Privacy

Last updated 1 November 2026

This policy explains what happens to your information when you chat with Jupiter on Telegram or WhatsApp, and when you visit this website.

The short version

• Your phone number, email, addresses, exact location, ID and passport numbers, date of birth, the links you send and any passwords or codes you type go into our encrypted vault. The AI that helps Jupiter sees stand-ins for them, like [PHONE_1], never the details themselves.
• People's names are the exception. The AI sees names as you type them.
• Nothing is booked or bought until you tap Confirm at the live price. Jupiter never stores your card number.
• Google Calendar and Gmail stay off unless you connect them. Jupiter only adds, reads or sends what you ask for, and never sends an email until you tap Send. See Calendar and email.
• Voice notes are turned into text on our own server. The recording is never stored and never sent to an AI company.
• We don't sell your information, use it for advertising or use it to train AI models.
• Send /delete in the chat to erase your data at any time.

Who we are

Jupiter is run by its founder from South Africa. Our company registration details are available on request at [email protected]. We decide how your information is used, so we are responsible for it: the "responsible party" under South Africa's POPIA and the "controller" under the UK and EU GDPR.

Our Information Officer is our founder. For anything about your privacy, email [email protected].

What we collect

When you chat with Jupiter:

• Your chat account. On Telegram, your user ID, username and profile name, and the mobile number you share when you sign up. On WhatsApp, your phone number and profile name.
• Sign-up checks. Jupiter is open to mobile numbers in some countries only. When you sign up, we check that your number is a mobile number and which country it's from. If Jupiter isn't open in your country yet, or has reached its sign-up limit, your number goes on a waitlist and Jupiter messages you when you're in.
• What you send. Your messages, the text of your voice notes, and any location, contact card or link you share.
• Booking details, when you book in the chat: the name, mobile number and email for the booking, and any note you add for the restaurant.
• Traveller details, when you book a flight: each traveller's name as on their ID or passport, date of birth and gender, and for international trips their passport number, nationality, issuing country and expiry date.
• Places you save, like Home and Work.
• Accounts you link. If you link Uber: the login and password you save in your Jupiter Vault, and Uber's signed-in session.
• Calendar and email you connect. If you connect Google Calendar or Gmail: your Google account's email address, the access Google gives Jupiter, and the events and emails Jupiter handles for you. See Calendar and email.
• Things you ask Jupiter to follow, like a reminder, a parcel tracking number or a flight.
• Usage records: when you sent a message, which features you used, how long replies took and what they cost us. These are codes and counts, never what you wrote.

Jupiter can't read photos or documents yet. It doesn't open them or pass them on.

What the AI sees

Jupiter is built in two parts. One part holds your details in an encrypted vault and is the only part that talks to other services. The other part runs the AI. The AI gets stand-ins for your details.

• Swapped for stand-ins before the AI sees anything: phone numbers, email addresses, street addresses, exact locations and saved places, ID and passport numbers, dates of birth, booking references, links you send, and passwords or codes you type. The real values stay in the vault, encrypted with a key that belongs to you alone.
• Not hidden: people's names. The AI sees names as you type them, and your first name from your chat profile so it can greet you.
• A final check: every request from your conversation to the AI is checked before it leaves. If it contains one of your known details, a link you sent, or something that looks like a phone number, email, ID number, card number or exact location, it is blocked.
• Card numbers: if you type one, Jupiter removes it from your message, warns you and never uses it. The AI never sees it. An encrypted copy stays in the vault only so Jupiter can block that number from ever being sent out. After 24 hours it can't be used at all, and it is erased when you delete your data.
• Dietary needs and allergies aren't hidden. If you mention them, for example to find a vegan restaurant, the AI sees them as part of your request.
• Pages Jupiter reads for you: if you send a link to a public web page, Jupiter reads the page and the AI sees its text, but not the link. Links that look private, like sign-in, payment, document or email links, are never opened or sent anywhere.
• Tasks Jupiter carries out for you: when Jupiter books, orders or checks something for you, the AI may see the details that task needs, like your name, contact details, addresses and trip details. It never sees card details, and any request that still contains them is blocked.

Our filters are good but not perfect. Something you type, like an unusual address, could slip through. Please use your app's share buttons for locations and contacts instead of typing them.

Requests from your conversation carry a coded ID for you that changes every month, not your chat account. Our own logs hold codes, counts and timings only, never your messages, names, numbers or links.

Voice notes

Where voice notes are switched on, on Telegram and WhatsApp, Jupiter downloads your note into memory and turns it into text on our own server, in the language you spoke. The recording is never saved to disk, never stored and never sent to an AI company or any other outside service. The copy in memory is wiped as soon as the text is ready.

The text is then handled exactly like a typed message, so your details are swapped for stand-ins before the AI sees it, and Jupiter replies in the language you spoke. Jupiter remembers the language of your recent voice notes so it can transcribe the next one well. Notes over 3 minutes are refused.

How we use your information

• To do what you ask: find options, answer questions, book and buy what you confirm, and send the reminders and follow-ups you asked for.
• To keep Jupiter safe and working: stop abuse, fix problems and enforce spending limits.
• To understand how Jupiter is used overall, from codes and counts.

Why we're allowed to

• To provide the service you asked for.
• Your consent. Before your first conversation, Jupiter asks you to accept, including sending your information outside South Africa. It asks again before it saves your booking details or travellers' documents, and before it links Uber. You can withdraw at any time: say "stop" for reminders, "unlink Uber" for Uber, or send /delete for everything.
• Our legitimate interest in keeping Jupiter secure and improving it, using codes and counts only.
• The law, where we have to keep or share something.

If this policy changes in a way that matters, Jupiter asks you to accept it again before your next conversation.

Who we share it with

We use trusted service providers to run Jupiter. Each gets only what it needs for your request, and businesses you book or buy from get your details only after you tap Confirm.

• Telegram and WhatsApp (Meta) carry the messages between you and Jupiter, under their own privacy policies.
• Our AI provider processes your conversation to understand and answer you, as described in "What the AI sees". It doesn't use your information to train its models, and deletes it after a limited period.
• Hosting and security providers run our servers and keep Jupiter and this website safe.
• Businesses you book or buy from, like restaurants, ride and delivery services, hotels, airlines, tour and car-hire companies, and the booking services they use, get the details your booking or order needs.
• Accounts you connect, like Google or Uber, get what Jupiter does there at your request, like the events you ask it to add, the emails you tap Send on or the rides you request.
• Service providers that help Jupiter carry out your requests, like search, maps, information and number-checking services, get only what the request needs, like search words, an area or, at sign-up, your phone number.

We may also share information when the law requires it, or with a buyer if our business is sold. If it's sold, we'll tell you first.

Bookings and payments

• Before anything is booked or bought, Jupiter shows you the details and the live price. Nothing happens, and the business gets none of your details, until you tap Confirm.
• If the price changes before it's booked, Jupiter doesn't book. It shows you the new price.
• Jupiter never stores your card number. You either pay in the provider's own secure payment form, which sends your card details from your phone straight to them, or with the payment method already in your own account with that service.
• Once you confirm, the business has your booking details and handles them under its own privacy policy. Deleting your Jupiter data doesn't cancel a booking or delete the business's copy.

Calendar and email

You can connect your Google Calendar and Gmail. It stays off until you ask: Jupiter sends a button that opens Google's own sign-in screen, which shows exactly what Jupiter will be able to see or do. Nothing is connected without your say-so. Outlook will follow later on the same terms.

What Jupiter does with each Google permission:

• Your Google account's email address (Google's "email" and "openid" permissions): only to tell you which account is connected.
• Events on the calendars you own (Google Calendar): Jupiter uses your main calendar. It adds an event when you ask, or when you tap Add on a booking it made. It reads your events for the days you ask about, up to 31 days at a time, to tell you what's on or find free time. It removes an event it added when you tap Remove. It never changes or deletes an event it didn't add, and never shares your calendar.
• Sending email (Gmail send): Jupiter writes an email only when you ask. It shows you the account it will send from, the exact recipient, the subject and the text, and sends it only when you tap Send. That's at most 20 emails a day. This permission can't read your inbox.
• Reading email (Gmail read-only): offered only to a small group of testers, through a separate connection. Jupiter searches your mail only when you ask, for example for a booking confirmation, and opens only the emails that request needs.

• The access keys Google gives Jupiter are stored encrypted in our vault, and never appear in links, logs or error messages. An email waiting for your tap, and the events Jupiter added (so the Remove button works), are stored encrypted too. A draft's text is deleted once it is sent, cancelled or expires, and an event's record about a month after the event.
• To answer you, the AI sees only what your request needs, like event titles and times or an email's text. Personal details in them, like phone numbers, email addresses and street addresses, are swapped for stand-ins first, like everything else. What Jupiter reads for you becomes part of your conversation and is kept as described in "How long we keep it".
• Our logs record only that a calendar or email action happened and whether it worked, never what it contained.
• Say "disconnect my calendar" or "disconnect my email" in the chat, or remove Jupiter in your Google Account's security settings, at any time. Disconnecting cancels Jupiter's access at Google and deletes the keys. /delete does the same for every connection.

Google user data. Jupiter's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Google user data only to provide and improve the features you can see and use in Jupiter.
• We share it only as needed to provide those features (for example with our AI provider, to understand your request), to keep Jupiter secure (for example, to investigate abuse), to comply with the law, or, with your explicit consent first, as part of a merger, acquisition or sale of our business.
• We never sell it, never use it for advertising (including personalised or retargeted ads), never use it to judge creditworthiness or for lending, and never use it to develop, improve or train AI or machine-learning models. Our AI provider doesn't train on it either.
• No person at Jupiter reads it unless you ask us to, it's needed for security or the law, or it has been made anonymous and combined for internal operations.

Where your information goes

Jupiter's servers are in the European Union, and our AI provider is in the United States. Telegram, Meta and our other service providers work in many countries. So your information leaves the country you're in.

In South Africa, we ask for your consent to this before your first conversation (POPIA section 72). For people in the UK and EU, we rely on our providers' data protection terms, which include the standard contractual clauses the law requires when data leaves your region.

How long we keep it

• Messages as they arrive are stored encrypted only until Jupiter has processed them, usually seconds, and never more than about 48 hours.
• Conversation history (with stand-ins, and names as typed): each message is deleted 90 days after it was sent. A short summary Jupiter writes of a long conversation, and records of what Jupiter did for you (your bookings, rides and trips, and the steps it took for each request), are kept until you delete your data.
• Details in the vault (your number, email, saved places, booking and traveller details, your Uber login and session) are kept until you remove them or delete your data. A location you share can only be used for 24 hours, and so can a card number caught in a message. Their encrypted copies are erased when you delete your data.
• Short-term memory. What Jupiter learns about the restaurants in a conversation, and the text of pages it reads for you, is held in memory only, never in a database. It expires within 24 hours (page text within 3 hours) and is lost whenever our servers restart.
• The working copy Jupiter keeps while it handles a request is deleted 14 days after the request finishes.
• Reminders, parcels and flights you follow: the details are wiped once they're done (a reminder's text up to 7 days after it was sent), and the record is deleted 30 days later.
• Hotel and flight searches are deleted about a day later, and an order's payment link a day after the order ends.
• Calendar and email connections (the access keys Google gives Jupiter) are kept until you disconnect or delete your data. An email waiting for your tap loses its text once it's sent, cancelled or expires, and Jupiter's record of an event it added is deleted about a month after the event.
• Usage records (codes and counts) are kept to run and improve Jupiter. When you delete your data, they move to a random ID that can't be linked back to you.
• Logs hold codes, counts and timings only, never your messages or details. They are rotated automatically as they fill up.
• Backups: we don't currently keep backups of the service's database. If we start, this section will say how long they're kept.
• Other companies keep what they receive under their own policies.

Your rights

You can ask to see the information we hold about you, have it corrected or deleted, get a copy, object to how we use it, or withdraw your consent. You can do much of this in the chat:

• /delete erases everything. See how deletion works.
• /details shows the booking details Jupiter keeps (name, mobile and email) and lets you change them.
• /privacy shows a short summary of how Jupiter handles your details.
• "unlink Uber" disconnects Uber and deletes your saved Uber login.
• "disconnect my calendar" or "disconnect my email" cancels Jupiter's access at Google and deletes its keys.
• "stop" stops reminders.
• /new starts a fresh conversation.

For anything else, email [email protected]. We may ask you to confirm the request from your chat with Jupiter, so we know it's you. We reply within one month.

If you're not happy with how we handle your information, please tell us first. You can also complain to:

• South Africa: the Information Regulator.
• United Kingdom: the Information Commissioner's Office (ICO).
• European Union: the data protection authority in the country where you live or work.

Wherever you live, including the United States and Canada, you can use the rights above, and we will also respect any extra rights your local law gives you.

Children

Jupiter is not for anyone under 18. If you think a child is using Jupiter, email us and we will delete their data. If you book for children, only give their details if you are their parent or guardian.

Keeping it safe

• Your details are encrypted in the vault (AES-256), each person's with their own key. Deleting your data destroys that key.
• The part of Jupiter that runs the AI holds only stand-ins (and names as typed) and none of our keys to other services. Jupiter can only reach the services it needs.
• Our logs hold codes and counts. Our internal dashboard shows counts, masked phone numbers and Telegram usernames, never your messages. Only the owner can reveal a full number, and every reveal is recorded.
• Only Jupiter's founder can access the systems that hold personal information, through secured, key-based access.

This website

• This site no longer takes waitlist sign-ups. If you joined our email waitlist before, we keep your email address, when you signed up, your country (from your connection) and which page you signed up from. We use your email only to tell you about Jupiter, and we don't sell it or share it for marketing.
• Our hosting and security providers process basic technical information, such as your IP address, to keep the site running and stop abuse.
• This site does not use advertising trackers or cookies.
• The site runs on our own server in the European Union and is delivered through Cloudflare.
• We keep a waitlist email until you ask us to remove it.

Contact

Questions about this policy or your information: [email protected].