "we") collects when you use the jambi app and website, how we use it, who else handles it, and the choices you have. If you have questions, email support@jambi.io.
2. Information we collect
Information you give us
Account details: your email address, username (your @handle), display name and password. We store passwords only in scrambled (hashed) form — nobody at jambi can read them.
Profile picture, if you add one.
Your music activity: track ratings, album scores, rankings, your library and queue, and your app preferences.
Messages you send us, for example through the app's contact form or by email.
When you sign in with Apple or Google
From Apple: an account identifier, your email address — or, if you choose "Hide My Email", a private forwarding address from Apple — and, the first time you sign in, your name.
From Google: an account identifier, your email address and your name.
We use your name only to suggest a username; we don't store it. We store the account identifier and email address so we can recognise you next time. For Apple, we also store a token Apple provides, so that we can disconnect jambi from your Apple ID when you delete your account.
We never receive your Apple or Google password, and we don't access anything else in those accounts. You can disconnect Apple or Google at any time in Edit Profile → sign-in methods, as long as your account keeps another way to sign in.
Collected automatically
Your device's IP address, whenever the app talks to our servers. We use it to keep accounts safe (for example, by limiting repeated sign-in attempts), and it appears in our server logs.
We do not use analytics, advertising or tracking tools.
3. How we use your information
To create and run your account, and to sign you in.
To show your profile, ratings and rankings, and to build community features such as album averages and rankings.
To send you account emails: confirmation codes, password-reset codes and email-change codes. We don't send marketing emails.
To keep jambi secure and prevent abuse.
To fix problems and improve the app.
If you are in the EU or UK, we rely on these legal bases: performing our agreement with you (running your account), our legitimate interests (keeping jambi secure and improving it), and your consent where we ask for it.
4. What other jambi users can see
jambi is a community. Other jambi users can see your username, display name, profile picture, and your ratings, scores, rankings and library. We never show your email address to other users.
5. Service providers and sharing
We don't sell your information and don't share it for advertising. We use these providers to run jambi, and they handle information only on our behalf:
Xano — hosts our servers and database, including your account, profile picture and ratings.
Mailgun — sends our emails (it receives your email address and the email's contents).
Apple and Google — Sign in with Apple and Sign in with Google, if you use them.
MusicBrainz and fanart.tv — music information and artist images. They don't receive your account information; when the app loads artist images, fanart.tv sees your device's IP address, as any website would.
We may also disclose information if the law requires it.
Google user data: jambi's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
6. Keeping and deleting your information
We keep your account information for as long as your account exists.
You can delete your account at any time in the app: Profile → Help & Support → Delete My Account. You can also email support@jambi.io and we'll do it for you.
When you delete your account, we remove your email address, username, display name, profile picture and password, disconnect Sign in with Apple and Google, and ask Apple to revoke jambi's access to your Apple ID. Your ratings remain part of jambi's community statistics (such as album averages), but they are no longer linked to anything that identifies you.
Confirmation and reset codes stop working after 15 minutes.
Copies may remain in our hosting provider's backups and logs for up to 7 days before they are automatically deleted.
7. Your rights
Depending on where you live — including Canada, the EU, the UK and California — you may have the right to:
access the information we hold about you, and get a copy of it;
correct it;
delete it;
object to or restrict how we use it;
withdraw your consent, where we rely on it.
To use any of these rights, email support@jambi.io. We'll reply within 30 days. If you're not satisfied with our answer, you can complain to a data-protection authority — in Canada, the Office of the Privacy Commissioner of Canada; elsewhere, your local authority. We don't sell or "share" personal information as California law defines those terms.
8. Security
Information travels between the app and our servers encrypted (HTTPS). Passwords and sign-in codes are stored only in scrambled (hashed) form. No system is 100% secure, so we can't guarantee absolute protection, but we work to protect your information and fix problems quickly.
9. Where your information is processed
jambi Inc. is based in Ontario, Canada. jambi's servers and database are hosted in the United States, so your information is stored and processed there and may be accessible to courts, law enforcement and other authorities there under US law. Our other service providers may process information in the United States and other countries.
10. Children's privacy
jambi is not intended for anyone under 13, and we don't knowingly collect information from children under 13. If we learn that we have, we will delete it.
11. Changes to this policy
When we update this policy, we'll change the effective date above. If the changes are significant, we'll tell you in the app or by email.
12. Contact
Questions and requests go to the person responsible for privacy at jambi:
jambi Inc., Ontario, Canada
support@jambi.io