Last updated: 3 September 2026
Jooma Ltd ("Jooma", "we", "us") is the data controller for personal data processed through our service. We are registered in England and Wales.
If you have any questions about how we handle your data, contact our team at info@jooma.ai.
We collect the following categories of personal data:
| Account data | First name, surname, email address, phone number, country |
| Usage data | Pages visited, features used, prompts submitted, content generated, timestamps |
| Technical data | IP address, browser type, device type, operating system |
| Payment data | Billing details processed by our payment provider (we do not store card numbers) |
| Communications | Any messages you send us via email or support channels |
We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.
We use your personal data to:
Under UK GDPR, we process your data on the following bases:
| Contract performance | Processing necessary to provide the service you signed up for |
| Legitimate interests | Improving the service, fraud prevention, security monitoring |
| Legal obligation | Compliance with UK tax, accounting, and data protection law |
| Consent | Marketing communications (you can withdraw consent at any time) |
We share personal data only with trusted third parties needed to deliver the service:
| Supabase | Database, authentication, and file storage — hosted in the EU |
| OpenAI | AI content generation — your prompts are sent to OpenAI’s API. See openai.com/privacy |
| Anthropic | AI content generation — your prompts are sent to Anthropic’s API. See anthropic.com/legal/privacy |
| Stripe | Payment processing — see stripe.com/gb/privacy |
| Twilio SendGrid | Delivery of account and service emails — operated by Twilio Inc. See twilio.com/en-us/legal/privacy |
| Sentry | Error monitoring and diagnostics, which may record your IP address and account identifier when something goes wrong — operated by Functional Software, Inc. See sentry.io/privacy |
| Vercel | Hosting and edge delivery — see vercel.com/legal/privacy-policy |
| Meta | Advertising measurement. We send a one-way encrypted (hashed) form of your email address, advertising cookie identifiers, and the amount and currency of a subscription payment, so we can tell which adverts led to signups — operated by Meta Platforms Ireland Ltd. See facebook.com/privacy/policy |
We do not sell your personal data. We do not share it with third parties for their own marketing purposes.
When you use Jooma's AI features, your prompts and inputs are sent to one of our model providers for processing. Depending on the feature, that provider is either OpenAI or Anthropic.
OpenAI does not use API data to train its models by default, and Anthropic's commercial terms state that it does not train models on customer content submitted through its API. We encourage you to review OpenAI's privacy policy and Anthropic's privacy policy for full details.
Do not include sensitive personal data about pupils or third parties in your prompts.
We retain your account data for as long as your account is active. If you close your account, we will delete or anonymise your personal data within 90 days, except where we are required to retain it for legal or accounting purposes (typically up to 7 years).
Generated content (slideshows, lesson plans, etc.) is retained until you delete it or close your account.
Under UK GDPR you have the right to:
To exercise any of these rights, email info@jooma.ai. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
We use strictly necessary cookies to maintain your login session. You can control cookies through your browser settings, though disabling session cookies will prevent you from logging in.
We also use the Meta pixel, which sets advertising cookies to measure which adverts lead to signups and subscriptions. These are set by Meta rather than by us, and you can block them through your browser settings or your ad blocker without affecting your use of Jooma. Doing so does not stop you signing up, subscribing, or using any feature.
We implement appropriate technical and organisational measures to protect your data, including TLS encryption in transit, row-level security in our database, and access controls on our systems. No system is 100% secure; if you believe your account has been compromised, contact us immediately.
Some of the service providers named in section 5 (including OpenAI, Anthropic, Twilio SendGrid, Sentry and Meta) are based in or transfer data to the United States and may process data outside the UK/EEA. Where this occurs, we rely on appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or Standard Contractual Clauses.
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice in the app. Continued use of Jooma after the effective date constitutes acceptance of the updated policy.
Jooma Ltd
Email: info@jooma.ai
© 2026 Jooma Ltd · Terms of Service