§Legal

Privacy Policy

Last updated June 21, 2026

Jarvis is a personal assistant that reads the tools you already use — your calendar, email, coursework, and notes — and turns them into a single, current picture of what you need to do next. Operating that assistant means handling data on your behalf, and this policy explains exactly what we access, why, where it goes, and how you stay in control.

Jarvis is operated by David (Xizhen) Liu as a sole proprietor (“Jarvis,” “we,” “us”). If anything here is unclear, email davidxizhenliu@gmail.com.

Information we collect

We only collect what is needed to run the assistant for you:

  • Account information. Your name and email address, provided when you sign in (for example, through Google sign-in).
  • Data from services you connect. When you authorize an integration, Jarvis reads the relevant data from it — deadlines and coursework from Canvas, tasks and pages from Notion, events from Google Calendar and Apple/CalDAV calendars, tasks from Todoist, and messages from Gmail. You choose which services to connect, and you can disconnect any of them at any time.
  • Content you provide. Files, notes, or text you upload or paste in for planning.
  • Usage data. Basic, privacy-respecting analytics about how the app is used (for example, page views) so we can keep it working and improve it.

How we use your information

Your data is used solely to provide the assistant’s features to you:

  • Build and keep current your schedule, task list, and daily plan.
  • Surface deadlines, conflicts, and the next thing you should work on.
  • Send you the updates you ask for — for example, a morning plan or an evening reminder by text — and only while the assistant is active (not paused).
  • Answer your questions about your own schedule, messages, and tasks.

We do not sell your data, use it for advertising, or use it to build or train generalized AI/ML models.

Google user data

If you connect a Google account, Jarvis requests only the access it needs, and uses each permission for one specific purpose:

  • Google Calendar (read). To read your events so your plan reflects your real schedule.
  • Google Calendar (events). To add or update the task blocks you ask Jarvis to put on your calendar. Jarvis does not touch events it did not create.
  • Gmail (read-only). To find obligations and context buried in your email (a deadline, an assignment, a reply you owe) and surface them. Jarvis cannot send, modify, or delete your email.

Jarvis’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You can review or revoke Jarvis’s access to your Google account at any time at myaccount.google.com/permissions.

AI processing

To generate plans, summaries, and answers, Jarvis sends the relevant content to Anthropic (the maker of Claude) for processing. This data is used only to produce a result for you; under Anthropic’s terms it is not used to train their models. It is processed to serve your request and not retained by the model provider for other purposes.

How we store and protect your data

Your data is stored in our database hosted by Supabase, with access restricted to your own account. Data is encrypted in transit, access tokens for connected services are stored with restricted access, and only the operator may access systems for security, debugging, or legal reasons. No system is perfectly secure, but we limit what we collect and who can reach it.

Who we share it with

We do not sell your data. We share it only with the service providers that make Jarvis run, and only as needed to operate the assistant:

  • Supabase — database and authentication.
  • Vercel — application hosting.
  • Anthropic — AI processing (see above).
  • Telnyx — delivering text-message updates, if you enable them.
  • Services you connect — Google, Notion, Instructure (Canvas), Todoist, and others, only to read or write the data you authorized.

We may also disclose data if required by law.

Retention and deletion

You stay in control of your data:

  • Disconnect a source. Removing an integration stops further access and removes its stored tokens.
  • Delete your account. Email davidxizhenliu@gmail.com and we will delete your account and associated data.
  • Revoke Google access. Use myaccount.google.com/permissions at any time, independently of Jarvis.

Students and younger users

Jarvis is built with students in mind and is not directed to children under 13. If you are under the age of majority where you live, please use Jarvis only with the involvement of a parent, guardian, or your school.

Changes to this policy

We may update this policy as Jarvis evolves. When we make material changes, we will update the date above and, where appropriate, notify you.

Contact

Questions about your privacy or this policy? Email davidxizhenliu@gmail.com.