Privacy policy

Last updated 4 October 2026

This policy explains what Jogi (the Telegram bot @jogir_bot and this website) collects, why, who it is shared with and how to delete it.

What Jogi collects

• Telegram: your Telegram id, name, username and language, and the messages, voice notes, photos and files you send to Jogi.
• What you tell Jogi: preferences, settings, reminders and the facts Jogi remembers about your life so it can help you (its "memory").
• Google, only if you connect it: your Google account's email address, name and profile picture; your Google Calendar events; and your Gmail messages (see below for exactly how they are used).
• Payments, only if you subscribe: whether you're subscribed, how you paid (Telegram Stars or a card) and until when. Card details go to Polar, never to Jogi.

How Jogi uses Google user data

Connecting Google shows two Google screens:

• Calendar, from Jogi: permission to see and edit the events on your calendars (and your email address and name, to know which account is connected). Jogi stores these Google tokens itself, encrypted.
• Gmail, from Composio: a service Google has verified for Gmail access. Jogi reads and sends your Gmail through Composio, which holds the Gmail tokens; Jogi stores only a reference to your connection. Composio's screen asks for broad access (all of Gmail, and some contact and profile details). Jogi only uses what's described below: it never deletes email and doesn't use your contacts or other profile details.

Jogi uses this access only to provide the features you see in the chat:

• Calendar: reading your events to answer questions, brief you, remind you and tell you about new invites and changes; creating, changing and deleting events when you ask it to.
• Gmail, reading: searching and reading your emails when you ask about them, and checking new mail in the background (about every 15 minutes) so it knows what's going on and can tell you when a new email needs you (you can turn that off in /settings). From personal emails worth remembering Jogi keeps the subject, the sender and recipients, the date and a short excerpt (at most 300 characters) in its memory. Newsletters and automated mail are skipped. Full email bodies are fetched only while answering you and are not stored.
• Gmail, writing: saving drafts and sending emails that you asked Jogi to write. By default Jogi shows you each email and sends it only after you approve it. You can switch to drafts only in /settings.
• Account details: your email address identifies which Google account is connected.

In /settings you choose what Jogi may learn from your Google account in the background: calendar and important email, calendar only, or nothing (Jogi then only looks when you ask).

Who we share Google user data with

Jogi shares, transfers or discloses Google user data (your Gmail and Google Calendar data and your Google account's email address and name) only with these parties, only the part each one needs, and only to provide the features described above:

• Composio (Gmail): Jogi's Gmail requests and Google's answers pass through Composio, which holds the Gmail access tokens. Composio connects with its own Google-verified sign-in, which is why its consent screen lists its own permissions; Jogi's own Google sign-in asks only for your name, email address and calendar events.
• OpenAI (AI processing): when you ask about your email or calendar, the parts needed to answer (for example an email's subject, sender and text, or an event's title and time) are sent to OpenAI to write the reply, and short excerpts are sent to build search indexes over your memory. OpenAI processes them for Jogi and does not use them to train its models.
• Telegram: Jogi's replies, which can contain details from your email or calendar, are delivered to you through Telegram.
• Railway and Neon (hosting): Jogi's servers and database, where the data Jogi keeps is stored, encrypted in transit and at rest.
• Tavily, Browserbase and E2B: only when you ask Jogi to use a detail from your email or calendar for a web search, on a website or in a file, and then only that detail.

Google user data is not shared with anyone else: it is never sold, never shared with advertisers or data brokers, and never shown to other Jogi users (the opt-in people directory shows only the profile you approve). The only exceptions are when the law requires it, or as part of a merger or acquisition, in which case you will be told first.

Limited Use

Jogi's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The use of information received from Google Workspace APIs (Gmail and Calendar) will adhere to the Google Workspace API User Data and Developer Policy, including the Limited Use requirements.

In practice, Google user data is:

• used only to provide and improve the user-facing features described above;
• never sold, never used for advertising, and never used to determine credit-worthiness or for lending;
• never used to develop, improve or train generalised or non-personalised AI or machine-learning models;
• transferred to others only as needed to provide those features (the service providers listed below), to comply with the law, or as part of a merger or acquisition with notice to you;
• not read by any person, unless you give us permission for specific messages (for example when you ask for support), it's needed for security (such as investigating abuse), or the law requires it.

Service providers

Jogi uses these providers to run. Each gets only what it needs to do its part:

• Railway: hosts Jogi's servers.
• Composio: connects Jogi to your Gmail (holds the Gmail access tokens and passes Jogi's Gmail requests on to Google).
• Neon: hosts Jogi's database (encrypted in transit and at rest).
• OpenAI: the AI models that write Jogi's replies. The text of the conversation, including any email or calendar details needed to answer you, is sent to generate that reply. Also speech-to-text for voice notes, text-to-speech, and search indexes over your memory.
• Telegram: delivers messages between you and Jogi, signs you in on jogi.am, and processes payments in Telegram Stars.
• Polar: sells the Jogi subscription when you pay by card on jogi.am (it is the merchant of record: it takes the payment, handles tax, receipts and refunds). Polar gets your email address and card details; Jogi only learns whether you're subscribed and until when.
• Tavily, Browserbase and E2B: web search, a cloud browser and a code sandbox, used only when you ask Jogi to search the web, do something on a website or run a calculation.

Security

Jogi's Google Calendar tokens are stored encrypted; Composio holds the Gmail tokens and never gives them to Jogi. The database enforces that each person's data can only be read while working for that person. All connections use HTTPS/TLS.

Keeping and deleting your data

• Jogi keeps your data while you use it, until you delete it.
• Ask Jogi in the chat to forget something, or see what it remembers with /memory.
• Ask Jogi to disconnect Google (or send /disconnect): it revokes both the Calendar access and the Gmail connection at Composio, and deletes its Google tokens. You can also remove access at myaccount.google.com/connections. What Jogi already learned stays in its memory until you ask it to forget it.
• To delete everything (your account, memory, messages and Google-derived data), email alisaffarini8@gmail.com or write to @jogir_bot. We delete it within 30 days and confirm when it's done.

Children

Jogi is not meant for anyone under 16.

Changes

If this policy changes in a way that matters, Jogi will tell you in Telegram before the change applies.

Contact

email alisaffarini8@gmail.com or write to @jogir_bot.