Privacy Policy

    Last updated: 6 October 2026

    1. Who we are

    Hey Jotty ("Hey Jotty", "we", "us", "our") is an AI life planner for individuals and families, available at heyjotty.com. Hey Jotty is registered in England and Wales under Company Number 16852011 and is the data controller for the personal data described in this policy.

    This policy explains what personal data we collect, how we use it, who we share it with, and your rights under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where it applies, the EU GDPR. Contact us at privacy@heyjotty.com.

    2. Information we collect

    2.1 Account information

    • Name, email address and password (stored only as a secure hash), or your Google account details if you sign in with Google
    • Profile picture (if provided by Google sign-in)
    • Country, timezone, language and app preferences

    2.2 Content you add

    • To-dos, lists, notes, calendar events, reminders and life-admin items
    • Contacts and notes about people in your life, and the circles and tags you organise them with
    • Documents, receipts and images you upload, and the details we extract from them
    • Messages you send to the Jotty assistant, and its replies
    • Scheduled jobs and summary emails you set up

    2.3 Voice

    When you use voice input or live voice, your audio is sent to our AI providers to be transcribed or answered in real time. We save the resulting text, not the audio. Audio is not kept after processing.

    2.4 Family information

    If you create or join a family, we store family membership, the relationship labels you choose (for example "Mum" or "Carer") and the names of any children you add. Children do not have accounts; their names are added by an adult family member.

    2.5 Payments

    Payments are handled by Stripe. We store your subscription status and Stripe customer reference. We never receive or store your full card details.

    2.6 Device and usage data

    • Log data such as IP address, browser type and pages visited
    • Push notification subscriptions, if you turn on phone notifications
    • Feature usage counts (to apply plan limits), performance and error reports

    3. Google user data

    Hey Jotty lets you optionally connect your Google account. Connecting is always your choice, and you can disconnect at any time. This section explains exactly what we access and why.

    3.1 Google Sign-In

    If you sign in with Google, we receive your name, email address and profile picture. We use these only to create and identify your account.

    3.2 Gmail (read-only)

    If you connect Gmail, Hey Jotty reads recent messages (read-only) to spot things you may need to act on, such as bills, appointments and school notices, and shows them to you as suggested to-dos or events. Nothing is added to your account unless you approve it. We never send, delete, label or change emails. We do not store the full content of your emails; we keep only a short summary of each suggestion, the sender, subject, date and a reference to the message so we don't suggest it twice.

    3.3 Google Calendar (read-only)

    If you connect Google Calendar, we read your events (read-only) so they appear alongside your Hey Jotty calendar. You choose whether family members see event details or only "Busy". We never create, change or delete events in your Google Calendar.

    3.4 Limited Use disclosure

    Hey Jotty's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

    • We use Google user data only to provide and improve the features you can see in Hey Jotty
    • We do not sell Google user data or use it for advertising
    • We do not use Google user data to develop, improve or train generalised AI or machine-learning models
    • We transfer Google user data to third parties only as needed to provide the service (for example, our AI provider to read an email and suggest a to-do), to comply with law, or as part of a merger or acquisition with your notice
    • Our staff do not read your Google user data unless you give us permission (for example for support), it is needed for security, or the law requires it

    3.5 Disconnecting and deleting Google data

    You can disconnect Gmail or Google Calendar at any time from your Profile page in Hey Jotty, or from your Google Account permissions page. When you disconnect, we stop accessing your Google data and delete synced calendar events. You can ask us to delete any remaining Google-derived data by emailing privacy@heyjotty.com.

    4. How we use your information

    • To provide Hey Jotty: storing your plans, answering your questions, sending reminders and summary emails
    • To process your content with AI so the assistant can understand voice, documents and requests
    • To share items with your family when you choose to
    • To take payments and manage subscriptions
    • To send service messages, such as security notices and account changes
    • To keep the service secure, prevent abuse and fix problems
    • To meet our legal obligations

    Daily, weekly and monthly summary emails are switched on by default for new accounts because they are part of the service. You can pause them at any time from Scheduled Jobs or via the link in each email.

    5. Legal bases for processing

    • Contract: to provide the service you signed up for
    • Legitimate interests: security, preventing abuse and improving the service, balanced against your rights
    • Consent: connecting Google services, phone notifications and optional cookies; you can withdraw consent at any time
    • Legal obligation: tax, accounting and responding to lawful requests

    6. AI processing

    Hey Jotty uses third-party AI models to understand and respond to your requests. The relevant content (for example a message, voice clip, document or email) is sent to the AI provider only to produce a result for you. Our AI providers process this data on our behalf and do not use it to train their models. AI output can be wrong, so please check important details.

    7. Family sharing

    Your items are private by default. When you share a to-do, list, event or document with your family, every member of that family can see and edit it. Only the person who created an item can delete it or stop sharing it. If you leave a family, items you shared stop being visible to the other members.

    8. Who we share data with

    We do not sell your personal data. We use these service providers (processors):

    • Cloud hosting and database providers, to store and run the service
    • AI model providers, to process voice, text, documents and emails you ask Jotty to handle
    • Stripe, for payments
    • Resend, to send emails
    • Google, when you choose to connect Google services
    • Web push services operated by your browser or phone maker, to deliver notifications

    Each provider is bound by a contract to protect your data and use it only on our instructions. We may also disclose data if required by law, or to a buyer as part of a business sale, with notice to you.

    9. International transfers

    Some providers process data outside the UK and EEA, including in the United States. Where this happens we rely on adequacy regulations (such as the UK–US Data Bridge) or the UK International Data Transfer Addendum / EU Standard Contractual Clauses.

    10. How long we keep data

    • Account and content: while your account is active; deleted within 30 days of you deleting your account, except where we must keep it by law
    • Voice audio: not kept after processing
    • Gmail suggestions: kept until you dismiss, approve or delete them, or disconnect Gmail
    • Synced Google Calendar events: refreshed regularly and deleted when you disconnect
    • Billing records: 6 years, for tax law
    • Logs: up to 12 months

    11. Security

    We encrypt data in transit and at rest, restrict access with row-level permissions so each person can only reach their own and their family's shared data, and limit staff access. No system is perfectly secure, but we work hard to protect your information and will notify you and the ICO of any serious breach as required by law.

    12. Your rights

    You have the right to:

    • Access your personal data
    • Correct inaccurate data
    • Delete your data
    • Restrict or object to processing
    • Receive your data in a portable format
    • Withdraw consent at any time

    Email privacy@heyjotty.com to use any of these rights. We will reply within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).

    13. Children

    Hey Jotty accounts are for adults aged 18 and over. Children may be listed in a family by a parent or carer, but they do not have their own accounts and we do not knowingly collect data directly from children. If you add information about other people, including children, you are responsible for having a fair reason to do so.

    14. Cookies and local storage

    We use essential cookies and browser storage to keep you signed in and remember your settings. We also use privacy-friendly analytics to understand how the site is used. You can control cookies in your browser settings.

    15. Changes to this policy

    We will post any changes here and update the date above. If changes are significant, we will tell you by email or in the app.

    16. Contact

    Hey Jotty

    Company Number: 16852011 (England and Wales)

    Email: privacy@heyjotty.com

    See also our Terms of Service.