Privacy is not a feature.
It's the entire product.

Last updated: May 8, 2026 — Effective date: launch

The short version: JeffyAI runs entirely on your computer. We don't see your conversations. We don't store them. We don't train on them. The only things that ever leave your machine are the things you explicitly opt into. We mean this literally.

Who we are

JeffyAI is operated by Sagentica, a privately-held company based in Oregon, USA. JeffyAI is built on the QAICX (K6) platform, Sagentica's multi-tenant private AI infrastructure. Contact us at privacy@jeffyai.com.

What stays on your machine, always

When you install JeffyAI, the following data lives entirely on your computer's local storage — never on our servers, never accessible to us:

Your conversations with Jeffy
Your encrypted vault contents (notes, health records, legacy messages)
Your personality preferences
Memory of who you are (name, family, what you like)
Your installed mods and their data
Your profiles (if you use FAMILY or BUSINESS multi-account features)
Voice samples (if you enable voice features)
Any files JeffyAI generates on your behalf

We have no ability to read this data. There is no cloud sync. There is no remote access. If you uninstall JeffyAI, this data goes with it (or stays in your backup folder — your call).

What we do collect — and only when you say yes

Mandatory: license key processing

When you buy JeffyAI, we collect only what's needed to fulfill your purchase:

Your email address (to deliver your license key)
Your purchase amount (for tax records)
Your hardware ID (only if you choose hardware-bound licensing — optional)

We do not collect your name, address, phone number, or payment card information. Stripe handles all payment data — see Stripe's privacy policy. We never see your card.

Optional: telemetry (you choose your level)

JeffyAI has five privacy levels for telemetry. The default is Level 0: nothing leaves your machine. You can change this any time by typing settings in JeffyAI.

Level	What we receive
0 (default)	Nothing. We don't even know JeffyAI is installed on your machine.
1 — Crash reports	Module name, error type, stack hash, build version. No content. No PII.
2 — Feature usage	+ Which commands run (e.g. "vault", "chat") — not what you typed.
3 — Performance data	+ Timing data (model load, response latency) — to help us optimize.
4 — Survey eligibility	+ Optional email for follow-up + survey eligibility. You give consent for each.

At every level, the system cannot send your conversation content, vault contents, file names, or PII. The privacy boundary is enforced by our open-source whitelist sanitizer in core/telemetry.py — leaking that data is technically prevented, not just promised.

Optional: waitlist + product updates

If you sign up for our beta program or product newsletter, we collect your email address and first name. We use them only to send you the surveys you agreed to and product updates from JeffyAI. We don't sell your email or "personal" data. We don't share it. You can unsubscribe at any time with one click. We use Formspree for form delivery (subject to their privacy policy).

What we don't do

We don't sell your email or "personal" data. To anyone. For any reason.
We don't use your conversations to train AI models. We can't — they stay on your machine.
We don't share your data with advertisers.
We don't share data with governments without a valid legal request, and your conversations are encrypted on your local machine to the point we cannot read them anyway.
We don't use cookies on this website (besides your browser's normal session storage). No Google Analytics. No Facebook Pixel. No Mixpanel. No Hotjar. No tracking pixels of any kind.
We don't fingerprint your browser.
We don't load third-party scripts that could track you.

What we do see (and why it's OK)

Our hosting provider (Cloudflare) automatically generates aggregate server-side traffic statistics — things like total page views, top referrers, country breakdowns, and which browsers visited. This data is not collected by us, not stored by us, and cannot identify you individually. It comes from server request logs that exist regardless of any tracking, and Cloudflare aggregates it without using cookies or JavaScript. We use this only to know whether the site is loading correctly and roughly how many people saw it. Cloudflare's privacy-respecting analytics policy is the source of truth for that data.

Your rights

Regardless of where you live, you have these rights with respect to data we hold about you:

Access — Tell us what we have on you. (Honestly, it's just your email and license key.)
Deletion — Delete what we have. (Honestly, just unsubscribe and email us — done in 24 hours.)
Portability — Export your data in a standard format.
Correction — Fix inaccurate data.
Withdrawal of consent — Change your telemetry level to 0 in JeffyAI settings, anytime.

To exercise these rights, email privacy@jeffyai.com. We respond within 30 days, usually within 24 hours.

If you live in the EU / UK (GDPR)

Sagentica is the data controller. Our legal basis for processing your email is contract performance (delivering your license) and legitimate interest (optional product updates, which you can unsubscribe from any time). Your enhanced GDPR rights all apply: access, erasure, portability, restriction, objection. EU/UK users may file complaints with their local data protection authority.

If you live in California (CCPA / CPRA)

We do not "sell" your personal information as that term is defined in the CCPA, and we have not done so in the previous 12 months. California residents have full rights to know, delete, correct, and opt out under the CCPA / CPRA.

Data retention

License records — kept indefinitely (so we can support you forever and validate your license)
Telemetry events — kept for 90 days, then aggregated and source-deleted
Email subscriptions — kept until you unsubscribe
Crash logs (Level 1+) — kept for 90 days, then deleted

Children

JeffyAI is for adults. We don't knowingly collect data from children under 13. If a parent purchases JeffyAI for a household with children (e.g. via FAMILY edition's child profiles), the conversations and data in those child profiles stay on the family's local machine — we receive none of it.

If Sagentica is ever acquired

Companies do get bought out. We're being upfront about that possibility. Here's what happens to your data if Sagentica is ever sold, merged, or succeeded by another company:

Your conversations stay safe regardless. They live on your computer, not on our servers. An acquirer literally cannot take or sell what was never on our infrastructure to begin with. This is not a policy promise — it's the architecture.
Your email and account data would transfer to the acquirer as part of the business sale. We will require any acquirer to inherit and honor these same privacy commitments as a condition of the transaction.
If an acquirer changes the privacy commitments in any meaningful way, we will notify you in advance and you can delete your account. Your locally-stored data on your computer remains yours forever — no acquirer can reach in and take it.
The local-only architecture is the moat. Even if a hostile acquirer wanted to start collecting conversation data, they would have to ship a fundamentally different product — and every existing user could simply not update.

Changes to this policy

If we update this policy, we'll post the new version here with a new "Last updated" date. For meaningful changes, we'll email everyone on our list. We won't apply meaningful changes retroactively to data we already have.

Contact

Questions? We're a real person. Email privacy@jeffyai.com. Mail: Sagentica · Oregon · United States.

Privacy is not a feature.It's the entire product.