• Your journal entries, corrections, flashcards, and streak state — tied to your account.
• Your email, only if you create an account. You can use Jumla without one: entries then live in your browser only.
• Basic anonymized usage counts (e.g. requests per day) used to protect the service from abuse and monitor cost. Never entry contents.

Only you. Every row of your data is protected by row-level security in the database, enforced on every single request against your signed-in user id. Nobody else — not other users, not the public — can query your entries.

The admin dashboard shows aggregate counts (how many entries were created today, top searched words) — never the contents of anyone's journal.

When you ask for feedback, your entry is sent to our AI provider to generate line-by-line corrections. Per the provider's terms, prompts are not used to train third-party models.

Handwriting photos are processed the same way (Gemini vision) to produce a transcription. Jumla does not store the photo itself — only the transcribed Arabic text you keep in your journal.

• No ads. Ever.
• No selling or sharing your data with third parties for marketing.
• No third-party analytics or tracking scripts on the site.
• No reading your journal for any human purpose.

From your account page you can:

• Export everything you've ever written as a single JSON file.
• Delete your account. Every row we hold for you is removed and your login is deleted. This is permanent.

Jumla is a small independent app. We are not SOC 2, HIPAA, or GDPR-certified, and we don't claim to be. Data lives in the managed Postgres database run by our cloud host and is encrypted in transit and at rest by them. We follow the practices above because they're the right defaults, not because a certifier told us to.

If you spot a security issue or have a privacy question, email hello@jumla.fun. Please give us a chance to fix it before disclosing publicly.