Plain-language summary
- Jornio is intended for adults age 18 and older in the United States.
- We use account, content, interaction, device, support, and safety information to operate, personalize, measure, and protect Jornio.
- Public profile and Journey previews may be viewed and reshared by other people. Episode playback and interactive features may require an account and adult-eligibility check. Private or restricted content is visible only as described by the product, but authorized access may occur for reported safety, support, security, or legal matters.
- Private conversations are not promised to be end-to-end encrypted. Automated tools and authorized reviewers may process reported or safety-flagged messages as described below.
- Jornio does not sell personal information or use it for third-party targeted advertising.
- You can request access, correction, or deletion where applicable, and initiate account deletion in the app or submit a public web request. Some authored content and shared history may remain under "Deleted user" through the account-deletion process; removing attribution does not necessarily remove personal information within the content.
- Where Smart Journey is available, cloud drafting is optional and uses only the source material and context you select for that request.
- A separate Consumer Health Data Privacy Policy explains Jornio's practices and rights for covered health-related information.
This summary is provided for convenience. The complete Policy below describes Jornio's practices.
1. Scope
This Privacy Policy explains how Cadenium LLC ("Jornio," "we," "us," or "our") collects, uses, shares, retains, and deletes personal information when you use Jornio's applications, websites, Journeys, Episodes, profiles, comments, participation features, request-based messaging, support tools, and related services (the "Service").
Jornio is intended only for adults age 18 and older in the United States. It is not directed to children or teenagers.
2. Information we collect
Account and profile information
We collect information used to create, authenticate, and manage an account, such as email address, authentication-provider identifiers, username, display name, profile information, account settings, and authentication and security records.
Age-eligibility information
To enforce the adults-only Service, we process a self-declared date of birth for the eligibility check. The current self-declaration process retains an eligibility result, evidence source, policy version, check time, and an account-scoped protected fingerprint for duplicate or conflicting declarations; it does not retain the exact date of birth or exact age in that process. Self-declaration is not independent identity or age verification. We do not display birth information on public profiles.
User Content
We collect Journeys, Episodes, titles, descriptions, images, video, audio, external links, comments, replies, profile content, participation actions, requests, messages, and other material you submit. Content may contain personal information about you or other people.
Public profile and Journey-preview information may be available to visitors and may be copied or reshared outside Jornio. Episode playback, personalized discovery, and interactive features may require an account and adult-eligibility check. Content with a more limited audience is made available according to the controls offered by the Service.
Interactions and messaging
We collect follows, Watch selections, likes, saves, reactions, comments, feedback, reports, blocks, chat requests and decisions, community participation, and accepted adult-to-adult conversation content and metadata.
Jornio does not offer open, random, or anonymous direct messages. Messaging in a new personal conversation starts only after an eligible adult accepts the other adult's chat request. A request may start from a profile and does not require a Journey. Journey community membership follows the community's open-join or approval setting; watching a Journey does not join its community.
Jornio may use automated tools to identify signals of spam, malware, exploitation, threats, and other abuse in requests and conversation content or metadata. Automated signals may be incomplete or wrong and do not mean that every conversation is manually reviewed.
Authorized Jornio personnel and service providers may access relevant conversation content and metadata when a request or conversation is reported, safety-flagged, or reasonably needed for support, security, legal compliance, or enforcement of Jornio's rules. Access is limited by role and logged under Jornio's internal controls.
Jornio does not promise end-to-end encryption or that message content is inaccessible to Jornio. Do not use a Jornio conversation to send information that is unnecessary for the interaction.
Support, moderation, and legal requests
We collect information submitted through support, safety reports, moderation appeals, account-deletion and privacy requests, copyright notices and counter-notices, NCII removal requests, and related communications. This may include account identifiers, URLs, explanations, evidence, contact information, verification information, case status, and outcomes.
Usage, device, and log information
We may collect app version, device and browser type, operating system, IP address, approximate region derived from IP address, timestamps, pages and features used, Journeys or Episodes opened, searches, clicks, playback and performance events, crash records, diagnostics, security events, and identifiers needed to operate and protect the Service. If you enable push notifications, we also process a device push token and notification preferences to deliver them.
Jornio-operated product analytics can link these records to the current account, device or installation, and session. Events can include screen and navigation activity, content impressions and opens, playback, pauses, seeks, active-watch time, and interactions. We use viewing and interaction signals, such as watching, returning, liking, saving, and selecting Watch, to organize recommendations and measure product use. These first-party records are not used for third-party targeted advertising.
Optional Smart Journey drafting
Where Smart Journey is made available and you choose it, we process your selected photos or videos, written context, selected-source metadata, capture timestamps when provided, and an available transcript to generate an editable draft. Cloud analysis uses reduced photo copies or sampled video frames and transcripts rather than treating every frame as a separate model input. If you separately opt in to using photo location, rounded coordinates may be included; the location option is off by default. Ordinary use does not require that permission.
Cloud drafting is provided through Amazon Bedrock on AWS using an Anthropic model. It is not automatic analysis of every Journey or conversation. A generated result remains a draft until you accept it, and acceptance does not publish it. Avoid selecting another person's private or sensitive information without the necessary permission. The temporary source-retention rule is described in Section 5.
Optional authoring catalogs
Where the KLIPY catalog is available and you open it, the app contacts KLIPY to search, preview, and select catalog media. KLIPY receives the search text and locale, information identifying a selected catalog item when its use is registered, and technical connection information such as your IP address when loading results or media. This integration does not send your Jornio profile or conversation history. Avoid entering private or sensitive information into a third-party catalog search. KLIPY's own Privacy Policy Opens in a new tab. describes its handling of these requests.
Optional places, linked media, and on-device captions
If you add a place to an Episode, Jornio processes the place name, address, and coordinates you choose. Place search and reverse-geocoding use Apple Maps, which receives the search or selected coordinates and related technical request information. A selected place can identify a precise location even when it is not your device's current location; only include a location you want associated with the Episode. Ordinary use does not require device-location access.
For a linked YouTube item, the app may load a thumbnail from Google's servers before you open the player. Opening the embedded player connects to YouTube and its media services. Those requests reveal the requested item and technical connection information to Google/YouTube; their own privacy terms apply.
Where on-device caption generation is available, the app may download a speech-recognition model from Hugging Face if it is not already cached. That download exposes technical connection information to the model host. The local caption-generation path processes the media on your device and does not send its audio, video, or generated transcript to Hugging Face. Choosing optional cloud drafting is a separate process described above.
Cookies and similar technologies
Cookies, local storage, SDKs, pixels, and similar technologies: essential authentication, security, preference, and request-status storage; first-party product and operational measurement. Jornio does not use third-party advertising pixels or advertising SDKs.
If Jornio introduces non-essential cookies, advertising technology, or materially different tracking, we will update this Policy and provide any notice or controls required before activating that processing.
Information we do not intentionally require
Jornio does not require precise geolocation, address-book contacts, government identifiers, payment-card or financial-account information, medical records, or biometric identifiers for ordinary use. A place you deliberately add to an Episode may contain precise coordinates. Optional Smart Journey photo-location processing requires a separate choice described above. Users may voluntarily discuss sensitive experiences in User Content. Do not post sensitive information unless it is necessary for your Journey and you understand the selected audience.
Health-related content
Health, recovery, mental-health, disability, treatment, reproductive-health, or other sensitive content may be Consumer Health Data under state law. The separate Consumer Health Data Privacy Policy describes the categories, sources, purposes, disclosures, and applicable rights for that information.
Where applicable law requires a specific opt-in, Jornio will not treat general acceptance of the Terms of Service or acknowledgement of this Privacy Policy as that consent.
3. How we use information
We use personal information to:
- provide, maintain, troubleshoot, and improve the Service;
- create, authenticate, secure, and manage accounts;
- enforce adults-only eligibility;
- display Journeys, Episodes, profiles, comments, links, and participation actions according to available visibility controls;
- provide search, discovery, recommendations, and Journey context;
- create an optional Smart Journey draft from the material and context selected for that request, where the feature is available;
- deliver and operate accepted adult request-based conversations;
- detect, prevent, investigate, and respond to spam, fraud, abuse, harassment, exploitation, infringement, security incidents, and unsafe behavior;
- review reports, appeals, copyright notices, NCII requests, deletion requests, and privacy requests;
- enforce the Terms of Service and Community Guidelines;
- communicate service, safety, security, policy, support, and requested notification messages;
- understand reliability, performance, and aggregate product usage;
- comply with law, lawful process, and valid legal obligations; and
- establish, exercise, or defend legal claims.
Jornio does not use health-related or other sensitive User Content for third-party targeted advertising.
4. How we disclose information
Public and audience-selected content
Public profiles and Journey previews can be seen by other users and visitors. Episode playback and interactive features may require adult eligibility and an account. Content shared by link can be accessed by people who receive the link, subject to the visibility, eligibility, safety, and account controls available for that content.
Other users
Other users may see your display name, profile, visible Journeys and Episodes, comments, participation actions, request information, and accepted conversation content where the product allows it.
Service providers
We disclose information to vendors that process it for Jornio and connect to user-selected external services. Contractual and security restrictions depend on their role. The current providers and integrations, where the relevant feature is available, are:
| Function | Provider and relevant processing |
|---|---|
| Authentication | Cadenium-operated Keycloak; Apple or Google when you select their sign-in method |
| Hosting, databases, and processing | Amazon Web Services, including PostgreSQL databases and Jornio-operated media processing |
| Media and attachment storage and delivery | Amazon S3 and CloudFront; Cloudflare CDN and R2 storage for the content paths that use them |
| Product analytics and recommendations | Cadenium-operated first-party services hosted on AWS with PostgreSQL; account, session, content, and interaction events; no third-party advertising analytics |
| Operational diagnostics | AWS CloudWatch for operational and security logs and diagnostic events |
| Amazon Simple Email Service; the email provider you use receives messages sent to you | |
| Push notifications | Apple Push Notification service, if you enable notifications |
| Optional Smart Journey cloud drafting | Amazon Bedrock on AWS with an Anthropic model, only for a selected drafting request where the feature is available |
| Optional authoring catalog | KLIPY, when you use its catalog; search text, locale, selected-item information, and technical connection information |
| Optional authored places | Apple Maps, for place search and reverse-geocoding; search text or selected coordinates and technical request information |
| Linked YouTube media | Google/YouTube, for thumbnails and the embedded player; requested-item and technical connection information |
| On-device caption model download | Hugging Face, for a model download when not cached; technical connection information, without caption audio, video, or transcript upload |
| Support and moderation | Authorized Cadenium personnel and Cadenium-operated administration tools |
| Security and abuse prevention | Cadenium-operated controls using AWS and Cloudflare services |
Providers acting on Jornio's instructions may process information only to provide their services to Jornio and must protect it as required by their agreements and applicable law. External integrations describe their own processing in their policies: KLIPY Opens in a new tab., Apple Opens in a new tab., Google/YouTube Opens in a new tab., and Hugging Face Opens in a new tab..
Apple, Google, your email service, and external services you choose can also process information under their own privacy terms. This Policy describes Jornio's processing and does not govern the separate accounts you maintain with those services.
Legal, safety, and security disclosures
We may disclose information when we reasonably believe disclosure is necessary to comply with law or valid legal process; protect the rights, safety, and security of users, Jornio, or others; investigate abuse or exploitation; prevent fraud; enforce our agreements; or respond to an emergency involving danger of death or serious physical injury.
Business transactions
Information may be disclosed or transferred in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets. We will provide notice where required by law and require the recipient to handle personal information consistently with applicable obligations.
No sale or third-party targeted advertising
Jornio does not sell personal information and does not share personal information for cross-context behavioral or third-party targeted advertising. Jornio does not use an advertising SDK or the advertising identifier for targeted advertising.
Browser privacy signals and third-party tracking
Jornio does not use third-party advertising networks to track people across unrelated websites or apps. Because Jornio does not sell personal information or share it for cross-context behavioral advertising, there is no sale or targeted-advertising opt-out to apply through Global Privacy Control in the current model. If that model changes, Jornio will honor legally required opt-out preference signals before activating the covered processing.
Jornio does not currently respond to the legacy Do Not Track browser header because there is no consistent industry standard for interpreting it. Third-party services may collect information under their own policies when an external link is opened or an integrated thumbnail, player, catalog, place search, or model download makes the requests described above.
5. Retention
Retention depends on the record's purpose, the account or content lifecycle, and applicable privacy, safety, legal, and dispute requirements. The 30-day account-deletion cancellation period is not a universal data-retention period or a guarantee that every copy has been erased. The following distinguishes the record categories and their handling:
| Information | Retention approach |
|---|---|
| Active account and profile | While the account is active; the in-app deletion process has a 30-day cancellation period, then removes or de-identifies account records through its required processing steps |
| Authored or shared User Content | While provided through the Service; some Journeys, Episodes, comments, shared messages, or media may remain after account deletion with the profile attribution removed. Applicable personal-information deletion rights still apply to the content itself |
| Individually deleted Journey | Where the deletion/recovery action is available, 14 days of recovery according to the server receipt; expiration removes the recovery action and does not certify erasure of every stored copy |
| Optional Smart Journey sources and analysis derivatives | Seven days after a completed draft is ready, or seven days after the last activity of an unfinished upload; active processing is protected from premature cleanup, and sources may be removed earlier after successful materialization. Accepted Journey content follows its own lifecycle |
| Raw first-party analytics | The configured raw-event history window; the current service configuration uses 30 days. Account-linked activity summaries and some aggregate memberships have a separate lifecycle and can remain until account erasure |
| Restricted adult conversations | while the conversation or shared history remains available, subject to applicable personal-information deletion rights and justified safety, security, or legal needs |
| Usage, device, diagnostic, and security logs | configured operational windows, generally 14–30 days for production operational logs. Immutable account, identity, legal, and safety audit records have separate purposes and are not automatically erased by the operational-log window |
| Reports, blocks, moderation decisions, and safety evidence | the duration needed to decide a report or appeal, enforce relevant restrictions, investigate repeat abuse, and meet applicable evidence-preservation or legal obligations |
| Support and moderation-appeal communications | the duration needed to handle the request, follow-up or appeal, and related security, legal, or dispute obligations |
| Copyright notices, counter-notices, and repeat-infringer records | the duration needed to process the notice or response, review related infringement or repeat-offender issues, and meet applicable evidence-preservation and legal obligations |
| NCII removal requests and restricted evidence | the duration needed to validate and resolve the request, address known copies and related proceedings, and meet applicable safety, legal, or evidence-preservation duties |
| Backups | The configured backup cycle; the current production database recovery configuration uses a seven-day window. That window is not a promise that every media file, stored version, or external copy is erased within seven days |
We may retain specific information longer where reasonably necessary to comply with law, respond to legal process, preserve evidence, prevent repeated abuse, resolve disputes, enforce agreements, or protect safety. When possible, retained information is limited, access-restricted, or de-identified.
6. Account and content deletion
You can initiate account deletion in the app through Settings > Account > Delete account and through the public deletion request.
After identity verification and the applicable cancellation period, the account-deletion process removes or de-identifies account-linked personal records. Some authored Journeys, Episodes, comments, Help records, shared messages, and media may remain with the profile attribution removed. That does not necessarily anonymize the content itself or erase every file. Applicable personal-information deletion rights still apply to retained content and processors. Logout or temporary deactivation is not account deletion. The Account Deletion page explains how to request removal of personal information within retained content.
Deleting an individual Journey is separate from account deletion. Where the deletion and recovery action is available, the Journey and Episodes become unavailable on ordinary Jornio surfaces during a 14-day recovery period. Restoration before the server-provided deadline preserves the previous audience and access settings, subject to any independent safety, moderation, copyright, or legal restriction. After the deadline the recovery action is unavailable; expiry is not a confirmation that every media file or stored copy has been erased.
7. Your choices and privacy rights
Depending on applicable law, you may have the right to request access to, correction of, deletion of, or a portable copy of personal information; obtain information about data practices; opt out of certain processing; or appeal a denied privacy request.
Submit a privacy request or contact privacy@cadenium.com. We may verify your identity and authority before completing a request. An authorized agent may submit a request where applicable law permits, subject to verification.
For rights involving covered health-related information, also review the Consumer Health Data Privacy Policy. That page explains additional access, withdrawal, deletion, recipient-list, and appeal rights where applicable.
You may also:
- update available profile and account settings;
- change content visibility where the feature is available;
- delete individual content where the feature is available;
- report content or users and block other users;
- withdraw optional permissions through device or app settings;
- manage optional push-notification categories in Jornio or device settings; and
- unsubscribe from optional marketing communications using the message instructions.
We will not discriminate against you for exercising an applicable privacy right.
8. Information about people under 18
Jornio is not available to people under 18. We do not knowingly allow them to create accounts or submit User Content. If we learn that an account belongs to a person under 18, we may restrict and delete the account and related information, subject to limited safety, legal, and security retention.
To report a suspected underage account, use the support form or contact support@cadenium.com.
9. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including access controls appropriate to support, moderation, safety, and legal roles. No system is completely secure, and we cannot guarantee absolute security.
If you believe your account or information has been compromised, use the support form or contact security@cadenium.com. Do not include passwords, access tokens, or unnecessary private information in the report.
If a security incident affects personal information, Jornio will provide notices required by applicable law. Internal containment, evidence-preservation, vendor, and regulator procedures are maintained separately from this public Policy.
10. External links
Journeys and Episodes may include links to third-party services. Those services have their own privacy practices, and Jornio does not control them. Review a third party's policy before providing information to it.
11. United States scope
This Policy is written for the current United States-only launch. The Service is not offered outside the United States under this version of the Policy.
12. Changes to this Policy
We may update this Policy. If a change is material, we will provide notice appropriate to the change, such as an in-app notice, a public notice, or an updated effective date. We will ask for consent when required by law.
13. Contact
Operator: Cadenium LLC
Mailing address: 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, USA
Privacy requests: Start a privacy request
Privacy email: privacy@cadenium.com
Support: support@cadenium.com
