Protocols for Law Enforcement
Effective date: November 13, 2026
These protocols explain how law enforcement agencies and other government authorities can request information about users of the apps Jaumo, Lovely, Bloom, Finally, Disco, Spicy and CSL (each an "App"). The Apps are operated by Joyride GmbH, Bartenbacher Str. 4, 73033 Göppingen, Deutschland ("we"). If you are a user with a question about your account, please contact help@jaumo.com instead.
1. How to Submit a Request
1.1. Please send requests in writing to legal@jaumo.com from an official government email address. We do not process requests sent from free email services.
1.2. Every request must include:
- the name of the requesting authority and the name, rank and contact details of the responsible officer;
- the legal basis of the request and a copy of the legal process (for example, a court order);
- the identifiers of the account concerned, such as the email address or phone number used for registration, or the profile ID or link;
- the specific data requested and the relevant time period;
- the deadline for a response, with reasons if the request is urgent.
1.3. A name alone is usually not enough to identify an account reliably. Requests that are unclear or too broad may be rejected or returned with questions.
2. Legal Requirements
2.1. We are a company based in Germany. We disclose user data only in response to valid legal process under German and European law, in particular the General Data Protection Regulation (GDPR) and the German Code of Criminal Procedure (StPO).
2.2. German authorities must submit a request based on the applicable legal provisions, and a court order where the law requires one.
2.3. Authorities in other EU member states may submit a European Investigation Order or, where applicable, a European Production or Preservation Order under Regulation (EU) 2023/1543.
2.4. Authorities outside the EU must use a mutual legal assistance treaty (MLAT) or another procedure recognized under German law. We do not respond directly to foreign legal process that is not binding in Germany, except in emergencies (section 4).
2.5. We review each request individually and may reject or narrow requests that are legally deficient or too broad.
3. Preservation Requests
On receipt of a request that meets the requirements in section 1, we will preserve the data concerned for 90 days while formal legal process is obtained. The preservation period can be extended once on request.
4. Emergency Requests
4.1. If there is an imminent threat to the life or physical safety of a person, including a child or a victim of human trafficking, we may disclose information without prior legal process, to the extent permitted by law.
4.2. Please send emergency requests to legal@jaumo.com with "EMERGENCY" in the subject line, describe the nature of the emergency, and explain why the information is needed to prevent the harm. We review emergency requests as a priority.
5. Available Data
5.1. Depending on the account, we may hold registration data (such as email address or phone number), profile information, technical data (such as IP addresses and login times), and content such as photos and messages.
5.2. We only store data for as long as described in our Privacy Policy. Data of deleted accounts or data older than the applicable retention period may no longer be available.
6. Notifying Users
We may inform users about requests concerning their account, unless this is prohibited by law or a court order, or notification would endanger a person's life or physical safety or obstruct an investigation into the exploitation of minors or human trafficking.
7. Proactive Reporting
7.1. We report identified child sexual abuse material to the National Center for Missing and Exploited Children (NCMEC) or the relevant authorities, as described in our Standards Against Child Sexual Abuse and Exploitation.
7.2. Where we become aware of human trafficking or an imminent threat to a person's life or physical safety, we inform the competent authorities.
8. Requests from Private Parties
We do not disclose user data to private individuals or companies. Civil litigants must obtain a court order that is enforceable in Germany.