Privacy Policy — Jam

Last updated: September 23, 2026 · Effective: September 23, 2026

Jam ("Jam", "we", "us", "our") is a dance-fitness app operated by GetJam LLC. This policy explains exactly what data the Jam mobile app collects, why we collect it, who processes it on our behalf, how long we keep it, and the privacy rights you have — including the rights granted by U.S. state privacy laws such as the California Consumer Privacy Act (CCPA), as amended by the CPRA. We describe only what the app actually does.

The short version

Who processes your data

We use a small number of service providers ("processors" / "service providers" under applicable law). They act only on our instructions and are contractually required to protect your data with safeguards at least as protective as those described here, and not to use it for their own purposes.

What the app collects and why

DataWhyWhere it goes
Email addressTo create and sign in to your accountSupabase
Account identifier (user ID)To operate the app and to correlate crash reportsSupabase, Sentry
Profile details you enter (display name, username, avatar)To show your profile and friends featuresSupabase
Your activity in the app (classes completed, streaks, progress)To track your progress and streaksSupabase
Subscription statusTo unlock member content in the app (payment itself is taken on our website by Stripe)Supabase
Contacts (phone numbers)Only if you tap "Import from my contacts": to find friends already on JamSupabase (matched against existing members)
Crash and error diagnosticsTo detect and fix bugsSentry

Sources. We collect this information directly from you (what you enter), automatically from your use of the app (activity, diagnostics), and — only with your explicit action — from your device's address book (contacts).

California categories of personal information

For transparency under the CCPA/CPRA, the table below maps what we collect to California's statutory categories, the business purpose, and who receives it. Categories not listed (e.g., precise geolocation, biometric data, government identifiers, financial account numbers, protected classifications) are not collected by the app.

CCPA categoryExamples we collectBusiness purposeDisclosed to (processors)
IdentifiersEmail, account/user ID, usernameAccount creation, sign-in, operating the appSupabase, Sentry (ID only)
Customer recordsDisplay name, avatarProfile and friends featuresSupabase
Commercial informationSubscription statusUnlocking member contentSupabase, Stripe (on the web)
Internet / app activityClasses completed, streaks, progressTracking your progressSupabase
Contact listsContact phone numbers (on explicit import)Finding friends already on JamSupabase
DiagnosticsCrash data, error-time session replay (masked)Detecting and fixing bugsSentry

Sensitive personal information

We do not collect "sensitive personal information" as defined by California law (such as Social Security numbers, precise geolocation, account log-in combined with password/security answers used to access an account beyond what's needed to run the service, racial or ethnic origin, religious beliefs, health, sex life, or the contents of your messages). Because we do not use any data for purposes that would trigger it, there is no separate "Limit the Use of My Sensitive Personal Information" right to exercise here.

Contacts

Importing contacts is optional and only happens when you explicitly tap "Import from my contacts". When you do, the app reads phone numbers from your address book and sends them to our backend solely to check which of your contacts already have a Jam account. We do not use your contacts for marketing, we do not sell or share them, and we do not disclose them to third parties other than our backend processor.

Crash diagnostics

We use Sentry to capture crashes and error information. Session replay is only captured when an error occurs, and all text and images are masked. We do not send your email address to Sentry; crash data is associated only with your account identifier.

Payments

Subscriptions are purchased on our websites and processed by Stripe. The app itself does not collect payment information and contains no in-app purchase. Stripe handles your card data under its own privacy terms; we do not receive or store full card numbers.

What we do NOT do with your data

How long we keep it

DataRetention
Account, profile, activity, subscription statusKept for as long as your account exists; deleted when you delete your account.
Contact phone numbers (on import)Used to match friends at import time; not used for any other purpose and removed with your account on deletion.
Crash and diagnostic data (Sentry)Retained by Sentry for a limited period under its default retention (typically up to 90 days), then deleted.

Deleting your account

You can permanently delete your account and all associated data at any time from inside the app: Profile → Settings → Account → "Delete my account". This erases your profile, progress, sessions, friend connections and your authentication record. Deletion is immediate and cannot be undone. This is also how you revoke your consent to our processing.

Your U.S. privacy rights

Depending on where you live, U.S. state privacy laws — including California (CCPA/CPRA), Virginia, Colorado, Connecticut, Texas, and other states with comprehensive privacy laws — give you some or all of the following rights, to the extent those laws apply to us:

How to exercise your rights

The fastest way to delete your data is in the app (Profile → Settings → Account → "Delete my account"). For any other request — access, correction, portability, or a question — email us at getjamllc@gmail.com with the subject "Privacy Request". We will verify your request using the email associated with your account, respond within the time frame required by applicable law (generally 45 days, extendable where permitted), and will not charge a fee for a reasonable request. You may use an authorized agent to submit a request on your behalf where the law allows; we may ask the agent for proof of authorization.

"Do Not Sell or Share My Personal Information"

We do not sell or share personal information, so no opt-out is necessary. Where required, we honor opt-out preference signals such as the Global Privacy Control (GPC) as a valid request not to sell or share.

Children

Jam is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided us personal information, contact us and we will delete it. We do not knowingly sell or share the personal information of anyone under 16.

International users

Jam is operated from the United States, and your data is processed by our providers in the United States and other countries where they operate. By using the app you understand your information may be processed in the U.S.

Changes

If we change this policy, we will update the "Last updated" date above and post the new version at this URL. Material changes will be reflected here before they take effect.

Contact

GetJam LLC — getjamllc@gmail.com
For privacy requests, use the subject line "Privacy Request".