Jofie — Privacy policy
Who we are
Jofie is a personal assistant on WhatsApp, operated by JVM Solutions, Biesbosch 179, 1181 JB Amstelveen, Nederland (the data controller).
Questions or requests about your data: joaovtmendes@gmail.com.
What we process
Your WhatsApp phone number and profile name, the name and e-mail address you give when you create your account; the messages you send to Jofie and Jofie's replies.
What you ask Jofie to record: expenses and income, reminders, workouts, goals and habits, notes and tasks, trips.
If you choose to log it: health information (medication, mood, sleep, water). This is special-category data; we only process it because you give explicit consent by sending it, and you can stop at any time.
Why, and on what legal basis
To provide the service you asked for (GDPR art. 6(1)(b)); health data only with your explicit consent (art. 9(2)(a)).
We do not sell your data, use it for advertising, or use it to train AI models.
Artificial intelligence
Jofie is an AI system, not a human (EU AI Act art. 50). Your messages are processed by an AI model from Anthropic to understand and answer them. Anthropic does not use this data to train its models.
Who else processes your data
Meta Platforms (WhatsApp Business API) — message delivery.
Anthropic PBC — AI processing of message text.
Railway Corp. — hosting of the application and database.
Some of these providers process data outside the EU; transfers are covered by the EU–US Data Privacy Framework and/or Standard Contractual Clauses.
How long we keep it
As long as you use Jofie. After you ask us to delete your account, your data is deleted within 30 days, except where the law requires us to keep it longer.
Your rights
You can ask for access, correction, deletion, restriction or a copy of your data (portability), and object to processing. Send STOP in WhatsApp to stop all processing, or write to joaovtmendes@gmail.com for any request.
You can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
Your dashboard link
The link Jofie sends you to see your dashboard contains a personal access code. Anyone with the link can see your dashboard, so do not share it. Links expire after 7 days; ask for 'my dashboard' to get a new one.
Exercising your rights in the chat
Send 'export my data' to receive a download link (valid for 15 minutes, works once), 'delete my data' to erase everything (you will be asked to confirm), or STOP to stop processing.
Error monitoring
When enabled, an error-monitoring provider (Sentry) receives technical error reports to keep the service reliable. We configure it to avoid sending message contents.
More of what you can record
Debts and loans: the name you give for the other person, the amount and a note. Please record only what concerns you; that person has the same rights over their name and can ask us to erase it. Training plans and the loads you lift, trip destinations, dates, itineraries, packing lists and trip budgets, monthly budgets, fixed bills and instalments, and analysis views you save are also kept. The dashboard shows all of this to anyone who has your link.
Questions you ask Jofie about your own numbers (for example 'how much did I spend on food in August?') are sent as text to the AI provider to understand the question; the figures themselves are calculated by us and are not sent to the AI provider.
A log of the messages Jofie sent you, with their delivery status, is kept for about three months and then erased.
Security
Data travels over encrypted connections. Health information (what you log about medication, mood, sleep and water) is additionally encrypted inside our database. Access to the systems is limited to the operator.
Sharing with your partner
If you invite a partner and they accept, you share the household finances. Nothing is shared by default: only the expenses that you or your partner mark as shared are visible to both (amount, category, shop, date and who paid), and Jofie uses them to work out who owes whom. Everything else stays private. Either of you can leave at any time with 'leave home'; the shared marks are then removed. If one of you erases their data, the other keeps only their own entries.
Bank statements
If you send a bank statement file (CSV), Jofie reads it only to create entries after your confirmation: date, amount, counterparty name and description of each line. Account numbers (IBAN) are masked and the file itself is not kept. The entries are stored like any other entry of yours, so they are covered by export and erasure, and 'undo import' removes the last import. Statements often contain details about other people (names of those who paid you); only send files you are entitled to use.
Photos and PDFs of training plans and receipts
If you send a photo or a PDF of your training plan or of a receipt, the file is sent to Anthropic (our AI provider) only to read it (the exercises, or the shop, total and date), and Jofie shows you the result to confirm before anything is saved. The file itself is not kept: only what you confirm is stored, like any other data of yours (covered by export and erasure). Only send files you are entitled to use, and leave out other people's details or health information. If the file is an invoice for a service, Jofie also keeps, after you confirm, the provider, a short description, the date, the amount if any and the warranty period you give or that is printed, to remind you before the dates end. An unconfirmed draft is deleted after 15 minutes. These notes are covered by export and erasure; Contracts of your home (energy, gas, internet): if you send a photo or PDF of one, or type it, Jofie keeps after you confirm the type, provider, monthly amount and end date, to remind you 60 and 30 days before it ends. This is covered by export and erasure; Jofie does not recommend suppliers. Deadline reminders: if you turn them on ("turn on deadline reminders"), Jofie keeps only that choice and which reminders it already sent, and reminds you about the health-insurance switch, the income tax return and the quarterly BTW. You can turn them off at any time ("turn off deadline reminders"), which deletes this record. The dates come from official sources and are not advice; check them at the source.