The short version
- JARVIS runs on your own computer. Without Jarvis Cloud, we receive nothing from you.
- Jarvis Cloud never stores your photos, voice recordings, files, screen or camera images, or conversations.
- Some features need a server to process private data for a moment, such as a video call with an avatar. That happens in memory only, is never written to disk or logs, and is gone when the job ends.
- We keep your account details, your plan and when your sessions happened, because we need them to run the service and bill you.
- We don't sell your data, show ads or use your content to train AI models.
Who we are
JARVIS and Jarvis Cloud are made by Hexis Software ("we", "us"). We are responsible for the personal data described in this policy. You can reach us at hexissoftware@gmail.com for anything privacy-related.
Free and self-hosted use
The JARVIS apps for macOS, Windows, Linux, iPhone, Apple Watch and Android are free, and the core is open source. When you use them on your own computer and network:
- Your conversations, files, memory and settings live on your devices.
- Agents (Claude Code, Codex, Antigravity, Hermes and others) run on your computer under your own accounts with those providers.
- Voice runs on your own Gemini API key, directly between your device and Google.
- An avatar you create or run on your own GPU never leaves your hardware.
In this setup we don't receive your data. The AI providers you choose process it under their own terms and privacy policies.
The apps contain no advertising or analytics trackers. Camera, microphone and screen access are only used when you turn them on, and your phone or computer asks for your permission first.
Jarvis Cloud
Jarvis Cloud is our paid service. It connects your apps to your JARVIS from anywhere, and on some plans adds Cloud voice, GPU features, custom avatars and a private Cloud Computer. To run it we keep:
- Account details: your email, name and a securely hashed password. If you tell us during sign-up, also your country, how you heard about us, your use case, and for business accounts your company, role, sector, team size and website.
- Plan and billing records: your plan, renewal dates, invoices and the Stripe customer and subscription IDs that link your account to your payments. On the web and in the desktop app, payments are processed by Stripe, which receives your payment details directly; we never see or store your full card number. Subscriptions bought in the iPhone app use Apple's in-app subscriptions, and in the Android app Google Play Billing: Apple or Google processes the payment and we receive a purchase record (product, dates and status), never your payment details.
- Linked computers: for each computer you connect, its name, operating system, JARVIS version, the address of its secure tunnel and when it was last online.
- Session records: when a session started and ended, which feature it used and which server handled it. These count your allowances and help us keep the service healthy.
- Usage counters: voice minutes, GPU hours, avatars created and Cloud Computer hours used this month.
- Your plan, read by the apps: the phone apps ask Jarvis Cloud which plan you have, to unlock the camera, screen sharing and picture-in-picture.
Jarvis Cloud does not keep the content of what you do: no audio, video, images, transcripts, files or agent output, in storage or in logs.
Data by feature
What passes through Jarvis Cloud, and what it keeps:
| Your data | Where it lives | Passes through Jarvis Cloud? | Kept by Jarvis Cloud? |
|---|---|---|---|
| Account, plan, billing | Jarvis Cloud database | Yes | Yes, to run and bill your account |
| Files, agent work, conversation memory | Your computer, or your Cloud Computer | No | No |
| Voice with the orb (your key or Cloud voice) | Sent from your app straight to Google. For Cloud voice we only hand your app a single-use access token. | No | No |
| Video calls with an avatar: your voice in, video out | Streamed through one of our GPU servers | In memory only | No |
| Screen and camera ("Eyes On") | Sent from your app to Google with your voice; during an avatar call, through a GPU server's memory | Only during an avatar call, in memory | No |
| Avatar creation: photo, voice sample, consent line When available | Processed in a GPU server's memory for about a minute, then deleted | In memory only | No. Only a record that consent was given, and when. |
| Your custom avatar file | Your own devices. Sent to a GPU server for each call and forgotten after. | Only during a call | No |
| Cloud Computer files and backups When available | Your Cloud Computer, encrypted with a key only your devices hold | No | Only encrypted; we can't read them |
Video calls and GPU features
An avatar call needs a powerful graphics card. Your audio, and the camera or screen images you choose to share, stream through one of our GPU servers to animate the avatar and send the video back. Nothing from the call is written to disk or kept in logs, and it's gone when the call ends.
Custom avatars and cloned voices When available
To create a custom avatar you provide one photo, a short voice recording and a consent line read aloud on camera. We check that the face is a real, single person and not a public figure, prepare the portrait, build a voice profile and check that the consent recording matches. This happens in memory in about a minute, then all three are deleted. The finished avatar file is saved on your devices only. We keep a record that consent was given and the date, not the recording itself. Avatars are always labeled as AI.
Cloud Computer When available
A Cloud Computer is a private server for your agents, so they don't need access to your own computer. Each one runs as a separate instance in a vetted datacenter through our provider Vast.ai (Secure Cloud partners only). Its files and backups are encrypted with a key created on your phone or computer, which is never sent to us. The image has no staff login; we can only start, stop, update or delete it, and you can see a log of each action. While it runs, its data is in memory on the datacenter's hardware, as with any rented server. When your plan ends, the instance and its encrypted backups are deleted after 30 days.
This website
The early-access form asks for your name or company, email, country and where you heard about us, and for business requests your sector and an optional use case. We use this only to reply to you about JARVIS. The form is emailed to our inbox and protected by Google reCAPTCHA, which processes information about your browser under Google's Privacy Policy. To stop abuse, the site briefly remembers your IP address in memory to limit repeated submissions. The website sets no advertising or analytics cookies.
Service providers
We use a small number of providers to run the service. Each only gets what it needs for its task:
| Provider | What for |
|---|---|
| Fly.io | Hosts this website and Jarvis Cloud's account service (Paris region). |
| Gemini Live for voice and vision; reCAPTCHA on our forms; Gmail for early-access emails. | |
| Cloudflare | Secure tunnels that connect your apps to your computer or Cloud Computer. |
| Vast.ai (Secure Cloud datacenter partners) | Cloud Computers, and extra GPU capacity at busy times. |
| Stripe | Processes subscription payments made on the web and in the desktop app, invoices and taxes as an independent controller of your payment data under its own Privacy Policy. We receive your plan, payment status and invoices, not your card details. |
| Apple, Google Play | Subscriptions bought in the iPhone app (Apple in-app subscriptions) and the Android app (Google Play Billing), under their own privacy policies. |
| Our own GPU servers | Avatar video calls and avatar creation, in memory only. |
Agents you use (for example Anthropic, OpenAI, Google or OpenRouter) work under your own accounts with those companies, and their terms and privacy policies apply to what you send them.
Why we may use data
Where laws such as the GDPR apply, we rely on these legal bases:
- To provide the service you signed up for (contract): your account, linked computers, sessions, allowances and billing.
- Legitimate interests: keeping the service secure, preventing abuse and fraud, and answering early-access requests.
- Consent: camera, microphone and screen access, and creating an avatar from your face and voice. You can withdraw consent at any time by turning the feature off or deleting the avatar from your devices.
- Legal obligations: keeping billing records as tax law requires.
How long we keep it
- Account details and linked computers: while your account exists. Deleted within 30 days after you delete your account.
- Session records and usage counters: 12 months, then deleted.
- Billing records: as long as tax law requires, usually up to 10 years.
- Avatar consent records: while the avatar's account exists and up to 3 years after, to answer disputes about consent.
- Early-access requests: until we've replied and you've joined or declined, or sooner if you ask.
- Content (audio, video, images, files, transcripts): not kept at all.
Security
- All connections are encrypted in transit (TLS). Passwords are stored as salted hashes.
- Cloud voice uses single-use, short-lived tokens, so our Google key never reaches your device and your audio never passes through us.
- Private processing only runs on servers we operate or on vetted datacenter partners, never on unvetted community hardware.
- Logs record events (a session started, ended, how long), never content.
- The server code is open source, so anyone can check how it handles data.
Two limits, stated plainly: while a server processes something, the data is in that machine's memory; and connections to your computer pass through our tunnel provider, Cloudflare, which carries the encrypted traffic. We'll keep reducing both.
Your rights
Depending on where you live, you can ask us to access, correct, export or delete your personal data, object to or restrict how we use it, and withdraw consent. Email hexissoftware@gmail.com from the address on your account and we'll answer within 30 days. You can also complain to your local data protection authority.
Because your content lives on your devices, you control it directly: delete it there and it's gone.
Children
Jarvis Cloud is not intended for anyone under 16, and we don't knowingly collect data from children. If you believe a child has created an account, contact us and we'll delete it.
International transfers
Some providers, such as Stripe, Google, Cloudflare and Vast.ai, may process data outside your country, including in the United States. Where the law requires it, we rely on safeguards such as the European Commission's Standard Contractual Clauses.
Changes and contact
If we change this policy in a way that matters, we'll tell you in the app or by email before the change applies. The date at the top always shows the current version.
Questions or requests: hexissoftware@gmail.com. See also our Terms of Service.