Privacy Policy

Information We Collect

Account information

When you create an account, we collect your email address and an optional display name. If you sign in with Google or Apple, we receive your name, email, and account identifier from the provider. If you use email and password, we store a protected password hash, not your password. We also store short-lived verification and reset records when needed.

Site and waitlist information

If you join the beta waitlist on our website, we collect your email address so we can contact you about Junco and prevent abuse. We also collect standard website analytics and server-log information, such as pages visited, referrers, browser or device details, approximate region, and timestamps, to understand traffic, operate the site, and protect the service.

Newsletter content

If you connect your Gmail account, we request access to your mailbox using the gmail.readonly scope (read-only access). For routine refreshes, we retrieve recent emails from senders you subscribe to. If you start a Gmail scan, we may review message metadata such as sender, subject, date, and unsubscribe signals to show known-sender results or suggest newsletter senders. When you create an episode from Gmail, we retrieve the selected message body. We never send, delete, or modify your Gmail messages.

You can also use your unique Junco inbox address to receive newsletters without connecting Gmail. Emails sent to that address are processed so Junco can identify senders you have allowed, help you approve or ignore unknown senders, detect subscription confirmations, and create episodes for your account. We store newsletter content when it is needed to provide those features.

Generated content

We store generated scripts, audio episodes, referenced links, and metadata like play history, favorites, selected voice, and episode status. Personal episodes made from Gmail, your Junco inbox, or mixtapes are private to your account. Public newsletter content in Discover or similar app surfaces may be available to other Junco users because it comes from public sources. Your subscriptions, listening activity, favorites, and account relationship to that content remain private.

Device, subscription, and engagement information

If you enable push notifications, we store a device push-notification token. If you use a paid subscription, we store purchase and entitlement records. We also store engagement data such as app-open dates, episode-completion dates, total listening time, and streak state. We do not collect advertising identifiers, device fingerprints, or precise location data.

How We Use Your Information

• Authenticate your account and secure your session
• Verify your email, reset your password, and manage account settings
• Retrieve and process newsletter emails, inbox messages, and public newsletter sources
• Find newsletter senders and help you manage allowed and ignored senders
• Generate scripts and audio summaries from newsletter content
• Deliver episodes and push notifications
• Support playback, favorites, offline downloads, streaks, and subscription entitlements
• Operate the website, waitlist, analytics, logging, abuse prevention, and rate limits

We do not sell your data and we do not display ads.

Third-Party Services

We use the following services to operate Junco:

• Google — Google sign-in, optional Gmail read-only access, AI summarization, text-to-speech, website media, and fonts
• Mistral AI — summarization or text-to-speech when used to provide Junco features
• Apple — Sign in with Apple, push notifications, in-app purchases, and App Store subscription verification
• Cloudflare — email routing, security, and storage infrastructure
• Resend — outbound email verification and password-reset emails
• Vercel — website hosting, logs, and analytics
• Neon — waitlist storage

Each service receives only the data necessary for its function. We do not share your data with advertisers or data brokers.

Google API Services User Data Policy

Junco's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, Junco:

• Only requests the minimum Gmail permissions necessary for functionality
• Does not use Gmail data for advertising or marketing purposes
• Does not transfer Gmail data to third parties except as necessary to provide the service
• Does not use or transfer Gmail data to train generalized AI or machine learning models
• Does not allow humans to read Gmail data unless required for security, compliance, or with your explicit consent

Data Retention

Non-favorited episode links are automatically removed from your library after 30 days. Source newsletter content is retained while needed to create, maintain, and clean up your episodes. Newsletter source content that is no longer tied to an active episode is cleaned up after 60 days. Favorites may keep the associated episode and source references longer.

Login sessions expire after 30 days. Verification codes, password reset codes, subscription confirmation records, and temporary security records expire and are cleaned up after their retention windows. If you delete your account, we retain limited account identifiers only for the cooldown period needed to prevent abuse and accidental account cycling.

Data Security

We use industry-standard encryption and security practices to protect your data, including encrypted storage of credentials and secure transmission of all data between your device and our servers.

Your Rights and Choices

Access and control

You have the right to:

• Access the personal data we store about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Revoke Gmail access permissions at any time

To exercise any of these rights, contact us at support@tryjunco.com.

Disconnect Gmail

You can disconnect Gmail at any time in the app or by visiting your Google Account permissions page. Revoking access immediately disables Junco's future access to your Gmail account. Previously stored newsletter data follows the retention rules above unless you delete your account.

Delete your account

You can permanently delete your account from within the app. This deletes your profile, newsletter subscriptions, Gmail connection, Junco inbox records, personal emails, personal episodes, local app session data, and downloaded episodes. Personal audio files are removed from storage. Public newsletter content that Junco processes independently of your account may remain available in the app. We may retain limited records required for abuse prevention, subscription reconciliation, legal compliance, or security during the cooldown period. This action is irreversible.

Log out

Logging out revokes server-side login sessions, unregisters the stored push token when possible, and clears local account/session caches from the app. Downloaded episodes may remain on your device until you delete the downloads or delete your account.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information (Note: We do not sell personal information)
• Right to non-discrimination for exercising your rights

European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification
• Right to erasure (right to be forgotten)
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

Our legal basis for processing your data includes consent, contract performance, and legitimate interests.

Children's Privacy

Junco is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with their data, please contact us so we can remove it.

Changes to This Policy

We may update this policy from time to time. When we make changes, we will update the effective date at the top of this page.

Contact

If you have questions about this policy or your data, reach us at support@tryjunco.com.