Privacy, in plain language.

Visiting this website

Cloudflare uses the country associated with your connection to suggest Malaysia or international website prices. The pricing lookup returns only a pricing region; Jalin does not store this lookup or request your precise location. You can change the region, with your selection kept in the page address and language link. Your app store determines purchase eligibility and the actual price.

Family records on your device

You choose the names, life dates, notes, photos and relationships to record. Family information can be sensitive, especially information about children, adoption, lineage and nursing. Record only what you need and obtain appropriate permission from living relatives.

Family records, photos and local preferences are encrypted in private device storage. OS secure storage holds the encryption key. Platform configuration excludes family files from automatic device backups. Uninstalling the app, clearing its storage or losing the device/key can permanently lose records. Keep and verify a manual backup.

Backups, images and PDFs

Manual backups are unencrypted archives containing the included family records and photos. Tree image/PDF exports contain visible names, profile pictures, displayed relationships and your chosen background; they exclude profile notes and private supporting records. Files saved or shared outside Jalin are unencrypted. Review the preview and recipients. The receiving app or drive handles its copy; Jalin does not upload visual exports automatically.

Hiding names is a visual preference, not anonymization: photos and family connections can still identify people. Portable backups do not include store credentials or transfer purchases.

Bug reports and support email

Settings → Report a bug lets you send your summary, reproduction details, optional reply email and technical details you approve: app version/build, platform, language and rules version. No family database, photos, screenshots, credentials or logs are attached automatically. Avoid including family information in your report.

Failed sends keep an encrypted draft on your device for retry. Received reports are stored privately in Microsoft Azure for 90 days, followed by scheduled cleanup. A random installation ID supports submission limits; it is not a hardware identifier. Reports are separate from family accounts. Quote the report receipt to request deletion.

Emails you send to [email protected] contain the information you choose to share and are processed by the email providers involved. We use them to answer questions, verify ownership and handle requests. Do not send family archives, passwords or encryption keys. Request deletion of support correspondence through the same address; any necessary retention will be explained.

Purchases and subscriptions

Apple or Google and RevenueCat process store transactions and an app purchase identifier. Jalin supplies no family names, dates, notes or photos to those services. We receive verified entitlements and expiry information so the app can provide purchased features. Store payment details are handled by the applicable provider. Purchases and trials follow the store’s displayed terms and eligibility.

Advertising

Advertising is not currently enabled in the app configuration covered by this policy. This website has no advertising.

Optional cloud storage

Cloud use is optional. When you upload or enable automatic sync for a selected tree, its records and photos go to private Microsoft Azure and Cloudflare R2 storage. Microsoft Entra handles sign-in. An opaque account ID links to RevenueCat for subscription verification. Invited people receive access according to the owner’s permissions. Local encryption does not mean cloud data is end-to-end encrypted.

The current testing backend uses Microsoft Azure Malaysia West for API processing and family-record/backup storage. Profile media uses a private Cloudflare R2 bucket. This is not a promise that all R2 data, network processing or other provider data remains in Malaysia; Cloudflare and the other providers process data according to their location controls and service policies.

Policy version: testing-2026-10-16-v1. After confirmed subscription expiry is first observed, a 30-day grace period applies before scheduled deletion begins. Renewal clears that deadline. Completed backups use a 7-day retention policy; scheduled processing and cleanup time apply.

Cloud account-data deletion revokes access and schedules cleanup of owned trees, associated media and server backups. Cleanup runs in bounded scheduled batches. Our support team checks completion rather than treating an accepted request as proof that every stored copy is already removed. Previously issued photo download links may work for up to 60 seconds.

Expiry and retention information is shown in the app when it connects to cloud. No email or push expiry-notification service is configured. Keep an independent manual backup; cloud storage is not indefinite after subscription expiry.

Invitation emails

When an owner invites you, Jalin sends your address and a private invitation through Brevo. Invitations expire after 7 days. Email possession and signed-in acceptance link one account; entering an address alone does not create an account or subscription. We store recipient addresses and delivery records for up to 30 days plus scheduled cleanup, and remove related jobs after owner-account or tree deletion is observed. We retain keyed address hashes and minimal failure/opt-out records to prevent unwanted repeat invitations. A private membership also stores a keyed email hash to enforce one email/account and one linked profile per tree; it follows membership/account/tree deletion and scheduled cleanup. Brevo may process delivery and email-interaction metadata under its settings and retention policy; Jalin does not use opens or clicks for access decisions or advertising. You can stop invitations using the email link or contact support.

Family tools and rule updates

Family analysis runs on your device. Optional Islamic family tools use recorded relationships and a versioned Shafi‘i reference ruleset; they do not issue an official religious ruling. When remote rule updates are configured, the app checks a public Cloudflare-hosted manifest and downloads signed rule files. No family tree is included in that request; the host can process normal connection metadata.

Your choices and deletion

Edit or delete local records in the app, export a backup and remove unreferenced photos using the available settings. Local changes and manual exports remain under your control. For cloud account deletion, sign-in identity deletion, report deletion, access or correction requests, use our dedicated deletion page or contact support.

Request account or data deletion

This website and providers

This website has no analytics script, advertising, sign-in, submission form or application cookies. The invitation page uses a small script to display and copy a private code locally, and sends an opt-out request only when you choose Stop invitations. Private link fragments are removed from the address bar after loading. English and Bahasa Malaysia are separate pages; switching language does not store a preference. Email links open your email app and do not send a message automatically.

Cloudflare Pages hosts this website. Cloudflare can process IP addresses, request times, requested paths and other normal connection metadata to deliver and protect the site. We have not added website analytics, advertising, contact forms or tracking scripts.

Provider privacy information: Google, Apple, RevenueCat, Microsoft, Cloudflare, Brevo.