Privacy Policy

Last updated: 2026-05-27

This policy explains what data we collect when you use Jen's App Hub (the "Service"), why we collect it, who we share it with, and what choices you have. Throughout this policy, "we," "us," and "our" refer to Jen Built It LLC.

1. What we collect

• Account data. Your email address and a salted hash of your password. We never store your password in plain text.
• Subscription data. If you upgrade to Pro, we store your Stripe customer ID, your active subscription status, and the plan you chose. Card numbers, CVV, and other payment details are handled directly by Stripe and never touch our servers.
• Tool input. When you use a tool inside App Hub that accepts text (for example, a job description pasted into Resume Tweaker), we transmit that text to our AI provider to generate a response and we may retain the input briefly to display history to you. We do not use your input to train AI models.
• Profile data. Any optional fields you fill in on your profile (display name, bio, links).
• Security data. A hashed or truncated IP address and a user agent string for rate-limiting and abuse prevention. Login attempt counts.
• Newsletter consent. If you check the newsletter box during signup, we store that consent timestamp.
• Affiliate data. If you join our affiliate program, we store your referral code, click history, and payout records.

2. Why we collect it

• To create and secure your account (legal basis: contract).
• To bill you for Pro and manage your subscription (legal basis: contract).
• To run the AI tools you ask us to run (legal basis: contract).
• To verify Pro status when another Jen Built It app you use calls back to App Hub to check (legal basis: contract).
• To prevent fraud, abuse, and credential stuffing (legal basis: legitimate interest).
• To send you product updates only if you opt in (legal basis: consent).

3. Who we share it with

We use a small set of vendors to operate the Service. Each vendor only receives the minimum data they need.

• Cloudflare hosts the Service and our database (D1, KV).
• Stripe processes payments and stores billing data under its own privacy policy.
• Anthropic receives the text you submit to AI tools strictly to generate a response. We configure provider settings so your content is not used for model training where that option exists.
• Resend sends transactional emails (verification, password reset, receipts).
• Kit stores newsletter subscribers, only if you opt in.

We do not sell your personal data. We do not share your data with advertisers. We do not transfer your data to third parties for their own marketing.

4. Cross-app Pro verification

If you have a Pro subscription on App Hub, other apps in the Jen Built It family (for example, Side Hustle Garden, Subscription Graveyard, Energy Battery, Emergency Fund Aquarium) may call our /api/pro-verify endpoint to confirm your Pro status. The only data passed back to that app is whether you have an active subscription. No payment data, no email, no profile data.

5. Cookies and local storage

We use a session cookie or a token in browser storage to keep you logged in. We do not use advertising cookies, third-party tracking pixels, or cross-site analytics. localStorage may store small preferences (theme choice, dismissed banners) that never leave your device.

6. How long we keep your data

• Account and subscription data: as long as your account exists.
• Tool input: shown back to you while your session is active and retained for up to 30 days in case you want to revisit a result. After that, deleted.
• Security data (IP, login attempts): up to 90 days.
• Affiliate records: 7 years for tax and accounting purposes after the affiliate relationship ends.
• Newsletter consent: until you unsubscribe.

7. Your rights

Depending on where you live (GDPR, UK GDPR, CCPA/CPRA, and similar laws), you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and your data
• Export a copy of your data in a portable format
• Withdraw newsletter consent at any time
• Lodge a complaint with your local data protection authority

To exercise any of these rights, go to Account → Delete Account for deletion, or email privacy@jenbuiltit.com for everything else. We respond within 30 days.

8. Children

The Service is not directed at children under 16 and we do not knowingly collect personal data from them. If you believe a child has created an account, email privacy@jenbuiltit.com and we will delete it.

9. International users

The Service is operated from the United States. By using the Service from outside the US, you consent to the transfer of your data to the US. We rely on Standard Contractual Clauses or equivalent safeguards with our sub-processors where required.

10. Security

We protect your data using TLS in transit, salted hashes for passwords, role-scoped database access, rate limiting, bot-prevention, and least-privilege secrets management. No system is perfectly secure, but if we detect a breach affecting your data, we will notify you and the appropriate authorities as required by law.

11. Changes to this policy

If we update this policy in a way that materially changes how we handle your data, we will notify you by email (for account holders) or post a notice on the Service. The "Last updated" date at the top will always reflect the current version.

12. California rights, Do Not Sell or Share My Personal Information

We do not sell your personal information and we do not share it for cross-context behavioral advertising. We have never done so. This statement is required disclosure under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

California residents also have the right to know what personal information we hold, request a copy (you can do this yourself via the "Export My Data" button in account settings or by hitting GET /api/account/export), request deletion, and request correction. Exercising these rights will not change your pricing or service. To submit any of these requests, email privacy@jenbuiltit.com from the email address on the account, or contact us by mail at the address below. We respond within 45 days.

13. Contact

Questions about this policy or your data:

Jen Built It LLC
10800 S Lloyd Drive
Worth, IL 60482
USA
privacy@jenbuiltit.com