Privacy Policy

Effective: 2026-11-07

Last updated: 2026-11-07

Version: 2026-11-07

This policy explains what information Tjati handles, why we handle it, which service providers may receive it, and the choices available to you. It applies to the Tjati apps, websites and related services.

The short version

Tjati needs account information and the content you choose to provide to organize your life and deliver requested features. AI, voice, web search and calendar features can send relevant content to specialized providers when you use them. Tjati sends your content to its AI providers only after you allow it in the app. AI assistants you connect yourself, such as ChatGPT or Claude, receive what you authorize when you connect them. We use vendors to run the Service, not to build advertising profiles about you. The detailed terms below control if this summary and the rest of the policy conflict.

Scope and who is responsible

This Privacy Policy applies when you use Tjati's mobile applications, website, support channels and related products or services that link to it (together, the “Service”). The mobile applications are for iOS and, where available, Android. It does not govern a third party's own service, even when you connect that service to Tjati.

Tjati (“Tjati,” “we,” “us” or “our”) operates the Service and is the controller of personal information covered by this policy unless a different notice says otherwise. You can contact us at support@tjati.com.

If you use Tjati through an organization that manages your account, that organization may control some account settings or content and may be a separate controller. Ask the organization about its practices.

Information we collect

The information Tjati handles depends on the features, integrations and permissions you choose. We may process the following categories:

Categories of information Tjati handles

Category	Examples	Primary reason
Account and profile	Account and authentication identifiers, email, username, full name, avatar, profile details, preferences and account activity.	Create and secure your account, sync your experience, communicate with you and provide support.
Productivity content	Areas, goals, projects, tasks, habits, reminders, notes, focus or flow sessions, schedules and related metadata you add to Tjati.	Store, organize, sync and present the content and operate the features you request.
AI and conversation content	Prompts, chats, attachments, model and usage metadata, generated responses, action confirmations, memories, preferences and observations derived to personalize the Service.	Generate requested responses, remember relevant context, suggest or perform confirmed actions, maintain safety and troubleshoot the feature.
Calendar	With your authorization: your calendar list (names, descriptions, colors, time zones) and events (title, description, location, start/end, status and related metadata), the connected Google account's email and name, encrypted OAuth credentials, granted scopes and sync state. Synced events are deleted automatically 30 days after they end.	Read your schedule and help you plan around it. Attendee lists are not stored.
Web search	Model-written search queries, a short objective, page URLs and retrieved results. Queries can reflect your request.	Find current information and read a source page when needed to answer you.
Voice, files and media	Audio or transcripts submitted to voice features; documents and their content; files and photos you choose to upload or save.	Transcribe speech, understand requests, retrieve relevant document context, generate outputs and save content at your direction.
Device, usage and diagnostics	App version, device and operating-system details, IP address, timestamps, product interactions, performance measurements, crash information, push notification token, app-install or device-derived identifiers, and an account or member identifier.	Operate, debug, secure and improve the Service, understand feature reliability and prevent abuse.
Subscription information	Store transaction or entitlement identifiers, product, plan, renewal and subscription status, plus the verified email address shared with our subscription-management provider. The app store processes the payment credentials.	Unlock paid features, restore purchases, maintain entitlements and support billing questions.
Communications	Support messages, feedback, survey responses and information you include when contacting us; and a record of the emails Tjati sends you, with the delivery status the email provider reports.	Answer requests, resolve problems, learn from feedback, send you the emails described below and maintain a record of the communication.
Launch waitlist	The email address you enter in the waitlist form on tjati.com, the date and time you entered it, and which call-to-action on the page you used. Nothing else about the visit is kept with it.	Confirm, once, that your address was added, and tell you, once, that Tjati is available.

Some content may reveal sensitive information because productivity tools can reflect health, finances, relationships, beliefs, precise plans or other private matters. Tjati does not require you to provide sensitive information. Please only add content you are comfortable processing through the features you select.

We do not receive your full payment-card number from Apple, Google or another app marketplace. We may receive subscription, transaction, product, storefront and entitlement information needed to provide and support the purchase.

Where information comes from

• Directly from you, when you create an account, add content, speak to Tjati, upload a file, configure a preference, contact support or otherwise use the Service.
• From your device, through operating-system permissions, app events, local settings, logs and diagnostics.
• From services you connect, such as Google Calendar, only after you authorize the connection and requested scopes.
• From service providers and app marketplaces, such as an identity provider, subscription platform, analytics or crash-reporting service.
• From inferences generated for you, such as relevant memories, preferences, relationships between your items or suggested actions based on your content and use.

Operating-system permissions control access to features such as the microphone, notifications and saving generated media. You can change these permissions in your device settings, though disabling one may stop the corresponding feature.

How and why we use information

We use information only when we have a valid reason. The legal basis depends on where you live and the particular context.

Purposes and lawful bases

Purpose	What this covers	Legal basis where applicable
Provide the Service	Operate accounts, sync content, deliver requested AI, voice and integration features, and support subscriptions.	Performance of our agreement with you.
Personalize the Service	Remember preferences, rank relevant information and adapt suggestions to your activity.	Performance of our agreement; legitimate interests in making the Service useful; consent where required.
Communicate	Send service, security, account, billing and support communications, and optional marketing where offered.	Performance of our agreement; legitimate interests; legal obligations; consent for marketing where required.
Protect and improve	Monitor reliability, debug errors, prevent fraud or abuse, audit actions and develop or evaluate features.	Legitimate interests in running a secure and effective service; legal obligations; consent where required.
Comply with law	Respond to valid legal requests, enforce rights, resolve disputes and keep records required by law.	Legal obligation and legitimate interests in protecting Tjati, members and others.

Where we rely on legitimate interests, we consider the impact on your rights and use the information only when those interests are not overridden by your rights. Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing that was lawful before it was withdrawn.

Email from Tjati

Emails from Tjati are delivered through our email-delivery provider, from a tjati.com address. The provider sends from its European Union region (Ireland); its account data and delivery logs are stored in the United States. If you have an account, the emails are:

• Onboarding emails. A short series of five emails over your first ten days. Some of the middle ones are skipped once you have completed onboarding in the app.
• The weekly review. A Monday-morning summary of your previous week, with counts such as tasks completed, focus minutes and habit check-ins. It is off by default and is sent only if you have turned it on.
• Planned-maintenance notices. A service message sent ahead of planned downtime to every member who has an email address on file. These are not optional marketing: they are sent regardless of your email preferences, because they tell you the Service will be unavailable.

We also email a one-time sign-in code to the address entered when someone signs in to connect an AI assistant or the Tjati command line, whether or not that address has a Tjati account. Sign-in codes are not marketing and are not affected by your email preferences.

Onboarding and weekly-review emails carry an unsubscribe link. Opening the link shows a confirmation page, and nothing changes until you confirm. Unsubscribing stops that type of email; it does not affect maintenance notices. The separate waitlist email is described under The launch waitlist.

We keep a record of each of the emails listed above, including the message as sent and whether it was delivered. The provider reports delivery events back to us; we store only the type of event, its time and the message identifier (plus, for a bounce or a provider suppression, the kind of bounce or suppression). We do not store the recipient, sender, subject or content from those reports. If an address hard-bounces, is reported as spam or is suppressed by the provider, we add the address to a suppression list and send it none of the emails listed above.

AI processing and automated features

Tjati uses artificial-intelligence and machine-learning systems to understand requests, produce responses, extract or retrieve relevant information, personalize suggestions and help create or update items. Providers include OpenAI, xAI, Google and Anthropic for understanding requests and writing replies; Cohere for finding relevant information; TypeSafe for interpreting requests; ElevenLabs for voice; and Parallel for web search and page reading.

What is sent to AI providers

When you use an AI feature, Tjati may send the prompt and the minimum context reasonably needed to answer it. That context can include selected tasks, notes, memories, connected-service content, document text, attachments, tool results, conversation history or identifiers used to trace the request. Our AI monitoring provider receives usage metadata (such as model, timing and token counts), a pseudonymous identifier and may receive the content of your conversations with Tjati, which our team may review and which is kept for 30 days to investigate problems and prevent abuse or, unless you turn off Help improve Tjati in Settings > Privacy & Data, for 90 days so we can also use it to improve Tjati.

If you rate a reply and choose to send the conversation with your feedback, we keep that conversation and your feedback for up to one year to fix problems and test improvements to Tjati, even if Help improve Tjati is off.

Using an AI feature can transfer personal data and Your Content to a third-party AI service. We use AI inputs and outputs to provide the feature, maintain context, enforce safety, investigate failures and improve the operation of Tjati. Tjati sends your content to its AI providers only after you allow it in the app. AI assistants you connect yourself, such as ChatGPT or Claude, receive what you authorize when you connect them. We do not use connected Google account data for advertising.

If you describe how you want your Tjati companion to look, that description is sent to an OpenAI image model to generate the companion's picture, and the resulting image is stored with your account.

Provider retention and use depend on the provider, API product, contractual terms and configuration used for a request. We evaluate and configure providers for business or API use where available, but this policy is not a promise that every provider uses identical retention controls. Do not enter information you are not authorized to share.

AI output can be incomplete, inaccurate or similar to output provided to others. Review important output and proposed actions before relying on them. When Tjati asks you to confirm a change, your confirmation authorizes that action. Tjati is not designed to make legal, medical, financial, employment, emergency or other high-impact decisions for you.

Your permission for third-party AI

Tjati asks for your permission in the app before sending your content to third-party AI providers. If you decline, the rest of Tjati keeps working with AI off, subject to your subscription's access rules. You can still organize your content manually when your subscription allows changes, and use full-text search without sending your search to an AI provider.

Before you allow it, Tjati does not send your items to its AI providers to make them searchable or find relevant information. This permission covers the following providers and purposes:

Provider	Purpose	Information received
OpenAI	OpenAI understands your requests, writes replies and draws your companion.	OpenAI receives your messages and conversation history, relevant areas, goals, projects, tasks, habits, notes, reminders, saved memories and connected calendar events, and descriptions used to draw your companion.
xAI	xAI understands your requests, reasons about your companion and writes replies.	xAI receives your messages and conversation history, relevant areas, goals, projects, tasks, habits, notes, reminders, saved memories and connected calendar events, and descriptions of your companion.
Google (Gemini)	Google understands requests and writes replies.	Google receives your messages and relevant conversation context, including saved memories and connected calendar events, for replies.
Anthropic	Anthropic understands your requests and writes replies.	Anthropic receives your messages and conversation history, and relevant areas, goals, projects, tasks, habits, notes, reminders, saved memories and connected calendar events.
Cohere	Cohere helps Tjati find the information relevant to your request.	Cohere receives the content of your areas, goals, projects, tasks, habits, notes and reminders, and what you search for.
TypeSafe (Jev)	TypeSafe makes quick judgments about what you meant to help Tjati understand your request.	TypeSafe receives your text and relevant context needed to interpret it.
ElevenLabs	ElevenLabs turns your voice into text and reads replies aloud.	ElevenLabs receives your microphone audio for transcription and reply text for speech.
Parallel	Parallel searches the web and reads pages to help answer your requests.	Parallel receives search terms Tjati writes from your request and links you share or Tjati selects to read.

When you allow AI, we record the date and version of your choice. You can withdraw your permission at any time in Settings > Privacy & Data. Withdrawing turns AI off and stops further AI processing of your content, including preparing new content for AI search; it does not delete your account or undo earlier processing. Information Tjati has already prepared to help find your items stays in Tjati's own database and is deleted with the item or your account. The retention and deletion sections explain how existing data is handled. You can review the providers and allow AI again in the same settings.

Web search and page reading

Web search and page reading are available on paid plans when enabled and may pause at capacity. Parallel receives search terms, page links and a brief description of what you want to find. We do not send an account identifier to Parallel. Search terms can reflect your request. Results link to their sources so you can check them.

AI memories and personalization

Tjati may derive and store preferences, summaries or observations from your activity to preserve useful context between sessions. You can correct source content, remove relevant content or ask support about available memory controls. Removing a memory may not change prior outputs or records that must be retained for security or legal reasons.

Shared conversations

If you create a share link for a conversation, anyone who obtains the link may be able to view the shared content until the link is revoked, expires or is otherwise disabled. Check the conversation and attachments before sharing, do not include information you lack permission to disclose, and revoke the link when it is no longer needed.

Voice, audio, files and photos

Voice and transcription

When you activate a voice feature, Tjati processes microphone audio to transcribe your request and to speak its reply back to you. Audio is buffered only for the duration of the request; Tjati does not keep a stored recording of your voice. ElevenLabs provides transcription and voice generation and receives your audio and reply text. A transcript and any resulting conversation or actions may be stored as part of your content. Tjati keeping no recording does not mean ElevenLabs retains nothing: ElevenLabs may retain audio and transcripts under its own terms.

Documents and retrieval

Files you upload may be stored and processed, and their content sent to the AI providers above so Tjati can find and use relevant information from them. Deleting a file or account starts the deletion process described below, subject to technical, security and legal retention.

Photos and saved media

If you ask Tjati to save generated media, the app may request permission to add the item to your photo library. The permission shown by your operating system controls that device action. Tjati does not infer broader photo-library access from a write-only permission.

Calendar and other integrations

Where available in your version of the Tjati app, you can connect Google Calendar with read-only access. Gmail, Outlook Mail and Microsoft Calendar are not currently offered. You choose whether to connect your Google account and authorize the permissions shown by Google.

• Permissions. Tjati requests openid, email and profile to identify your connected account, plus https://www.googleapis.com/auth/calendar.calendarlist.readonly to list your calendars and https://www.googleapis.com/auth/calendar.events.readonly to read their events. Tjati encrypts the OAuth credentials it stores.
• Calendar content. We store your calendar list and each event's title, description, location, start and end times, status and related metadata so Tjati can summarize your day and plan around existing bookings. We do not store attendee lists. Synced events are deleted automatically 30 days after they end (see Retention). Tjati does not add, move or remove anything in a connected calendar. Calendar event content is not included in the in-app account export; contact support for a copy.
• Disconnecting. Disconnecting stops syncing and deletes the Google credentials Tjati holds. By default it also deletes your synced calendars and events. If you choose Keep data, previously synced events stay in Tjati and are still deleted 30 days after they end; contact support or delete your account to remove them sooner. If you choose Revoke access, Tjati also asks Google to remove its access; otherwise, or if that request fails, remove Tjati in your Google Account's third-party access settings. A basic record of the connection (the account email and when it was connected and disconnected) remains until you delete your Tjati account. Conversations and AI memories that mention calendar details are part of your conversation content and are not removed by disconnecting.

Google user data

Tjati's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. Google user data is used to provide or improve user-facing features that are prominent in Tjati. We do not use Google user data for advertising, and human access is limited to circumstances permitted by that policy, such as with your affirmative agreement, for security, to comply with law, or when data is aggregated and anonymized for internal operations.

Tjati does not use, or transfer to others to use, data obtained through Google Workspace APIs to develop, improve or train generalized or non-personalized AI or machine-learning models. Calendar content is sent to the AI providers above only to provide the feature you are using, such as answering a question about your schedule or a briefing you request.

Google and any other service you later connect remain responsible for their own privacy practices. Their terms govern your account with them.

When we disclose information

We do not disclose personal information simply because it has commercial value. We disclose it only as needed for the following purposes:

• Identity and account services, to authenticate accounts and manage identity information.
• Infrastructure and hosting providers, including Hetzner for hosting in Germany and Finland and Cloudflare for storage, backups and content delivery. Database backups stay in the EU. The storage region for uploaded files and companion images is not verified, so we do not promise they stay in the EU.
• AI, voice, search and monitoring providers, such as the providers described in the AI and voice sections, to process a request or monitor system quality.
• Website analytics. On tjati.com, PostHog in the European Union receives page views, page performance, browser and device information, the referring website and an approximate location derived from your IP address (the address itself is not stored), to understand and improve the website. It does not use cookies, is not linked to your account or waitlist email and does not record sessions. We skip website analytics when your browser signals Do Not Track or Global Privacy Control.
• Analytics and diagnostics, including a product-analytics service hosted in the European Union and a crash and performance diagnostics service with diagnostic data stored in Germany. These tools may receive product events, device or diagnostic data and a member or account identifier. Diagnostic events may contain device, network and contextual data. Neither tool offers us a way to selectively delete one member's history on request — see Account deletion below for what that means for you.
• Subscription and app services, including Apple, Google and RevenueCat, our subscription-management provider. RevenueCat receives transaction, receipt and entitlement information, your app-user identifier and, if email synchronization is enabled, your verified email address. Apple (and Google where Android is available) receive push tokens and notification text, which can include task, habit and goal titles.
• Email delivery, through an email-delivery provider that sends the emails described under Email from Tjati above and the one confirmation email a newly-added waitlist address receives (see The launch waitlist below). It receives the recipient address, the message and its delivery events, and uses them to deliver the email and report its status to us.
• The launch waitlist, which keeps the address you enter on tjati.com with Cloudflare in the European Union. Cloudflare also checks whether a submission comes from a person; this is not used for advertising or cross-site tracking, and Tjati stores nothing it returns. When your address is newly added, one confirmation email is sent through Resend, described above.
• Connected services, when you direct Tjati to read from a calendar you connect.
• Clients you connect, including your own MCP agents, access-token clients and webhook recipients, receive the content authorized by their permissions. Their independent privacy practices apply.
• Support correspondence, through Google Workspace, which hosts our support@tjati.com mailbox.
• Other people you choose, when you share a link or otherwise direct Tjati to disclose content.
• Professional advisers and authorities, when reasonably necessary to obtain advice, comply with law, respond to valid process, protect safety, investigate abuse or enforce our rights.
• Business transfers, as part of a merger, financing, acquisition, reorganization, bankruptcy or sale of assets, subject to appropriate confidentiality and notice where required.

A current list of the service providers (subprocessors) we use, with their purposes and locations, is available at the subprocessors list and on request at support@tjati.com.

Providers may process information only for the services they provide to us, subject to their contracts and applicable law. A provider may also act as an independent controller for limited activities, such as an app marketplace's transaction administration, under its own policy.

Sale, advertising and tracking

Tjati does not sell personal information for money or other valuable consideration, and does not share personal information for cross-context behavioral advertising as those terms are defined by applicable United States privacy laws. We do not use an advertising SDK to serve targeted ads in the Tjati app.

Disclosing information to the service providers described above so they can operate the Service is not a sale or targeted-advertising disclosure. Product analytics can measure how Tjati is used, but it is not used by Tjati to follow you across unrelated businesses for advertising. If these practices change, we will update this policy and provide any legally required opt-out controls before the change applies.

Tjati emails contain no tracking pixel, and we do not use the open or click tracking offered by our email provider. When you tap a button in a Tjati email, we may count the tap in aggregate before sending you on to the page. That count is labelled only with the type of email and the button; we do not record who tapped, your email address, IP address, device or browser details, and we set no cookie for it.

Subscriptions and payments

Apple processes purchases made through the App Store and, where the Android app is available, Google processes purchases made through Google Play. Tjati and RevenueCat receive transaction, receipt and entitlement information, your app-user identifier and, if email synchronization is enabled, your verified email address, as needed to activate and maintain your subscription. We do not receive the full payment credentials submitted to the store. Apple's and Google's privacy policies govern their payment processing.

Deleting your Tjati account does not automatically cancel an App Store or Google Play subscription. Cancel through the subscription controls of your Apple account or in Google Play. Support can help you locate the relevant controls but cannot override the store's billing or refund decision.

Retention

We keep each category of information only for as long as reasonably necessary for the purposes described in this policy. The period varies based on the feature and context. We consider:

• whether your account or a requested feature is active and the information is needed to provide it;
• the amount, nature and sensitivity of the information and the risk of harm from unauthorized use or disclosure;
• security, fraud-prevention, audit, dispute-resolution and service-recovery needs;
• technical deletion cycles, including caches, logs and encrypted backups; and
• tax, accounting, consumer-protection and other legal obligations.

Short-lived buffers and caches are generally cleared automatically when their operational purpose ends. We keep your account and the content you created until you delete your account, including when your subscription has lapsed; there is no inactivity cutoff. You can delete individual content in the app while your account permits changes; if it is read-only, you can delete your whole account or ask support to delete specific personal information. Subscription and transaction records, security logs, support records and evidence needed to establish or defend claims may be kept longer where necessary. Backups are isolated from routine use and age out under backup cycles unless preservation is legally required. Database backups are kept for 30 days.

If your subscription lapses or a payment fails, your account is read-only: you can read and export your content and delete your account, but cannot add, change or delete individual content (you can still erase AI memories and revoke share links). AI is off until you resubscribe or fix the payment, and also requires your AI permission. Account deletion, export, purchase restoration, and privacy and security controls stay available, including withdrawing AI permission. Feature-specific retention periods, such as those for calendar events, caches and logs, continue to apply.

Before Tjati's general release, we may reset accounts created during the beta. We will tell beta members by email beforehand so they can export their content.

Connected calendar events are deleted automatically 30 days after they end, and when you disconnect with deletion or delete your account. An event with no end time is kept until you disconnect with deletion or delete your account. Deleted calendar data can remain in database backups until those backups age out.

The record of emails we have sent you is kept with your account and removed when the account is deleted. An address on the email suppression list (see Email from Tjati) stays on it after deletion, because the list exists to stop us writing to that address again.

When information is no longer needed, we delete it, de-identify it or isolate it from further use until deletion is possible.

The launch waitlist

Until Tjati is generally available, tjati.com offers a launch waitlist. We keep the address you enter until Tjati opens and you have been told, or until you ask us to remove it, whichever comes first. It is held on its own, with Cloudflare in a database restricted to the European Union, separate from any Tjati account. No IP address, country, device details, browser details or referring page is stored alongside it, and it is not added to a marketing profile. When your address is newly added to the list, one confirmation email is sent through Resend, our email-delivery processor in the European Union, and your address is shared with Resend for that purpose only.

Removing a waitlist address is not instant

Write to support@tjati.com and we delete your address. The database keeps short-lived recovery copies, so for a limited time after deletion the address can still exist in them. We do not use a recovery copy to bring a removed address back, and we will tell you the current length of that window if you ask.

Account deletion

You can start account deletion from the privacy controls in the Tjati app or request help at support@tjati.com. We may ask you to verify control of the account before acting. Deletion is intended to be irreversible, so export content you want to keep first; the app currently supports JSON and Markdown exports. You can export and delete your account even when your subscription has lapsed or a payment has failed.

What a deletion request does

A verified deletion request closes your Tjati product account and removes your content and account data from our productivity, chat, document and AI systems. Information may remain briefly in caches, security records and encrypted backups while that process runs, and we may retain limited information where necessary to comply with law, prevent fraud, resolve disputes or enforce agreements. Data another person received through a share link, sent message or external integration may remain under that person's or provider's control.

Analytics history is a known, named exception

Deletion does not currently remove your history from PostHog, our product-analytics provider; that history survives indefinitely. Your account identifier attached to Sentry, our crash-diagnostics provider, is not deleted immediately either; it expires on Sentry's retention schedule, currently up to about 90 days.

Subscription cancellation is separate

Deleting Tjati does not cancel an Apple App Store or Google Play subscription. Cancel the subscription in your Apple account or in Google Play to stop future renewal. Removing the app from your device also does not cancel a subscription.

If you used Sign in with Apple or another identity provider, you may also revoke Tjati from that provider's account settings. If an automated deletion does not complete or you need assistance, contact support and we will investigate the affected systems.

Security

We use administrative, technical and organizational measures designed to protect personal information. These include transport encryption, access controls, environment separation, encrypted storage for OAuth credentials, logging and monitoring intended to detect failures or abuse, and controls applied by our hosting and service providers. Uploaded files are encrypted at rest by Cloudflare. Tjati encrypts the OAuth credentials it stores. Our servers' storage, including the database, cache and operational logs, is encrypted at rest.

No service can guarantee perfect security. Tjati is not represented as end-to-end encrypted, and information must be readable by our systems and selected providers when necessary to deliver features. Protect your account and device, use strong authentication, review share links, and tell us promptly at support@tjati.com if you believe your account or information is at risk.

Your rights and choices

Depending on where you live, you may have the right to request access to, correction of, deletion of or a portable copy of personal information; object to or restrict certain processing; withdraw consent; and appeal a refusal. You may also have the right not to receive discriminatory treatment for exercising a privacy right.

• Access and export. Use available app controls to export content in JSON or Markdown, including while your subscription has lapsed, or contact support for another privacy request.
• Correction. Update editable profile fields in the app, and your content while your account permits changes. If your account is read-only, or a field cannot be corrected in the app, contact support and we will correct or delete that personal information as a privacy request, free of charge.
• Integrations. Disconnect an integration in Tjati and revoke it through the external provider when appropriate.
• AI permission. Allow or withdraw AI permission in Settings > Privacy & Data at any time, including while your account is read-only.
• Help improve Tjati. Turn off Help improve Tjati in Settings > Privacy & Data at any time, including while your account is read-only. From then on, your conversations are kept only for 30 days to investigate problems and prevent abuse; conversations already kept to improve Tjati remain until their 90 days end. Deleting your account removes them sooner.
• Device permissions. Change microphone, photo-save and notification permissions in your operating-system settings.
• Communications. Use the unsubscribe link in an onboarding or weekly-review email to stop that type of email. We may still send account, security, billing and service notices, including planned-maintenance notices, which are not affected by an unsubscribe.
• Deletion. Follow the process in the Account deletion section above.
• Launch waitlist. Email support to be removed from the waitlist. The Retention section above describes what removal does and the recovery window that applies to it.

European Economic Area, United Kingdom and Switzerland

You may complain to your local data-protection authority and may have the rights described above under applicable data-protection law. We encourage you to contact us first so we can try to resolve the concern.

United States state privacy rights

Residents of states with applicable comprehensive privacy laws may request the rights provided by those laws. Tjati does not sell personal information or share it for cross-context behavioral advertising. We do not use or disclose sensitive personal information to infer characteristics for unrelated purposes. An authorized agent may submit a request where permitted; we may verify the agent's authority and your identity.

Submit a request to support@tjati.com. Describe the right and account involved. We will verify, respond and provide an appeal route as required by applicable law. We may deny or limit a request where an exemption applies and will explain when legally required.

International transfers

Our servers, database and backups are in the European Union. Several of the providers described above, such as AI model, voice (ElevenLabs), web search (Parallel), identity, subscription, push-notification and email-log providers, process information in the United States or other countries outside the European Union; the subprocessors list identifies these providers. Tjati and its providers may process information in countries other than the one where you live. Those countries may have different data-protection laws. Where required, we rely on safeguards such as an adequacy decision, approved standard contractual clauses or another lawful transfer mechanism, and apply supplementary measures appropriate to the transfer.

You may contact us for more information about the safeguard relevant to your information, subject to confidentiality and legal restrictions.

Children

Tjati is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. You must also meet any higher minimum age required in your country to consent to online services; where local law permits a younger person to use the Service only with parental authorization, that authorization is required.

If you believe a child has provided personal information in violation of this section, contact support@tjati.com. We will investigate and take appropriate steps.

Changes to this policy

We may update this policy as Tjati, our providers or legal requirements change. The “Last updated” date shows when this version was revised. If a change materially affects your rights or how we use personal information, we will provide notice through the Service, by email or by another legally required method before the change takes effect where required.

Your continued use after an update takes effect means the updated policy applies to later processing. Where consent is required for a new purpose, we will request it rather than rely only on continued use.

Contact us

Questions, privacy requests and complaints can be sent to Tjati using the address below. Include enough information for us to identify the relevant account and request, but do not send passwords, full payment-card details or highly sensitive content by email.

Tjati privacy and support

support@tjati.com