Privacy Policy

Last updated: 6 August 2026

This Privacy Policy explains how Incremental AS (“Incremental”, “we”, “us”), a company registered in Norway, handles information in connection with the Jeevo applications for mobile, desktop and web (“Jeevo”, the “Service”).

The short version: We never see your passwords, and we never store your chats, your memory or your mail on our servers. Content you ask the AI to reason over is sent to the AI provider you choose so it can answer — that’s how any cloud AI works — but we don’t keep it. The two exceptions are spelled out plainly in Sections 4 and 5.

1. Data that lives on your device

The following is created and kept on your device. We do not have a copy of it:

Credentials — AI provider API keys, email app passwords and OAuth tokens, held in your device’s secure, biometric-gated vault (iOS Keychain / Secure Enclave, Android Keystore / StrongBox, or the browser’s non-extractable key storage on the web).
Your conversations — the messages you exchange with Jeevo, in an encrypted local database.
Personal memory — the context, preferences and facts Jeevo remembers about you, separated into global, work and private scopes.
Proactive findings — the appointments and reminders Jeevo surfaces from your connected accounts.

2. How your credentials are used

Some parts of Jeevo — the connectors that read your mail, the tools that search and read the web, and the AI calls themselves — run on our servers, so that we can fix and extend them without waiting for an app update.

When a request needs one of your credentials, your device sends that credential with that single request. It is held in memory for the duration of that request only, used to open the connection, and then discarded. It is never written to disk, never written to a log, and never included in anything sent to an AI provider. This applies equally to your mail passwords, your OAuth tokens, and your own AI provider keys if you choose to use them.

Correction to earlier versions of this policy. Previous versions stated that when you use your own provider keys the app contacts the AI provider directly and we receive none of that content. That is no longer accurate. Since the routing, tool and memory features moved to our servers, requests made with your own keys are relayed by our servers in exactly the same way as managed ones — your key travels with the request, is used once, and is never stored. What has not changed is that we never keep the key or the content.

3. Content processed to answer your requests

When you ask Jeevo to do something, the content needed to fulfil that request is sent to the AI provider you selected, or the one Jeevo automatically routed the request to. Every model in the app names its provider, its country, and whether that company trains on submitted data, before you choose it.

Requests transit our stateless service purely to be relayed to the provider and to meter usage for billing. We do not store the content of your requests or the AI’s responses.
When you connect a service such as email, the content you ask Jeevo to act on (for example, an email body to summarise) is retrieved by the connector and sent to the chosen AI provider to produce your answer. Your email credentials are never sent to any AI provider.
Files you upload for Jeevo to read are processed to extract their text or, for scans and images, to describe them, and are not retained after your request is answered.
When Jeevo browses a website interactively on your behalf, that browsing runs on your own device. Logins and form fields are filled from your vault locally; only the page content the AI needs to read is sent onward.

The AI providers process this content under their own privacy policies.

4. Media you ask Jeevo to generate

Images, video and music that Jeevo generates for you are stored on our servers, in a folder belonging to your account, so that they remain available in your conversation and on your other devices. This is the one category of content we retain. It is kept until you delete the conversation or your account, and it is not used to train anything.

5. Optional encrypted sync across devices

If you enable sync, your conversations, memory and connected-account settings are synchronised as end-to-end encrypted data. The encryption key is generated on your device and is not derived from your password; we store only ciphertext, which we cannot read. This works like a password manager: the sync exists so your devices can share data, not so we can access it.

So that signing in on a new device restores your data without a manual step, a copy of that encryption key is stored on your account sealed with a second key derived on your device from your password. Your password itself never reaches our servers — only a separate verifier derived from it. We therefore hold no means of opening the sealed copy. If you forget your password, the recovery code shown when you enabled sync is the only remaining way back to that data.

6. Information we do collect

To operate the Service we process a limited set of information:

Account data — your email address, an authentication verifier derived from your password, and the identifiers of devices you have confirmed as trusted.
Billing and usage — your balance, payments processed by our payment provider, and a record of each request’s model, token or unit counts and cost. We record how much was used, never what was in it.
Security records — short-lived one-time codes sent by email when you sign in on a new device.
Diagnostics — limited technical logs (such as error rates and latency) needed to keep the Service reliable and secure. These do not contain your credentials, your memory, or the content of your requests.
Support communications — if you email us, we process what you send in order to help you.

You can use Jeevo without an account. In that case we hold no email address for you, only an anonymous device identifier and its balance.

7. Payments

Payments are handled by Stripe. Card details are entered on Stripe’s own hosted checkout and are never seen or stored by us. If you save a card for automatic top-ups, Stripe retains it and we hold only a reference token.

8. Legal bases (GDPR)

Where the EU/EEA General Data Protection Regulation applies, we process information on the basis of: performance of our contract with you (providing the Service and billing), our legitimate interests (keeping the Service secure and reliable), and your consent where required. Incremental AS acts as the data controller for the information described in Sections 4, 5 and 6.

9. Sharing

We do not sell your personal data. We share information only with:

AI providers you choose or that Jeevo routes to, to fulfil your requests (see Section 3);
Service providers acting on our behalf — payment processing (Stripe), transactional email delivery, and hosting — under contract; and
Authorities, where required by law.

10. Retention

On-device data remains on your device until you delete it or remove the app. Encrypted sync data and generated media are retained until you delete them or delete your account, at which point they are removed. Billing and accounting records are retained as required by law. Diagnostic logs are kept only as long as needed for their purpose.

11. Your rights

Subject to applicable law, you may have the right to access, correct, delete, or export your personal data, to object to or restrict processing, and to lodge a complaint with a supervisory authority (in Norway, Datatilsynet). Because most of your data lives on your device, you can delete much of it directly in the app. Deleting your account from within the app removes your account record, your balance history, your encrypted sync data and your generated media. For anything else, contact us below.

12. Children

Jeevo is not directed at children under 16 (or the age of digital consent in your country). We do not knowingly collect personal data from children.

13. International transfers

The AI providers available in Jeevo are based in a number of countries, and each model states its provider’s country in the app before you select it. Where we transfer data internationally, we rely on appropriate safeguards as required by applicable law. If you prefer your requests to stay with providers in a particular jurisdiction, you can pin the models Jeevo is allowed to use.

14. Changes

We may update this Policy from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, communicated in the app.

15. Contact

Data controller: Incremental AS, Norway. For privacy questions or to exercise your rights, contact [email protected].

Incremental AS · Norway · Terms of Service