Privacy Policy

Updated 5 October 2026 (why Joe checks which supported apps are on your phone)

JoeHukum is a personal CRM and executive assistant, operated by Aryabhatta Labs ("we", "us"). This policy explains what we access, what we store, and the choices you have. We built JoeHukum on one principle: trust is the product. Contact us any time at ask@aryabhattalabs.com.

We handle personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and the CSA Model Code principles.

Information we access

Google Calendar (read-only) — event titles, times and attendees, to log meetings and prepare you for them.
Basic profile — your name and email address (from Google or Apple sign-in), to create your account.
Mail you forward to us. Forward to joe@joehukum.app from the mailbox you signed in with; from any other mailbox, use the private address the app shows you (joe+<token>@joehukum.app), which works from anywhere. Joe processes the forwarded message and supported attachments to save useful details, such as people, promises, amounts and dates, with source references. Original email bodies and attachments are not stored in Joe's application database. Forwarded copies pass through our receiving mailbox; see Retention below. Mail we cannot associate with your account is not sent to the AI parser.
Connected Google email (internal testing only, read-only) — not offered to users. It is off by default for every account and is switched on only for internal test accounts, which must still consent to connect. For those accounts, JoeHukum starts with recent inbox and sent mail. This also works with Google Workspace email. For automatic reading, Joe checks headers, labels and snippets, filters out noise, then reads relevant conversations to find bills, renewals, commitments, dates and useful context about people. A conversation may be read again when a new message arrives. In Mail Joe reads, you can turn inbox or sent-mail reading off, select senders and labels, or exclude addresses and domains. Saved details can include short summaries, source excerpts, sender, subject, dates and message or thread identifiers for opening the original. We do not store a copy of your mailbox or raw message bodies. You can stop reading and delete the saved email data from that account.
WhatsApp (optional) — if you text Joe on WhatsApp (+1 289 430 0386) or link your number from the app, we hold your phone number to recognise you, and the messages, photos, PDFs and voice notes you send Joe there, which are read the same way as anything you tell Joe in the app. A voice note is transcribed and the audio is then discarded. Messages travel through Meta's WhatsApp Cloud API under Meta's terms; we store the extract and the chat turn, never a copy of media.

We request the minimum scopes needed and never request write access — JoeHukum cannot send, delete or modify anything in your Google account. Automatic email reading follows your choices for inbox, sent mail, senders and labels on each connected account. You can also forward individual emails to Joe.

JoeHukum's use and transfer of information received from Google APIs adhere to the Google API Services User Data Policy, including the Limited Use requirements.

What we store

Relationship and obligation extracts — contacts, one-line interaction summaries, commitments, bills, important dates and source references derived from email you forward, your calendar, information you share and, for internal test accounts only, connected email.
Your Google access and refresh tokens, encrypted at rest.
Your WhatsApp phone number, if you linked one, and the WhatsApp chat with Joe.
Your app content — chat history, transcripts, notes, facts and reminders you create. This can include home or work addresses and preferences you choose to tell Joe.
Supported apps detected on your phone, regional context, app preferences and handoff outcomes, linked to your Joe account. Joe uses them to suggest, and put first, the app where you can finish an action — the ride app for "a cab to the airport", your bank's app for a bill. Joe checks its supported catalogue, not a complete inventory of your phone, and does not read the contents of those apps. On Android, the OS can also report whether a supported app accepts a link or text share. The app refreshes this list about once a day while you are signed in; in You → Your apps you can switch off any app Joe may suggest.
Invite-code claims, activation and usage records used to operate the limited beta and apply account limits.
Statement passwords you choose to store in Joe, encrypted at rest. Passwords kept only on your device are sent temporarily when you ask Joe to unlock a statement; they are not saved on Joe's server.

AI processing

To do its job, JoeHukum sends relevant content to established AI providers — Google (Gemini) and OpenAI — for processing. This includes: your conversations with Joe, emails you forward, selected content from connected email (including headers, snippets and relevant message text), photos you attach (for example, to read a bill's amount and due date), and — when Joe needs them to answer you — details of the people you have added (names, organisations, saved dates, facts, tasks and one-line interaction summaries) and which of Joe's supported apps are on your phone, so Joe can name the app it will open. When you ask Joe to search the web, your search query is sent to Google Search (through Gemini) or Brave Search. Under these providers' API terms, your content is used only to return a result to us: it is not used to train their models, and it is never used for advertising. You agree to this in the app before first use, and your agreement is recorded. Hosting is provided by Google Cloud.

Data obtained through Google Workspace APIs (including Gmail and Google Calendar data, and information derived from them) is not used to develop, improve, or train generalized or non-personalized artificial-intelligence or machine-learning models. It is used only to provide and improve the JoeHukum features you have asked for, and is never transferred to or used by any third party to train such models.

How we make money

Our focus is building the best personal assistant, not monetising your data. Whatever the business model becomes, one rule is fixed: we do not sell your data, show ads, or monetise your attention.

What we never do

We never sell or rent your data.
We never show ads or use your data for advertising.
We never send messages, make changes, or transact on your behalf — JoeHukum only prepares drafts and offers supported apps or websites where you review and confirm. Joe does not ask for the login passwords or payment-card details for those destinations. Optional Google connection tokens and statement passwords are described above.
Original email bodies and media are not stored in Joe's application database. Saved extracts and chat history remain; forwarded copies in our receiving mailbox have the separate retention described below.
We never share your data with third parties except the sub-processors needed to run the service (hosting, AI processing, and Meta's WhatsApp Cloud API when you use WhatsApp), under confidentiality.

Your rights and choices

Export — you can export your full graph as JSON at any time from the app.
Narrow or stop — manage inbox, sent-mail, sender, label and exclusion choices under your avatar → Email → Mail Joe reads. The stop-reading control deletes saved email data from that account and shows you the count. Unlinking your WhatsApp number stops Joe reaching you there.
Delete — you can disconnect Google, which revokes our access, and permanently delete your account and data from your avatar → Account → Delete account. If you cannot access the app, email us from your account address or use the account deletion page.

Product analytics

The app uses Firebase Analytics for screen and feature usage, and the website uses Google Analytics for page views. These services use app-instance or browser identifiers and device information. Joe's analytics events do not include your chat messages, names, bill amounts or account ID. This does not make every measurement anonymous: provider identifiers can distinguish an app installation or browser. These measurements are separate from the account-linked app preferences and handoff outcomes described above. We do not use this information for advertising or sell it to data brokers.

Cookies

JoeHukum is entirely app-based — there is no sign-in, form, or transaction on this website. The only cookies it sets are Google Analytics cookies, used to measure page views using browser identifiers so we know whether anyone is finding us. We set no advertising cookies, run no ad networks, and share nothing with data brokers. Separately, a single session cookie is used by our own staff on the signed-in admin area.

You can block or clear these at any time in your browser; nothing on this site depends on them.

Data protection & security

We protect your information — including sensitive data obtained from Google APIs — with layered technical and organizational safeguards:

Encryption in transit — all traffic between your device, our servers and our sub-processors travels over TLS (HTTPS), version 1.2 or higher. We do not transmit your data over unencrypted connections.
Encryption at rest — your Google access and refresh tokens and the data we store are encrypted at rest on Google Cloud infrastructure.
Access controls — access to production systems and user data follows the principle of least privilege and is restricted to the authorized personnel who need it to operate the service. No person reads your data except as strictly necessary to respond to a support request you have made, or where required by law.
Sub-processors — we share data only with the sub-processors needed to run the service, under confidentiality and data-protection terms: Google Cloud (hosting), the AI providers named above (Google, OpenAI), whose API terms prohibit using your content to train their models, and, for web searches you ask for, Brave Search (search queries only).
Breach handling — if a security incident affects your personal information, we will notify affected users and the relevant authorities without undue delay, in line with PIPEDA's breach-reporting obligations.

Retention

Forwarded email copies. After successful processing, Joe moves the forwarded copy to Trash in our receiving mailbox. Gmail normally removes messages from Trash after 30 days (Google's deletion guidance); this is not immediate permanent deletion. Messages that fail processing are archived in that mailbox and currently have no automatic expiry. A failed move to Trash can also leave a copy there. This receiving-mailbox retention is separate from the useful details saved in Joe.

We keep your data while your account is active. When you delete your account (or disconnect Google), we revoke your Google tokens and delete your stored extracts and personal data immediately from the live database; backups are purged within 30 days. Extracts read from a connected Gmail account are deleted the moment you stop reading mail there or disconnect it. We do not retain Google user data longer than needed to provide the service you requested.

Changes & contact

We'll post any changes here and update the date above. Questions? Email ask@aryabhattalabs.com. This policy is governed by the laws of Canada.