Josi

Effective July 24, 2026

Privacy Policy

Josi is operated by CTF Designs, LLC ("Josi," "we," "us," or "our"). This policy explains what information Josi may process, why it is used, and the choices available to you.

Information we process

• Account information: name, email address, authentication provider, and account-security status.
• Device and connection information: device name, operating system, connection settings, session identifiers, and credential status.
• Conversation content: messages and attachments you choose to send through Josi, as needed to deliver them to your selected AI or agent service.
• Technical information: diagnostics, crash details, security events, and basic usage information needed to operate and improve the service.
• Support communications: information you provide when contacting support.

How we use information

We use information to provide the app, authenticate users and devices, synchronize permitted settings, route requests to connected services, maintain security, troubleshoot failures, respond to support requests, and comply with law.

Connected services and AI providers

Josi can connect to third-party or self-hosted agent services selected by the user. Content sent to those services is governed by their terms and privacy practices. Josi does not control how an independently operated provider processes data.

Credential handling

We design Josi to use separate, revocable device credentials where supported. Sensitive credentials should be stored using operating-system secure storage. We do not sell credentials or conversation content.

Sharing

We do not sell personal information. We may share information with service providers that help us operate Josi, such as authentication, hosting, email, error-monitoring, and connected AI providers; when directed by you; to protect users and the service; or when legally required.

Retention and deletion

We retain information only as long as reasonably necessary for the purposes described above, legal obligations, security, dispute resolution, and service operation. You may request account or data deletion by emailing support@heyjosi.com.

Security

We use reasonable administrative and technical safeguards. No system is perfectly secure. Protect your devices, use strong authentication, and revoke lost devices promptly.

Children

Josi is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Your privacy rights

Depending on your location, you may have rights to access, correct, delete, or obtain a copy of personal information, or object to certain processing. Contact us to exercise those rights.

Changes

We may update this policy. We will update the effective date and provide additional notice when required.

Contact

Email security@heyjosi.com for privacy or security questions.