Privacy policy

Last updated 4 October 2026

This policy explains what Jogi (the Telegram bot @jogi_staging_bot and this website) collects, why, who it is shared with and how to delete it.

What Jogi collects

• Telegram: your Telegram id, name, username and language, and the messages, voice notes, photos and files you send to Jogi.
• What you tell Jogi: preferences, settings, reminders and the facts Jogi remembers about your life so it can help you (its "memory").
• Google, only if you connect it: your Google account's email address (accounts connected before November 2026 also gave their name and profile picture); your Google Calendar events; your Gmail messages; and your Google Drive files (see below for exactly how they are used).
• Payments, only if you subscribe: whether you're subscribed, how you paid (Telegram Stars or a card) and until when. Card details go to Polar, never to Jogi.
• Ambassador applications, only if you apply on jogi.am/ambassador: your name, email, university, GPA, university clubs, your answers and your resume, so the Jogi team can review your application and contact you. If you give your Telegram username, the team may look at how you use Jogi while reviewing it.

How Jogi uses Google user data

Connecting Google shows up to three Google screens, all from Composio, a service Google has verified for Calendar, Gmail and Drive access. Composio holds the Google tokens; Jogi stores only a reference to each connection.

• Calendar: permission to see and edit your calendars and their events. (Accounts connected before November 2026 gave Calendar to Jogi's own Google sign-in instead, which asked only for your name, email address and calendar events; Jogi stores those tokens itself, encrypted, until you reconnect.)
• Gmail: Jogi reads and sends your Gmail through Composio. Composio's screen asks for broad access (all of Gmail, and some contact and profile details). Jogi only uses what's described below: it never deletes email and doesn't use your contacts or other profile details.
• Drive: it covers your Drive files and Google Docs, Sheets, Slides and Forms; Composio's screen asks for access to all of your Drive. Jogi only uses what's described below: it never deletes or shares your files.

Jogi uses this access only to provide the features you see in the chat:

• Calendar: reading your events to answer questions, brief you, remind you and tell you about new invites and changes; creating, changing and deleting events when you ask it to.
• Gmail, reading: searching and reading your emails when you ask about them, and checking new mail in the background (about every 15 minutes) so it knows what's going on and can tell you when a new email needs you (you can turn that off in /settings). From personal emails worth remembering Jogi keeps the subject, the sender and recipients, the date and a short excerpt (at most 300 characters) in its memory. Newsletters and automated mail are skipped. Full email bodies are fetched only while answering you and are not stored.
• Gmail, writing: saving drafts and sending emails that you asked Jogi to write. By default Jogi shows you each email and sends it only after you approve it. You can switch to drafts only in /settings.
• Drive: finding and reading your files when you ask about them (the text of a document you asked Jogi to read is kept so later questions about it are instant; ask Jogi to forget it), and making Google Docs, Sheets, Slides and Forms, or adding to a Sheet, when you ask: Jogi shows you what it will make and does it only after you approve. Jogi doesn't look through your Drive on its own.
• Account details: your email address identifies which Google account is connected.

In /settings you choose what Jogi may learn from your Google account in the background: calendar and important email, calendar only, or nothing (Jogi then only looks when you ask).

Who we share Google user data with

Jogi shares, transfers or discloses Google user data (your Gmail, Google Calendar and Google Drive data and your Google account's email address and name) only with these parties, only the part each one needs, and only to provide the features described above:

• Composio (Calendar, Gmail and Drive): Jogi's Google requests and Google's answers pass through Composio, which holds those access tokens. Composio connects with its own Google-verified sign-in, which is why its consent screens list its own permissions.
• OpenAI (AI processing): when you ask about your email or calendar, the parts needed to answer (for example an email's subject, sender and text, or an event's title and time) are sent to OpenAI to write the reply, and short excerpts are sent to build search indexes over your memory. OpenAI processes them for Jogi and does not use them to train its models.
• Telegram: Jogi's replies, which can contain details from your email or calendar, are delivered to you through Telegram.
• Railway and Neon (hosting): Jogi's servers and database, where the data Jogi keeps is stored, encrypted in transit and at rest.
• Serper, Browserbase and E2B: only when you ask Jogi to use a detail from your email, calendar or Drive for a web search, on a website or in a file, and then only that detail; E2B also reads the text out of a document (an attachment or a Drive file) you asked Jogi to read.

Google user data is not shared with anyone else: it is never sold, never shared with advertisers or data brokers, and never shown to other Jogi users. The only exceptions are when the law requires it, or as part of a merger or acquisition, in which case you will be told first.

Limited Use

Jogi's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The use of information received from Google Workspace APIs (Gmail, Calendar and Drive) will adhere to the Google Workspace API User Data and Developer Policy, including the Limited Use requirements.

In practice, Google user data is:

• used only to provide and improve the user-facing features described above;
• never sold, never used for advertising, and never used to determine credit-worthiness or for lending;
• never used to develop, improve or train generalised or non-personalised AI or machine-learning models;
• transferred to others only as needed to provide those features (the service providers listed below), to comply with the law, or as part of a merger or acquisition with notice to you;
• not read by any person, unless you give us permission for specific messages (for example when you ask for support), it's needed for security (such as investigating abuse), or the law requires it.

Service providers

Jogi uses these providers to run. Each gets only what it needs to do its part:

• Railway: hosts Jogi's servers.
• Composio: connects Jogi to your Gmail and Drive (holds those access tokens and passes Jogi's requests on to Google).
• Neon: hosts Jogi's database (encrypted in transit and at rest).
• OpenAI: the AI models that write Jogi's replies. The text of the conversation, including any email or calendar details needed to answer you, is sent to generate that reply. Also speech-to-text for voice notes, text-to-speech, and search indexes over your memory.
• Telegram: delivers messages between you and Jogi, signs you in on jogi.am, and processes payments in Telegram Stars.
• Polar: sells the Jogi subscription when you pay by card on jogi.am (it is the merchant of record: it takes the payment, handles tax, receipts and refunds). Polar gets your email address and card details; Jogi only learns whether you're subscribed and until when.
• Serper, Browserbase and E2B: web search, a cloud browser and a code sandbox, used only when you ask Jogi to search the web, do something on a website or run a calculation.

Security

Nobody is reading your chats: Jogi handles them automatically to write its replies.

Jogi's Google Calendar tokens are stored encrypted; Composio holds the Gmail and Drive tokens and never gives them to Jogi. The database enforces that each person's data can only be read while working for that person. All connections use HTTPS/TLS.

Keeping and deleting your data

• Jogi keeps your data while you use it, until you delete it.
• Ask Jogi in the chat to forget something, or see what it remembers with /memory.
• Ask Jogi to disconnect Google (or send /disconnect): it revokes the Calendar access and the Gmail and Drive connections at Composio, and deletes its Google tokens. You can also remove access at myaccount.google.com/connections. What Jogi already learned stays in its memory until you ask it to forget it.
• To delete everything (your account, memory, messages, Google-derived data and an ambassador application), email support@jogi.am or write to @jogi_staging_bot. We delete it within 30 days and confirm when it's done.

Children

Jogi is not meant for anyone under 16.

Changes

If this policy changes in a way that matters, Jogi will tell you in Telegram before the change applies.

Contact

email support@jogi.am or write to @jogi_staging_bot.