Privacy Policy
Last updated: September 2026
1. Who we are
PokeeBee is made by JidAi Labs. It is a gift-reminder app: it finds the birthdays and occasions already in your contacts and calendars, reminds you before they arrive, and helps you choose a gift.
Questions or requests: envoy@jidailabs.com. We aim to reply within 30 days.
2. What PokeeBee does
PokeeBee reads the contacts and calendars you already have, works out who has an occasion coming up, and reminds you in time to do something about it. It can also suggest gift ideas and draft a message.
PokeeBee is free. An account is needed to sync your own notes between devices and to use the gift agent; the reminder features work on the contacts and calendars on your phone without connecting anything else.
3. What we collect
What we do NOT collect
- No payment information. PokeeBee is free and takes no card details.
- No precise location. PokeeBee never asks for your location.
- No advertising identifiers, and no advertising SDKs.
- No copy of your address book on our servers. Your contacts are read on your device; the address book itself is never uploaded.
- No selling of anything. See section 8.
Data on your device
The events read from your calendars are kept on your device. Contact names, dates and photos are read on the device to find occasions — the photos are cached on your device only and never uploaded.
Your conversations with the gift agent stay on this device and are never stored in your account.
Data in your account
While Sync is on (it is on by default, and you can turn it off or delete the synced copy at any time in You › Data & privacy), these reach your next phone:
- The details you type about people — likes, sizes, notes, birthdays.
- What you decide in the app: the events you keep or hide (each carries that event’s title and the name of the calendar it came from, so the decision can find it again), the people you track, and the occasions you add yourself, with their dates, budgets and who they are for.
- A person named by any of these carries their name and the contact they came from, so your next phone can match them to the right contact.
- Saved gift ideas, each with the name of the person it is for, its title, your note and any link you added.
Account data itself is your name and email, from the sign-in provider you choose.
Analytics and diagnostics
PokeeBee uses Firebase Analytics for aggregate usage measurement and Firebase Crashlytics for crash reports. These tell us what is breaking and what nobody uses.
Rather than describe this vaguely, here is the complete list of events the app sends: chat_opened, idea_shown, idea_saved, gift_link_tapped, wishlist_link_added, wishlist_link_opened. Each records that the thing happened and when — not what you typed, who the person was, or what the gift was. Firebase adds its own standard technical properties, such as device model, OS version and country-level location.
Crash reports contain the error, where in the code it happened, and the device model and OS version.
None of this is used to build an advertising profile, and none of it is shared with advertisers.
There is currently no switch to turn this off inside the app. We would rather say so than imply a control that does not exist. Analytics and crash reporting start when the app does. If you would prefer not to send them, uninstalling stops it completely; write to envoy@jidailabs.com and we will tell you when an in-app control ships, which we intend to add before PokeeBee is generally available.
Firebase Cloud Messaging delivers push notifications; it holds a device token, not a name.
AI
When you ask the gift agent for ideas or message drafts, your question and what you have saved about that person (their name, occasion, likes and any attributes you added) are sent to our server and on to Anthropic, which generates the suggestions. We record the size and cost of each request — token counts, model, timestamp — so we can understand what the feature costs to run. The content of the request is not stored on our servers.
Each gift-agent request also carries a random ID that this app install makes for itself, so the daily limit counts the phone as well as the account. That ID is stored with only the date and that day’s count of turns, never with your account. The count of turns for today is kept until the day ends, even if you delete your cloud data.
4. How we use it
To operate the app, personalise suggestions, send the reminders you asked for, troubleshoot problems, and improve the product.
We do not train AI models on your data. Requests to the gift agent go to Anthropic through its API, and under Anthropic’s commercial terms API inputs and outputs are not used to train its models. We do not train models of our own on anything you give us.
Gift suggestions and drafted messages are generated by a language model and may be wrong — a suggestion may be unavailable, mispriced or simply a bad idea for the person. Treat them as a starting point, not a recommendation we stand behind.
5. Google user data
PokeeBee requests three Google OAuth scopes, and all three are read-only. Here is what each one reads and what PokeeBee does with it:
| Scope | What it reads | What PokeeBee does with it |
|---|---|---|
contacts.readonly |
Names, birthdays, photos of your contacts | Finds upcoming occasions; photos are cached on your device only and never uploaded |
contacts.other.readonly |
Names of people you have interacted with but not saved | Same, so someone you emailed but never saved still gets a reminder |
calendar.readonly |
Event titles, dates, calendar names | Finds occasions; you choose which calendars count |
What we store from this data, for how long, and how you can delete it, is described in sections 3, 7 and 9. None of it is sold, and none of it is used for advertising. Google user data is never used to train any AI model, ours or anyone else’s.
PokeeBee’s use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
6. Calendar write-back and your Google Calendar
All three Google scopes in section 5 are read-only — PokeeBee’s access to your Google account never writes anything through a Google API. PokeeBee never changes your contacts.
Calendar write-back is a separate, opt-in permission: when you turn it on, PokeeBee asks your phone’s operating system for calendar-write access and uses it to add the occasions you created in PokeeBee to a calendar you choose. This goes through the device’s own calendar store, not through Google’s API, and it never changes or deletes an event it did not create.
If the calendar you choose happens to be one your phone keeps synced with Google, your phone’s operating system — not PokeeBee — is what pushes that event up to your Google account. It can look, from your side, like PokeeBee wrote to Google Calendar; what actually happened is that the OS synced a calendar that was already syncing. PokeeBee’s own Google API access stays read-only throughout.
7. Who processes your data
| Provider | What for | Where | Privacy policy |
|---|---|---|---|
| Supabase | Account, sync, saved gift ideas, gift-agent gateway | United States | supabase.com/privacy |
| Anthropic | Generates gift suggestions and message drafts | United States | anthropic.com/legal/privacy |
| Google Firebase | Analytics, crash reporting, push notifications | United States | firebase.google.com/support/privacy |
| Sign-in, and the read-only contacts and calendar access you grant | United States | policies.google.com/privacy | |
| Apple | Sign in with Apple, if you use it | United States | apple.com/legal/privacy |
| Vercel | Hosts pokeebee.app, this website | United States | vercel.com/legal/privacy-policy |
If you join the launch waitlist on this website, your email address is stored with Supabase and used for one thing: telling you when PokeeBee is available. Ask us at envoy@jidailabs.com and we will remove it.
8. Sharing
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We share data only with the processors in section 7, who act on our instructions, and where the law requires it.
9. How long we keep it
| What | How long |
|---|---|
| Data on your device | Until you delete it, or uninstall the app |
| Account data and synced notes | Until you delete them — see section 10 |
| Waitlist email | Until launch, or until you ask us to remove it |
| Gift-agent request records (size and cost, not content) | Deleted with your cloud data |
| Gift-agent turn counts (a date and a number) | Deleted with your cloud data, except today’s, which is kept until the day ends (UTC) |
| The install ID the daily limit uses | Stored with only the date and that day’s count, and overwritten each day it is used. A new install makes a new ID |
| Firebase Analytics | The retention configured in our Firebase project. Google’s default for new properties is 2 months for event-level data |
| Firebase Crashlytics | Google’s standard retention for crash reports, currently 90 days |
| Push notification token | Until you turn off notifications or uninstall |
10. Your choices
You can revoke the contacts and calendar permissions at any time in Settings. Settings also has Delete data on this device, Delete cloud database data and Delete account, so you can remove your data yourself without contacting anyone. If you have already uninstalled, write to envoy@jidailabs.com.
11. International transfers
Every processor listed in section 7 operates in the United States, so your data is transferred internationally. Where that transfer originates in the EEA or the UK, it relies on the European Commission’s Standard Contractual Clauses, which those processors incorporate into their own terms. Data may also transit other regions as a normal part of internet routing.
PokeeBee is operated by JidAi Labs, which is in the process of being established as an Estonian company (OÜ). Until that completes, the contact point for anything in this policy is envoy@jidailabs.com, and this section will be updated with the registered entity and address once it exists.
12. Children
PokeeBee is not directed to children and we do not knowingly collect data from anyone under 13 (or under 16 in the EEA and the UK). If you believe a child has given us data, write to envoy@jidailabs.com and we will delete it.
13. Security
Data is encrypted in transit with TLS, and at rest by our providers. Access to your account data is enforced at the database level, so one account cannot read another’s. No method of transmission or storage is completely secure; if a breach affects your data we will notify you and the relevant authority as the law requires.
14. Changes
We may update this policy. Material changes are posted here with a new “Last updated” date, and if a change is significant we will tell you in the app.
15. Contact
envoy@jidailabs.com — questions, requests, or to exercise any of the rights below. We aim to reply within 30 days.
EEA and UK supplement (GDPR)
Controller: JidAi Labs, currently being established as an Estonian company (OÜ). Contact: envoy@jidailabs.com. This entry will name the registered entity and its address, and an Art. 27 representative if one is required, once incorporation completes.
Legal bases. We process your data to provide the app you asked for (Art. 6(1)(b), contract); to keep it working and secure and to understand what is used (Art. 6(1)(f), legitimate interests); and, where you have turned on an optional feature such as Google integration, calendar write-back or Sync, on your consent (Art. 6(1)(a)), which you can withdraw at any time in Settings.
Your rights. Access, rectification, erasure, restriction, portability, and objection (Art. 15–22). The in-app controls in section 10 do access, erasure and portability immediately; for anything else, write to us. You may also complain to your local supervisory authority.
One limit we would rather state than bury: the right to object under Art. 21 currently has no in-app mechanism for analytics and crash reporting. Those start with the app and cannot be switched off from inside it. Email us and we will act on your objection as far as we technically can; uninstalling is, today, the only complete stop. An in-app control is planned before general availability.
Automated decision-making. None. Gift suggestions are generated for you to accept or ignore; nothing about your account is decided automatically.
Transfers. See section 11.
California supplement (CCPA/CPRA)
Categories collected in the last 12 months: identifiers (name, email, device identifiers); commercial information (gift ideas you save); internet activity (analytics and crash data); and, if you enable the integrations, contact and calendar information you already hold.
Sources: you, your device, and the Google or Apple account you sign in with.
Purposes: providing and improving the app, sending reminders, security, and support.
We do not sell or share personal information as those terms are defined by the CCPA, and we have not in the preceding 12 months. We do not knowingly sell the personal information of anyone under 16.
Your rights: to know, delete, correct, and to opt out of sale or sharing — there is nothing to opt out of, because we do neither. Exercise any of them with the in-app controls or at envoy@jidailabs.com. We will not discriminate against you for exercising them. An authorised agent may act for you with written permission.
This policy describes what PokeeBee actually does; it has not been reviewed by a lawyer. If you are relying on it for compliance in a specific jurisdiction, get it reviewed.