رازداری کی پالیسی
Last updated: October 24, 2026
1. Who we are and what this policy covers
This policy explains what personal information Jelli Finance Co. (“Jelli”, “we”) collects, and how we use and share it. It covers everything Jelli runs: the Jelli app for iPhone, iPad and Android, our websites jelli.us and jelli.app, and Jelli for AI assistants at mcp.jelli.us.
Jelli is a budgeting app, not a bank. We never move your money. Jars, transfers and assignments in Jelli are entries in your budget. Your real money stays in your bank accounts.
Questions? Email us at help@jelli.us.
2. Information we collect
In the app. We collect what you give us, what you ask us to import from your bank or Apple Card, and a small amount of device information the app needs to work. The app has no advertising or analytics SDKs, and we don’t track you across other companies’ apps or websites.
| Category | What we collect | Where it comes from |
|---|---|---|
| Account | Email address; your name, if you add one or your Apple or Google account shares it; language, time zone, currency, and whether the app lock is on. If you sign in with Apple or Google, we receive your email address and an account identifier from them. If you create a passkey, we store its public key and an identifier, never your fingerprint, face or device passcode. | You, when you sign up and use Settings, and Apple or Google if you sign in with them |
| Sign-in | How you sign in: a link sent to your email, Sign in with Apple or Google, or a passkey. For a passkey we store only its public key; your fingerprint or face never leaves your device. A code for continuing on your phone from jelli.app works once and expires after 10 minutes. | You, Apple or Google, when you sign in |
| Bank and card data | Institution name, account names, the last 4 digits of each account number, account types, balances, and transactions (date, amount, merchant, category, pending or posted) | Plaid, when you connect an account. We never see your bank username or password. |
| Apple Card, Apple Cash and Savings | Transactions and balances for these accounts | iPhone only. Apple’s FinanceKit, read on your iPhone only after you allow it in the iOS prompt, then sent through Plaid to us |
| Your budget | Jars, goals, budget amounts, assignments of transactions to jars, Budget Allocation settings, merchant-to-jar choices, JelliBEANS and achievements | You, as you use the app |
| Notes and photos | A note you write on a transaction, and up to 5 photos you add to it, such as its receipt. Your phone resizes each photo and removes its location and other photo details before sending it. | You, from the camera or a photo you pick |
| JJ conversations | Your messages to JJ, JJ’s replies, and facts you ask JJ to remember | You |
| Receipts | The text of a receipt you scan, with long number strings such as card numbers removed on your phone | The camera or a photo you pick. The text is read on your device (Apple’s Vision on iPhone and iPad, Google’s ML Kit on Android), and only that text is sent to us to match items to your jars. The photo stays on your phone unless you turn on Attach receipt photo, which adds it to the transaction’s photos. We don’t store the receipt text. |
| Support | Your messages to us in the app or by email to help@jelli.us, and our replies | You |
| Subscriptions | The plan you bought, its renewal and expiry dates, and the store’s transaction or purchase identifiers. Never your payment card. | Apple, Google Play or Stripe (on jelli.app), when you buy or restore, and their notifications to our server |
| Promo codes | The code you entered and when | You |
| Sharing | Email addresses of people you invite to your Jelli, and who made each change in a shared Jelli | You and the people you invite |
| Connected AI assistants | Which assistant you connected (Claude or ChatGPT), when, and when it last used Jelli | You, when you approve a connection |
| Device and usage | Push notification token (Apple Push Notification service on iPhone and iPad; Firebase Cloud Messaging on Android), an identifier for this installation of the app, app version, platform, device model and system version sent with each request, device language, and IP address in our server logs | Your device, automatically |
Face ID (on iPhone and iPad) and fingerprint, face or screen-lock unlock (on Android) are checked by your device. Jelli never receives biometric data.
On our website.
| Category | What we collect | Where it comes from |
|---|---|---|
| Waitlist and newsletter | First name, last name, email address, and the email or code of the person who referred you | You, when you fill in a sign-up form |
| Website chat | What you type into the “Ask AI” chat | You |
| Visits | Pages you view, how you got here, your browser and device type, and approximate location from your IP address. This is for jelli.us only: the apps and jelli.app don’t collect your location | Google Analytics cookies, automatically |
| Spam protection | Browser and interaction signals used to tell people from bots | Google reCAPTCHA, when a page with a form loads |
3. How we use your information
We use your information to run Jelli for you. We don’t sell it, and we don’t use it for advertising.
- • Run your budget. Import your transactions, keep balances and jars up to date, and calculate what’s reserved for your credit cards.
- • AI features. Build your starter budget, suggest a jar for each transaction, answer you in JJ, and read receipts you scan. Section 4 names the AI providers involved.
- • Notifications. Send the notifications you’ve allowed: daily reminders, a jar running over, a low bank balance, a Budget Allocation ready to split, support replies and sharing invitations.
- • Updates by email. Send the waitlist and newsletter emails you signed up for on our website. Every email has an unsubscribe link.
- • Subscriptions. Check with Apple or Google Play whether your subscription is active and which plan you’re on.
- • Support. Answer your questions and fix problems with your account. Our support staff can see your account when you ask for help.
- • Security. Prevent abuse, for example by rate-limiting sign-in links and promo codes, and by keeping bots off our website forms.
- • Improve Jelli. Look at totals, such as how many people use a feature or visit a page. We don’t build advertising profiles.
- • Legal. Meet legal obligations and enforce our terms.
If you’re in the EEA or UK, we rely on these legal bases: our contract with you (running Jelli), your consent (for example Apple Card import, notifications, newsletter emails and analytics cookies, which you can withdraw at any time), and our legitimate interests (keeping Jelli secure and improving it).
4. AI features and the AI providers we use
Some Jelli features send parts of your data to outside AI providers, which process it for us and send back a result. Every request runs under zero data retention, so the provider doesn’t store what Jelli sends. The table lists each feature, what it sends and when.
| Feature | What is sent | When |
|---|---|---|
| JJ, the in-app assistant | Your messages, the jar balances, transactions (with your notes on them) and spending JJ looks up to answer, and facts you asked JJ to remember | Each time you message JJ |
| Choosing a reply model for JJ | The first 1,500 characters of your message and a short summary of the conversation | Each time you message JJ |
| Jar suggestions | Merchant names, amounts and your jar names | After each import of new transactions, unless you turn off Settings › JJ suggestions |
| Your starter budget | Spending totals by category, your top merchants and your money goal | Once, after you connect your first account |
| Receipt scanner | The receipt text (never the photo), the purchase’s merchant, amount and date, and your jar names | Each time you scan a receipt |
| Support | Your support message, and the account details our team needs to answer it | Each time you write to support |
| “Ask AI” chat on jelli.us | What you type into the chat | Each time you send a message |
- • Turning it off. You can turn off jar suggestions in Settings › JJ suggestions. JJ, the receipt scanner and the website chat only run when you use them.
- • Agreeing to it. Before you use Jelli, the app asks you to agree to this policy, the Terms of Use and Jelli’s use of AI providers, in one tap. Jelli can’t be used without that agreement, so to withdraw it, delete your account (Profile › Delete account, or jelli.app/delete).
- • Photos. Photos you add to transactions are never sent to an AI provider. Your notes on transactions are, when JJ or an assistant you connected looks at those transactions.
- • Website chat. The website chat answers questions about Jelli and can’t see your Jelli account. Please don’t type bank details or other sensitive information into it.
- • Accuracy. AI can make mistakes. Check what JJ suggests before you rely on it. JJ never changes your budget without asking you to confirm first.
- • Your own AI assistant. If you connect Claude or ChatGPT to Jelli yourself, that’s covered in section 6.
5. Who we share it with
We share personal information only with the service providers below, which run parts of Jelli for us, and in the legal cases listed after the table. We don’t sell personal information, and we don’t share it for cross-context behavioral advertising.
| Provider | What they do for Jelli | What they receive |
|---|---|---|
| Plaid | Connects your bank and card accounts and delivers their transactions | Your bank login (Plaid only, never us) and the account data in section 2. Plaid’s own End User Privacy Policy applies. |
| Apple | App Store purchases, push notifications, Game Center, FinanceKit, Sign in with Apple | Subscription records, notification tokens, Game Center scores and achievements |
| Google Play purchases, push notifications on Android (Firebase Cloud Messaging), Sign in with Google, and ML Kit text recognition | Subscription records, notification tokens, your Google account’s email address and identifier if you sign in with Google, and from ML Kit only anonymous diagnostics (device model, app version, performance and error codes), never a receipt’s image or text | |
| Stripe | Processes subscriptions bought on jelli.app (Stripe and Link act as the seller) | Your email address, the payment details you enter on Stripe’s pages (never shared with us), and your plan |
| Supabase | The app’s database, and sign-in and invitation emails | Everything in section 2 that we store for the app |
| Vercel | Hosts the app’s servers and stores the photos you add to transactions | Requests to our servers, server logs, and those photos, which we encrypt before they’re stored |
| AI providers | AI features, see section 4 | Only what section 4 lists for each feature, under zero data retention |
| Our email provider | Our help@jelli.us mailbox | Emails you send to support |
| Our newsletter email service | Keeps our waitlist and newsletter list and sends those emails | Your name, email address and referrer |
| Google Analytics and reCAPTCHA | Website visit statistics and spam protection | The website data in section 2 |
Notifications on jelli.app go through your browser maker’s push service (for example Apple, Google or Mozilla).
We may also share information:
- • when the law requires it, or to protect the rights, property or safety of Jelli, our users or others;
- • with a buyer or successor if Jelli is involved in a merger, acquisition or sale of assets, under this policy’s protections;
- • with anyone else when you ask us to, for example a person you invite to your Jelli or an AI assistant you connect (section 6).
Our website links to our pages on Facebook, Instagram and LinkedIn. Those companies’ own policies apply when you visit them.
6. Sharing your Jelli, and connecting your own AI assistant
Share my Jelli. You can invite someone by email to help run your budget.
- • We send them an invitation by email or notification.
- • Once they accept, they can see and change your jars, transactions, budget and allocation, and use JJ with your budget.
- • They can’t see or change your bank connections, Profile, subscription or rewards.
- • We record which of you made each change.
- • You can end the share at any time, and so can they.
- • Before you invite someone, make sure they’re happy to receive an email from Jelli.
Connect your AI. You can let Claude (by Anthropic) or ChatGPT (by OpenAI) use Jelli for you from that assistant.
- • You approve each connection in Jelli, which shows what the assistant can and can’t do.
- • Once connected, the assistant can read your jars, transactions (with your notes, never your photos) and spending, and propose changes that apply only after you confirm them.
- • What you share with your assistant is then handled under that company’s privacy policy and your account with them, not ours.
- • You can disconnect at any time in Profile › Connect your AI. A connection unused for 90 days expires.
7. Subscriptions and payments
Apple handles payments for subscriptions bought on iPhone or iPad, Google Play handles payments for subscriptions bought on Android, and Stripe handles payments for subscriptions bought on jelli.app (Stripe and Link act as the seller). We never see your card number or billing address.
- • When you buy or restore a subscription, the app sends us the store’s record of it (Apple’s signed transaction or Google Play’s purchase token), and we verify it with Apple or Google.
- • Apple and Google Play also notify our server of renewals, cancellations and refunds. This keeps your plan up to date even when the app is closed.
- • We store the plan, its dates and the store’s transaction or purchase identifiers so we know which features you can use.
- • To cancel or change your plan, go to Settings › Apple Account › Subscriptions on your iPhone, Google Play › Payments & subscriptions › Subscriptions on Android, or Profile › Subscription on jelli.app. Deleting your Jelli account doesn’t cancel an App Store or Google Play subscription.
- • Refunds are requested from Apple at reportaproblem.apple.com. Refunds for Android purchases are requested from Google Play, and for purchases on jelli.app by email to help@jelli.us.
8. Security, retention and deleting your data
Delete your app account at any time: in the app, Profile › Delete account (iPhone, iPad and Android). Deletion takes effect immediately. You can also delete it without the app at jelli.app/delete.
- • We disconnect every bank and card from Plaid.
- • We delete your account, transactions and their notes and photos, jars, budget, JJ conversations, rewards and connected AI assistants.
- • If you signed in with Apple, deleting your account also revokes Jelli’s access to your Apple ID.
- • Any copies in our backups are deleted when those backups are replaced, within 30 days.
- • You can also email help@jelli.us from the address you sign in with to ask us to delete your account or some of your data, which we do within 30 days, or to remove you from our waitlist and newsletter list.
Security.
- • All traffic between the app and our servers is encrypted.
- • Plaid access tokens are encrypted again at rest and never sent to your phone.
- • Photos you add to transactions are encrypted again before they’re stored. Only you and people you share your Jelli with can see them, and they’re never on a public link.
- • Each user’s data is kept separate in our database.
- • Only Jelli staff who need to, for support or to keep Jelli running, can see an account.
- • You can lock the app with Face ID on iPhone and iPad, or your fingerprint, face or screen lock on Android.
- • On Android, Jelli turns off app backups, so your data isn’t copied into Google’s backups. Sign in again on a new phone.
- • No system is perfectly secure. Please keep your email account secure, since a sign-in link is one way into your account. If you sign in with Apple, Google or a passkey, keep that account and your devices secure too.
How long we keep it.
- • We keep your app information while your account is open.
- • If your subscription or free period ends, we stop syncing your banks and disconnect them from Plaid at the end of that month. We keep your budget and past transactions so you can pick up where you left off, for up to 12 months after the subscription or free period ends.
- • Receipt text is not stored.
- • Support conversations (emails and in-app support messages) are kept for up to 2 years after the last message, so we can answer follow-ups, then deleted.
- • A transaction photo is deleted when you delete it, or within a day after its transaction is removed by your bank.
- • We keep your waitlist and newsletter details until you unsubscribe or ask us to remove them.
9. Cookies on our website
Our website uses a few cookies. Google Analytics sets cookies (such as _ga) to count visits. Google reCAPTCHA uses cookies to keep bots off our forms. WordPress sets cookies only for our own staff when they sign in. You can block or delete cookies in your browser settings, and opt out of Google Analytics with Google’s opt-out add-on. jelli.app keeps you signed in and remembers your settings in your browser’s storage; it has no analytics or advertising cookies. The phone and tablet apps don’t use cookies.
10. Your choices and rights
Your choices.
| You can | Where |
|---|---|
| Export your transactions | App: Settings › Export your data |
| Disconnect a bank or remove one account | App: Profile › Bank accounts › Manage |
| Turn off jar suggestions | App: Settings › JJ suggestions |
| Stop Apple Card import | iPhone Settings › Apps › Jelli › Wallet |
| Turn off notifications | iPhone Settings › Notifications › Jelli, or Android Settings › Apps › Jelli › Notifications, or your browser’s site settings for jelli.app |
| End a share or disconnect an AI assistant | App: Profile |
| Delete your account | App: Profile › Delete account, or jelli.app/delete |
| Hide your amounts on home and lock screen widgets | Edit the widget › Hide amounts, or turn on the app lock |
| Stop newsletter emails | The unsubscribe link in any email, or email help@jelli.us |
Privacy rights. Depending on where you live, you may have the right to access, correct or delete your personal information; to receive a copy of it; to object to or restrict some uses; and to withdraw consent. Email help@jelli.us to use any of these rights. We don’t treat you differently for using them.
- • EEA and UK. You can also complain to your local data protection authority.
- • California. We don’t sell or share personal information as the CCPA defines those terms.
- • Children. Jelli is not for anyone under 13, or under 16 in the EEA and UK. We don’t knowingly collect their information.
- • International transfers. Jelli is run from the United States, and your information is transferred to, processed and stored there.
- • Changes. We’ll post updates here and change the date at the top. We’ll tell you in the app or by email before a significant change takes effect.
Contact. Jelli Finance Co., 4562 W Temple Shadows Dr, Cedar Hills, UT 84062-8669, United States. Email: help@jelli.us.