Last updated 15 October 2026

Privacy

Japoji asks you to take a naam before you open certain apps. To do that it has to know which apps you chose to lock. It doesn’t need to know anything about what you do inside them, and it doesn’t.

This policy covers the Japoji app for iPhone and Android and the website japoji.com. “Japoji”, “we” and “us” mean the team that makes Japoji. If anything here is unclear, email us.

The waitlist on japoji.com

When you join the waitlist we store:

• your email address,
• the ishta you picked and how many beads you counted on the page,
• which signup form you used,
• your approximate country and city, which comes from your internet connection, not your device’s location, and
• the time you signed up.

We use this only to tell you when Japoji opens and, before then, to understand roughly who is interested. We email you rarely and never pass your address to anyone else. The list is kept on Cloudflare, which hosts the site. To leave it, reply to any of our emails or write to us, and we’ll delete your entry.

The website doesn’t use cookies, analytics or tracking pixels. It loads two typefaces from Google Fonts, so Google receives your IP address when the page loads, as it does for any site that uses Google Fonts.

The app

What stays on your phone

Your name (the one Japoji greets you with), age range, chosen ishta, mala and theme, language, reminder times, jaap counts, streaks, diyas, sankalps and saved shlokas are stored on your device. Deleting the app deletes them.

How locking works on iPhone

Japoji uses Apple’s Screen Time framework. When you pick the apps to lock, iOS gives Japoji an encrypted token for each one rather than the app’s name. Japoji can ask iOS to shield those apps and to show the jaap screen when you open one. It cannot see which apps the tokens stand for, how long you use them, or anything inside them. That information stays inside Apple’s framework on your device. You can remove Japoji’s Screen Time access at any time in Settings.

How locking works on Android

Android has no equivalent of Screen Time, so Japoji asks for two permissions: usage access and an accessibility service. We use them for one thing only: noticing when an app you chose to lock comes to the front, so Japoji can show the jaap screen over it. We don’t read the screen, what you type, your messages or your browsing. Nothing these permissions see leaves your phone. You can turn either permission off at any time in Android settings, and the lock stops working until you turn it back on.

Subscriptions

Japoji Plus is sold through the App Store or Google Play. Apple or Google handle the payment and we never see your card or bank details. We receive what’s needed to unlock Plus for you: whether your subscription or trial is active, the plan, renewal dates, and an anonymous purchase ID. We may use a subscription service provider to check this for us; if we do, it acts only on our instructions.

Crash reports and app health

To fix bugs, the app may send crash reports and a small number of anonymous events, such as “onboarding finished” or “a jaap was completed”. These never include which apps you locked, your name, your naam or anything you type. They carry no advertising identifier and aren’t used to build a profile of you. Before Japoji launches we’ll name every provider we use for this in this section.

Notifications

If you allow them, Japoji schedules reminders on your device. We don’t send them from a server and we don’t use them for marketing.

What we never do

• Sell, rent or trade your personal data.
• Show ads, or use advertising or data-broker SDKs.
• Track you across other companies’ apps or websites.
• Use your data to train AI models.

Who we share data with

Only the services that run Japoji for us, and only what each one needs:

• Cloudflare hosts japoji.com and stores the waitlist.
• Apple and Google distribute the app and process payments under their own privacy policies.
• Email delivery and crash reporting providers, which we’ll list here before launch.

We may also disclose information if Indian law or a valid legal order requires it, and we’ll tell you when we’re allowed to.

How long we keep it

Waitlist entries are kept until Japoji launches and you’ve had our launch email, or until you ask us to delete them, whichever comes first. Purchase records are kept as long as tax and accounting law requires. Everything else lives on your phone and goes when you delete the app.

Your rights

Wherever you live, you can ask us to show you, correct or delete the personal data we hold about you, and you can withdraw consent at any time. Indian users have these rights under the Digital Personal Data Protection Act, 2023. Users in the EU, UK and California have similar rights under the GDPR, UK GDPR and CCPA. Email [email protected] and we’ll reply within 30 days. You can also complain to your local data protection authority.

Children

Japoji is not meant for children under 13, and we don’t knowingly collect their data. If you’re under 18, please use Japoji with a parent or guardian’s permission. If you think a child has given us personal data, write to us and we’ll delete it.

Security

Data we hold is encrypted in transit and kept with providers who protect it to industry standards. No system is perfectly secure, so we keep as little as possible about you in the first place.

Changes

If we change this policy we’ll update the date at the top. If a change affects what we collect or how we use it, we’ll tell you in the app or by email before it takes effect.

Contact

Questions, requests or complaints: [email protected].