Privacy Policy

Effective November 15, 2026

JujuCodes is made by Ya-Chun Fu (“I”, “me”). This policy explains what happens to your information when you use JujuCodes on iPhone and iPad.

In short: JujuCodes doesn't collect any personal data. I don't run a server, and the app contains no analytics, advertising or tracking.

1. Data on your device

• Saved codes. The codes you save (their text, name, format and dates) are stored in the app's storage on your device.
• Camera. The camera is used only while the Scan tab is open, to detect codes. Images are processed on your device and are never stored or sent anywhere.
• Photos. When you choose “From image”, only the photo you pick is shared with the app. It's read on your device to find a code and isn't saved or uploaded. The app has no access to the rest of your photo library.
• Clipboard. The app writes to the clipboard only when you tap Copy, and never reads it.

2. Optional Google Drive sync

Sync is off unless you turn it on in Settings › Storage. When you do:

• You sign in with Google and grant JujuCodes the drive.file permission. This only lets the app see files it created itself. It can't see any of your other Drive files, and it doesn't receive your name, email address or profile.
• The app creates a JujuCodes folder in your Drive containing one file, jujucodes-data.enc, with your saved codes. The file is encrypted on your device (AES-256-GCM) before it's uploaded.
• The encryption key is created on your device and kept in its Keychain. It's never sent to Google or to me.
• Your device talks to Google directly. Nothing passes through any server of mine. The sign-in token Google issues is stored in your device's Keychain.
• Google stores the file under the Google Privacy Policy.

Use of Google user data. JujuCodes uses access to your Google Drive only to create, read and update its own encrypted file, so your codes stay in sync across your devices. This data isn't shared with anyone, sold, used for advertising, or used to develop or train AI or machine-learning models. JujuCodes' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. Linking devices

The link QR code (Settings › Link another device) and the recovery key both contain your encryption key. They leave your device only if you show or copy them. Anyone who has the key and can also get the synced file could read your codes, so keep them private.

4. What JujuCodes doesn't do

• No accounts, analytics, advertising or tracking, and no third-party SDKs.
• No selling or sharing of data.
• If you've chosen in iOS Settings to share analytics with app developers, Apple may give me anonymous crash reports and usage statistics, under Apple's Privacy Policy.

5. Your choices and deleting data

• Delete a code in the app at any time. To make the deletion reach your other devices, a deleted code is kept hidden for up to 30 days and then removed.
• Deleting the app removes the codes stored on your device. iOS may keep the encryption key in the device's Keychain, where only JujuCodes can read it.
• To stop syncing, choose Settings › Storage › This phone only. This doesn't delete the file in Google Drive.
• To remove synced data, delete the JujuCodes folder in Google Drive, and remove JujuCodes' access at myaccount.google.com/connections.

6. Children

JujuCodes doesn't collect personal information from anyone, including children.

7. Changes

If this policy changes, I'll post the new version on this page with a new effective date.

8. Contact

Ya-Chun Fu · [email protected]