Privacy Policy

Effective date: October 14, 2026

This Privacy Policy explains how giro.dev ("we", "us") collects, uses and shares information when you use Janju, the website at janju.cc and the Janju desktop app for Windows (together, the "Service"). Janju is a voice room app with cameras, screen sharing, chat, a soundboard, and shared radio, YouTube and live-stream playback.

If you have questions about this policy, contact us at contato@giro.dev.

1. Information we collect

Account information

You need an account to join a room. When you sign up we receive:

• Email address and password if you sign up with email. Passwords are handled by our authentication provider (Supabase) and stored only as a hash. We never see them in plain text.
• Google account basics if you sign in with Google: your name, email address and profile picture URL.
• Profile: your display name and, if you upload one, your avatar image. Your display name and avatar are visible to anyone in a room with you.
• Plan: whether your account is on the free or premium plan.

Content you create or share

• Chat messages you send in a room are stored with the room code, your user ID, your display name at the time, and a timestamp, while the room's chat history is on (it is on by default; the room's owner or a manager can turn it off, and then new messages only reach the people in the room at that moment).
• Soundboard clips you upload are stored with their name, file type, size, duration and uploader. Other users can add clips you uploaded to their own library.
• Images and PDFs you upload. They are kept in your own storage with their name, size and a small thumbnail. When you open one on a voice channel's board, the people in that voice channel can see it while it is open. If you save one to a room, a copy is kept with the room's files.
• Shared media links you add to a room: YouTube videos, radio stations, and Twitch or Kick channels.
• Room metadata: the room code, its name, who created it and when, when someone last entered it, its invite link, and its settings.
• Friends: who you asked to be friends, who asked you, and your friends, with when each request was made and accepted.
• Private messages you send to a friend are stored with the sender, the recipient, the time and whether the recipient has read them. Only the two of you can read them. They are deleted with either account.
• Status and activity: the status you choose (online, away or invisible), when the app was last open, and, while you are online and not invisible, the room and voice channel you are in (only "a private channel" for a private one). Friends see your status and activity; the members of your rooms see whether you are online, unless you are invisible.
• Room membership: the rooms you have entered, your role in each (owner, moderator or member), when you last entered, and whether you pinned it. Moderators' actions are kept while the room exists: bans (with the display name at the time) and chat timeouts.

Voice, video and screen sharing

Your microphone audio, camera video and screen share travel directly between participants' devices over encrypted WebRTC connections (DTLS-SRTP). When a direct connection is not possible, the encrypted stream goes through our TURN relay server. The relay only forwards the encrypted packets and cannot decode them.

Some rooms use our media server (an SFU) instead, so that each participant sends their audio and video once rather than once per person. In those rooms your microphone audio, camera video and screen share go, encrypted, to our media server, which forwards them to the others in your voice channel. To forward them the server decrypts and re-encrypts the media, so in those rooms it is encrypted on its way to and from the server, not end to end between participants. The media server keeps nothing: it only forwards the media while you are in the voice channel.

We do not record or store audio, video or screen shares.

Noise suppression runs locally on your device.

Technical and usage information

• Connection data: your IP address and basic request details (such as browser and operating system) are processed by our hosting provider when you connect, and may show up in short-lived server logs.
• Error and performance monitoring (Sentry): when an error occurs we collect diagnostic data such as the error, the browser and device type, and the actions that led up to it. Sentry may also record a sample of sessions as a replay of page interactions. Web or desktop platform is tagged on each report.
• Product analytics (Microsoft Clarity): we use Clarity to understand how the Service is used, through anonymized usage data such as clicks, scrolling and session recordings.
• Web analytics (Cloudflare Web Analytics): aggregate page-view statistics collected without cookies.

Information stored on your device

The app saves preferences in your browser's local storage (or the desktop app's local storage): your last nickname, the last room code, and volume and audio settings. The desktop app also saves its own settings, such as your push-to-talk key. This data stays on your device.

2. How we use information

We use this information to:

• provide the Service: create your account, let you join rooms, relay chat and shared media, and serve your avatar and soundboard clips;
• keep the Service secure: authenticate users, enforce rate limits, and prevent abuse;
• find and fix bugs and improve performance and usability;
• manage your plan and its limits.

We do not sell your personal information, and we do not use it for targeted advertising.

3. How information is shared

• Your friends see your status, the room and voice channel you are in (as described above) and the private messages you send them.
• Other participants in a room see your display name, avatar, chat messages, and anything you share, speak or show on camera or screen.
• Anyone with a room's link or invite sees the room's name in link previews (for example in WhatsApp or Discord); previews never show who is in the room. The owner and moderators see the room's member list.
• Service providers that process data on our behalf:
  • Cloudflare: hosting, WebSocket signaling, file storage (R2) and web analytics.
  • Oracle Cloud: hosts our TURN relay and our media server, in Brazil.
  • Supabase: authentication and database.
  • Sentry: error and performance monitoring.
  • Microsoft Clarity: product analytics.
  • Google: sign-in, if you choose "Sign in with Google".
• Third-party content: when you play or search shared media, your device or our server contacts the source service: YouTube (search and embedded player), Twitch and Kick (embedded players and channel search), Radio Browser (radio stations), MyInstants (soundboard import), jsDelivr (the emoji picker's list of emojis), and the websites whose link previews or news feeds are shown. Embedded players load directly from those services and are governed by their own privacy policies.
• Legal reasons: we may disclose information if required by law or to protect the rights, safety and security of our users or the Service.

4. Data retention

• Account and profile: kept until you delete your account.
• Chat messages: kept for as long as the room exists. They are deleted when the room is deleted (by its owner, or automatically, see below), when its owner clears the history, when the room's managers remove the text channel (tab) they were sent in, or one by one by the room's owner or moderators. When you delete your account, your messages are unlinked from your account, but their text and the display name used at the time remain in the room's history until then.
• Rooms and memberships: a room, with its memberships, bans, invite link, files and chat history, is kept until its owner deletes it, until the owner deletes their account, or until nobody has entered it for 90 days, when it is deleted automatically.
• Your files (images and PDFs in your storage): kept until you delete them or delete your account. Copies you saved to a room are kept with the room's files.
• Soundboard clips: a clip is deleted when the last user who has it in their library removes it. If you delete your account, clips you uploaded are unlinked from you but stay available to other users who already added them to their library.
• Room state (each voice channel's board: current music, video queue, streams, open images and PDFs): wiped when the last person leaves that voice channel. Boards that members save are kept until they are removed or the room is deleted.
• Monitoring and analytics data: kept according to Sentry's and Microsoft Clarity's retention periods.

5. Your choices and rights

• Edit your profile: change your display name or remove your avatar in the app at any time.
• Delete your account: deleting your account from your profile in the app removes your login, profile, avatar, plan record, your stored files and soundboard library. Chat messages and uploaded clips are handled as described in section 4.
• Device permissions: the microphone, camera and screen share are only used when you allow them, and you can revoke these permissions in your browser or in Windows settings.
• Other requests: depending on where you live (for example under Brazil's LGPD or the EU/UK GDPR), you may have the right to access, correct, export or delete your personal data, or to object to its processing. To make a request, contact contato@giro.dev.

6. Security

Connections to our servers use HTTPS and secure WebSockets, and media between participants is encrypted end to end by WebRTC (in rooms that use our media server, it is encrypted on its way to and from that server, as described above). The server receives your login token inside the connection, never in the URL. No method of transmission or storage is completely secure, but we work to protect your information.

7. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

8. International transfers

Our service providers may process data in countries other than yours, including the United States. When they do, we rely on the safeguards those providers offer for international data transfers.

9. Changes to this policy

We may update this policy from time to time. When we do, we will change the effective date above, and we will notify you in the app if the changes are significant.

10. Contact

giro.dev: contato@giro.dev