Privacy Policy

Last updated: June 14, 2026

Jelly BI ("the app", "we", "us") is an iOS app that lets you connect your own Supabase database and view it as a metrics dashboard. This policy explains what data the app handles and how. The guiding principle is simple: your data stays yours, and your credentials never leave your device.

1. Data you connect (your database)

Jelly BI works on a "bring your own Supabase" model. You provide your own Supabase project URL and a Supabase secret key. The app uses these to read metrics directly from your database.

• Your Supabase URL and secret key are stored only on your device, in the iOS Keychain. They are never transmitted to or stored on our servers.
• All access to your database is read-only (the app only issues GET requests).
• The contents of your database are fetched directly from Supabase to your device. We never receive, store, or process the contents of your database.
• Your metric definitions and app settings are stored locally on your device.

2. Real-time push notifications (optional)

If you enable real-time notifications for a metric, a small amount of data is needed so we can deliver a push notification when your data changes. This feature is opt-in, per metric.

• We store your device's push token (an Apple Push Notification service token) and a randomly generated per-project webhook secret on our backend.
• We never store your Supabase database credentials on our backend.
• When a new row is inserted into a table you track, your database calls our endpoint and sends us the newly inserted record so we can check it against your metric's filter. If it matches, we send you a push notification. This record is used only to evaluate the notification and is not retained for any other purpose.
• Push notifications are delivered through Apple's Push Notification service, subject to Apple's Privacy Policy.
• You can disable real-time notifications for any metric at any time, which unregisters it from our backend.

3. What we do not do

• We do not sell or rent your data to anyone.
• We do not use third-party advertising or analytics/tracking SDKs.
• We do not build user profiles or track you across apps or websites.
• The app does not send your data to any AI service.

4. Third-party services

The app communicates with: (a) your own Supabase project, which you control and which is governed by Supabase's terms and your own configuration; and (b) Apple Push Notification service, only if you enable real-time notifications. Our notification backend is hosted on Supabase infrastructure.

5. Data retention

Credentials and settings stored on your device are removed when you delete the app or remove a project within the app. Push tokens and webhook secrets stored on our backend are removed when you disable real-time notifications for the relevant metrics or delete the project.

6. Children

Jelly BI is not directed to children under 13, and we do not knowingly collect personal information from children.

7. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

8. Contact

Questions about this policy? Email us at hello@jellybi.app.