Privacy Policy

1. Scope of this policy

This policy explains in plain language how the Jawabi service handles information when you visit the website or use a Jawabi account and its features. It applies to the Jawabi-branded service; your mobile network operator may provide separate privacy notices for its services and billing.

2. Information we use

We use only the information needed to provide and secure the service.

• Mobile number and account-authority data: trusted verification signals and a protected identifier derived from the number, rather than the raw number in conversation records.
• Consent and subscription records: the accepted text version and time, plus subscription, renewal, cancellation and necessary billing-status signals.
• Session and security data: protected session and device identifiers, expiry times, access attempts and abuse-prevention signals.
• Conversations and memory: your questions, service answers, conversation titles and memory used to maintain conversational continuity.
• Usage and security metadata: counters, errors, timing, service consumption and safety decisions, without raw chat text in routine operational logs.
• Browser preferences: language, direction and light or dark theme when selected or supplied by your browser.

3. Why we use this information

We use information to confirm access authority, provide chat and memory, manage subscriptions and sessions, enforce usage limits, protect users and the platform, diagnose faults, fulfil erasure requests and communicate important changes.

4. Operator and billing boundary

Your mobile network operator may manage line eligibility, charges to balance or bill, and subscription status. Jawabi and the operator exchange the minimum account and subscription signals needed for those functions. The operator does not need your chat text for billing or routine operational support, and its own terms and retention practices may apply.

5. AI processing

Jawabi processes the text needed to provide an answer within its protected service environment in the European Union after applying the available safeguards.

Your data is used to provide and protect the service under this policy, and we do not describe processing as absolute zero retention. Limited operational signals without conversation content may remain for safety and abuse prevention.

6. Retention

Chat content and its related thought signatures are deleted from GIT-controlled stores after 30 days through an automatic expiry policy. Consent, subscription, billing and security records may remain for the period needed for their operational purpose or applicable obligation.

Operational signals without conversation content may remain for the period needed for safety and abuse prevention, so we do not describe processing as absolute zero retention.

7. Account erasure and retained records

Account erasure removes the user partition from GIT-controlled stores, including conversations, memory and its jobs, user and subscription data, associated events, sessions and revocable grants.

A small set of content-free records remains to prove erasure, prevent old data from returning and protect the service: a content-free audit record, user-generation tombstone, durable erase-job receipt, operator-event replay receipt and short-lived device abuse limit. These records contain no raw mobile number, prompt, answer or conversation memory.

8. Security

We use encryption in transit and at rest, operator data separation, limited access, protected identifiers instead of raw mobile numbers where possible, and automated safety and security monitoring. No technical measure removes every risk, so we review and update controls continuously.

9. Your choices and rights

You can manage conversations and memory, cancel renewal and request account erasure. Where data-protection law applies, your rights may include access, rectification, erasure, restriction, portability and objection. We may need to verify account authority before acting, and limited legal or technical exceptions may apply.

10. Children and eligibility

You must be legally able to enter a binding agreement in your country. If you are below the required legal age, use the service only with permission from a parent or legal guardian. The mobile account holder may hold subscription authority even when someone else uses the device.

11. Changes and contact

We may update this policy when the service or data practices change. We will publish the new version and effective date, and provide appropriate notice for material changes. For questions or privacy requests, email a.abualyaqeen@git-jo.net.