Privacy notice

Linju is run by Future Forge Private Limited, a company registered in England and Wales, company number 15480332, registered office 19 Brubeck Way, Glebe Farm, Wavendon, Milton Keynes, England, MK17 8WR. We are the controller of the personal data described here.

To ask about your data or to use your rights, use "Contact us about your data" in the app or on linju.app, or email [email protected].

This notice covers the Linju app, linju.app and our emails, for everyone who uses them: neighbours, shop owners and staff, and anyone who reports something to us. It also covers the independent shops we approach about joining Linju.

We do not collect your date of birth, your full postcode, your location from your phone, your payment card details, any biometric data, or your Google or Apple password, contacts, photos or anything else from those accounts. If you turn on the app lock, your phone checks your fingerprint or face itself and only tells Linju yes or no.

You can sign in with a code we email you, with Google, or with Apple (on an iPhone and on linju.app). If you choose Google or Apple, they confirm who you are, and of what they share with Linju we keep only:

Google also shares the address of your profile photo; we do not keep it.

From Google, Linju asks for nothing more than your basic profile and email address (the openid, email and profile permissions). From Apple, we also keep a token Apple gives us, encrypted, only so that we can tell Apple when you delete your Linju account or disconnect Apple.

We use this information only to sign you in; to keep one account whichever way you sign in (if the email address Google or Apple shares already has a Linju account, you sign in to that account); and to keep a suspended account from opening again (section 4). We never use it for advertising, never sell or share it, and never use it to train any artificial intelligence or machine-learning model. Linju's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Google user data, in short. Access: when you choose to sign in with Google, Linju accesses only your Google account's ID, email address and name, through the openid, email and profile permissions (and the address of your profile photo, which Linju does not keep). Use: Linju uses this Google user data only to sign you in and to keep your Linju account. Storage: Linju stores the ID, the email address, and the first name and last initial taken from your name, with your account on our servers in the UK, encrypted in transit and at rest, for as long as your account exists, and deletes them when you delete your account (a scrambled form of the ID is kept only with the record of a suspension, section 8). Sharing: Linju does not share, sell or transfer Google user data to anyone, does not use it for advertising, and does not use it to train artificial intelligence or machine-learning models. You can revoke Linju's access at any time at myaccount.google.com/permissions.

Apple user data, in short. Access: when you choose to sign in with Apple, Linju receives only your Apple account's ID for Linju, the email address Apple shares (your own, or a private relay address that forwards to you), and, the first time only, your name. Use: Linju uses this data only to sign you in and to keep your Linju account. Storage: Linju stores the ID, the email address, the first name and last initial taken from your name, and a token from Apple, encrypted, with your account on our servers in the UK, for as long as your account exists; the token is kept only so that we can tell Apple to end Linju's access when you delete your account or when you disconnect Apple, which we do, and then everything is deleted (disconnecting Apple deletes the ID and the token, and your Linju account keeps its email address; a scrambled form of the ID is kept only with the record of a suspension, section 8). Sharing: Linju does not share, sell or transfer it to anyone and does not use it for advertising or to train artificial intelligence or machine-learning models. You can stop using Sign in with Apple with Linju at any time in your iPhone's Settings, under your Apple Account, or at account.apple.com.

Google and Apple know that you used your account to sign in to Linju; their own privacy policies cover that. linju.app loads nothing from Google or Apple until you choose to sign in with them. When you delete your Linju account, or disconnect Apple, we tell Apple to end Linju's access to your Apple account, and you can remove Linju from your Google or Apple account settings at any time.

In the app and on linju.app, your Profile shows how you sign in, under "How you sign in", and lets you disconnect Google or Apple at any time; you can always still sign in with a code to your email address. If you stop using Sign in with Apple with Linju in your Apple settings, Apple tells us: we delete its token and sign you out, and keep the ID, so that if you use Sign in with Apple again you return to the same Linju account. If you delete your Apple Account, we delete the ID too.

To provide Linju to you (contract): your account and sign-in, your code, stamp cards, welcome pass, visits, following shops, the notifications you choose, the Results we show shops as counts, and shops' plans.

With your consent (you can withdraw it at any time, in the app or from the message itself):

Come-back messages: if you follow a shop on the Plus plan and stop visiting it, we may send you that shop's come-back message, timed from your own visits there. This is profiling for direct marketing, done under the consent you gave by following the shop. You can object at any time by unfollowing the shop, and the shop never learns who received its message.

For our legitimate interests, where your interests do not override them:

To meet our legal obligations: our online safety duties (reports, removals and their records), reporting child sexual abuse material to the National Crime Agency, tax and accounting records for shops' payments, and answering requests about personal data.

We make no decision about you with legal or similarly significant effects by automated means alone. Every photo uploaded to Linju is checked by an image classifier on our own servers; a photo it flags waits for a person at Linju to review, and only the classifier's score is kept. Words in shops' pages and offers are checked against our rules when they are saved, and offer wording that describes a prize draw or chance is refused, with the reason shown.

We never sell your data, and we do not share it for advertising.

Our own servers are in the UK. Some of our service providers handle data in the United States or the European Union: Resend (email addresses, email subjects and delivery records), Expo (notification tokens and, while sending, the notification itself) and Stripe (shops' payment details). If you sign in with Apple, what we send Apple outside the UK is the one-time code Apple gives for each sign-in, sent back to confirm it, and our request, when you delete your account or disconnect Apple, to end Linju's access to your Apple account. Where data leaves the UK, it is protected by safeguards UK law approves: the UK Extension to the EU-US Data Privacy Framework, or the UK's International Data Transfer Agreement or Addendum. You can ask us for details.

Backups keep deleted data for up to 30 days. If we ever restore one, we delete again everything that was deleted.

You have the right to:

Using your rights is free. We reply within one month.

If you are unhappy with how we handle your data, please tell us first using "Contact us about your data". We acknowledge every complaint at once and reply within one month.

You can also complain to the Information Commission, the UK's data protection regulator: ico.org.uk/make-a-complaint, or 0303 123 1113.

On linju.app we use two cookies. One keeps you signed in. The other lasts 10 minutes and ties a sign-in to your browser while it happens: when you ask for a sign-in link, or sign in with Google or Apple. Both are strictly necessary, so we do not ask for consent for them. We use no analytics or advertising cookies.

linju.app also keeps your last chosen mode and a few conveniences in your browser, and, until you sign in, a shop or team invite you opened while signed out, and the page to return to while you sign in with Google or Apple, in that tab only.

On your phone, the app keeps your sign-in, the secret behind your code and your app lock setting in the phone's secure storage, and your last cards and profile so the app opens without signal. These are removed when you sign out.

Linju is for people aged 18 and over, and every account confirms it. If you believe a child is using Linju, please tell us.

If we change this notice in a way that matters to you, we will tell you before the change takes effect. You can ask us for any earlier version at [email protected].