Privacy Policy

Last updated: April 21, 2026

This Privacy Policy describes how JARVIS ("Service"), operated by Avery Keller ("we," "us," or "our"), collects, uses, and protects your personal information. By using the Service, you consent to the practices described below.

1. Information We Collect

Account Information

When you create an account, we collect:

Your name
Email address
Password (stored as a one-way cryptographic hash — we cannot read your password)

Usage Data

When you use the Service, we may collect:

Chat messages and instructions you send to JARVIS
Screenshots of your Device taken during AI task execution
Task history (instructions, results, timestamps)
Session information (login times, IP addresses for security purposes)
Push notification subscription data (device tokens)

Device Information

When your daemon connects, we receive:

Connection status and heartbeat data
Screen content during active AI sessions

Personal Context (Memory)

JARVIS learns about you to provide better assistance. This may include:

Preferences, interests, and routines you share
Names and relationships of people you mention
Facts you tell JARVIS to remember

2. How We Use Your Information

Purpose	Data Used
Provide the Service	Account info, chat messages, device data
Execute AI tasks on your Device	Instructions, screenshots
Personalize responses	Memory and context data
Send notifications	Push subscription tokens
Protect your account	IP addresses, login attempts
Improve the Service	Aggregated usage patterns (not individual data)

3. How We Protect Your Information

Encryption in transit: All data is transmitted over HTTPS/WSS (TLS 1.2+).
Password security: Passwords are hashed using PBKDF2 with 100,000 iterations and random salts. We never store or can recover your plaintext password.
Session security: Sessions use cryptographically random tokens with HttpOnly, Secure, and SameSite=Strict cookies.
Rate limiting: Brute-force login attempts are blocked and accounts are temporarily locked after repeated failures.
Per-user isolation: Each user's data and daemon connection are isolated from other users.
Infrastructure: The Service runs on Cloudflare's global network with enterprise-grade physical and network security.

4. Data Sharing

We do not sell your personal information. We may share data with:

Anthropic: Chat messages and screenshots are sent to Anthropic's Claude API to power AI responses. Anthropic's data usage is governed by their policies.
Cloudflare: Infrastructure provider. Data is processed on Cloudflare's network per their privacy policy.
Law enforcement: We may disclose information if required by law, subpoena, or court order.

5. Screenshots and Device Data

When JARVIS performs tasks on your Device, screenshots are captured and sent through our servers to the AI model. These screenshots may contain sensitive information visible on your screen. We recommend:

Closing sensitive applications before initiating AI tasks.
Not having passwords, financial data, or private communications visible on screen during task execution.
Using the Service in a controlled environment.

Screenshots are processed in real-time and are not permanently stored on our servers beyond the duration of the active session.

6. Data Retention

Account data: Retained while your account is active.
Chat history: Stored locally in your browser. Server-side message processing is transient.
Memory data: Retained until you request deletion or delete your account.
Login attempts: Automatically purged after 24 hours.
Sessions: Automatically expire and are purged after 24 hours.

7. Your Rights

You have the right to:

Access — Request a copy of your personal data.
Correct — Update inaccurate personal information.
Delete — Request deletion of your account and associated data.
Export — Request your data in a portable format.

To exercise these rights, contact us at privacy@avery-keller.net.

8. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete that information promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date. Continued use of the Service after changes constitutes acceptance.

10. Contact

For questions about this Privacy Policy or your personal data, contact us at privacy@avery-keller.net.