Privacy
Last updated:
Who handles your information
Zora Studio DOO, Cara Lazara 34, Pancevo, Serbia is responsible for the personal information used to operate Just Catching Up. Contact contact@justcatchingup.com with questions or privacy requests.
What we process and why
We process your name, email, protected authentication information and sessions to create and secure your account. Optional two-factor authentication also needs authenticator and recovery information. We process your posts, photos, videos, drafts, comments, reactions, connections, space memberships, family-seat arrangements and preferences to deliver the features you request. Your private read state helps you return to unread posts; it is not shown to other people.
Other people may provide information about you in invitations, shared contributions or reports. We process support correspondence to answer requests, and restricted report information to investigate unwanted content or contact. Infrastructure and payment providers may process technical information, including connection and transaction details, to deliver and secure their services.
We use account and feature information to perform our service agreement with you. Our interests in securing the service, handling reports and preventing abuse support necessary safety processing, subject to your rights. We process information where needed to meet an applicable legal duty. Optional email preferences can be changed in account settings. Accepting the Terms is not blanket consent to unrelated processing.
Who can see it
Posts are shared with their selected connection or space audience, subject to current access controls. Paying for another person does not give access to their content. Our authorized staff and service providers can process information as needed for operation, support and safety; we do not promise end-to-end encryption.
Cloudflare provides the website and application-email delivery. Bunny Storage and CDN store and deliver photos and private operational files, including exports; Bunny Stream processes, stores and delivers videos. Railway runs the API; PlanetScale stores application records. Fastmail hosts our support mailbox. Creem handles purchases and payment information under its own privacy notice and applicable provider agreements. We receive payment references and subscription status rather than storing your full card details. Providers can have their own responsibilities for security, billing and legal records. Service delivery and provider operations can involve processing outside your country; an EU hosting region does not mean every provider activity stays in the EU.
How long information stays
Account content remains while needed for your account until you delete it or the relevant content or space is removed. Subscription expiry alone does not start an inactivity deletion period. Account deletion immediately revokes access and hides content, followed by asynchronous cleanup. Our application policy is live-system cleanup within seven days and ordinary recovery history within 30 days of the request; these limits concern application records and recovery copies, not every provider's independent records. Restricted report evidence is retained for 90 days from submission, with recovery-copy residue after expiry.
Generated exports stop being available 24 hours after the request; physical cleanup can happen later. Our application removes its billing records after required cancellation is confirmed. Creem retains its own records under its privacy notice; deleting your app account does not delete those records.
Only employees have access to our support mailbox. We delete support emails after the issue is resolved. Fastmail's separate backup and operational-log retention can outlast mailbox deletion; its security documentation explains these limits.
Cookies and browser storage
The app uses a sign-in cookie to keep your session, with a seven-day lifetime that can be refreshed, and a short-lived cookie while you complete two-factor sign-in. Signing out clears the authentication cookies.
We store your chosen light, dark or system appearance in this browser until you change or clear it. Temporary session storage remembers scroll positions during navigation. Clearing or blocking browser storage may sign you out or stop these conveniences working. Our app does not add advertising or third-party analytics trackers. Hosted payment pages are separate and have their own storage and privacy information.
Your choices and rights
Use account controls to change email preferences, manage your content, export your own data or request deletion. You can also email us to request access, correction, erasure, restriction or portability, or to object to processing where those rights apply. Where processing relies on consent, you can withdraw it without affecting prior lawful processing. We may need to verify your identity to protect your information.
You may complain to Serbia's Commissioner for Information of Public Importance and Personal Data Protection or another competent data-protection authority where applicable. Contacting us first is not a condition of making a complaint.
Changes
We will update this notice when our practices change, show the update date and provide additional notice where required. See our Terms and Contact page.