Privacy Policy

This Privacy Policy explains how Jinu ("Jinu," "we," "us," or "our") collects, uses, discloses, and otherwise processes your information when you use the Jinu website and mobile applications and related services (the "Jinu Service"). Jinu is designed to collect as little personal information as necessary. We do not sell or share your personal information for advertising, we do not use advertising networks or build advertising profiles, and we do not process payments between buyers and sellers. If you choose to share your device location, your device's reading is rounded on your device to roughly a one kilometre area before it reaches us, and we use that rounded figure to work out your city and to sort listings by distance; we do not track your location in the background and we do not build a location history. Section 02 explains exactly what happens to those coordinates. If you choose to take the ID check, our identity provider Stripe examines a photo of your government ID and a live selfie for us, which involves biometric information; Jinu keeps only the result and a one-way fingerprint of the document, never the images and never any face data (Section 11). If you are a resident of a United States state with a consumer privacy law, please also see Section 08.

A. Information you provide

• Account information, such as your email address and, if you sign in with Google or Apple, the name and profile picture those providers return. Sign-in is passwordless, and we do not collect or store passwords. If you choose to verify a phone number, we also hold that number; Section 10 explains what we do with it and what we never do with it.
• Profile information you choose to add, such as a display name, username, biography, avatar, default location, and your notification and privacy settings.
• Jinu Premium membership, if you subscribe: the plan you chose, where you bought it (our website, the App Store or Google Play), its status, its renewal or end date, the reference Stripe, Apple or Google uses for the subscription, and whether you have used the month's free boost. Payment card details are collected by Stripe, Apple or Google, not by Jinu.
• Premium seller tool settings, if you use them: the lowest offer you will consider on a listing (which only you can see), and the price-drop autopilot you set on a listing (the percentage, the floor price and when the price last dropped).
• ID check information, if you take the ID check: the result, the date you passed, Stripe's reference for the check, how many times you have started one, a short code for why a check did not pass, and a one-way fingerprint of your ID document. Stripe, not Jinu, collects the images of your ID and your selfie. Section 11 explains all of this, including the biometric information involved.
• A record of each new listing you publish in a free category: which listing, its category and when you first published it, so that we can apply the monthly limit on new free listings for members without Jinu Premium.
• Listing content, such as titles, prices, categories, descriptions, the city you enter, photographs, and, for certain categories, structured details (for example, vehicle or property attributes and, for job posts, an application email and resume).
• Communications and activity, such as messages, offers, reviews, reports, and support requests.

B. Information we collect automatically

• Device and log information, such as your IP address, browser and device type, and access times.
• Approximate location, derived from the city you enter or inferred from your IP address. This is the default, and it is all we have unless you actively choose to share your device location.
• Usage information, collected with first-party analytics and cookies or similar technologies and, where product analytics is allowed, recordings of your own sessions with personal details masked (see Section 05).

D. Precise device location, only if you choose to share it

Some parts of the Jinu Service offer to fill in your location for you, for example the "use my location" control when you set your city, when you pick a location while posting, and when you search near you. These controls are optional and never run on their own. Your browser or phone asks your permission first, and you can refuse, and you can change your mind later in your browser or device settings. Browsing, posting, and messaging all work without ever granting it.

If you do grant it, we want you to know exactly what happens to the coordinates, because it is more than the city label you see afterwards:

• Your device produces a precise latitude and longitude, and we round it in your browser before it is sent, to about two decimal places, which is roughly a one kilometre area. We do not receive the exact reading.
• Those coordinates are sent to our maps and geocoding provider to convert them into a place name, and to draw maps. On the web this request currently goes directly from your browser, which means the provider also receives your IP address. We are changing this so the request is relayed by our servers instead, which removes that disclosure.
• The coordinates may be stored on your device so the Jinu Service remembers where you were browsing and you are not asked again on every page.
• The rounded coordinates may appear in the web address of a search-results page when you filter by distance. Web addresses are recorded in our ordinary server logs, so a rounded coordinate can appear there. Those logs are retained as described in Section 06.
• We do not attach coordinates to your account profile, we do not track you in the background, we do not keep a history of where you have been, and we do not use your location for advertising. A listing you publish shows the city you chose, not your device location.

Our mobile applications request only coarse, approximate location from the operating system rather than fine location. If you would rather share nothing at all, type a city name instead of using the location control.

C. Information from third parties

We receive limited information from sign-in providers when you choose to use them, and from data lookups used to complete a listing (for example, decoding a vehicle identification number or retrieving location context for a property). If you buy Jinu Premium in our apps, Apple or Google tells us about the subscription: the plan, its status, its renewal or end date and the store's reference for it. If you take the ID check, Stripe tells us its result, whether each check you started was submitted (which we use to count your attempts in a month), and, once, the details of your ID document that we use to compute the fingerprint described in Section 11. We do not obtain information from data brokers.

E. Assistants you link

If you link an AI assistant (such as ChatGPT, Claude, Gemini, Grok or Meta's Muse) to your Jinu account, we keep a record of that link: which assistant, what you allowed it to do (including whether you chose Read only, and whether you allowed it to publish free listings for you), the country you linked from (coarse, for legal compliance), when you linked it and when it was last used. We keep a log of each request the assistant makes on your behalf: which tool it used, when, and whether it succeeded, with counts and identifiers but never the text of a message. When an assistant prepares an action for you to confirm (for example, publishing a listing you drafted), we keep the exact action it prepared until you confirm, change or decline it, and for 7 days after. When an assistant you allowed to do so publishes a free listing for you, the listing records which assistant published it and when, so that you can see it and take it down. If you create a member key to connect an assistant, we keep a one-way hash of the key, never the key itself.

If an assistant gives you a link to start a listing on Jinu, the link holds only what you told the assistant about the item, for 24 hours. When you open it, we note that the link was used and, once you post, which link the listing started from.

• To provide, maintain, and improve the Jinu Service, including creating your account and displaying and routing listings, messages, and offers;
• To keep the marketplace safe, including detecting and preventing fraud, scams, and abuse, and reviewing content;
• To run the ID check and act on its result: to confirm that a government ID is genuine and belongs to the person presenting it, to keep one ID to one live account, to limit how many checks you can submit in a month and to have a person at Jinu review a check that used up the month's attempts, to decide whether a listing may go live or a message may be sent when a passed check is required (Section 11), to show the "ID verified" badge described in Section 11 while you are a Jinu Premium member, and with it to place your listings above other listings in their category and include them when anyone narrows listings to "Verified sellers", to show the "Poster's ID checked by Jinu" line described in Section 11 on your listings, and to honour another member's choice to accept new conversations only from people who have passed it;
• To process fees for publishing certain listings and payments for Jinu Premium, to provide the Jinu Premium benefits you pay for (including refusing offers below the minimum you set and lowering your price on the schedule you choose), to apply the monthly limit on new free listings for members without Premium, and to send you service and transactional communications;
• To comply with law and enforce our agreements; and
• To provide optional features you choose to use, such as artificial-intelligence drafting tools.

We do not use your information to target advertising to you or to build advertising profiles.

We disclose your information only in these circumstances:

• With other users, when you post a listing or public profile or communicate through the Jinu Service. Your contact email is not displayed publicly. If you have passed the ID check, other people can see that you did: through the "Poster's ID checked by Jinu" line on your property, rental, stay, job and vehicle listings, and, while you are a Jinu Premium member, through the "ID verified" badge (Section 11). While you show the badge, your listings also appear when anyone narrows listings to "Verified sellers", and in property, rental, stay, job and vehicle results they are placed above listings of members who do not show it. The lowest offer you set with the lowball filter is never shown to anyone else: a buyer whose offer is below it is told only that the offer is below what you will consider.
• With service providers that process information on our behalf. These include providers that help us with website hosting and content delivery, database and file storage, identity and authentication, email delivery, text-message delivery, payment processing and identity verification (Stripe), error monitoring, product analytics and session recording (PostHog, in the United States), rate limiting and abuse prevention, geocoding and maps, optional artificial-intelligence features, push-notification delivery, and customer support and help-centre hosting. They may use the information only to perform services for us. The categories are listed at Subprocessors, and a current list of the specific providers is available on request at privacy@jinu.app. Four of these deserve to be called out by name rather than by category, because of what is or would be sent to them:
• Photographs you submit to our artificial-intelligence features are sent to Google. When you use Quick Post, the photograph you take or upload is transmitted to Google's Gemini service so it can identify the item and draft a title, category, and description for you. If Google is unavailable the same photograph is sent instead to Groq, an alternative artificial-intelligence provider. Uploaded images are also sent to Hugging Face for automated adult-content scanning, which is a safety measure rather than an optional feature. Photographs can show far more than the item, including the inside of your home and the people in it, so please consider what is in the frame. These providers act as our processors, and each provider's own terms govern what it may do with the content we send it. You can avoid the drafting features entirely by writing your listing yourself; the safety scan runs on every uploaded image.
• Every photograph you upload is sent to Microsoft to be checked against known child sexual abuse material. The image is transmitted to Microsoft's PhotoDNA service, which compares it against pictures already identified as child sexual abuse material by Microsoft and by the child-protection organisations that contribute to its database. Microsoft states that it converts the image into a numerical signature for that comparison and does not retain the image; that is Microsoft's account of its own handling, and not something we can verify from outside. We first built this the other way round, computing the signature on our own servers so that only the signature would ever leave them, and we could not make it run: the component required to compute it will not load on our hosting, and the check sat switched off, examining nothing. We chose a check that runs over a promise that protected nobody. This is a different check from the adult-content scan described above, and it answers a different question: the scan judges a picture nobody has catalogued, while this one recognises material that has already been identified. Where an image matches, we refuse the upload, preserve the material and the surrounding record as evidence, and report it as United States law requires. Law-enforcement requests explains what happens next.
• Location coordinates are sent to our maps and geocoding provider, OpenStreetMap, to turn coordinates into place names and to render maps. See Section 02D.
• If you take the ID check, a photo of your ID and a live selfie are sent to Stripe. Stripe, acting as our service provider, examines the ID, compares your face with its photo and tells us the result. The images go from your device to Stripe, not to Jinu. Jinu and Stripe are each independent controllers of this information: Stripe processes it for us as our service provider, and also for itself under the Stripe Identity terms and its privacy policy, using it to operate and improve the services it provides to us, including for risk evaluation and identity verification. Section 11 explains what is collected, what we keep and when it is deleted.
• With assistants you link, at your direction. When you link an AI assistant and ask it to act for you, we send that assistant the information it needs to answer you: the listings and public seller information you could see on Jinu yourself, your own listings and drafts, your saved listings and searches, and the outcome of actions it prepared. The assistant's provider receives that information under its own terms and privacy policy, not ours: OpenAI (ChatGPT), Anthropic (Claude), Google (Gemini), xAI (Grok) and Meta (Muse), or another provider you connect yourself. These providers are not our service providers; you choose to send the information to them. We never send an assistant your email address, your phone number, payment details, another member's contact details, or anything a buyer could not see on Jinu. You can see every linked assistant, pause it, or remove it at any time on the Connected agents page of your account.
• For legal and safety reasons, to comply with law, respond to lawful requests, enforce our agreements, or protect the rights, safety, and property of Jinu, our users, or the public. Law-enforcement and government requests go to legal@jinu.app, and Law-enforcement requests explains what legal process we require for which records, what a preservation request does and does not do, and when we tell you: Where legally permitted, Jinu may make reasonable efforts to notify the affected member before disclosure. A court order, a statutory non-disclosure provision or another legal restriction can prohibit that notice, and where one applies we do not give it.
• In a business transfer, such as a merger, financing, acquisition, or sale of assets.
• With your consent or at your direction, and in aggregated or de-identified form.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

We use a small number of cookies and browser-storage keys to operate the Jinu Service, remember your preferences, and understand how the Service is used. We do not use advertising cookies or tracking pixels, we do not use any advertising networks or third-party ad or cross-site tracking technologies, and we never sell your personal information. The categories we use are:

• Strictly necessary, such as your Supabase sign-in and session cookies, a cross-site-request-forgery token, and load-related cookies. These keep you signed in and let the Service work, so they are always on and do not require consent.
• Functional storage, such as your language, display, and marketplace preferences and your recently-viewed items. These are stored on your device to remember your choices.
• Product analytics, our measurement of how the Service is used (for example, funnel and usage events) so we can improve it, and, under the same setting, session recordings of your own screens and taps, described below. Some of this runs through a product-analytics provider acting as our processor, PostHog, in the United States, served from our own domain; it is never tied to an ad network and never sold. In the United States and in the Jinu apps it is on by default and you can turn it off at any time. On the web everywhere else it runs only after you accept our cookie banner.
• Error monitoring, a diagnostics service (Sentry) that captures errors, and a separate, limited error-replay recording used only for debugging. Error replay is never on by default anywhere, including in the United States, happens only on the web, and runs only if you accept it. It is not the product-analytics session recording described below.

Session recordings

When product analytics is allowed, we also record your own session: the screens you move through and where you tap or click, in the order you did them, on the website and in the Jinu apps for iPhone and Android alike. We use recordings the way we use usage events, to see where the Service confuses people or breaks, and for nothing else. A recording is a reconstruction of your own session on your device. It is not video, it does not use your camera or microphone, and it captures nothing from other apps or other websites.

• It runs only when product analytics is allowed, and follows that setting everywhere it exists: on by default in the United States and in the Jinu apps; on the web outside the United States only after you accept the cookie banner; off if you have chosen "Essential only" or turned analytics off in Settings; and off whenever your browser sends a Global Privacy Control signal. Turning analytics off turns recording off with it.
• Other people's words and anyone's contact details are masked on your device before anything is sent. Everything you type into any field; every message in a conversation, in both directions, and the conversation list; the names and handles of other members wherever they appear, including a seller's profile, a listing card, your inbox, offers and reviews; addresses, phone numbers and email addresses anywhere; checkout and billing screens; the personal fields of your account and settings screens; and any photo inside a conversation are replaced by blank shapes in the recording. What remains is the Service's own layout and your own path through it.
• Public listing content can appear. The photographs, titles and prices of listings are already public on the Service and are not masked, so a recording of you browsing looks like browsing.
• Retention. Recordings are kept for the period set in our analytics processor's retention policy, currently 30 days, and are then deleted. They are held by PostHog in the United States, are never sold, and are never used for advertising.
• Reviewers are excluded. The test accounts used by app-store reviewers are kept out of product analytics entirely, and so out of recording.

Where product analytics runs by default depends on where you are and how you use Jinu. In the Jinu apps for iPhone and Android it is on by default, and you can turn it off at any time under Settings, then Privacy and data. On the web, for visitors in the United States it is on by default and no banner interrupts you; you can turn it off at any time using the "Cookie settings" link in the site footer. On the web outside the United States, including the European Economic Area, the United Kingdom and Switzerland, it runs only after you accept the cookie banner. Session recording for product analytics follows the analytics setting wherever you are. Error replay for diagnostics happens only on the web, is never on by default anywhere, and runs only if you accept it. If you choose "Essential only," all of these stay off, and we do not later switch analytics back on for anyone who has made that choice. Signed-in users can also turn analytics off at any time in Settings. Most browsers let you remove or reject cookies, although this may affect how the Jinu Service works. For the full list of cookies and storage keys with their purpose and retention, see our Cookie Policy.

We retain personal information for as long as necessary to provide the Jinu Service and for the purposes described in this Policy, and then delete or anonymize it. Retention periods depend on the nature of the information, the length of your relationship with Jinu, and any legal, dispute-resolution, or safety obligations that require us to keep it. When you delete your account, we delete or anonymize the associated personal information, except where retention is required by law.

As a specific example, we delete direct messages after about 18 months of inactivity in a conversation. We keep them longer only where needed, such as when a message has been reported to us, relates to an ongoing transaction, or shares a photo or file, and diagnostic logs are kept for a shorter period as described in our Cookie Policy. Session recordings made for product analytics are kept by our analytics processor for the period stated in Section 05, currently 30 days. Whatever the age, you can delete your account at any time to remove your messages and shared files.

For assistants you link (Section 02E), we keep the log of an assistant's requests for 90 days, an action an assistant prepared for 7 days after it is closed, and the record that an assistant is linked for as long as your account exists (a link itself lasts at most 90 days before you are asked again). When you delete your account, all of these are deleted first.

For the ID check (Section 11), we keep the result, its date, Stripe's reference, the attempt count, any failure code and the document fingerprint for as long as your account exists, and delete them when you delete your account. We never hold the images of your ID, your selfie or any biometric identifier; Stripe holds those, and we ask Stripe to delete them on the schedule in Section 11; Stripe also keeps face data for its own fraud prevention under its own policy, as Section 11 explains. For Jinu Premium, we keep the record of your membership, and the record of each new free listing you publish, for as long as your account exists, and delete them with your account. The settings of the Premium seller tools are kept while the listing they belong to exists, stop applying when your membership ends, and are deleted with the listing or with your account. The record of each Premium payment is kept as a financial record, as listing-fee payments are, and is no longer linked to you once you delete your account.

Deletion removes your data from the live service straight away. Encrypted operational backups are taken on a rolling schedule and expire within 30 days, so a copy of a deleted record can persist inside a backup for up to that window; backups are never queried to serve the Jinu Service and are only ever used to recover from a disaster. For the full list of what is erased, what is kept with your identity stripped out, and how to start the process, see Delete your account.

You may review and update your profile and settings at any time, opt out of non-essential communications, export a copy of your data, and delete your account from within the Jinu Service. Deleting your account is self-serve on the website and in both mobile apps: Delete your account gives the exact steps for each, and explains what is erased and what is kept.

Depending on where you live, you may also have the right to access or know, correct, delete, and obtain a portable copy of your personal information, to opt out of the sale or sharing of personal information and of targeted advertising, and to appeal a denied request. To exercise a right, use the in-app tools or email privacy@jinu.app. We verify requests using the account email associated with the data and respond within the time required by applicable law.

Taking the ID check is your choice, and you can turn "Only ID-verified people can message me" on or off at any time in your settings. To have your ID check removed without deleting your account, write to privacy@jinu.app; Section 11 explains what that removes. You can cancel Jinu Premium at any time, as our Terms of Service describe.

California. In the past twelve months we collected the categories of personal information listed below. We did not sell or share personal information for cross-context behavioral advertising, and we do not use or disclose sensitive personal information for purposes that would require a right to limit: the government identification and biometric information involved in the ID check (Section 11) are used only to confirm that an ID is genuine and belongs to the person presenting it, to prevent fraud, and to keep one ID to one account. California residents have the rights described in Section 07 and may exercise them as described there.

Notice at collection. This section, together with Sections 02 (what we collect), 03 (how we use it), and 06 (how long we keep it), is our notice at collection: it describes the categories of personal information we collect, the purposes for each, and our retention periods. We do not sell or share your personal information, and we honor Global Privacy Control signals. You can review these choices on our Do Not Sell or Share My Personal Information page.

Other United States states. Residents of states with comprehensive privacy laws (for example, Virginia, Colorado, Connecticut, Utah, Texas, and Oregon) have the rights described in Section 07. Because Jinu does not sell personal data, conduct targeted advertising, or profile users in furtherance of significant decisions, the related opt-outs require no action. Where these laws treat the information involved in the ID check as sensitive data, we process it only with the consent you give when you start the check (Section 11).

EEA, United Kingdom, and Switzerland. Where these laws apply, the controller of your personal information is Jinu App LLC, 7901 4th Street N, Suite 300, St. Petersburg, FL 33702, and it and relies on the legal bases of performance of a contract, consent, legitimate interests, and legal obligation. You may object to or restrict certain processing, withdraw consent, and lodge a complaint with your supervisory authority. Where we transfer information internationally, we rely on appropriate safeguards such as the Standard Contractual Clauses.

The minimum age to use the Jinu Service is eighteen. Jinu is not directed to children, and we do not knowingly collect personal information from anyone under eighteen. If we learn that we have collected information from a person under eighteen, we will delete it and terminate the account. If you believe a person under eighteen has provided us information, contact privacy@jinu.app.

Jinu sends exactly one kind of text message: a one-time verification code, and only at the moment you ask for one. We do not send marketing, promotional, or recurring text messages of any kind, and there is no way to subscribe to any. If a text message arrives from Jinu that is not a code you just requested, it did not come from us.

A. What you consent to, and when

• Message type. A single six-digit verification code, used to confirm that a phone number belongs to you.
• Message frequency. One message per request. Messages are sent only when you press the button that asks for a code, so the frequency is entirely yours; there is also a cap on how many codes one account may request, to limit abuse.
• Message and data rates may apply. Your mobile carrier may charge you for receiving a text message. Jinu does not charge you for phone verification.
• Reply STOP to any message to stop receiving them, and HELP for help. Carriers honour STOP independently of us. Stopping messages means you cannot complete phone verification, which is optional; nothing else about your account changes.
• Consent to text messages is not a condition of anything. You do not have to verify a phone number to browse, post, buy, sell, or message on Jinu. Phone verification is an optional trust signal, and you may decline it and use the Jinu Service in full. The separate ID check is described in Section 11.

B. What we do with the number

• We store your phone number on your account so that a number can be verified once and so that the same number cannot be used to run several accounts at the same time.
• We never display it. Your phone number is not shown on your profile, on a listing, or to another member, and there is no setting that reveals it.
• We share it with our text-message delivery provider, because delivering a text message to your carrier requires giving them the number. That is the only recipient, it is for delivery alone, and the categories of providers we use are listed at Subprocessors.
• No mobile information is shared with third parties or affiliates for marketing or promotional purposes. We do not sell it, we do not rent it, we do not use it for advertising, and we do not pass it to anyone for their own use.
• Our abuse and spend records keep a one-way keyed hash of the number, not the number itself, so that we can count how many distinct numbers an account or a network is trying without keeping a readable list of them. Those records are pruned on the retention schedule in Section 06.

If you verify a number and later want it removed, write to privacy@jinu.app. Deleting your account removes it along with the rest of your information, as described in Section 06 and in Deleting your account.

Jinu offers an ID check: a check, performed for us by our identity provider Stripe, that a government-issued photo ID is genuine and belongs to the person presenting it. The ID check is included with Jinu Premium: from the day we open it, which we will announce by email, you can start one while your membership is active, and taking it is your choice. A check you pass stays on record if your membership ends, and you do not take it again. While you are a Jinu Premium member and have not passed it, we may ask you to pass it first when our safety systems flag your account or a listing: before a listing of yours goes live or you send more messages, if our scam protection has escalated messages from your account within the previous 30 days; before a listing of yours goes live, if at least two different people have reported you, your listings or your messages within the previous 30 days (reports we dismissed do not count); and before a property, rental, stay, job or vehicle listing of yours goes live, if our automated scam checks flag it. If you are not a Jinu Premium member, we do not ask you to take it in those cases; our other safety systems, such as the review of flagged listings, scam warnings and the handling of reports, apply instead. We may also require a passed check of everyone who posts in a category, such as property for sale or rent, stays, jobs or vehicles, if we see scams there, and we will say so in advance. If you pass, then while you are a Jinu Premium member other people can see that you did, and your property, rental, stay, job and vehicle listings are placed above listings of members who do not show the badge (part C). Other members can also choose to accept new conversations only from people who have passed it. This section is our notice about the check and our written policy for the biometric information it involves.

A. What happens during the check

• Stripe collects your ID and your selfie, not Jinu. In a flow provided by Stripe, on our website or inside our apps, you photograph a government-issued photo ID (a driver's license, passport or national identity card) and take a live selfie. The images go from your device to Stripe, which holds them. They are not sent to or stored on Jinu's servers. Our staff can open a check in Stripe's own dashboard, and do so only when it is needed to review a check that used up the month's attempts, or to handle a support request, a dispute or suspected fraud.
• This involves biometric information. To check that you are the person on the ID, Stripe compares the geometry of the face in your selfie with the face in the ID photo. The laws of some states, including Illinois, Texas and Washington, treat that kind of face data as a biometric identifier. Stripe makes the comparison as our service provider. Stripe is also an independent controller of this information under its own privacy policy: Stripe states that it keeps face data from a check for up to one year to detect fraud across checks, and that you can ask it to delete that data sooner, or to stop using it, at privacy@stripe.com. Jinu never receives a face scan, a face template or any other biometric identifier, and never uses one to identify you.
• We read three details once, to keep one ID to one account. When a check passes, our servers ask Stripe, once and within the 48 hours Stripe makes them available, for the document's type, the country that issued it and its number, using a restricted access key that can only read ID checks. We use those three details only to compute the fingerprint described below, and then discard them; they are never stored. Stripe's answer can include other details printed on the document, such as your name, and we do not keep any of them.
• Who can take it, and how often. You can start the check while your Jinu Premium membership is active. You can submit up to two checks in a calendar month (counted in Coordinated Universal Time): your first attempt and one retry. A check counts once you have submitted it, whether or not it passes; one you leave, or cancel, before submitting anything does not. A check that did not pass cannot be submitted again; a retry is a new check. If you have used up the month's attempts without passing and ask for another check, we tell you that you can try again from the first day of the next month, and a person at Jinu reviews your check. Once you have passed, you do not take the check again, even if your membership ends and you later subscribe again.

B. What Jinu keeps

• The result: whether your check passed, is being processed, needs another attempt or did not pass; the date it passed; how many times you have started a check; and, if a check did not pass, a short code for the reason (for example, that the document had expired, or that it already verified another account). Never a description written by Stripe, and nothing else read from the document.
• Stripe's reference for each check, so that we can match Stripe's updates to your account and ask Stripe to delete the check later.
• A one-way fingerprint of the document. This is a keyed hash (HMAC-SHA256) of the document's type, issuing country and number, made with a secret key that exists only on our servers. It cannot be turned back into your document number, and without the key it cannot even be compared with a guessed number. We use it for one thing: to stop one ID from verifying more than one live Jinu account.
• We never keep the images of your ID, your selfie, your document number in readable form, your name or date of birth as printed on the document, or any biometric identifier or template.

C. Who can see it

• Whether you took the check, and how it went, is not shown on its own. Other members see only the badge and the poster line below: the badge only while you are a Jinu Premium member who passed, and the line once you have passed.
• The "ID verified" badge. If you are a Jinu Premium member and you passed the check, an "ID verified" badge appears with your name where other people see you on Jinu, such as your profile, your listings and your conversations. It shows only while your membership is active. If your membership ends the badge goes, and so do the placement and the "Verified sellers" view described below; if you subscribe again they come back without a new check.
• "Poster's ID checked by Jinu." If you passed the check, your property, rental, stay, job and vehicle listings show this line. Unlike the badge, it stays if your membership ends, because it describes a check you passed. In property, rental, stay, job and vehicle results, listings of members who show the badge are placed above other listings, including listings that show only this line, and each group keeps its order.
• Both are public. Listings and profiles on Jinu can be seen by anyone, including people who are not signed in, so anyone who can see your profile or such a listing can see that you passed the check. While you show the badge, anyone can also find any of your listings by narrowing a search or a feed to "Verified sellers". The name on your profile is the one you chose; it is not taken from your ID or compared with it.
• Members who accept messages only from ID-verified people. If another member turns on "Only ID-verified people can message me", you can start a new conversation with them only if you have passed the check, except about their property, rental, stay or job listings, so they can infer that anyone who starts one with them about anything else has passed it.

D. Your consent

We ask for your consent on the screen that starts the check, and the check does not start unless you give it. By agreeing, you consent to Stripe collecting your ID and your selfie for Jinu, to the comparison of your face with the photo on your ID, to Stripe keeping and using face data for its own fraud prevention as described in part A, and to the use, retention and destruction described in this section. That agreement is your written release for the purposes of laws that require one, such as the Illinois Biometric Information Privacy Act. You can refuse, and you can still use Jinu, Jinu Premium included, except where a passed check is required, as described at the start of this section. You can withdraw your consent at any time by asking us to remove your check, as described in part F.

E. How long it is kept, and when it is destroyed

• Jinu's record (the result, its date, Stripe's reference, the attempt count, any failure code and the fingerprint) is kept while your account exists and is deleted with your account, the same way a verified phone number is.
• The images, your selfie and the face comparison are held by Stripe, not by Jinu. We instruct Stripe to permanently delete (redact) the copy it holds for us no later than 30 days after a check passes, fails, is cancelled or is abandoned (no progress for 7 days), and straight away when you delete your account or ask us to remove your check; Stripe completes a deletion within a few days of our request. The face data Stripe keeps for itself as an independent controller is kept and deleted under Stripe's own policy, described in part A.
• This is our retention schedule and destruction policy for biometric information. Biometric information is collected for one purpose, deciding whether an ID belongs to the person presenting it. Jinu never holds it. The copy Stripe holds for us is permanently destroyed on the schedule above once that purpose has been served, and Jinu never asks for it to be kept or used again; the copy Stripe keeps as an independent controller is governed by Stripe's policy, described in part A.
• We never sell, lease or trade the images of your ID, your selfie, biometric information or the fingerprint, never otherwise profit from them, and never disclose them except to Stripe, which performs the check for us and keeps face data for its own fraud prevention as described in part A, or where the law requires it.
• If there is a security incident. If we learn of a security incident that may have exposed information from the ID check, we will contain it, ask Stripe for its findings, and notify affected members and authorities as the law requires.

F. Your choices

• Taking the check is your choice. If you decline, everything on Jinu stays open to you except where a passed check is required, as described at the start of this section.
• Removing your check. Write to privacy@jinu.app to have your ID check removed without deleting your account. We delete our record, including the fingerprint, and ask Stripe to delete the check. To have Stripe also delete the face data it keeps for itself, write to privacy@stripe.com. The "ID verified" badge and the poster line stop showing, your listings are no longer placed above others or included under "Verified sellers", and if you later need a passed check, you will need a new one.
• Deleting your account deletes our record and the fingerprint, and we ask Stripe to delete every check you started, as described in Delete your account.
• "Only ID-verified people can message me" is a free setting you can turn on or off at any time. While it is on, people who have not passed the check cannot start a new conversation with you, except about your listings of property for sale or rent, stays or jobs; conversations that already exist are not affected.

We use reasonable technical and organizational measures, including encryption in transit and access controls, to help protect your information. No method of transmission or storage is completely secure.

We may update this Privacy Policy from time to time. If we make changes, we will revise the date at the top of this page and, for material changes, provide more prominent notice. Your continued use of the Jinu Service after an update takes effect signifies your acceptance of the revised Policy.

If you have questions or requests regarding this Privacy Policy, contact us at privacy@jinu.app. For general help, contact hello@jinu.app. A postal address is available on request. This Policy should be read together with our Terms of Service.