Privacy Policy

Who we are

Keystone Intelligence Technologies Inc. is the data controller for the personal data described here, and Smart Jelly is its product. Write to hello@smartjelly.ai about anything on this page.

What Jelly captures on your Mac

Jelly is a macOS application that observes your work so it can form a memory of it. With your explicit permission, granted through macOS System Settings, it may read:

• Text in the apps you choose and the websites you visit: messages, documents, threads and pages, read through the macOS Accessibility interface. Apps you have not switched on are not read. Websites are read unless you switch them off in Settings › Privacy, or turn off Read other websites too so only the websites you switch on are read. Jelly does not record your screen or take screenshots. Passwords, card numbers, one-time codes and keys are removed before anything is saved, Jelly stops reading a window while a key or password is showing on it, and banking, crypto and password apps and websites are never read.
• Meeting audio: your microphone and your computer's audio during a call, so it can write the notes.
• What you say to Jelly: when you hold the key and talk, or start a voice conversation.
• Your Google account, if you connect it: your Gmail, Calendar, Contacts and Drive. See Google appsbelow.

macOS will not let Jelly do any of this until you grant Accessibility, System Audio Recording, Microphone and Speech Recognition. You can withdraw any of them at any time, and you can pause observation entirely from Jelly's own menu.

Where that data lives

On your Mac. Everything Jelly captures (the text, the transcripts, the memory it builds from them) is stored in an encrypted SQLite database in your own user library. The encryption key is held in your macOS Keychain. We cannot read that database and we never receive a copy of it. Deleting the app's data folder deletes it for good.

What leaves your Mac, and why

Jelly cannot reason without a model, and the models do not run on your Mac. When Jelly needs to think, to pull a commitment out of a thread, to answer a question or to write up a meeting, it sends the relevant excerpt to our service, which passes it to the model provider using our credentials. You never need an account with a model provider.

• Text excerpts go to OpenAI for reasoning and for the embeddings that make search work.
• Audio goes to Deepgram for live conversation and for meeting transcription.
• Text Jelly is about to say aloud goes to Deepgram for speech.

Content passes through our service only to reach the model provider. It is never written to disk, never logged, and never stored in our database. Your content is never used to train any model: ours, OpenAI's or Deepgram's. Data sent to the OpenAI API is not used to train or improve OpenAI's models, and every request we send to Deepgram is opted out of its model improvement program, so Deepgram keeps it only for as long as it takes to process. OpenAI may keep API data for up to 30 days to detect abuse of its service, and then deletes it.

The relay, and how to see it

Our service sits between the app and the model provider for one reason: so you do not need an account with the provider. It reads each request, forwards it and drops it. There is no log of request bodies anywhere, by design.

You can watch this yourself. In the app, Settings › Privacy › Reasoning relay lists every request the app has sent, newest first: what it was for, where it went, how large it was, and the exact text it carried, kept on your Mac for seven days. Our side of the same request is a row of counts: the time, the route, the model, the size, whether it succeeded, and what it cost us.

Your own keys

Our relay is how the app runs for everyone, and the section above shows exactly what passes through it. If you would like to keep things entirely personal, you can use your own provider keys instead. With your own OpenAI key, every request the app makes for thinking, search and notes goes straight from your Mac to OpenAI, under your account and your agreement with them, and our service never sees it. With your own Deepgram key, the same is true of talking to Jelly and of meeting notes, and you can choose any of Deepgram's voices for Jelly. Keys are stored in your Mac's Keychain, used only from that Mac, and never sent to us. Removing a key hands the next request back to our relay.

Either way is a good way: the relay is the simple one, your own keys are the personal one. Because nothing then passes through our service, none of our plan limits apply to those requests. The one thing our service still learns is a yes or no: that your own key is in use, sent with the daily usage counts so we know how many people chose this. Never the key, and never what it was used for.

Getting keys: an OpenAI key is made at platform.openai.com under API keys; a Deepgram key at console.deepgram.com under API keys. Paste either into Settings › Connections › Your own keys, or during setup. The app checks a key with one request before saving it, and tells you if a provider later refuses it, rather than quietly switching back to our relay.

Google apps: Gmail, Calendar, Contacts and Drive

Connecting your Google account is optional. If you choose to, in Settings › Connections, Google asks you to allow each of the following, and Smart Jelly uses each one only for what is listed here.

• Gmail (read your mail; write emails you ask for): reads your recent mail, not promotions, social or spam, so it can show the replies you owe, notice when you have replied, and answer your questions with the email the answer came from. It writes an email only when you ask for one, shows it to you in full, and sends it or saves it as a draft only when you press Send or Save as draft. It never deletes, archives or relabels mail.
• Google Calendar (your list of calendars; read and create events): lists your meetings, prepares you before each one and answers questions about your schedule. It adds an event only when you ask for one and press Add to Calendar.
• Google Contacts (read only, including people you have emailed but not saved): names, email addresses, companies and job titles, so messages and meetings are matched to the right person.
• Google Drive (read your files; create files): reads the text of the Docs, Sheets and Slides you edited in the last six months, so you can ask about them. It creates a deck, document or sheet only when you ask for one and press Create, and it can change only files it created.

Where it goes. Data from your Google account comes straight from Google to your Mac, over an encrypted (HTTPS) connection that does not pass through our servers, and is kept in the same encrypted database as the rest of your memory. It is never stored on our servers. When you ask a question, the relevant lines may be sent to OpenAI through our relay, or with your own key, to answer it, exactly as described above, and they are not used to train any model. When Jelly makes a deck with pictures, a short description of each picture is sent to OpenAI to draw it, and the finished picture is held on our service only until Google has copied it into your deck, then deleted.

What we never do. We do not sell Google user data, use it for advertising, use it to train AI models, or transfer it to anyone except as described on this page. No person at Smart Jelly reads it.

No AI training. Smart Jelly does not use data obtained through Google Workspace APIs (Gmail, Google Calendar, Google Contacts and Google Drive) to develop, improve or train generalized or non-personalized AI or machine learning models, and does not transfer that data to anyone else to do so. The lines sent to OpenAI to answer your questions are not used by OpenAI to train or improve its models.

How it is protected. In transit, every connection, from Google to your Mac and from your Mac through our relay to OpenAI, is encrypted with TLS. At rest, Google data is stored only on your Mac, in a database encrypted with a key held in your macOS Keychain. Our relay forwards each request without writing its content to disk or to any log.

How long it is kept. Google data stays on your Mac until you disconnect and remove it, forget it, or delete the app’s data folder. None of it is kept on our servers; the one exception is a picture made for a deck, which is held only until Google has copied it into the deck and then deleted.

Removing it. Settings › Connections › Google apps › Disconnect stops Smart Jelly reading your Google account; choose Disconnect and remove it to delete what was read from your Mac as well. You can also remove Smart Jelly’s access at any time at myaccount.google.com/permissions.

Smart Jelly’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

What we store on our servers

Only what is needed to run an account and a plan:

• Your identity: the email address, first name and account identifier from your Google sign-in.
• Your email choices: when we sent you the welcome email, and whether you have opted out of product and company updates.
• Usage metadata: for each request: the time, which route and which model, how many tokens or seconds it used, whether it succeeded, and what it cost us. Enough to enforce your plan and to bill correctly.
• Your plan: which tier you are on and what is left of this month's allowance.

There is no column anywhere in our database for message content, prompts, completions, transcripts or captured text.

How the app is used

To learn what works and what gets in your way, the app sends us a short summary of each day, as counts. It is linked to your account and holds counts only. It contains:

• Your open loops, as numbers: how many were found, closed by Jelly, marked done by you, dismissed, snoozed or reopened; what kind of evidence closed them (a reply, a sent file, a meeting); and how many came from each app, such as WhatsApp, Slack or Mail, and each kind of source, such as a chat, an email or a call. The names of those apps are the only names in the summary.
• How much you used each part of Jelly: minutes observing, paused or switched off; voice conversations and their length; meetings, their length and the helper cards shown; which screens of the app you opened; and times Jelly looked away from a private app.
• Setup and health: whether onboarding is finished, which macOS permissions are granted, the app and macOS versions, and counts of errors.

It never contains what a loop, message, meeting or note said, who it was with, a window title, or anything else you wrote, read or heard. The app sends numbers and those fixed labels only, and our service refuses anything else. We also keep where you told us you heard about Jelly, if you answered that during setup, and which paid plan you showed interest in, if you pressed one of those buttons.

This website

smartjelly.ai counts its visitors with Vercel Web Analytics: which pages are viewed, the site that sent you here, and your country, browser and type of device. It sets no cookies and keeps nothing that identifies you. If you join the waitlist we store the email address you give us, your country, and a one-way hash of your IP address that we use only to spot automated sign-ups.

Emails we send

• A welcome: once, when you first sign in, from Nishant, the founder: how to get started and an offer to book an onboarding call. Replies go to him.
• Product updates and company news: occasionally. Every one has a link to stop them, which works without signing in, and your mail app’s own Unsubscribe button works too.
• Account notices: changes to these policies or our terms, and anything else we are required to tell you. These reach every account, including those that have opted out of updates.

We send them through Resend, using only your email address and first name. We never send marketing for anyone else, and we do not track whether you open an email.

Who we share it with

• OpenAI: reasoning, embeddings and transcription. Not used to train OpenAI's models.
• Deepgram: live voice, meeting transcription and speech, opted out of Deepgram's model training.
• Google: sign-in, where we receive your email address and a stable account identifier. If you connect your Google account, your Gmail, Calendar, Contacts and Drive are read straight to your Mac, never to our servers; see Google apps.
• Cloudflare: runs the service that forwards your requests.
• Supabase: hosts the database holding your account, usage metadata and the daily usage summaries.
• Resend: sends our emails. It receives your email address, your first name and the message.
• Vercel: hosts this website and counts its visitors, without cookies.

We do not sell personal data, and we do not share it for advertising.

How long we keep it

Your on-device memory stays until you delete it. Jelly has a Forget feature for removing a person, a project or a meeting, and deleting the app's data folder removes everything. Account and usage records are kept while your account is open and for up to 24 months afterwards, for accounting. Ask us to delete the account and we will.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete the personal data we hold, to object to processing, or to complain to a supervisory authority. Because almost everything Jelly knows about you is on your own machine, most of these you can exercise yourself, immediately, without asking us. For the account and usage records we hold, write to hello@smartjelly.ai and we will respond within 30 days.

Children

Jelly is not intended for anyone under 16, and we do not knowingly collect their data.

International transfers

We are a United States company and our providers process data in the United States and other countries. If you are in the EEA, the UK or Switzerland, transfers rely on Standard Contractual Clauses or an equivalent mechanism.

Changes

If we change this policy in a way that materially affects you, we will tell you by email and in the app before it takes effect, not by quietly editing this page.