Privacy policy

Who we are

The Jay Way (Jay) is operated by Brighter Day Software Pty Ltd (ABN 85 682 366 034). Jay is for parents and guardians organising disability-related family records. It is not directed to children for independent use.

Information we collect

Depending on the features you use, we collect:

• your email address, account identifiers and authentication records;
• child and family information you enter;
• documents, selected Google Drive files, conversations, Journey items and saved research;
• subscription and entitlement status, but not full payment-card details;
• a device push token if you choose to enable notifications; and
• limited security, usage, error and audit records needed to operate Jay.

Why we use it

We use this information to provide and secure Jay, organise authorised records, answer questions with sources, support account and subscription functions, troubleshoot faults, prevent misuse, and meet legal obligations. We do not sell family information or use it for third-party advertising.

Who processes it

We use service providers only where needed to operate Jay. These include Supabase for authentication, database and storage; Resend for authentication email delivery; Fly.io for the application service; OpenAI for selected AI processing; Google when you connect Google Drive; RevenueCat for purchase and entitlement status; Expo for push-token registration and notification delivery; and Apple for App Store distribution, purchases and subscriptions.

We require service providers to protect information consistently with this policy and applicable law. Google Drive access is limited to files you deliberately choose. Jay cannot browse the rest of your Drive and does not edit or delete original Google files.

AI and overseas processing

AI requests may send the minimum relevant text or selected content to OpenAI. Some service providers may process information in the United States and other countries where they or their subprocessors operate. Supabase data for Jay is hosted in Australia, and Jay's primary application service runs in Sydney. Overseas privacy protections may differ from Australian law.

See How Jay uses AI for the safeguards and limits that apply.

Retention and deletion

Family information is generally kept while your account is active, unless you delete an item or your account. Limited security, transaction and audit records may be retained where reasonably needed or legally required. Deleted information may remain in protected backups until those backups rotate out of service.

You can disconnect Google Drive, delete individual items where offered, or start account deletion in the app. See Account and data deletion.

Access, correction and complaints

You can review and correct information in Jay, request access or correction, or make a privacy complaint by emailing hello@thejaywayapp.com. We will acknowledge a privacy complaint within 7 days and aim to respond within 30 days. If you are not satisfied, you may contact the Office of the Australian Information Commissioner.

Security and changes

Jay uses authenticated access, child and family separation controls, encryption in transit, and restricted operational logging. No security measure can remove all risk. We may update this policy when the service or law changes and will publish the updated effective date here.