Legal · Last updated August 15, 2026
Privacy Policy
Jentoo AI, Inc.
In plain English
We collect what you type in (Input) and what we generate back (Output), plus basic account, device, and payment information. We use your Input and Output to run the Services, and by default also to train and improve our AI models — you can turn this off in your account settings. We send your Input to third-party AI providers (such as Anthropic, Google, xAI, OpenAI, and Together.ai) to generate Output. They process it under their own privacy and usage policies. We never sell your personal information, and the Services are ad-free. The Services are not directed to children under 13, and we don't knowingly collect personal information from them. You can access, correct, delete, or export your data, and you have additional rights depending on where you live.
This Privacy Policy explains how Jentoo AI, Inc. (“Jentoo AI,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you use our website, mobile application, and related software (collectively, the “Services”), whether or not you create an account. This Policy is incorporated into, and should be read alongside, our Terms of Service.
1Information We Collect
1.1 Information You Provide
Account Information: your email address, your password, and the year of birth you enter at sign-up to confirm you meet our age requirement. Your password is set and stored — in hashed form — by our identity vendor, Clerk; Jentoo AI never receives or stores it.
Input and Output: the questions, prompts, or other content you submit (“Input”) and the visualizations, text, or other content the Services generate in response (“Output”).
Referral Information: if you join through a referral link or share your own, we store the link between the referring and referred accounts so we can credit the reward and detect abuse.
Payment Information: if you subscribe to a paid tier, billing details are collected and processed by our third-party payment processor. We do not store full payment card numbers ourselves.
Communications: information you provide when you contact us for support, send feedback through the in-product form, or otherwise correspond with us.
Contributions: if you use any feature to save, share, or publish content, the content and any associated metadata.
1.2 Information Collected Automatically
Device and Usage Data: IP address, browser type, operating system, device identifiers, pages viewed, features used, and timestamps.
Rate-Limiting Identifiers: to enforce free-usage limits and detect abuse we store a one-way cryptographic hash of your IP address and of an anonymous browser identifier, rather than the address itself. These hashes let us count requests without retaining the underlying address.
Cookies and Similar Technologies: as described in Section 6 and itemised in our Cookie Policy.
Approximate Location: your COUNTRY only, resolved from the network connection at the moment of the request and recorded without the underlying address. We do not store your IP address alongside it, and we do not derive a city or a more precise location.
Usage Analytics: when this is switched on (it is on by default, and you can switch it off — see Section 3.3), we also record, for each question, a subject category inferred from the wording of the question by a fixed keyword list on our own servers, whether you were on a phone or a computer, and a session identifier grouping questions asked within thirty minutes of one another. We use these to understand which topics the Services handle badly and to improve them.
1.3 Guest / No-Account Use
If you use the Services without creating an account, we still collect limited technical information described in Section 1.2 (such as IP address and device data), along with the Input and Output from that session. We do not, however, collect Account Information from guest users.
1.5 Referral Invitations
If you use the invite-a-friend feature, we store the email address you enter so that we can send that one invitation and so that we do not send a second one to the same address. We store a one-way cryptographic hash of the address alongside it, which is what the unsubscribe link identifies and what our suppression list is keyed on — meaning the list of people who have opted out contains no readable addresses. Invitation emails are delivered by our email provider (see Section 5) and every one contains a one-click unsubscribe.
If you receive an invitation and unsubscribe, we keep only that hash, indefinitely, so that we can continue to honour your choice. We cannot read it back into your address.
1.4 Information from Other Sources
We may receive limited information from our identity vendor (such as confirmation that an email address was verified), from our payment processor (such as confirmation that a payment succeeded), and from analytics or security vendors described in Section 5.
2How We Use Information
We use the information we collect to:
Provide, operate, and maintain the Services, including generating Output in response to your Input;
Create and manage your account, and process payments for paid tiers;
Enforce free-usage limits and operate the referral program, including detecting abuse of either;
Improve, train, and develop our AI models and the Services generally, as described in Section 3;
Monitor, detect, and prevent fraud, abuse, and security incidents, and enforce our Terms of Service;
Communicate with you about the Services, including updates, security alerts, and support;
Comply with legal obligations and respond to lawful requests, as described in Section 8;
Analyze aggregated or de-identified usage trends to improve the Services.
We do not use your information to serve third-party advertising, and the Services are ad-free.
3AI Model Training and Your Choices
By default, we may use your Input, Output, and related interaction data to train and improve our AI models and the Services. This helps us make Jentoo AI more accurate and useful over time.
3.1 Opting Out of Training
You can turn off the use of your Input and Output for model training at any time in your account settings, under Privacy & data. Once you opt out, new Input and Output will not be used for training going forward. Opting out does not affect our ability to use your data to operate the Services, for safety and security purposes, or as otherwise described in this Policy, and it does not retroactively remove data already used to train a model that has already been trained.
3.3 Opting Out of Usage Analytics
Separately from the training opt-out above, you can switch off usage analytics at any time in your account settings, under Privacy & data. Switching it off stops the collection described in Section 1.2 under “Usage Analytics” — we do not record it and then hide it — and also deletes the session records and the subject, device, and session fields already held for your account.
Switching it off does not delete the questions themselves or the answers we produced for them. Those are the record of what you asked us to make, are needed to operate the Services and to account for your question allowance, and are covered by the deletion right in Section 11 instead.
3.2 Guest Use and Training
Input and Output from guest (no-account) sessions may also be used for training by default, since there is no account-level setting to adjust. If you want to opt out of training, we recommend creating a free account.
4Third-Party AI Providers
To generate Output, we transmit your Input (and relevant conversation context) to one or more third-party AI providers, which may include Anthropic (Claude, for generating visualizations), Google (Gemini, for narration), xAI (Grok, for narration and visual quality checks), OpenAI (text-to-speech), and Together.ai (for open-weight models), among others. We may change or add providers over time.
Each provider processes this data under its own privacy and usage policies, in addition to this Policy. Depending on the provider and the terms we have in place with them, they may or may not use your Input to train their own models. Where available, we configure our accounts with these providers to limit or disable their use of your data for their own model training.
5How We Share Information
We do not sell your personal information. We share information only in the following circumstances:
Third-Party AI Providers: as described in Section 4, to generate Output.
Service Providers: vendors that perform services on our behalf, including Clerk (authentication and credential storage), Neon (database hosting), Railway (application hosting), Resend (delivery of referral invitations, which receives the recipient address and the message), our payment processor, and error-monitoring vendors. These vendors are authorized to use your information only as necessary to provide their services to us.
Legal and Safety Reasons: to comply with applicable law, respond to valid legal process (such as a subpoena, court order, or search warrant), or when we believe in good faith that disclosure is necessary to prevent imminent harm to a person’s safety, as described in Section 8.
Business Transfers: in connection with a merger, acquisition, financing, or sale of assets, in which case information may be transferred as part of that transaction, subject to standard confidentiality protections.
With Your Consent: for any other purpose disclosed to you at the time of collection, with your consent.
6Cookies and Tracking Technologies
We use cookies and similar technologies to keep you logged in, count free questions, remember preferences, secure the Services, and — only where you have allowed them — understand how the Services are used through analytics tools.
You can control cookies through your browser settings and through the cookie preferences available in the app and in the site footer. Disabling certain cookies may limit functionality, such as staying logged in. Where required by law (for example, for users in the EU or UK), we will request your consent before setting non-essential cookies. Our Cookie Policy lists every cookie we set and what each one does.
7Data Retention
We retain personal information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Account information and associated Input/Output are generally retained until you delete your account or request deletion, after which we delete or de-identify the data within a reasonable period, except where retention is required by law or for legitimate business purposes such as fraud prevention.
Guest session data not tied to an account is retained for a limited period necessary for security, abuse prevention, and service improvement, and is deleted or de-identified thereafter. The hashed rate-limiting identifiers described in Section 1.2 are deleted on a rolling basis and are not retained beyond the period needed to enforce daily limits and investigate abuse.
8Law Enforcement and Legal Requests
We may access, preserve, and disclose your information if we have a good-faith belief that doing so is required by law, such as in response to a valid subpoena, court order, or search warrant, or if we believe disclosure is reasonably necessary to prevent imminent harm to a person’s safety, prevent fraud or abuse, protect our rights or property, or protect the safety of our users or the public.
Where legally permitted, we will make reasonable efforts to notify affected users of a legal request for their information before disclosure.
9Data Security
We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and access controls limiting who can view your data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
If you believe your account has been compromised, contact us immediately at the email address in Section 14.
10International Data Transfers
We are based in the United States, and information we collect is processed and stored in the United States and in other countries where our service providers and AI providers operate. If you are located outside the United States, including in the European Economic Area, the United Kingdom, or Switzerland, your information will be transferred to and processed in the United States and potentially other countries, which may have data protection laws that differ from those in your jurisdiction.
Where required, we rely on appropriate safeguards for these transfers, such as Standard Contractual Clauses or other legally recognized transfer mechanisms with our service providers.
11Your Privacy Rights
11.1 Rights Available to All Users
Regardless of where you live, you can generally:
Access the personal information we hold about you;
Correct inaccurate personal information;
Delete your account and associated personal information;
Export a copy of your Input and Output;
Opt out of AI model training, as described in Section 3.1;
Opt out of usage analytics, as described in Section 3.3.
Export, deletion, and both opt-outs are available directly in your account settings under Privacy & data. For anything else, contact us at the email address in Section 14. We may need to verify your identity before fulfilling a request.
11.2 California and Other U.S. State Privacy Rights
If you are a resident of California or another U.S. state with a comprehensive privacy law (such as Virginia, Colorado, Connecticut, or Utah), you may have additional rights, including the right to know what personal information we collect and how it is used and disclosed, the right to delete personal information, the right to correct inaccurate personal information, and the right to opt out of the “sale” or “sharing” of personal information and of certain targeted advertising.
We do not sell personal information and do not use it for cross-context behavioral advertising, so there is generally nothing to opt out of in that respect. You will not receive discriminatory treatment for exercising any privacy right.
11.3 EU, UK, and Swiss Privacy Rights (GDPR)
If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) or UK GDPR, including the right to access, rectify, erase, or restrict processing of your personal data, the right to data portability, and the right to object to processing, including processing based on legitimate interests.
Our legal bases for processing your personal data include: performance of a contract (to provide the Services you request), legitimate interests (to operate, secure, and improve the Services, including AI model training where you have not opted out, and to prevent abuse of free-usage limits), consent (for optional features such as non-essential cookies), and compliance with legal obligations. You also have the right to lodge a complaint with your local data protection authority.
12Children’s Privacy
The Services are intended for a general audience aged 13 and older and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take reasonable steps to delete that information and close the associated account, consistent with our Terms of Service.
If you believe a child under 13 has provided us with personal information, please contact us at the email address in Section 14 so we can investigate.
Users between 13 and the age of majority in their jurisdiction (generally 18) may use the Services only with the permission of a parent or legal guardian, as described in our Terms of Service.
13Changes to This Policy
We may update this Privacy Policy from time to time. We will update the “Last Updated” date above, and for material changes we will provide additional notice, such as an in-product notification or email, before the changes take effect. Continued use of the Services after changes take effect constitutes acceptance of the updated Policy.
14Contact Us
If you have questions about this Privacy Policy or wish to exercise a privacy right described above, contact us at support@jentoo.ai.
Jentoo AI, Inc. — Email: support@jentoo.ai