Privacy Policy

Last updated: May 2026 Effective date: May 2026

⚠️ This is a working draft. Have it reviewed by a qualified legal professional before publishing.

01About this policy

This Privacy Policy explains how Jazzy Fern ("the business", "we", "us", or "our") collects, uses, stores, and discloses personal information when you use our mobile applications, website, and digital artwork products (together, the "Service").

Jazzy Fern is operated as a sole trader based in Queensland, Australia. By downloading our apps or using any part of our Service, you agree to the practices described in this policy.

This policy is intended to comply with:

  • The Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs)
  • The EU General Data Protection Regulation (GDPR) and UK GDPR
  • The California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)
  • Other applicable state and international privacy laws

02Who we are

Jazzy Fern is developed and operated by an individual sole trader based in Queensland, Australia. We build affordable subscription apps for everyday people and create original digital artwork sold through our Etsy shop.

For privacy enquiries, contact us at:

If you are located in the EU or UK, we are the data controller for personal information we collect about you.

03What information we collect

Information you provide

InformationWhy we collect it
Email addressAccount creation, login, and support communication
Password (stored as a one-way hash — we cannot read your password)Account authentication
Name or display nameShown within your account
Content you create in the appTo provide and sync the core app functionality
Support messagesTo respond to your enquiries

We do not collect your date of birth, phone number, physical address, payment card details, or government identifiers.

Information collected automatically

InformationPurpose
Device type, OS version, and app versionTroubleshooting and compatibility
Basic aggregated usage dataUnderstanding which features are helpful
Subscription status (active or inactive)Verifying your access level
What we do not collect: We do not collect precise location data, contacts, photos, or any special-category personal data. We do not use tracking pixels, third-party advertising SDKs, or build profiles of your behaviour for advertising purposes.

04How we use your information

We use your personal information only for the following purposes:

  • Account management — creating and authenticating your account and processing deletion requests.
  • App functionality — providing the features you use and syncing your content across devices.
  • Subscription management — verifying your subscription status so the app provides the correct features. Payment processing is handled entirely by Apple or Google; we never see your payment details.
  • Customer support — responding to enquiries you send us by email or through the support form.
  • Service improvement — understanding which features are used so we can improve our apps.
  • Security and fraud prevention — protecting the integrity of accounts and our service.

We do not use your information for advertising, profiling, or sale to third parties.

05Subscriptions & billing

Jazzy Fern apps use subscription billing processed entirely by Apple (App Store) or Google (Google Play). We do not process or store your payment card details ourselves.

Your subscription status — active or inactive — is shared with our servers solely to determine which features you can access. To manage, pause, or cancel a subscription:

  • iPhone/iPad: Settings → your name → Subscriptions → Jazzy Fern
  • Android: Google Play → Profile → Payments & subscriptions → Subscriptions → Jazzy Fern
Important: Cancelling your subscription stops future billing but does not delete your account or personal data. To request deletion of your data, see the Account Deletion section below.

06Sharing your information

We do not sell your personal information. We share information only in the following circumstances:

RecipientWhat is sharedWhy
Cloud hosting providerAccount credentials and subscription statusHosting our backend server
Subscription management serviceSubscription events and statusManaging in-app subscriptions across platforms
Apple App Store / Google PlayPurchase transactionsProcessing subscription payments
Email delivery providerYour email address and message contentSending account and support emails
Law enforcement or regulatorsAccount informationOnly if required by law, court order, or to protect rights and safety

We require all third-party service providers to handle your data in accordance with applicable privacy laws and under appropriate data processing agreements.

07Data storage & security

Where your data is stored

Data typeLocation
Account credentialsEncrypted on our backend server (password stored as one-way hash only)
Subscription statusOur backend server (cloud-hosted)
App content you create[To be confirmed based on app architecture]

International transfers: Our backend servers may be hosted outside Australia. If you are located in the EU, UK, or Australia, your account data may be transferred to and stored in servers in another country. We rely on standard contractual clauses and the data processing terms of our hosting providers for these transfers.

Security measures

We use industry-standard security practices including:

  • Passwords stored as one-way hashes (irreversible)
  • Encrypted communications (TLS) for all data in transit
  • Access controls limiting who can access your data

Despite these measures, no system is completely secure. We encourage you to use a strong, unique password for your Jazzy Fern account.

08Data retention

DataRetention period
Account credentials and subscription statusRetained while your account is active. Deleted within 30 days of account deletion.
Support messagesRetained for up to 2 years for reference, then deleted.
Aggregated usage dataRetained indefinitely in anonymised form only.

09Account & data deletion

You have the right to delete your account and all associated personal data at any time. There are two ways to do this:

Option 1 — In the app

Open the app and go to Settings → Account → Delete Account. Confirm when prompted. Your account and all associated data will be permanently removed from our servers within 30 days.

Option 2 — By email

Email us at with the subject line "Delete my account". Include the email address registered to your account. We will confirm deletion and complete the process within 30 days.

Please note: Account deletion is permanent and cannot be undone. Any content you have created within the app will be lost. Cancelling your subscription does not automatically delete your account or data — you must request deletion separately if you want your data removed.

10Your rights

All users

You can delete your account at any time as described in section 09 above.

Australian users — Privacy Act 1988

Under the Australian Privacy Principles, you have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate personal information
  • Complain to us about a privacy breach, and to escalate to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au

EU and UK users — GDPR / UK GDPR

You have the right to:

  • Access your personal data (Article 15)
  • Rectification of inaccurate data (Article 16)
  • Erasure — "right to be forgotten" (Article 17) — exercise this by deleting your account (section 09)
  • Restriction of processing (Article 18)
  • Data portability (Article 20)
  • Object to processing (Article 21)
  • Withdraw consent at any time where processing is based on consent
  • Lodge a complaint with your local supervisory authority

Our legal basis for processing your personal information is:

  • Contract performance — processing your account data is necessary to provide the service you signed up for.
  • Legitimate interests — security monitoring and service improvement, balanced against your privacy interests.
  • Consent — where you have explicitly opted in to optional features.

California users — CCPA / CPRA

California residents have the right to:

  • Know what personal information we collect and how it is used
  • Delete personal information we hold about you
  • Opt out of sale — we do not sell personal information
  • Non-discrimination — we will not discriminate against you for exercising your rights

To exercise any of these rights, contact us using the details in section 14. We will respond within 45 days (CCPA) or 30 days (GDPR / Australian Privacy Act).

11Children's privacy

Jazzy Fern apps are not directed at children under the age of 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

12Third-party services

Jazzy Fern integrates with the following third-party services, each with their own privacy policy. We will update this table with specific providers before publishing.

ServicePurposePrivacy Policy
Cloud hosting providerBackend server and account data
Subscription managementIn-app subscription handling
Apple App StoreiOS billingapple.com/legal/privacy
Google PlayAndroid billingpolicies.google.com/privacy
Email delivery providerAccount and support emails
EtsyDigital artwork salesetsy.com/legal/privacy

13Changes to this policy

We may update this policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this document and, where appropriate, through an in-app notification. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

Because this policy is hosted on our website and linked from within our apps, you can always find the current version at jazzyfern.com/privacy. This approach means we can update the policy immediately if required by law, without needing an app update.

14Contact us

For privacy questions, rights requests, or complaints:

Jazzy Fern — Privacy

Email:
Business address: [Your registered business address, Queensland, Australia]

We aim to respond to all privacy enquiries within 5 business days and to complete data deletion requests within 30 days.

Escalation

Australian users: If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.

EU/UK users: You have the right to contact your local data protection authority. A list of EU supervisory authorities is available at edpb.europa.eu.

California users: For CCPA enquiries, email us at the address above.

Legal disclaimer: This privacy policy was prepared in good faith to reflect Jazzy Fern's actual data practices. It does not constitute legal advice. You should seek independent legal advice if you have specific concerns about compliance.