PRIVACY,
WITHOUT THE
FOG.

WHAT WE COLLECT

Account information may include your display name, handle, login email, authentication provider, profile details, onboarding intentions, canonical maker-entity membership, verification state, and network-integrity flags.

Product information may include product identity, normalized domains or store listings, ownership history, URLs, platforms, uploaded assets, experience goals, access configuration, lifecycle state, and maker-provided Perks.

Network records may include assignments, activity sessions, return records, submitted evidence, verification state, reward eligibility, JMI Cred ledger entries, Impact, Signal snapshots, retention events, Drop or Perk claims, and operational audit events.

HOW WE USE IT

We use information to authenticate users, operate product discovery and experiences, validate participation, calculate Signal deterministically, maintain Impact and Cred records, manage product entitlements, prevent abuse, fulfill eligible Perks, reconcile Stripe billing, and operate Pilot Cohort 001.

VERIFIED PRODUCT EVENTS

When a maker enables a certified JustMadeIt integration, the product may report a constrained fact that an approved meaningful action occurred. The V1 contract accepts an anonymous participation token, approved event name, unique event ID, and time. It rejects conversations, prompts, messages, files, names, emails, device identifiers, and arbitrary analytics metadata.

Signing happens on the product server. Integration credentials must never be placed in browser code, native application bundles, source control, logs, or public AI conversations. An integration does not give JustMadeIt permission to monitor a participant generally or read product content.

READ THE VERIFICATION STANDARD →

WHAT MAKERS SEE

Makers may receive factual and anonymized product evidence, aggregate behavior, Signal, confidence, lifecycle, and retention information about their products. JustMadeIt does not intentionally expose participant passwords, authentication tokens, private billing credentials, or unnecessary authentication identity to makers.

SERVICE PROVIDERS

JustMadeIt currently relies on service providers including Supabase for authentication, database, realtime, and storage infrastructure, and Stripe for maker membership billing. Those providers process information under their own terms and privacy practices.

Where a Perk includes an affiliate relationship, JustMadeIt will identify that relationship in the relevant experience.

CREDS, IMPACT + SIGNAL

JMI Creds are network utility and access—not money or a cash-equivalent balance. Impact is a permanent factual contribution record. Signal describes product behavior. These systems remain separate.

Valid negative evidence may contribute to product understanding without receiving a Cred award. Installs, downloads, ratings, and reviews alone never qualify for Creds.

RETENTION + SECURITY

We retain information for as long as needed to operate the network, protect users, satisfy billing and audit requirements, and preserve legitimate evidence, Signal, ownership, ledger, fulfillment, and integrity records.

We may associate related accounts or product identifiers to enforce capacity, product ownership, self-testing, and Perk rules. Network or device similarities may support a review flag but are not treated as conclusive identity proof by themselves.

Access is controlled through authentication, row-level security, server authorization, restricted operational roles, replay-resistant signed events, timestamp checks, and idempotent event processing. No system can guarantee absolute security.

YOUR CHOICES

You can update supported profile fields, control product publishing and active-product allocation, manage eligible Stripe billing through the Customer Portal, and sign out through Profile.

Self-service account deletion is not yet available. A safe deletion and anonymization policy must account for subscriptions, owned products, immutable network records, evidence integrity, unfulfilled Perks, and audit obligations before that control is released.

CHANGES + QUESTIONS

We may update this policy as the pilot and product evolve. Material changes should be reflected by a new effective date. Questions or data requests should be handled through an official JustMadeIt support channel once published.