Who we are
Jaybé is made by The Grower Inc, a company based in the United States (“The Grower”, “we”, “us”). We make the Jaybé personal finance app for iPhone and Android and run this website, jaybe.cloud. The Grower Inc is the controller of the personal data described in this policy, which means we decide how and why it is used.
This policy covers the app, the Jaybé API that the app talks to, and this website. It does not cover the App Store, Google Play, or any other service you reach through a link; their own policies apply there.
What we collect
Your account
- Sign-in details. Your email address if you sign in with a one-time code, or the identifier Apple or Google gives us if you use Sign in with Apple or Google. We never see or store a password.
- Your name, if you share it (for example, Sign in with Apple can pass it to us).
- Settings such as your country, currency, payday, language and time zone. The app sends your phone's time zone so that “today” and payday reminders are right where you are.
The money records you add
- Accounts you create (cash, bank, card, wallet) with the balances you enter and, if you choose, the last four digits of a bank account. We never ask for or store full card or account numbers, PINs or online banking passwords.
- Entries: amount, currency, date and time, merchant, category, account, who paid, and notes. Also your bills, recurring payments, budgets, savings buckets, transfers, and the category rules you teach the app.
- What you type or say to create an entry. Voice is converted to text on your phone; only the text reaches us. We keep it, encrypted, with the entry it created.
- Receipt photos you take or choose. Before we store a photo we remove its hidden metadata, including location, and resize it.
- Bank or card statements you import as CSV or PDF, and the rows we read from them. If a PDF is password-protected, you type the password once; we use it only in memory to open the file and never save or log it.
- Your onboarding answers, such as your income, payday and starting balances, which become your first entries and accounts.
Subscription and device details
- Subscription status from the App Store or Google Play (through RevenueCat): which plan, trial or renewal dates, and whether it will renew. We never receive your card details; the store handles payment.
- A push notification token so we can send reminders, if you allow notifications, and the type of phone (iOS or Android).
- Service records: counts of AI requests and rate limits (to keep the service fair and running), error reports from our servers, and anonymous onboarding steps that use a one-way scrambled identifier, never your name or email.
What we don't collect
Jaybé does not access your contacts or your location, does not use an advertising identifier, does not link to your bank, and does not record audio. Camera, photo library and microphone access are used only when you choose to snap a receipt, pick a photo or speak an entry.
How AI is used
Jaybé uses an AI model from Anthropic to turn what you give it into tidy entries. That only happens when you ask for it:
- Typed or spoken entries: the text, today's date, your default currency and your category names are sent so the amount, merchant and category can be filled in.
- Receipt photos: the cleaned photo is sent so the details can be read from it.
- PDF statements: the text of the pages (or the page image for scanned statements) and the account's currency are sent so the rows can be read.
- Import categories: cleaned-up merchant descriptions and whether money went in or out are sent to suggest categories. Amounts are not sent.
Monthly reports are written from fixed templates, not by AI. When Ask Jaybé, the in-app money coach, is available to you, your questions and the figures needed to answer them will be processed the same way, and your chats will be stored encrypted and deletable one by one or all at once. Jaybé gives general information, not personal financial advice.
Why we use it
| Purpose | Data used | Legal basis |
|---|---|---|
| Run your account and show your numbers: safe-to-spend, bills, budgets, savings, reports | Account, settings, money records | To provide the service you asked for (contract) |
| Fill in entries from text, photos and statements | What you type or say, photos, statements | Contract; your request each time you use it |
| Send reminders about bills, budgets, savings and trials | Push token, bills, budgets, subscription status | Contract; you can turn notifications off in your phone's settings |
| Manage your subscription | Subscription status | Contract |
| Keep the service secure, prevent abuse, fix errors | Service records, error reports | Our legitimate interest in a safe, working service |
| Improve onboarding | Anonymous onboarding steps | Legitimate interest |
| Answer you and meet legal duties | Your messages, account details | Legal obligation; legitimate interest |
We do not sell your personal data, share it for advertising, or use it to make decisions that have legal or similarly significant effects on you.
How we protect it
- All traffic between the app, our servers and our providers is encrypted in transit.
- Your notes and the text you type or say are encrypted with AES-256 using a key unique to you. Those keys are themselves encrypted with a master key held only on our servers.
- Every record is tied to you or to a space you belong to, and database rules stop anyone else's account from reading it.
- Receipt photos and statements live in private storage. The app opens a photo through a link that expires after 60 seconds.
- On your phone, your sign-in is kept in the iPhone Keychain or Android Keystore. Signing out removes the copy of your data cached on the phone.
- Only a small number of people at The Grower Inc can access production systems, and only to run and support the service.
No system is perfectly secure. If a breach affects your personal data, we will tell you and the relevant authorities as the law requires.
How long we keep it
We keep your account data for as long as your account is open, and delete it when you delete your account. Some things are removed sooner:
| Data | When it is deleted |
|---|---|
| Entries you delete | Kept 30 days so you can restore them, then deleted with their photos |
| Budgets you remove | 30 days after removal |
| Receipt photos never saved to an entry | Within a day |
| Imported statement files | 7 days after you confirm or undo the import; at once if you cancel it or it fails. The entries you keep stay until you delete them. |
| Unlocked copies of password-protected PDFs | As soon as reading the file finishes |
| Report exports (PDF, CSV) | Download link lasts 10 minutes; the file is deleted within an hour |
| Content sent to our AI provider | Deleted by Anthropic within 30 days |
| Push tokens | When your phone stops accepting notifications, or when your account is deleted |
| Your account, after you ask us to delete it | 30 days after the request, unless you cancel it at jaybe.cloud/delete |
When you ask us to delete your account, we wait 30 days so you can change your mind, then delete it. We keep a record that the deletion was requested and done (dates only, not your email). We may keep other limited records where the law requires it (for example, tax or dispute records), and backups are overwritten on a rolling basis.
Your rights
Depending on where you live, including under the UAE Personal Data Protection Law and the EU and UK GDPR, you can ask us to:
- Access the personal data we hold about you and get a copy, in a format you can take elsewhere.
- Correct anything that's wrong. Most of it you can edit in the app.
- Delete your account and data. The quickest way is jaybe.cloud/delete: confirm it's you with a code we email you, and we delete your account and everything in it after a 30-day grace period, during which you can cancel.
- Object to or restrict some uses, such as those based on our legitimate interests.
- Withdraw consent where we rely on it, for example by turning off notifications or camera access in your phone's settings.
For anything else on this list, email [email protected] from the address you sign in with. We'll reply within 30 days and won't charge you. We may ask you to confirm it's you before acting. You also have the right to complain to your local data protection authority.
Deleting your account doesn't cancel a subscription you bought through the App Store or Google Play. Cancel it in your store's subscription settings so you aren't charged again.
Shared spaces
Jaybé keeps records in spaces. Your personal space is yours alone. If shared spaces (for example, a household) are available to you and you invite someone, or join someone else's space, everyone in that space can see the entries, accounts, bills and budgets in it, according to their role (owner, editor or viewer). Entries you add to a shared space show who added them. The owner of a space can remove members. Think about what you add to a shared space before you add it.
International transfers
The Grower Inc is based in the United States, and our providers may store or process data outside your country, including in the European Union and the United States. When personal data leaves the UAE, the EU or the UK, we rely on the safeguards those laws require, such as contractual clauses approved for that purpose, and we choose providers who protect data to the same standard described in this policy.
Children
Jaybé is for adults. You must be 18 or older to use it. We don't knowingly collect data from anyone younger; if you believe a child has given us personal data, contact us and we will delete it.
This website
jaybe.cloud sets no cookies, runs no analytics or advertising trackers and loads its fonts from our own server. The account deletion page talks to our sign-in provider (Supabase) to send and check your code, and to the Jaybé API to record your request; the session it opens is kept only in that page and signed out when you leave. Our hosting provider keeps standard server logs (such as IP address, pages requested and browser type) for a short time to keep the site secure and running. The app previews on the home page are demonstrations with made-up numbers; nothing you type into them is sent anywhere.
Changes to this policy
If we change this policy we'll update the date at the top. If a change is significant, we'll tell you in the app or by email before it takes effect.
Contact us
Email [email protected]. For anything else, write to [email protected].