Justoo iPhone & iPad privacy and data information

Privacy Policy

Effective Date: July 2026

Justoo coordinates child hand-offs between two parents and, optionally, a grandparent or sitter. It handles some of the most sensitive data a family has: a child's name, photo, schedule, and location. So the architecture is the privacy policy: there is no Justoo server. We operate no backend, no database, and no analytics pipeline, which means there is nothing for us to read, sell, leak, or hand over.

1. Zero Developer Access

We save nothing. The developer has no copy of your household, your children's names or photos, your hand-off history, your messages, or any location you have ever visited. There is no admin console, no export, and no support process by which we could retrieve your data, because we never receive it in the first place.

2. Where Your Data Actually Lives

Your household is stored in your own Apple iCloud container and shared with your co-parent through Apple's CloudKit sharing. It is encrypted in transit and at rest by Apple, under your Apple ID, subject to Apple's privacy terms. Every participant holds the data in their own iCloud; nobody else, including us, is party to it.

3. No Accounts, No Identifiers

Justoo requires no email address, no password, no phone number, and no sign-up. You choose a display name, create a household, and invite your co-parent with a private iCloud link. We assign no user ID and run no advertising, attribution, or tracking SDKs of any kind.

4. Location, Places & Geofences

If you pin a place (a school, a home) so that arrival can automatically confirm a hand-off, iOS evaluates that geofence on your device. Location is used to decide whether you are inside a radius you defined, and the result is shared only with the members of your own household. No coordinate is transmitted to us, and no location history is compiled anywhere outside your iCloud.

5. Photos, Messages & Notifications

Hand-off photos and messages are stored in the shared iCloud record and are visible only to your household members. Messages are deliberately immutable: they cannot be edited or deleted, so both phones always show an identical, timestamped record. Alerts are delivered through Apple's notification infrastructure; we do not operate a push server that could see their contents.

6. Premium & Payments

Premium is processed entirely by Apple StoreKit. We never see, store, or process your payment card, billing address, or Apple ID. Refund and billing questions must go to Apple Support.

Terms of Use & Critical Safety Disclaimer

1. Alerts Are Best-Effort, Not Guaranteed

The safety net raises an alert when a hand-off looks unconfirmed. It is a prompt to check, nothing more. Many factors outside the app's control can delay, degrade, or entirely prevent an alert, including:

• GPS and geofencing: accuracy varies with buildings, tunnels, indoor positions, weather, Wi-Fi and Bluetooth state, Low Power Mode, and the device's own location settings. Arrival may be detected late, early, or not at all.
• Time zones and clocks: travel across time zones, daylight-saving transitions, manual clock changes, and calendar or rotation edits can shift when a hand-off is considered due.
• Notification delivery: permissions, Focus and Do Not Disturb configuration, Silent or Low Power Mode, notification summaries, background-refresh limits, iOS scheduling, and network or iCloud outages can suppress or delay a notification.
• Device state: a dead battery, a powered-off or lost phone, a full storage volume, an iCloud sign-out, or an OS update can stop the app from running or syncing.
• Human input: the app only knows what was entered. An incorrect rotation, an unaccepted invite, or a hand-off nobody marked will produce a false sense of certainty in either direction.

You must never rely on Justoo as the only mechanism confirming that a child is safe or has been collected. Verify directly. In an emergency, contact the other parent and your local emergency services.

2. Sole Responsibility of the Users

Responsibility for the care, supervision, collection, and safety of a child rests entirely and at all times with the parents, guardians, and caregivers using the app. The developer assumes no liability whatsoever for a missed, late, or undelivered alert; an inaccurate location or arrival estimate; a hand-off that did not happen as scheduled; or any harm, loss, dispute, or cost arising from reliance on the app. You accept that the app is provided "AS IS", that it may contain errors, and that use of it is at your own risk.

3. Not Legal Advice or a Legal Record

Custody rotations, hand-off logs, message records, and PDF exports are organizational conveniences. They are not legal advice, they do not establish or modify any custody arrangement, and we make no representation that they will be accepted as evidence in any proceeding. Follow your actual court order or agreement, and consult a qualified professional for legal questions.

4. Shared Household Visibility

Everyone you invite to a household can see that household's schedule, hand-offs, messages, photos, and places. Invite only people you intend to have that access, and be aware that a message, once sent, cannot be edited or deleted by design. You are responsible for who you add and for the content you share.

5. Data Loss

Because we hold no copy of your data, we cannot restore it. If you sign out of iCloud, disable iCloud for the app, delete the app, or lose access to your Apple ID, your household data may be permanently unrecoverable.