jovli Privacy Policy

This policy explains what information jovli collects, how we use it, and the choices you have. "jovli," "we" and "us" mean LaboraDX LLC, which runs the jovli app at jovli.app.

jovli is in beta. For now, you invest with practice money, so nothing you do in jovli uses real money. We do not ask for bank account, card or Social Security numbers.

By using jovli, you agree to this policy and to our Terms of Service.

We collect only what jovli needs to work.

We do not collect your real financial accounts, government ID numbers or payment details.

We use your information to run and improve jovli:

• Create and secure your account, and let you sign in
• Show you companies and apply your filters and preferences
• Run your practice account and show your portfolio
• Power the Friends feature, based on your sharing setting
• Send account emails, such as sign-in links and important updates
• Fix bugs, prevent abuse and understand how jovli is used
• Read your feedback and improve the app

We do not sell your personal information. We do not use it to give you personal investment advice, and nothing in jovli is a recommendation to buy or sell.

We record some actions you take in jovli, such as swiping, matching, saving, practice trades and Friends actions. Each record has an anonymous user number, the type of action, the company where one applies, and the time. When a Discover search finds no company in jovli, we also record what you typed, in short lowercase name-like text, so we can see which companies people want. Please do not type personal information into search.

We use this to keep jovli working and improve it, and we do not sell it. Page views are counted by Vercel Analytics, and errors are reported to Sentry without your name, email address or IP address.

Your username is visible to friends, and to people who search for it exactly or have your invite link.

If you turn on sharing at the top of the Friends page, the companies you own can appear in your friends' combined "Owned by friends" list. That list:

• Shows company names only, never amounts, percentages, gains, losses or any other indicator
• Shows each company once, A to Z, and is not tied to any person, so nobody can see which friend owns what
• Is shown only to people who share too
• Never includes your matches or saved companies

Sharing is off until you turn it on, and it is all or nothing. When you turn it off, your companies leave your friends' list right away.

• Requests. A request must be accepted. If someone declines, we do not tell the sender, and it looks sent to them until it expires. A request that nobody answers expires after 30 days.
• Removing a friend. Removing someone does not notify them.
• Invite link. Anyone with your invite link can send you a request. You can replace the link to stop the old one working.
• How holdings are worked out. The list is calculated from your filled practice trades each time it is viewed, and nothing about it is stored separately. A trade placed while the market is closed may show up a little late.
• Changes can be noticed. Because the list changes when what friends own changes, a friend may be able to notice that a company appeared or went away. No dates or amounts are ever shown.
• Counts only. When we measure how Friends is used, we record counts, never which companies or which people.

• Reporting. You can report a friend, or someone who sent you a request, from the Friends page. A report stores who reported, who was reported, the reason, your optional note and the date. Only jovli's team reads reports, and the person you report is not told who reported them.
• Review. We review every report within 5 days. We may reset a username, suspend an account, or take no action.
• Blocking. Blocking is private. The person you block is not told. Your blocks are removed if you delete your account.

jovli is in beta, so startup cards you make stay private. Only you can see your cards and their photos. Nothing you submit is sent to jovli's team or shown to other users.

• Your photos are stored privately and shown only to you, through links that expire after an hour
• You can edit or delete a card at any time, and deleting a card deletes its photos
• Deleting your account deletes all your cards and photos

Before cards can be shown to other users, we will update this policy and tell you.

We share information only with companies that help us run jovli, and only what they need for their job.

We may also share information if the law requires it, to protect the safety of jovli or its users, or as part of a merger or sale of the company. If that happens, this policy will continue to apply to your information.

jovli uses a small number of cookies that are needed for the app to work:

• Sign-in cookies keep you logged in.
• A risk filter cookie remembers the risk levels you picked, such as Low or Medium, for your current browser session.
• Tab cookies remember which tab you last opened on Matches, and whether you last looked at Companies or Startups, for your current browser session.

We do not use advertising cookies.

We keep your information while your account is open.

You can delete your account at any time with Delete account on the Profile page. Deleting cannot be undone. When you confirm:

• Removed right away: your sign-in and email address, your profile (username, invite link and sharing setting), your matches, saved companies and passes, your practice orders and holdings, your friend connections and requests, your usage events, your feedback notes, your startup cards and their photos, your Founder Agreement record, and any waitlist signup with the same email address
• Closed: your practice account with Alpaca. We cancel open orders, sell any holdings, and return the practice cash, then the account is closed. This usually takes minutes, or until the next market open if shares must be sold.
• Your friends: you disappear from your friends' lists, and your username becomes available to others.

Some things are kept, and why:

• Alpaca's records. Alpaca keeps the records of a closed practice account. They hold only a placeholder identity and an alias email made from an internal number, and nothing that identifies you.
• Our closing record. We keep the practice account's number, the steps we took and when it closed, to show it was closed. It contains nothing about you.
• Backups. Copies of deleted data stay in our database backups until those backups expire.
• Sign-in and server logs. Our login provider's sign-in records can include your email address and IP address, and our hosting logs may hold your account number for a short time. Deleting your account does not clear these before they expire.
• Reports. A report about you, or one you made, is kept so we can handle abuse, even after an account is deleted. It then holds the usernames as text and links to no account.
• Page views. Our analytics page views are anonymous and not linked to you.

• See or correct your information: most of it is on your Profile page. Email us for anything else.
• Turn off sharing: use the switch on the Friends page.
• Delete your account: use Delete account on the Profile page. See "Keeping and deleting your information" for what is removed and what is kept.
• Ask for a copy of your data: email us and we will send it.

Depending on where you live, you may have more rights under laws such as the California Consumer Privacy Act. Email us to use them, and we will not treat you differently for doing so.

You must be 18 or older to use jovli. When you sign up, we ask you to confirm it, and we record that you did and when. We do not knowingly collect information from anyone under 18. If we learn we have, we will delete it.

We use encryption, secure sign-in and access controls to protect your information. No system is perfectly secure, so please use a strong password and keep it private.

If we change this policy, we will update the date at the top. For important changes, we will tell you in the app or by email before they take effect.

Questions or requests: support@jovli.app

LaboraDX LLC