TjoriiPrivacy Policy
Tjorii is a personal document vault. This policy explains what we collect, why, who else handles it, and what we never touch.
What we collect
- Your mobile number — this is your account. We need it to sign you in and to let others share folders with you.
- Your name — optional, used only to address you in the app.
- Documents you upload — files, photos, voice memos and notes you choose to save to the cloud, plus the text extracted from them.
- Information derived from those documents — titles, categories, expiry dates and, for lab reports, individual test values that we track over time so you can see trends. Lab values are health information, and we treat them as sensitive.
- Your Ask Tjorii conversations — the questions you ask and the answers, saved so you can reopen them.
- Phone numbers you share with — when you share a folder, you give us the mobile number of the person you are sharing with, so we can give them access.
- Basic service records — when documents were processed, and errors, so we can keep the service working.
- Crash reports and usage statistics — only if you switch them on. See below.
The app asks for the camera (to scan), the microphone (for voice memos), your photos (to pick images you choose) and your fingerprint or face (to lock the on-device vault). Each is used only for that feature. We do not collect your contacts, your location or your device's advertising ID.
What we do with it
We use it to run the service you asked for: reading your documents so you can search and ask questions about them, filing them into categories, warning you before something expires, and showing your health trends. We do not sell your data, and we do not use it for advertising.
Who else sees it
- People you share with. When you share a folder, the person you named can see the documents in it at the access level you chose. You can revoke this at any time from Manage access.
- Service providers who run parts of Tjorii for us. They act on our instructions and may not use your data for their own purposes:
| Provider | What it receives | Why |
|---|---|---|
| Amazon Web Services, Supabase | Your account and uploaded documents | Storage and hosting |
| Google (Gemini) | Document photos and text, transcribed voice memos, your questions | Reading documents, naming and filing them, reading lab values, answering Ask Tjorii |
| Mistral AI | PDF documents | Extracting text from PDFs |
| Sarvam AI | Voice memo audio | Turning speech into text |
| MSG91 | Your mobile number | Sending login codes |
| Google (Firebase) | Anonymous usage statistics and crash reports | Only if you have switched that setting on |
Some of these providers process data outside India, including Google's and Mistral's AI services. Documents you keep on this device only are never sent to any of them.
- Nobody else, unless the law requires it.
Crash reports and usage statistics
Tjorii can send anonymous crash reports and usage statistics using Google Firebase (Crashlytics and Analytics). This is switched off until you turn it on. We ask once, after you finish setting up your account, and you can change your answer at any time in Profile. If you say no, nothing is sent.
What we send when it is switched on
- Which screens you open and which features you use — for example, that a document was saved, that a question was asked, or that a PDF tool was run.
- Whether an action succeeded or failed, and the type of any error.
- Counts and ranges rather than exact values — for example "between 1 and 5 results" rather than the results, or "under 30 seconds" rather than a time.
- Standard technical information Firebase collects: device model, operating system version, app version, language, and country-level region.
- Crash reports: the technical stack trace of the code that failed.
- A random identifier created on your device so we can tell one anonymous user from another. It is not your phone number, your name, or your Tjorii account number, and it cannot be used to look you up.
What we never send
We do not send your documents or anything inside them, their file names, folder names, or any text extracted from them. We do not send what you search for, the questions you ask Tjorii, or the answers it gives. We do not send what kind of document something is — a report is never labelled as medical, financial or identity-related. We do not send your name, your phone number, your email, or any identification number.
Documents you keep on your device are never involved. Nothing about them — not their names, not their contents, not the fact that a particular one exists — is included whether this setting is on or off.
Where it goes
Firebase is operated by Google, and this information is stored on Google's servers outside India. We keep it for 2 months, after which Google deletes it. We do not use it for advertising, we do not allow it to be used to personalise ads, and we do not collect your device's advertising ID.
Turning it off
Profile → "Share anonymous crash reports & usage stats". Turning it off stops all collection immediately and clears the identifier described above.
Sending files between devices
When you send a file from Tjorii to another device on your Wi-Fi, it travels directly between the two devices. When you use web.tjorii.com to send between browsers, our server only helps the two browsers find each other; the file itself goes browser to browser and never reaches us.
How it's protected
- All traffic between the app and our servers is encrypted (HTTPS).
- Links used to open your documents expire after five minutes.
- On-device documents are locked behind your fingerprint, face or device PIN, and are excluded from Android backup and phone-to-phone transfer.
No system is perfectly secure, and we can't promise absolute safety — but we don't hold what we don't need.
How long we keep it
Your documents and account information are kept for as long as you have an account, unless you delete them sooner. Anonymous usage statistics are kept for 2 months. What happens when you delete your account is described below.
Deleting your data
- A single document — delete it in the app.
- Everything on your phone — Profile → Delete on-device documents.
- Your whole account — Profile → Delete my account, or at api.tjorii.com/delete-account if you've already uninstalled the app.
When you delete your account it is deactivated immediately: your sessions end, your mobile number is released, folders you shared stop being accessible to others, and your documents stop being available. The underlying data and files are then permanently erased within 30 days. Some records are kept in anonymised form (with no link to you) for service statistics.
Your rights
Under India's Digital Personal Data Protection Act, 2023, you can:
- ask for a summary of the personal data we hold about you and who we have shared it with;
- ask us to correct, complete or update it;
- ask us to erase it, or delete your account yourself as described above;
- withdraw your consent at any time — for analytics in Profile, and for everything else by deleting your account;
- nominate someone to exercise these rights for you if you die or are unable to; and
- raise a grievance with us, and if you are not satisfied with our answer, with the Data Protection Board of India.
Grievance Officer
For any complaint or request about your data, write to our Grievance Officer at support@tjorii.com. We will acknowledge your message within 2 working days and respond in full within 30 days.
Children
Tjorii accounts are for adults — you must be 18 or older to use it. If you store documents about your children, such as birth certificates or health reports, you do so as their parent or guardian.
Changes
If we change this policy we'll update the date at the top of this page, and tell you in the app if the change is significant.
Contact
Questions, or want a copy of your data? Write to support@tjorii.com.