Privacy
Last updated November 1, 2026
Jenda is a personal project in a pilot, built and run by one person, Jon Black. There’s no company behind it yet. This page says plainly what Jenda keeps about you, who can see it, and how to get it back out. When the business side is set up, this page will be revised and the date above will change.
The short version: a trip is visible to the people on it, and nobody else. There are no ads, nothing about you is sold, and your money never passes through Jenda.
What Jenda keeps
Your account. Your email address and the name you go by. If you sign in with Google, Google passes along your name and email and nothing else. If you sign in with an emailed code, the code expires in a few minutes. There are no passwords.
Your look. The pebble you pick, or a photo if you add one.
Your trips. Everything you and the group add: dates and places, the plan, who’s going, seats, beds and spots you claim, what you’re bringing, your packing list, check-ins on travel day, and thanks you send.
Money on a trip. Expenses: who paid, how much, in what currency and who it was for, and which payments have been marked paid. If you add Venmo or Zelle details so friends can pay you back, those are kept too. Jenda never holds money and never sees a bank or card number.
Locked info. Codes, confirmation numbers and similar details a host adds for the group.
What you drop in. Emails forwarded to a trip’s address, with their attachments, and screenshots, notes and receipt photos you add. These are kept with the trip so the group can check what was read from them.
Notifications. If you turn them on, the address your browser gives Jenda for sending them.
Preferences on your device. Your browser remembers small things, like which updates you’ve seen and the pages you’ve opened so they work without signal. Those stay on your device.
Who can see what
- The people on a trip see its plan, who’s going, the claims, the expenses and the locked info. They see your name and your look. They never see your email address.
- Anyone with a trip’s link who hasn’t joined sees only its name, its cover and who’s hosting.
- Hosts can change the trip, remove people and turn the link off.
Who else handles your data
Jenda runs on a handful of services. Each one sees only what it needs to do its job:
- Convex stores the app’s data and files, so it holds everything listed above.
- Render serves the website, so it sees requests to the site, including your IP address.
- Cloudflare sits in front of the site and checks that a sign-in request comes from a person, not a bot, so it sees your IP address and browser.
- Resend sends sign-in codes and other email, and receives mail forwarded to a trip, so it sees your email address and those messages.
- Google handles sign-in if you choose it, so it knows you signed in to Jenda.
- Anthropic provides the AI model that reads what you drop into a trip. More on that below.
- PostHog provides usage analytics and error reports: pages visited, actions taken, errors, and your device and browser.
These are based in the United States, and that’s where your data lives.
About the AI. When something is dropped into a trip, Anthropic’s Claude reads it and suggests what goes where: the when, the where and who paid. To do that, the forwarded email, screenshot, note or photo is sent to Anthropic. Anthropic doesn’t use what’s sent this way to train its models. Nothing is filed until someone on the trip checks it.
Paying people back. Pay with Venmo opens Venmo with the amount filled in. What happens there is between you and Venmo, under Venmo’s own privacy policy. The same goes for Zelle.
How your data is protected
- Everything travels over an encrypted connection, and the database is encrypted at rest.
- There are no passwords to steal. You sign in through Google or with a one-time emailed code.
- Every request is checked on the server against the signed-in person and their place on the trip.
- Access to the live data is limited to Jon, and is used only to run and support the service.
- If a security incident ever affects your data, you’ll be told promptly: what happened, what was involved, and what’s being done about it.
If you find a security problem, please report it to [email protected].
Cookies and analytics
Jenda uses one cookie to keep you signed in. PostHog stores an identifier in your browser so visits can be counted and errors traced. There are no advertising cookies and no ad trackers.
Getting your data out, or gone
You can change or remove what you added to a trip at any time, and leave a trip. To get a copy of your data or to delete your account, email [email protected]. Requests are handled personally and promptly.
When you leave a trip or delete your account, expenses you were part of stay on the trip, because what everyone else owes has to add up. They show your name without linking to your account.
Children
Jenda isn’t meant for anyone under 13, and accounts aren’t knowingly given to them. If you think a child has signed up, email [email protected].
Changes
If this page changes in a way that matters, you’ll hear about it by email or in the app before it takes effect. The date at the top always shows the latest revision.