Legal

Privacy Policy

Effective Date: March 22, 2026  ·  Last Updated: April 28, 2026

HeyJessica ("we," "our," or "us") is committed to protecting your privacy and the privacy of your family members. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at heyjessica.ai and our AI companion service ("Service"). Please read this policy carefully. If you do not agree with its terms, please discontinue use of the Service.

---

1. Information We Collect

Information you provide directly:

• Your name and email address when you join the waitlist or create an account
• Your parent or family member's name and email address (so we can send them an invitation to enroll themselves)
• Payment information processed securely through Stripe (we do not store your full card details)
• Information you share in the family kickoff questionnaire about your parent's preferences, interests, and routines
• Communications you send to us directly

Information your parent provides directly when they enroll:

• Their own mobile phone number
• Their explicit consent to receive SMS messages from HeyJessica, captured via an unchecked consent checkbox on a web form they personally complete
• Their IP address, user agent, and submission timestamp at the moment of consent (stored as proof of consent for compliance purposes)

Information collected automatically:

• Conversation transcripts between your parent and Jessica (stored securely to enable memory and continuity)
• Usage data including message timestamps, call durations, and interaction patterns
• Device information and IP address when you access our website
• Cookies and similar tracking technologies on our website

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the HeyJessica companion service
• Personalize Jessica's conversations with your parent based on their history and preferences
• Send you alerts, summaries, and notifications about your parent's wellbeing
• Process payments and manage your subscription
• Send you service-related communications including account updates and billing notices
• Send SMS messages to your parent as part of the daily check-in service, only after your parent has personally consented
• Respond to your questions and provide customer support
• Comply with legal obligations

3. SMS Messaging & Mobile Information

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors (such as our SMS delivery providers) for the sole purpose of providing the messaging service is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

How consent is collected. HeyJessica only sends SMS messages to a phone number after the owner of that phone number has personally enrolled. The enrollment flow is:

• The account administrator (an adult family member) signs up at heyjessica.ai and provides their family member's email address — never their phone number
• The family member personally receives an email containing a unique single-use link to a web-based enrollment form
• On their own device, the family member personally enters their own mobile phone number and checks an unchecked consent checkbox affirming "Yes, I agree to receive recurring SMS text messages from HeyJessica"
• Consent is captured server-side with a timestamp, IP address, user agent, and the verbatim consent text shown on the form, and is retained for compliance audit purposes
• No SMS messages of any kind are sent to a phone number until that person has personally completed the enrollment form on their own device

Message types and frequency. Once enrolled, recipients receive:

• Daily morning check-in messages
• Conversational replies to messages they send
• Reminders (medication, appointments, birthdays) the recipient has personally configured in their account
• Occasional service messages (account changes, opt-out confirmations)

Message frequency varies, typically 1 to 3 messages per day. Message and data rates may apply.

How to opt out. Reply STOP to any SMS message at any time to immediately and permanently unsubscribe from that number. Opt-out is honored immediately and no further messages will be sent. To re-subscribe, the recipient must complete the enrollment form again.

How to get help. Reply HELP to any SMS message for assistance, or contact us at Contact.

For full details on our SMS program, please see our SMS Terms.

4. Conversation Privacy

We take the privacy of your parent's conversations seriously. Jessica is designed to keep private conversations private.

• Conversation content between your parent and Jessica is stored securely and used only to enable Jessica's memory and continuity across sessions
• Personal moments or stories your parent shares will only be passed along to family members with your parent's explicit consent — Jessica asks permission before sharing
• The only exception is if we have a genuine concern about your parent's safety — in that case, the account administrator will be notified immediately
• We do not sell, rent, or share conversation content with third parties for advertising or marketing purposes

5. How We Share Your Information

We do not sell your personal information, and we do not share mobile phone numbers or SMS opt-in information with any third party for marketing or promotional purposes.

We may share information in the following limited circumstances:

• Service providers: We share data with trusted third parties who help us operate the Service, including OpenAI (AI processing), Twilio and other carrier-approved messaging providers (SMS and voice delivery), Stripe (payments), and Supabase (data storage). These providers are contractually required to protect your data and may only use it to deliver the service to you on our behalf.
• Family members you designate: Alerts and summaries are shared with family members you add to your account
• Legal requirements: We may disclose information if required by law or to protect the rights, safety, or property of HeyJessica, our users, or others
• Business transfers: In the event of a merger or acquisition, your information may be transferred as part of that transaction

6. Marketing Automation & Meta Platform Data

HeyJessica is operated by Brave Digital Ventures LLC (also doing business as Agency Fix). Brave Digital Ventures LLC operates an internal marketing automation system used to manage advertising campaigns for HeyJessica and other brands within our portfolio. This system connects to Meta's Marketing API and processes the following data, referred to by Meta as "Platform Data":

• Ad account data: Campaign, ad set, and ad configurations, budget allocations, and creative metadata (images, headlines, body copy, calls-to-action) for advertising accounts we own and operate.
• Performance metrics: Aggregated impressions, clicks, click-through rates, cost-per-click, conversions, and audience reach data for our advertising activity.
• Pixel and conversion event data: Aggregated, non-identifying data about website visitor actions on heyjessica.ai (page views, sign-ups, purchases) collected via the Meta Pixel installed on our website. This data is used to measure advertising effectiveness and to build retargeting and lookalike audiences.
• Custom audiences: Audience definitions and rules used to deliver our advertising to relevant Meta users, built from pixel-based, engagement-based, or other audience signals permitted by Meta's terms.
• Page metadata: Information about Facebook and Instagram pages we own and operate, used to publish or attribute advertising creative.

How we use Meta Platform Data:

• To create, optimize, pause, and report on advertising campaigns we run for our own brands
• To build audience segments (including pixel-event-based and lookalike audiences) for delivering our own advertising more efficiently
• To monitor advertising performance, detect underperforming creative, and recommend creative refreshes
• To produce internal reports and dashboards used by our marketing team

How we store and protect Meta Platform Data:

Meta Platform Data accessed by our marketing automation system is processed in transit over encrypted connections and stored in a secured database hosted by Supabase, with access restricted to authorized administrators of Brave Digital Ventures LLC. We retain Platform Data for as long as necessary to operate, audit, and improve our advertising activity, and we delete or aggregate data when it is no longer needed. We do not store Meta user access tokens or personal identifiers received from Meta beyond the technical needs of the API session.

Service providers used by our marketing automation system:

• Meta Platforms, Inc. — advertising delivery and Marketing API access
• Anthropic, PBC — AI-assisted creative copy generation and analysis
• OpenAI, L.L.C. — AI-assisted creative copy generation and analysis
• Supabase, Inc. — secured database storage
• Railway Corp. — application hosting
• GitHub, Inc. — source code hosting and automation workflows

Data we do not collect from Meta users:

Our marketing automation system does not read or process: personal Facebook or Instagram profiles of end users, private messages, friends lists, or any other personal data of Meta users beyond aggregated, non-identifying advertising performance metrics. We do not buy or sell Meta Platform Data. We do not share Meta Platform Data with third parties for their independent marketing or advertising purposes.

Compliance and contact:

Our use of Meta Platform Data is governed by the Meta Platform Terms and Developer Policies. To request access to, correction of, or deletion of any Meta Platform Data we hold about you (where applicable), or to ask any question about our marketing automation practices, contact us at Contact.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Conversation transcripts are retained to enable Jessica's memory and may be retained for the life of your subscription. SMS opt-in records (timestamp, IP, user agent, consent text) are retained for the duration of the subscription plus a reasonable audit period for compliance purposes. You may request deletion of your data at any time by contacting us at Contact. Upon account cancellation, we will delete or anonymize your data within 90 days unless retention is required by law.

8. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit and at rest. However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your data to the best of our ability.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• The right to access the personal information we hold about you
• The right to correct inaccurate information
• The right to request deletion of your information
• The right to opt out of certain data processing activities
• The right to data portability

To exercise any of these rights, contact us at Contact.

10. Children's Privacy

HeyJessica is designed for use by adults. Our Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child, please contact us immediately.

11. Cookies

Our website uses cookies and similar technologies to improve your browsing experience, analyze site traffic, and understand where our visitors come from. You can control cookie settings through your browser. Note that disabling cookies may affect the functionality of our website.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated effective date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

14. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of your personal information. We do not sell personal information. To exercise your California privacy rights, contact us at Contact.

---