Privacy Policy

This Privacy Policy explains how Jack ("we", "us", "our") collects, uses, and protects your personal data when you use jackki.com and related apps. We aim to collect only what we need to run the service.

1. Data we collect

• Account data — your email address, display name, and the identity provider you sign in with (e.g. Google: your email, name, and profile picture).
• Content — the messages, files, images, and prompts you send to Jack, and the AI output generated for you.
• Memory — facts and summaries Jack derives from your conversations to personalize future responses. You can view and clear this in Settings.
• Usage & billing — token and feature usage, plan, credits, and payment status (card details are handled by Stripe, never stored by us).
• Technical data — IP address, device/browser information, and logs needed for security, rate limiting, and debugging.

2. How we use your data

• to provide, personalize, and secure the service and your account;
• to process the AI requests you make and store your conversation history;
• to meter usage and process payments through our payment processor;
• to prevent abuse, fraud, and security incidents;
• to improve the service — only where you have not opted out (see "Your choices").

We do not sell your personal data.

3. AI and third-party processors

To generate responses, your prompts and relevant context are sent to third-party AI providers (which may include OpenAI, Anthropic, Google, Groq, Mistral, and others) acting as our processors. We also use:

• Supabase — authentication and database hosting (region: eu-west-3, Paris);
• Vercel — application hosting and delivery;
• Stripe — payment processing.

These providers process data under their own terms and only as needed to deliver their part of the service.

4. Legal bases (GDPR)

If you are in the European Economic Area or the UK, we process your data on the bases of: performance of a contract (to provide the service you signed up for), legitimate interests (to secure and improve the service), consent (for optional product-improvement use of your data, which you can withdraw), and legal obligation (e.g. tax and accounting records).

5. Data retention

We keep your account data and content for as long as your account is active. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain certain records (e.g. billing) to comply with the law.

6. Your choices and rights

• Access, correct, export, or delete your data — much of this is available directly in Settings; for the rest, contact us.
• Opt out of product-improvement use of your data via the "data for improvement" toggle in Settings.
• Clear memory at any time from Settings.
• Delete your account from Settings, which removes your profile and associated data.
• If you are in the EEA/UK, you may also object to processing and lodge a complaint with your local data-protection authority.

7. Security

We use industry-standard measures including encryption in transit, scoped access controls, and row-level isolation of user data. No system is perfectly secure, but we work to protect your data and to respond promptly to any incident.

8. Children

Jack is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

9. International transfers

Your data is primarily processed in the EU (eu-west-3). Some processors may process data outside your country; where required, such transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses.

10. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email or an in-app notice, and update the "Last updated" date above.

11. Contact

For privacy questions or to exercise your rights, email support@jackki.com. See also our Terms of Service.