Privacy Policy

Jooma Ltd ("Jooma", "we", "us") is the data controller for personal data processed through our service. We are registered in England and Wales.

If you have any questions about how we handle your data, contact our team at privacy@jooma.ai.

We collect the following categories of personal data:

We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.

We use your personal data to:

• Provide and improve the service — process your prompts, generate content, and save your work.
• Manage your account — authenticate you, send important service notifications, and handle support queries.
• Process payments — handle subscription billing and send receipts.
• Analyse usage — understand how the service is used so we can improve it (aggregated and anonymised where possible).
• Legal compliance — meet our obligations under UK and EU law.

Under UK GDPR, we process your data on the following bases:

We share personal data only with trusted third parties needed to deliver the service:

We do not sell your personal data. We do not share it with third parties for their own marketing purposes.

When you use Jooma's AI features, your prompts and inputs are sent to OpenAI for processing. OpenAI does not use API data to train its models by default. However, we encourage you to review OpenAI's privacy policy for full details.

Do not include sensitive personal data about pupils or third parties in your prompts.

We retain your account data for as long as your account is active. If you close your account, we will delete or anonymise your personal data within 90 days, except where we are required to retain it for legal or accounting purposes (typically up to 7 years).

Generated content (slideshows, lesson plans, etc.) is retained until you delete it or close your account.

Under UK GDPR you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data ("right to be forgotten").
• Restriction — ask us to limit how we use your data.
• Portability — receive your data in a structured, machine-readable format.
• Object — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, withdraw it at any time.

To exercise any of these rights, email privacy@jooma.ai. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

We use strictly necessary cookies to maintain your login session. We do not use third-party advertising or tracking cookies. You can control cookies through your browser settings, though disabling session cookies will prevent you from logging in.

We implement appropriate technical and organisational measures to protect your data, including TLS encryption in transit, row-level security in our database, and access controls on our systems. No system is 100% secure; if you believe your account has been compromised, contact us immediately.

Some of our service providers (including OpenAI) may process data outside the UK/EEA. Where this occurs, we rely on appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or Standard Contractual Clauses.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice in the app. Continued use of Jooma after the effective date constitutes acceptance of the updated policy.

Jooma Ltd
Email: privacy@jooma.ai