JIMMY is made and run by Vedansh Danot, an independent developer in India (“I”, “me”). This policy covers the JIMMY app and this website.
The short version
- JIMMY keeps its data on your PC. I don’t receive your messages, files, memory or activity.
- The app has no analytics, no telemetry and no crash reporting. This website counts visits with Google Analytics and DataFast (see This website).
- Some things have to leave your PC to work: your WhatsApp messages go through WhatsApp, and messages JIMMY can’t handle on its own go to the AI service you choose. You can choose an AI that runs on your own PC instead.
- To buy JIMMY you create an account. I keep your name, email, mobile number, occupation, plan and licence key so you can manage your purchase. Payments are handled by Dodo Payments; I never see your card.
- If you use the contact form, I keep your message so I can reply.
- I don’t sell your data or use it for ads.
The JIMMY app
JIMMY is software you install on your Windows PC. It stores its data in a folder in your Windows user profile (%USERPROFILE%\.jimmy):
- your WhatsApp session, encrypted on disk;
- your settings, allowed folders and apps, shortcuts and saved skills;
- what JIMMY remembers about you (you can see and edit it on the dashboard’s AI Brain page);
- an activity log of what JIMMY did, and backups it makes so changes can be undone (kept for 30 days);
- if you connect Gmail, a sign-in token encrypted with Windows so only your user on that PC can read it.
None of this is sent to me. The dashboard is only reachable from your own PC. JIMMY’s log file doesn’t record your messages or phone number.
What leaves your PC
| What | Goes to | When |
|---|---|---|
| Your WhatsApp messages, and JIMMY’s replies | WhatsApp (Meta) | Whenever you message JIMMY. It connects the way WhatsApp Web does. |
| The text of a request, with secrets removed | The AI service you chose: Antigravity (Google), OpenAI, Anthropic, Google Gemini, Groq, OpenRouter or the Jev classifier (TypeSafe AI) | When a message doesn’t match a built-in command or shortcut. Before sending, JIMMY removes things that look like keys, tokens, passwords and card numbers. |
| Content a task works with, such as file text, chat excerpts or emails | The same AI service | Only during a task you asked for, such as summarizing a chat or reading an email. |
| Gmail requests | Google, for your own account | Only if you connect Gmail, and only for what you ask. |
| Web and GitHub requests | The sites, or GitHub | When a task you asked for needs to look something up. |
| Your licence key, a one-way hash of your PC’s ID, your PC’s name and app version | This website (jimmy.vedanshh.dev) and Dodo Payments | When you enter your key, then once a day, to confirm your licence. Nothing else about your PC or what JIMMY does is sent. |
| Your app version | This website (jimmy.vedanshh.dev), then GitHub for the download | Once a day, to check for updates. Updates only install if you agree. |
If you choose a model on your own PC (Ollama, LM Studio, or another OpenAI-compatible server you run) under Customize → AI engine, nothing is sent anywhere for AI.
Those services handle data under their own policies: WhatsApp, Google, OpenAI, Anthropic, Groq, OpenRouter.
Your account
To buy and download JIMMY you sign in on this website. Your account holds:
- Sign-in: your email address and, if you use Google, your name. Sign-in is handled by Firebase Authentication (Google). If you use a password, Firebase stores it securely; I never see it. I also keep when you signed up and last signed in, and how many times you’ve signed in.
- Profile: the name, mobile number and occupation you enter after signing up. I use them to support you and to understand who uses JIMMY. I don’t send marketing messages to your mobile number.
- Purchase: your plan, its status and dates, your licence keys, and the name and app version of the PC each key is activated on.
- Emails: I send account and purchase emails (such as “your account is ready” and your purchase confirmation with setup steps) through Resend. These are about your account, not newsletters.
- Roadmap: if you post an idea or bug report on the roadmap, it’s shown publicly with your first name and the initial of your last name. Upvotes are counted but not shown by name.
This is stored in a Neon database and on Vercel, and only I can see it. These providers may store data outside India, including in the United States.
Payments
Payments are processed by Dodo Payments, the merchant of record for JIMMY. You enter your card or other payment details on their checkout page; I never see or store them. Dodo Payments tells me the result (the plan, amount, date, payment status and an invoice link), which I keep for my records and to show your billing history. Dodo Payments also issues your licence key.
This website
- Analytics. To see how many people visit and which pages they read, this site uses Google Analytics and DataFast. They receive the pages you view, your browser and device type, your approximate location (from your IP address) and where you came from, and Google Analytics sets cookies to recognise repeat visits. You can block them with any ad or tracker blocker; the site works the same. There are no ads, and fonts are served from this site, not from a font service.
- Hosting. The site runs on Vercel, which keeps standard server logs, such as your IP address and browser, for a short time.
- Contact form. When you send a message, I store your name, email, topic and message, plus your browser’s user-agent and a one-way hash of your IP address (never the address itself), which limits how many messages can be sent. It’s stored in a Neon database and used only to reply to you and keep out spam. Ask me and I’ll delete it.
- Downloads come from GitHub, which sees the request when you download the installer.
How long I keep data
- Your account, profile and licence details: while you have an account.
- Payment records: as long as the law requires for tax and accounting, even after an account is deleted.
- Contact messages: until the conversation is finished, then up to a year.
- Analytics data: under Google Analytics’ and DataFast’s own retention settings.
Your choices and rights
- Disconnect WhatsApp or Gmail from the dashboard at any time. Disconnecting Gmail also cancels JIMMY’s access at Google.
- Choose which AI service JIMMY uses, including one on your own PC.
- Edit or delete what JIMMY remembers on the AI Brain page.
- Uninstall JIMMY and tick “delete the application data” to remove everything it stored.
- Ask me for a copy of your account data, to correct it, or to delete your account and the data that goes with it (except payment records the law requires me to keep). Email pykalki@gmail.com from the address on your account; I’ll reply within 30 days. Deleting your account ends your licence.
- Ask me to delete any message you sent through the contact form, the same way.
- Block analytics on this website with any tracker blocker.
These rights apply wherever you live, including your rights under India’s Digital Personal Data Protection Act, 2023 and, if you’re in the EU or UK, the GDPR. If you have a complaint, email me first; you can also contact your local data protection authority.
JIMMY is for adults: you must be 18 or older to create an account.
Changes and contact
If this policy changes, the date at the top changes too, and anything important will be mentioned in the changelog. Questions? Get in touch or email pykalki@gmail.com.