Your space, respected

Privacy, plainly.

Jefa is a household assistant. This policy explains what the app reads and what you control.

Effective November 2, 2026

What you connect

Signing in with Google or Apple provides your account identifier, name and email address. Apple may give Jefa a private relay address instead of your real one. You can also create an account with an email address and a password; Jefa stores the address and a hashed password, never the password itself. Connecting a Gmail inbox gives Jefa read-only access (the gmail.readonly permission) to messages and related details, including senders, subjects and dates. Jefa reads the last day of mail when you connect, then new mail as it arrives, to find useful reminders. It skips promotions, social updates, forums and sent mail. It cannot send, modify or delete messages in your Gmail inbox.

Other email providers can forward mail to a private Jefa address that you create in settings. Forwarded mail is handled the same way as Gmail messages.

Only to remember what matters to you

Gmail data is used only to create, update and deliver reminders for the account owner. Jefa does not sell Gmail data, use it for advertising, or share it with advertisers, data brokers or others for their own purposes.

Jefa uses ITP Cortex and, if needed, Anthropic to process message content, extract reminders and answer your questions, including questions about your own finances when you ask them. Notification providers process the details needed to deliver your chosen push or WhatsApp reminders. These are service-processing uses, not permission to reuse your email for unrelated purposes. We do not use Gmail data to train general-purpose AI models.

Your inbox and message text are private to your account. Reminder details may appear in your household’s shared list according to your sharing settings. Health and work reminders start private. School, house and family bill reminders can start shared when you belong to a household. You can change a reminder’s visibility.

Google Limited Use

Jefa’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In practice: Jefa uses Gmail data only to provide and improve the user-facing reminder features you can see in the app. Gmail data is not used for advertising, including retargeting or personalized or interest-based ads, and is never sold. It is transferred to others only to provide those features (the AI processing described above), to comply with applicable law, or as part of a merger or acquisition with notice to you. No person at Jefa reads your Gmail data unless you give specific permission for particular messages, it is needed for security purposes such as investigating abuse, or it is required by law. Gmail data and information derived from it are not used to develop, improve or train generalized or non-personalized AI or machine-learning models.

Your money, with Plaid

The Wealth section is optional. If you choose to use it, you connect your own bank or investment accounts through Plaid, or type accounts in by hand. Your bank credentials are entered only into Plaid’s own screens; Jefa never sees your bank password. Jefa stores the connection reference and an encrypted access token, and receives from Plaid the account names and kinds, masked account numbers, and current and available balances, and, only where those are enabled for the connection, investment holdings and liabilities such as a mortgage or loan. Because of how the connection is set up, Plaid’s screen may ask your permission for transaction data; Jefa does not download or store a list of individual transactions. Money never moves through Jefa: it only reads. Jefa uses this to show you your net worth, trends and savings goals, and, when you ask, to let its assistant answer money questions with your own figures.

Financial data is private to your account. An account or goal appears in your household’s shared view only if you explicitly mark it shared. Plaid processes your data on our behalf to bring back account information; it is a service provider, not a reseller of your data to us or to advertisers. Balances, holdings, goals and plans are kept until you disconnect the connection or delete your account, whichever comes first, and manual entries until you delete them or your account.

Your home search

The Homes section is optional. Jefa stores the search areas you save (ZIP codes or an area you draw on the map), the homes you save with your private notes, and your buying plans, which include amounts you enter such as a price, down payment or reserves. Searches are kept and run on Jefa’s own server. Live property listings are not connected today; if we turn on a listing provider later, this policy will name it and say what it receives before that feature goes live.

What stays, and for how long

Retained message text is encrypted and kept for up to 30 days, then deleted. Associated sender and subject records expire with it. Extracted reminders and chat history remain until you delete your account. Google refresh tokens are encrypted and retained while the inbox is connected.

Disconnecting an inbox stops reading it and deletes its retained messages and local access token. Jefa revokes access at Google; if Google is temporarily unavailable, an encrypted token is held only in a revocation retry job. Disconnecting keeps reminders already created. You can dismiss them from your list; their records are deleted with your account. Disconnecting Jefa never deletes the original mail in Gmail.

Deleting your account deletes your account data, retained mail, reminders, chats, WhatsApp number, location, manual and connected financial data, saved homes, search areas and plans, and device registrations, and it revokes Jefa’s Gmail access and asks Plaid to drop the connection. Provider revocation may finish through the same retry process. You can also remove Jefa’s access in your Google Account permissions or in your Plaid account, and revoke Jefa at your Apple or Google account.

Other information you choose to use

Jefa stores your chat requests, household membership, reminder preferences and device notification token to provide the app. Sign-up and password-reset emails are sent through Twilio SendGrid, which also receives mail forwarded to your private Jefa address; both carry only the address and the message at hand. Push notifications are delivered through Google Firebase Cloud Messaging, and on iPhone through Apple. If you enable WhatsApp, Jefa stores your verified number and sends your reminders and verification codes through Meta’s WhatsApp Business service.

Location. Nearby and leave-by reminders are optional and need your permission. If you allow “Always”, your phone watches the places attached to your reminders, such as a pharmacy or a school, even when Jefa is closed, and tells the server when you arrive so it can send the reminder. The phone also sends your current position from time to time so Jefa can pick the closest places and estimate travel time. The server keeps only the latest coordinate and deletes it after 24 hours; it keeps no location history. To estimate travel time, your current position and the destination are sent to the OpenStreetMap routing service (OSRM). Addresses found in your reminders, never your own position, are looked up with OpenStreetMap Nominatim. Map screens in the app load map tiles directly from OpenStreetMap, which sees the device’s network address but not your identity. Location is never shared with your household or used for advertising. You can turn it off in Jefa’s settings or your phone’s settings at any time.

Health. Jefa does not connect to Apple Health, Health Connect, fitness trackers or medical records. Reminders it finds in your email or that you ask for can be about health, such as a doctor’s appointment or a prescription pickup. Those reminders start private, are never shared with your household unless you choose to, and are handled like the rest of your reminders.

Jefa does not read your contacts, photos, calendar or files, and has no advertising or analytics SDKs in the app.

These public pages use no advertising, analytics, tracking cookies or externally hosted fonts. The proxy keeps basic request logs with an IP address, request method and response status for operations.

Deleting your account

In the app, open the Account tab (the screen is titled Your space), tap Delete my account, and confirm. On the web app, open Settings, then Delete account. This deletes your account, retained mail, reminders, chats, WhatsApp number, location, manual and connected financial data, saved homes, search areas and plans, and device registrations right away, revokes Jefa’s Gmail access and asks Plaid to drop your bank connection. If you can’t open the app, email hello@jefa.app from the address you sign in with and ask us to delete your account; we do it within 30 days.

Children

Jefa is for adults 18 and over. It is not directed to children and we do not knowingly collect their information.