Privacy Policy

Last updated: July 27, 2026

Jeanine is built on the idea that a personal assistant should actually be personal — which means handling your life with care. This page explains what we collect, how we use it, and what you can always do about it.

Who we are

Jeanine is operated by Straybot, an independent builder of personal AI tools. Contact: crew@straybot.com.

What we collect

From your Jeanine account

Your email address and authentication identity, used to create and secure your account.
Your setup choices, such as preferred name, timezone, and proactive-help preference.
Your password is handled by Supabase Auth. Jeanine does not receive or store it.

From connected channels such as Telegram

Your Telegram user ID and first name, used to attach that Telegram account to your existing Jeanine account.
Messages you send to the bot, stored so Jeanine can remember your context across conversations.
Images and voice notes you send, processed to respond to your request.

From you, in conversation

Health data you log (food, water, weight, exercise, sleep, mood).
Financial entries you log (expenses, income, scheduled cash flows).
Reminders, calendar events, shopping lists, and other personal items you ask Jeanine to track.
Preferences, goals, and background facts you share about yourself.

From Google, if you connect it

If you choose to connect Google Calendar, Jeanine accesses your calendar on your behalf using Google's OAuth system. This is entirely optional — Jeanine works without it.

How we use Google user data

Limited Use compliance. Jeanine's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

When you connect Google Calendar, Jeanine requests access to read and write your calendar events. This access is used solely to:

Read your upcoming events so Jeanine can mention them in briefs, avoid scheduling conflicts, and answer questions like "what's on my calendar today?"
Create, update, or delete events when you explicitly ask ("schedule dentist at 3pm Thursday").
Find open time slots when you ask Jeanine to help plan.

Google user data is never used to train machine learning models, sold to third parties, or used for advertising. Jeanine reads only what is needed to fulfill the request you made, and does not share your calendar contents with anyone else.

Where your data lives

Supabase provides account authentication and hosts Jeanine's PostgreSQL data store, encrypted at rest.
Fly.io hosts Jeanine's application services.
On-device in the Telegram clients you use to talk to Jeanine (your phone, desktop, etc.).

How your data is protected before it leaves

Automatic credential redaction. Before a message is sent to a language model provider, Jeanine attempts to redact sensitive credentials and financial identifiers — including credit and debit card numbers, bank account and routing numbers, social security numbers, passwords, API keys, and private cryptographic keys. Redacted values are not intentionally sent to model providers.

Other personal identifiers — such as email addresses, phone numbers, and physical addresses — are preserved so Jeanine can help you act on them (emailing someone, calling a number, adding an address to a reminder). Your name and conversational context are preserved as well, because removing them would break Jeanine's ability to actually know you.

Third-party services we use

To provide the service, Jeanine relies on a small set of third parties. Each is used only for the specific purpose listed:

Telegram — delivers messages between you and Jeanine.
Supabase — account authentication and Jeanine's PostgreSQL data store.
Fly.io — Jeanine application and embedding-service hosting.
Private inference providers — language and image-model processing. Jeanine prefers configured confidential-computing providers for personal message content; availability and fallback behavior may vary during beta.
Google (Calendar API) — when you connect Google Calendar, only for calendar actions you or Jeanine take on your behalf.
Package tracking providers — when you paste a tracking number.
Flight and hotel search providers — when you ask Jeanine to plan travel.
Nutrition data providers — when you log food.
Weather data providers — for forecasts and trip briefs.
Cloudflare — DNS, tunnel, and landing page hosting.

How long we keep it

Your data is kept as long as your account is active. If you ask Jeanine to delete a specific entry (a food log, a reminder, a calendar event), it is deleted immediately. If you stop using Jeanine and want everything removed, email crew@straybot.com and we will delete your full record within 30 days.

Your controls

Delete specific entries. Ask Jeanine directly — "delete that food log", "remove the 11am reminder" — and it happens.
Disconnect a channel. Ask to disconnect Telegram or another linked channel without making that channel your account identity.
Disconnect Google Calendar. Ask Jeanine to disconnect, or revoke access at myaccount.google.com/permissions. Jeanine loses calendar access immediately.
Ask about or delete your full account. Email crew@straybot.com. We respond within a week.

Security

Data is encrypted in transit (HTTPS, TLS) and at rest. OAuth tokens are stored encrypted. Access to the production database is limited to the operator.

Children

Jeanine is not intended for anyone under 13. We don't knowingly collect data from children.

Changes to this policy

If this policy changes materially, we'll update the date at the top and, where reasonable, notify active users through the bot.

Contact

Questions, requests, or concerns: crew@straybot.com.