Privacy notice

Version 2026-10-04

Changed: Gmail is no longer offered to new accounts; the notice now covers dashboard messages, the search fallback, backups and every bank account a connection shares, links Synci's portal notice, and the terms set out what the liability limit cannot cover. Sign-in emails are sent by Resend and support mail is held by Apple.

Jesse is an independent app: a personal assistant you talk to on Telegram and in a private dashboard. This notice says what Jesse collects about you, why, who else receives it, how long it is kept and what you can do about it. For anything on this page, such as a copy of your data, a correction or deletion, write to privacy@heyjesse.app.

What Jesse collects

You choose which features to turn on when you set up your account, and can change them in settings.

Your account: your email address, your name, your timezone, your phone number if you add it, your Telegram account ID once you link Telegram and, if you sign in with Google, the basic profile Google shares.
What you send Jesse: your messages, voice notes and photos on Telegram, what you type to Jesse in the dashboard, and Jesse’s replies.
What Jesse remembers: a notebook of facts about you and the people you mention, which you can read and edit.
Health, if you turn it on: meals, weight, sleep, steps and workouts that you log or that your phone sends.
Money, if you turn it on: your bank accounts, balances and transactions, read through a bank connection you authorise, and investment holdings from a broker key you provide.
Google, if you connect it: your calendar and tasks, including details about people who attend your events. Gmail is not offered to new accounts.
Technical data: sign-in cookies, notification subscriptions for your devices, and service logs and records of each request Jesse handles.

Why, and on what basis

To provide the service you asked for: answering you, keeping your notebook and reminders, building your dashboard and reading the connections you turned on. Basis: our agreement with you (the terms).
Health information is special category data. Basis: your explicit consent, given by switching a health feature on and withdrawn by switching all of them off. Without it, the health features are off. Withdrawing stops any further use and does not affect use before it; the health records already kept stay until you delete them or your account, or ask us to delete them.
To keep Jesse secure and working: logs, request records and backups to find faults and misuse and to recover from a failure. Basis: our legitimate interest in running a reliable service.

Jesse does not sell your data, does not show advertising and does not train AI models on it. Anthropic, Groq and Voyage AI do not train on what Jesse sends them. Jesse makes no decision about you with legal or similarly significant effect. Its replies are produced by AI and can be wrong: check anything important. Its voice replies are synthetic speech, marked as AI-generated in the audio file.

Who receives it

Only the services needed for the feature in use. These process it for us, on our instructions:

Supabase (database and sign-in, in the EU) and Railway (hosting and encrypted backups).
Resend, which sends your sign-in emails; it receives your email address.
Apple (iCloud Mail), which holds the support and privacy mailboxes when you write to us.
Anthropic, which writes Jesse’s replies and so reads whatever a reply needs: your messages and photos, your notebook, and the calendar, money and health records you turned on.
Groq, which transcribes your voice notes and speaks Jesse’s voice replies.
Voyage AI, which indexes your conversation with Jesse so Jesse can find things you said earlier.
Tavily, which runs web searches Jesse makes for you; it receives the search words.
Synci, which collects and stores your bank data for Jesse (see Bank connections below).

These receive part of it to do what you asked, under their own terms:

Telegram, which carries your chat with Jesse.
GoCardless, the regulated provider that connects to your bank (see Bank connections below).
Google, Trading 212 and Binance, only if you connect them, to read what you allowed.
DuckDuckGo, which receives the search words when Tavily is unavailable.
Open-Meteo, which receives the name of the place you ask the weather for.
The USDA and Open Food Facts food databases, which receive the names of foods you log and the number of any barcode you photograph.
Your browser’s push service, which delivers notifications to your devices.

Bank connections. Your financial data is obtained through Synci and GoCardless, and both receive it. Jesse receives every account you connect through Synci, including accounts you connect later; you cannot limit a connection to some of them inside Jesse. The access is read-only: Jesse cannot move money. See Synci’s portal privacy notice and GoCardless’s end-user terms and privacy policy.

Jesse’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Transfers outside the EU

Jesse’s database is in the EU (Ireland). Some of the services above are based outside the European Economic Area, mostly in the United States, and each transfer of your personal data to them is covered:

By the European Commission’s standard contractual clauses: Anthropic, Groq, Tavily, Supabase and Apple.
By the EU-US Data Privacy Framework: Railway, Voyage AI and Resend.
Synci stores your financial data in the EU; its own service providers outside the EEA are covered by standard contractual clauses or an adequacy decision.

The USDA and DuckDuckGo receive only food names or search words, with nothing that identifies you. You can ask us for a copy of these safeguards.

How long it is kept

Your conversation with Jesse: 5 years.
Detailed records of each request Jesse handles: 30 days.
Email triage records: 60 days. News editions: 14 days.
Your notebook’s edit history: 90 days.
Your notebook, health, money and other records: until you delete them or your account.
Encrypted backups of the database: up to 7 days. Our hosting providers’ logs, which can include details of requests, are also kept for up to 7 days.

Security

Each account is kept separate, by the database and by the code that reads it. The most personal fields, such as messages, your notebook and amounts, are encrypted in the database, and backups are encrypted as a whole. No system is perfectly secure; if a breach puts you at risk, you will be told.

Your rights

You can ask to access, correct, delete, restrict or move your data, and object to processing based on our legitimate interest. In the dashboard you can download everything Jesse holds for you and delete your account. Deleting takes effect at once: it removes every Jesse record about you and your sign-in, and ends Jesse’s access to your bank and Google accounts. Copies in Jesse’s backups are gone within 7 days, and Synci removes your bank data from its backups within 30. For anything else, write to privacy@heyjesse.app. You also have the right to complain to a data protection authority.

Age

Jesse is for adults. Do not use it if you are under 18.

Changes

When this notice changes, its version date changes and the main changes are listed under it, and a change that matters is told to you before it applies.