Privacy Policy

• Account. When you sign in with Google we receive your name, email address, profile photo and a user ID. We store these with your plan, daily operation counts, coupon and referral details. If you choose, we also store a name, bio and avatar you set on your account page.
• Account activity. From 2 October 2026 we keep your Daily Check-in streak and the bonus operations it earns, and in-app notifications about your account (for example a finished creation, a check-in reward or a referral). We keep at most your 50 most recent notifications.
• What you create. The prompts you write, reference images you upload, and the images, videos, audio and prompts Jitura generates for you.
• How you use Jitura. From 1 October 2026 we record each day you open Jitura while signed in, when you sign in and how many times, and each generation you make (the tool, mode and model, and when). We also keep records of prompt generations, video and media jobs, and clicks on the copy button.
• Approximate location. From 6 October 2026, when you open Jitura while signed in we record the country and state or region your connection comes from, as estimated by our hosting provider Cloudflare. We keep it with each daily visit record and as your latest location on your account. We do not record your city, postcode, coordinates or IP address, and we do not use your device's GPS.
• Where you came from. If you click a Jitura promotion on a QR scanner page and then create an account within 30 days, your account records the QR link it came from.
• Payments. Card payments are handled by Stripe and FPX or e-wallet payments by Fiuu. We receive the order, plan and payment status, never your full card or bank details.
• Technical data. To limit abuse we turn IP addresses into salted digests that change every time window; we do not store full IP addresses. Our hosting providers keep their own network and infrastructure logs.

• To run the service: sign-in, generating what you ask for, quotas, plans and payments.
• To understand how Jitura is used so we can improve it. Our administrators look at activity per account and in total, for example how often people return and which tools they use. We do not sell your data or use it for third-party advertising.
• To prevent abuse, fraud and overuse, and to keep the service secure.
• For the community gallery: generated images and unprotected prompts may be selected for the public gallery after an administrator approves them. Reference photos you upload are never published.
• To answer your support requests.

We rely on your consent when you sign up and use Jitura, on what is needed to provide the service you asked for, and on our legal obligations, for example keeping payment records.

These providers process data only to run Jitura for us, under their own privacy terms. Some are outside Malaysia, so your data may be stored or processed in other countries.

• Google Firebase and Cloud Firestore: sign-in and our database.
• Cloudflare: hosting, file storage (R2), Workers AI, bot checks (Turnstile) and email delivery.
• AI model providers including fal.ai, Google (Gemini) and Groq: your prompt and any reference images are sent to the model that makes your result.
• Stripe and Fiuu: payments.
• Resend: transactional email.

Jitura uses no advertising cookies and no third-party analytics trackers. We use:

• A short-lived sign-in cookie used once to complete Google sign-in, and Firebase's own browser storage that keeps you signed in.
• jitura_src, a first-party cookie set for 30 days only when you click a Jitura promotion on a QR scanner page.
• Browser storage for your preferences and drafts, such as the light or dark theme, unsent prompts, the Daily Check-in reminder setting, and a marker so a visit is counted only once a day. Images you create are also kept in your browser (the last 30 requests) so they appear in Assets.

• Account details, plan and payment records: while your account exists, and payment records for as long as the law requires.
• Daily visit and generation activity (including the approximate location of each visit), and Daily Check-in records: up to 12 months. Your latest approximate location is kept with your account.
• Notifications: your 50 most recent, while your account exists.
• Files you upload as inputs to the video, audio and media tools (images, videos and audio): usable for 24 hours, then deleted 30 days after upload.
• Other uploads and generated results: as long as needed to provide them to you and run the gallery, or until you ask us to delete them.
• Abuse-prevention digests: about two hours.

You can ask to see the personal data we hold about you, correct it, delete your account and data, or withdraw your consent (which means we can no longer provide the service). Email us from the address on your account and we will reply within 21 days. If you are not satisfied, you may contact Malaysia's Department of Personal Data Protection.

Jitura is not intended for children under 13. If you believe a child has given us personal data, contact us and we will delete it.

We will update this page when our practices change and show the new effective date at the top.