Last updated: 2 November 2026
The Short Version
- Your library is yours. Only you can see what you save. Jooli has no public profiles and no sharing.
- Stored in the UK, encrypted. Your library is kept on servers in London, encrypted in transit and at rest.
- AI is how Jooli works. Each save is checked by OpenAI for sexually explicit content, then organized by Anthropic's Claude. The app shows you exactly what they receive, and you agree before you start.
- Day plans use Claude and Google Maps. When you plan a day, Claude picks places for your saves, and Google Maps finds them, works out travel times and draws the map. Jooli never uses your phone's location.
- Not for training. Neither AI provider trains its models on what Jooli sends.
- Never sold, no ads. We don't sell your data, and Jooli shows no ads.
- Yours to delete. You can delete any save, or your whole account, at any time.
Who We Are
Jooli is made by Codemost Limited, a company registered in the United Kingdom. Codemost Limited is the data controller for the personal data described in this policy. You can reach us at lab@codemost.co.uk.
Jooli is for people aged 16 or over.
Information We Process
Your account
You sign in with Apple or Google. (Accounts the Jooli team sets up, such as one for Apple's app review, sign in with an email address and password.) Apple gives us an account identifier and, the first time only, your name and your email address, which may be a private relay address that Apple forwards to you. Google gives us an account identifier, your name, your email address and a link to your profile picture, which the app shows on your account card in Settings. We never see your Apple or Google password.
Your saves
The links, pictures and text you save, and the titles and notes you add. We also keep the lists and sections you make, and what Jooli suggests for each save: a title, a short summary, tags, a kind (such as a product or a place) and sections.
Pages Jooli reads on your iPhone
When you save a web page, Jooli reads it on your iPhone. If it came from another app or you pasted the link, Jooli opens the page out of sight, without your logins or cookies. It then sends with the link the page's visible main text (up to 20,000 characters), its title and description, product details such as the price, and the address of its main picture. Jooli keeps this as the save's copy, so you can read it even if the original changes or disappears.
Jooli doesn't read cookies or form fields, and it leaves out baskets, account areas and similar panels it recognizes. A page can still show personal details in its main text, so we can't promise that a copy contains none.
Your day plans
When you plan a day, we keep what you typed (for example "Saturday in Paris"), the place and days you chose, and the plan itself: its stops, times and notes, and which of your saves each stop comes from. Each place is stored as Google's place identifier. Its name, address and opening hours are fetched from Google each time you open the plan, and never stored. If you remove a stop with Not for me, we remember that place's identifier, so later plans leave it out. The app also sends your phone's time zone offset, so "today" and "tomorrow" mean your day.
Your agreement
When you agree to how Jooli uses AI, we record which version of the description you agreed to, and when.
Subscription
Apple handles payments for Jooli Premium. RevenueCat manages subscriptions for us: it receives your purchase records from Apple and Jooli's internal number for your account, never your card details or your saves. We count how many saves your account has made, to apply the free saves.
Notifications
If you turn on notifications, we keep the notification address Apple gives your phone, so Jooli can send you its notifications. Reminders you set are scheduled on your phone itself. When you sign out, your phone stops receiving them, and you can turn them off in Settings at any time.
Technical data
Our servers see your IP address and the app version as part of normal internet traffic. We use them to keep the service working and secure, for example to slow down repeated failed sign-ins. If the app crashes and you've chosen to share crash reports with Apple, we may receive a report with technical details only. Jooli has no analytics or advertising tracking.
What AI Sees, and Why
AI is part of how Jooli works. Before you start, the app shows you what its two AI providers receive and asks you to agree. Nothing is sent before you do, and if this description changes, the app asks you again. If you'd rather not use AI, you can stop using Jooli and delete your account.
Every save goes to:
- OpenAI, for a content check. It receives the saved link, a web page's text and preview picture, saved text or pictures, titles and your note, and checks them for sexually explicit content.
- Anthropic, for organizing. If the save passes the check, Anthropic's Claude receives the same content, except web pages' preview pictures. It suggests a title, summary, tags and sections.
When you plan a day:
- Anthropic, for planning. Claude receives what you typed, the place and days, and for each organized save its kind, title, tags, the names and places it mentions, your note and the date you saved it. It doesn't receive your pictures or saved pages. It picks places for your saves and writes the plan.
- Google Maps, for places and travel times. Google receives the search words Claude chooses with the area of the trip, the places chosen, and their locations to work out walking, transit or driving times. It doesn't receive your saves, your notes or who you are.
What is never sent
Your Apple account details, such as your name and email address, go to neither provider.
What the providers keep
Neither provider uses what Jooli sends to train its models. OpenAI's content check keeps no copy of what it checks. Anthropic deletes what Jooli sends within 30 days. If Anthropic's own automated systems flag something as breaking its usage policy, it may keep it for up to 2 years.
Suggestions are only suggestions. You can change any title, note or section, and Jooli never creates a new section without your approval.
Maps in the App
Day plans show a Google map. Your phone loads it directly from Google, so Google receives your IP address and the area of the map shown, under its own Privacy Policy. Jooli doesn't ask for or use your phone's location. By using day plans, you also agree to the Google Maps/Google Earth Additional Terms of Service.
How We Use Your Information
We use your information to keep and show your library, to check and organize your saves, to keep the service secure, and to answer you when you contact us. We don't use it for advertising and we don't sell it.
Under UK and EU data protection law, we rely on these legal grounds:
- Providing the service you signed up for: your account, your saves, lists and sections, search, checking and organizing your saves with our AI providers, planning days from your saves, and your subscription.
- Our legitimate interests: keeping Jooli secure, preventing misuse and fixing faults.
- Legal obligations: when the law requires us to keep or share information.
Where Your Data Goes
We use a small number of providers to run Jooli. Each one gets only what it needs, under a data processing agreement with us.
| Provider | What for | Where |
|---|---|---|
| Supabase | Your account, your library and your pictures | United Kingdom (London) |
| Fly.io | Our servers, which handle requests and don't store your library | United Kingdom (London) |
| OpenAI | The content check | United States |
| Anthropic | Organizing your saves and planning days | United States |
| RevenueCat | Managing your subscription | United States |
| Apple | Sign in with Apple, payments and notifications | Worldwide |
| Sign in with Google, and places, travel times and maps for day plans | Worldwide |
International transfers
Your library is stored in the United Kingdom. Requests to our AI providers, and your subscription records at RevenueCat, are processed in the United States, and Google may process day-plan requests outside the UK. These transfers are protected by the European Commission's Standard Contractual Clauses and the UK's International Data Transfer Addendum.
Storage & Retention
- Your saves are kept until you delete them or your account. They don't expire.
- When you delete a save, its text, picture and saved copy are deleted straight away. Jooli keeps only an empty marker that it was deleted, so the same save can't come back by mistake.
- When you delete your account, everything you saved is deleted first, then your pictures and sign-in record. We keep only the account's internal number and dates, so an old sign-in can't bring anything back. Copies in our backups are gone within 30 days.
- A day plan is kept until you replace it with Plan again or delete your account.
- Server logs are kept for a short time.
Security
Every connection is encrypted: between the app and our servers, between our servers and the database, and between our servers and the AI providers. Your library is also encrypted at rest. Each person's library is walled off from everyone else's, and pictures are only reachable through short-lived private links.
Your saves are not end-to-end encrypted: our servers and our AI providers can read them, because checking and organizing them requires it. We don't look at your library. We only access it in exceptional cases, such as fixing a fault or responding to a legal demand.
Your Rights & Choices
In the app
You can edit or delete anything you've saved. To delete your account, go to Settings in the app and tap Delete account. See how to delete your data.
Under UK and EU data protection law
You have the right to access your data, to have it corrected or erased, to restrict or object to how we use it, and to receive it in a portable format. To get a copy of your data, or for any of these requests, email lab@codemost.co.uk and we'll respond within one month. A copy of your data goes only to the email address on your account: if you chose Hide My Email, that's your private relay address, and Apple forwards it to your inbox. You can also complain to the Information Commissioner's Office (ico.org.uk) in the UK, or to the data protection authority where you live.
Children
Jooli isn't for children. You must be 16 or over to use it. If you believe a child has an account, email us and we'll delete it.
Other People's Information
The pages and pictures you save can include other people. Your library is private to you, but please only keep what the people in it would be comfortable with. If someone asks us to remove something about them, we'll pass the request to the account's owner and, where the law requires, act on it ourselves.
Changes to This Policy
If we make a meaningful change, we'll tell you in the app before it takes effect. If the change affects what the AI providers receive, the app asks you to agree again. The date at the top shows the latest version.
Contact
Questions about your privacy or this policy? We're happy to help.
Email Us