SYSTEM // Privacy

Jewrvis is a personal second brain. You put your life into it — your story, your notes, the money moving through your businesses — and it answers questions about it. That makes this the most sensitive kind of account there is, and the whole system is built on one rule: your data is yours alone, and no other account can reach it.

Your email address, so there is an account to sign in to. Everything you write or capture. Everything pulled in from the services you choose to connect. Nothing is stored that you did not either type or explicitly connect.

Every row in the database carries the id of the account that owns it, and the database itself enforces that a session can only read its own rows. This is not a promise about our conduct — it is a constraint the storage layer applies to every query, including ours.

If you sign in with Google we receive your email address and basic profile from Google, and we use them for exactly one thing: creating and identifying your account. We do not request access to your Gmail, Drive, Calendar or Photos, and we cannot read them.

The alternative is a six-digit code sent to your email. There is no password anywhere in this product, so there is no password of yours for us to leak.

Running this software means other companies hold parts of it. The complete list:

• Supabase — the database and authentication, hosted in the EU (eu-west-1).
• Vercel — hosting, and cookieless page-view counts.
• Anthropic, and OpenAI only when Anthropic is unavailable — the models that answer you. What you ask, and the parts of your data needed to answer it, are sent to whichever one answers.
• Google — converts your text into the numeric vectors that make search work. On the sign-in page only, Google also receives a page view through Tag Manager; once you are signed in it is not loaded at all.
• ElevenLabs — the voice. If you speak to Jewrvis, the recording of your voice is sent there to be turned into text. If Jewrvis speaks back, the words of the answer — including whatever part of your own data the answer contains — are sent there to be turned into sound. This only happens for the answers that are actually spoken; typing to it sends nothing to ElevenLabs. Their standard plans retain what is sent for their own operational purposes; the zero-retention mode that would prevent it is not available to us today.

Any service you connect yourself, such as a payment processor, is added to this list by that act.

We do not sell your data, we do not serve advertising, we do not profile you across other sites, and we do not use your content to train models.

We count page views, and that is the whole of it: which page, and how many. No cookie, no identifier that follows you, no record of who visited what. The counter is served from this domain rather than a third-party tracker, and the personal parts of the product never put anything into a URL for it to see. Vercel also measures how fast pages load, from the same domain and with no identifier.

The sign-in page is the one exception, and it is drawn deliberately. It carries Google Tag Manager, because it is a public marketing page and a marketing page nobody can measure is one nobody can improve. It is switched off the moment you are signed in — everything behind the sign-in is your life, and its page titles are not something we are willing to hand to an advertising company.

Write to privacy@jewrvis.com and ask, and we will delete your account and everything in it, or send you a copy of it. No form, no retention period we hold you to.

Everything travels over TLS and every table is locked to its owner. What we cannot promise is perfection: this is a young product, and if something ever does go wrong with your data you will hear it from us.

If this policy changes in a way that affects what happens to your data, the account holders are told before it takes effect. The date at the top is the date of the current version.