Privacy policy

Jome is a product of Sa'i, based in Eindhoven, the Netherlands. Sa'i is the data controller for the personal data described here. Sa'i is registered in the Netherlands under KVK number 92728626, at [registered address].

For any privacy question or to exercise your rights, contact privacy@jome.app.

We keep this deliberately small. In plain terms:

• Account data. Your email address, so you can sign in and we can send account and security messages. Sign-in is handled by AWS Cognito; your password is managed by Cognito and is never visible to us.
• Your sensory profile. The sensitivities and preferences you set: how sensitive you are to noise, light, and smell, the crowd level you can handle, and space preferences such as venue size and seating. This is what lets the map be tailored to you rather than to an average.
• Reviews you write. The venue, the 1 to 5 ratings you give, your visit date and time, and any written note. You can post a review under a display name or as “Anonymous”.
• An optional profile photo, if you choose to upload one.
• Consent records. When you accept terms, acknowledge this policy, or set cookie preferences, we record that choice and its date as proof of consent.
• Technical data. Standard request information such as your IP address, needed to operate the service securely and to prevent abuse.

When you allow location access, your device's coordinates are used to centre the map and find nearby places. We do not store your location on our servers against your account. It is used for the request you are making and not kept as a history of where you have been.

The map is provided by Mapbox and only loads after you consent to it. Loading the map shares the map area you are viewing with Mapbox so the tiles can be rendered.

A sensory profile describes what environments are hard for you. Under GDPR, information that reveals something about a person's health can be “special category” data, which has extra protection. We treat your profile with that in mind: it is stored against your account only, used to personalise what you see, and never sold.

We rely on your explicit consent to collect and use this profile, and you can withdraw that consent at any time by editing or deleting your profile.

• We do not sell your personal data.
• We do not store a history of your location.
• We do not share your individual sensory profile with venues or anyone else.
• We do not use advertising trackers. The analytics we use (Plausible) is cookieless, does not track you across sites, and stores no personal data.

A verified venue owner can see the reviews left for their own venue: the ratings, the written note, the visit time, and the display name you chose. They do not receive your account identity, and if you posted anonymously your name shows as “Anonymous”. Your sensory profile is never shared with venues. Jome does not share data with municipalities.

We use a small number of service providers, chosen so that your data stays in the European Union wherever possible. Our own infrastructure (accounts, profiles, reviews) runs on Amazon Web Services in the Frankfurt (eu-central-1) region.

• Amazon Web Services (EU). Hosting, sign-in, databases, file storage, transactional email, and the content moderation that keeps reviews on-topic.
• Mapbox. Renders the map in your browser, after you consent. Receives the map area you view.
• Google reCAPTCHA. Protects our forms from abuse. Loads only after you consent.
• Google Places. Used to look up place details for the area you are viewing.
• Plausible Analytics. Privacy-friendly, cookieless website analytics from an EU-owned company, with all data hosted in the European Union. It counts visits and page views in aggregate, without cookies, without tracking you across sites, devices, or days, and without storing personal data. Because it sets no cookies and stores no personal data, we run it for all visitors on the basis of our legitimate interest in understanding how the site is used; you can object at any time by emailing us. See Plausible's data policy for the full detail of what it measures.

Mapbox and Google are based in the United States, so using the map, our forms, or place lookups may involve a transfer outside the EU. Such transfers rely on the appropriate safeguards under GDPR, such as Standard Contractual Clauses. Plausible, by contrast, is EU-owned and keeps all analytics data within the EU, so it involves no such transfer. We keep this list current as our providers change.

We keep your account, profile, and reviews for as long as your account exists. When you delete your account (see below), your profile, consent records, and profile photo are deleted, and your reviews are kept but stripped of anything that identifies you, so the sensory information stays useful to others without being linked to you.

Under GDPR you can access, correct, export, and delete your data, and object to or withdraw consent for certain processing. Jome supports these directly:

• Access and export. You can download all your stored data in a machine-readable file from your profile.
• Correction. You can edit your profile at any time.
• Deletion. Deleting your account removes your profile, consent records, and photo, closes your sign-in account, and de-identifies your reviews.
• Consent. You can change or withdraw cookie and marketing consent at any time.

To exercise any right, use the tools in your profile or email privacy@jome.app. We will respond within one month, as required by GDPR.

We use a small number of essential cookies to keep you signed in and to remember your cookie choices. Non-essential features, the map and reCAPTCHA, load only after you agree, and you can change that decision at any time from the cookie settings. Our analytics (Plausible) sets no cookies at all, so it falls outside these choices; it is described in the processors section above.

Jome is not directed at children under 16, which is the age of digital consent in the Netherlands, and we do not knowingly collect personal data from them. If you are a parent or guardian and believe a child under 16 has given us their data, contact privacy@jome.app and we will remove it.

Parents and carers are welcome to use Jome to plan outings for a child with sensory needs. In that case the account and profile are the adult's, describing what works for the outing, rather than an account for the child.

If you believe we have mishandled your data, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

We will update this policy as the product changes. When we make a material change we will note it here.

Last updated: 04-09-2026.