Privacy Policy

Effective 8 September 2026 (adds the optional Gmail and WhatsApp doors)

JoeHukum is a personal CRM and executive assistant, operated by Aryabhatta Labs ("we", "us"). This policy explains what we access, what we store, and the choices you have. We built JoeHukum on one principle: trust is the product. Contact us any time at ask@aryabhattalabs.com.

We handle personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and the CSA Model Code principles.

Information we access

Google Calendar (read-only) — event titles, times and attendees, to log meetings and prepare you for them.
Basic profile — your name and email address (from Google or Apple sign-in), to create your account.
Mail you forward to us. Forward to joe@joehukum.app from the mailbox you signed in with; from any other mailbox, use the private address the app shows you (joe+<token>@joehukum.app), which works from anywhere. Anything you forward is read once to extract the amount, due date and biller, after which the copy is deleted. Mail we cannot verify came from you is discarded unread.
Gmail (optional, read-only) — only if you connect it. With the read-only Gmail permission, JoeHukum starts with recent inbox and sent mail. This also works with Google Workspace email. For automatic reading, Joe checks headers, labels and snippets, filters out noise, then reads relevant conversations to find bills, renewals, commitments, dates and useful context about people. A conversation may be read again when a new message arrives. In Mail Joe reads, you can turn inbox or sent-mail reading off, select senders and labels, or exclude addresses and domains. Saved details can include short summaries, source excerpts, sender, subject, dates and message or thread identifiers for opening the original. We do not store a copy of your mailbox or raw message bodies. You can stop reading and delete the saved email data from that account.
WhatsApp (optional) — if you text Joe on WhatsApp (+1 289 430 0386) or link your number from the app, we hold your phone number to recognise you, and the messages, photos, PDFs and voice notes you send Joe there, which are read the same way as anything you tell Joe in the app. A voice note is transcribed and the audio is then discarded. Messages travel through Meta's WhatsApp Cloud API under Meta's terms; we store the extract and the chat turn, never a copy of media.

We request the minimum scopes needed and never request write access — JoeHukum cannot send, delete or modify anything in your Google account. Automatic email reading follows your choices for inbox, sent mail, senders and labels on each connected account. You can also forward individual emails to Joe.

JoeHukum's use and transfer of information received from Google APIs adhere to the Google API Services User Data Policy, including the Limited Use requirements.

What we store

Relationship and obligation extracts — contacts, one-line interaction summaries, commitments, bills, important dates and source references derived from connected email, your calendar and information you share.
Your Google access and refresh tokens, encrypted at rest.
Your WhatsApp phone number, if you linked one, and the WhatsApp chat with Joe.
Your app content — notes, facts and reminders you create.

AI processing

To do its job, JoeHukum sends relevant content to established AI providers — Google (Gemini) and OpenAI — for processing. This includes: your conversations with Joe, emails you forward, selected content from connected email (including headers, snippets and relevant message text), photos you attach (for example, to read a bill's amount and due date), and — when Joe needs them to answer you — details of the people you have added (names, organisations, saved dates, facts, tasks and one-line interaction summaries). When you ask Joe to search the web, your search query is sent to Brave Search (or Google). Under these providers' API terms, your content is used only to return a result to us: it is not used to train their models, and it is never used for advertising. You agree to this in the app before first use, and your agreement is recorded. Hosting is provided by Google Cloud.

Data obtained through Google Workspace APIs (including Gmail and Google Calendar data, and information derived from them) is not used to develop, improve, or train generalized or non-personalized artificial-intelligence or machine-learning models. It is used only to provide and improve the JoeHukum features you have asked for, and is never transferred to or used by any third party to train such models.

How we make money

Our focus is building the best personal assistant, not monetising your data. Whatever the business model becomes, one rule is fixed: we do not sell your data, show ads, or monetise your attention.

What we never do

We never sell or rent your data.
We never show ads or use your data for advertising.
We never send messages, make changes, or transact on your behalf — JoeHukum only prepares drafts and hands off to the apps you already use.
We never keep a copy of a mail, a photo, a PDF or a voice note — only what Joe extracted from it.
We never share your data with third parties except the sub-processors needed to run the service (hosting, AI processing, and Meta's WhatsApp Cloud API when you use WhatsApp), under confidentiality.

Your rights and choices

Export — you can export your full graph as JSON at any time from the app.
Narrow or stop — manage inbox, sent-mail, sender, label and exclusion choices under your avatar → Email → Mail Joe reads. The stop-reading control deletes saved email data from that account and shows you the count. Unlinking your WhatsApp number stops Joe reaching you there.
Delete — you can disconnect Google, which revokes our access, and permanently delete your account and data from your avatar → Account → Delete account. If you cannot access the app, email us from your account address or use the account deletion page.

Product analytics

The mobile app reports anonymous, device-level usage measurements (which screens and features are used, via Google Firebase Analytics) so we can improve the product. This website counts anonymous page views the same way. These measurements are never linked to your identity or account, contain none of your content (no names, messages, amounts, or billers), and are never used for advertising or shared with data brokers.

Cookies

JoeHukum is entirely app-based — there is no sign-in, form, or transaction on this website. The only cookies it sets are Google Analytics cookies, used to count anonymous page views so we know whether anyone is finding us. We set no advertising cookies, run no ad networks, and share nothing with data brokers. Separately, a single session cookie is used by our own staff on the signed-in admin area.

You can block or clear these at any time in your browser; nothing on this site depends on them.

Data protection & security

We protect your information — including sensitive data obtained from Google APIs — with layered technical and organizational safeguards:

Encryption in transit — all traffic between your device, our servers and our sub-processors travels over TLS (HTTPS), version 1.2 or higher. We do not transmit your data over unencrypted connections.
Encryption at rest — your Google access and refresh tokens and the data we store are encrypted at rest on Google Cloud infrastructure.
Access controls — access to production systems and user data follows the principle of least privilege and is restricted to the authorized personnel who need it to operate the service. No person reads your data except as strictly necessary to respond to a support request you have made, or where required by law.
Sub-processors — we share data only with the sub-processors needed to run the service, under confidentiality and data-protection terms: Google Cloud (hosting), the AI providers named above (Google, OpenAI), whose API terms prohibit using your content to train their models, and Brave Search (web-search queries only).
Breach handling — if a security incident affects your personal information, we will notify affected users and the relevant authorities without undue delay, in line with PIPEDA's breach-reporting obligations.

Retention

We keep your data while your account is active. When you delete your account (or disconnect Google), we revoke your Google tokens and delete your stored extracts and personal data immediately from the live database; backups are purged within 30 days. Extracts read from a connected Gmail account are deleted the moment you stop reading mail there or disconnect it. We do not retain Google user data longer than needed to provide the service you requested.

Changes & contact

We'll post any changes here and update the date above. Questions? Email ask@aryabhattalabs.com. This policy is governed by the laws of Canada.