Legal
Privacy Policy
Last updated: 16 August 2026
This Privacy Policy explains how Ecoslabs SRL, which provides Jotti, handles personal data when you visit the Jotti website, request iPhone TestFlight access, contact us, or use a Jotti application or related service that links to this policy.
1. Who controls your personal data
Ecoslabs SRL is the data controller for the processing described in this policy unless another notice says otherwise. Use the privacy contact option in section 17 to reach us.
2. Information we receive
- TestFlight-access information: your email address and, if you choose to provide it, your first name.
- Messages: information you choose to include when you contact support, request a feature, or send feedback.
- Website information: hosting and security providers may process your IP address, browser and device information, timestamps, requested pages, and security events.
- Purchase information: Apple may provide us with limited subscription and transaction status information. We do not receive your full payment-card details.
- Diagnostics: if diagnostics are enabled, we may receive limited app version, device, crash, and performance information. Diagnostics are not designed to include your notes, transcript text, audio, photos, or personal category names.
3. Your private Jotti content
Your notes, categories, photos, voice recordings, transcripts, and related app content are stored in your private iCloud account using Apple CloudKit. This content is not sent to a Jotti-operated content server. We do not read, sell, or use your private Jotti content for advertising.
If you deliberately include app content in a support request, we can read the specific material you choose to send so that we can respond to you.
4. Voice transcription and Apple services
Jotti uses Apple speech-recognition capabilities to create transcripts. Recognition may happen on your device where supported or may require an Apple network service depending on the device, language, and availability. Jotti does not operate a separate transcription server. Apple's terms and privacy practices apply to Apple services.
5. Apple Health and future connections
Jotti does not currently connect to Apple Health automatically. If optional Apple Health features are added, Jotti will ask for permission through Apple's authorization controls and will access only the categories you choose. Health data will not be used for advertising or sold.
6. Why we use personal data
We use personal data to manage gradual TestFlight access, send updates you requested, process subscription status, answer messages, protect and operate the website and app, diagnose reliability problems, comply with law, and establish or defend legal claims.
7. Legal bases
Where the GDPR or similar law applies, we rely on one or more of these legal bases:
- Consent, including for optional product updates. You may withdraw consent at any time.
- Contract or steps before a contract, when processing is needed to provide a requested service, subscription, or TestFlight-access opportunity.
- Legitimate interests, such as protecting the services, preventing misuse, improving reliability, and responding to inquiries, where those interests are not overridden by your rights.
- Legal obligation, when we must keep or disclose information under applicable law.
8. TestFlight-access emails and Mailchimp
The TestFlight-access request form is provided through Mailchimp, a service of Intuit. When you submit the form, your email address, optional first name, and related request information are sent to Mailchimp so that we can manage gradual access and send Jotti updates. Mailchimp may process related technical information for security, administration, and service operation under its own terms and privacy materials.
You can unsubscribe using the link in any update or by contacting us. We may retain a limited suppression record so that we respect your request.
9. Service providers and disclosures
We may share limited personal data with providers that help us host, secure, communicate, diagnose, distribute, bill for, or support Jotti. These providers may include Mailchimp and Intuit, website hosting providers, Apple, and professional advisers. Providers may use information only as allowed by their agreements and applicable law, except where they act as independent controllers under their own terms.
We may also disclose information if required by law, to protect rights or safety, as part of a corporate transaction, or at your direction. We do not sell personal data.
10. International transfers
Some providers may process personal data outside Romania or the European Economic Area. Where required, we use an approved transfer mechanism or another lawful safeguard. You can ask us for information about relevant safeguards using the privacy contact option below.
11. Retention and deletion
We keep TestFlight-access information until you unsubscribe, withdraw consent, or the list is no longer needed, subject to a limited suppression record. We keep support messages, limited diagnostics, and transaction records only as long as reasonably needed for support, security, accounting, and legal obligations.
Your private Jotti content remains in your iCloud account until you delete it. Removing the app from one device may not remove content already stored in iCloud.
12. Security
Private app content is protected by your Apple account and Apple's CloudKit security. We also use reasonable technical and organizational measures to protect the limited information we receive. No storage or transmission method can guarantee absolute security, so keep your device, Apple account, and backups protected.
13. Your rights
Depending on applicable law, you may have rights to be informed, access personal data we hold, correct it, request deletion or restriction, receive portable data, object to certain processing, withdraw consent, and complain to a supervisory authority. Use the privacy contact option below to make a request. We may need to verify your identity before responding.
If you are in Romania, you may also contact the National Supervisory Authority for Personal Data Processing through dataprotection.ro.
14. Cookies and external resources
The current site does not intentionally use advertising cookies. It loads Google Fonts and uses Mailchimp for TestFlight-access requests, so those providers may receive technical information such as your IP address when their resources are requested. We will update this policy and request consent where required before adding non-essential analytics or advertising technologies.
15. Children
Jotti is not knowingly directed to children under 16. If you believe a child has provided personal data without appropriate authorization, contact us so that we can review and, where appropriate, delete it.
16. Changes to this policy
We may update this policy as Jotti develops. We will post the revised version and update the date above. If a change materially affects how we handle personal data, we will provide additional notice where required.
17. Contact
Ecoslabs SRL