Privacy policy

Effective date: September 26, 2026 · Last updated: October 26, 2026

Joia is a personal contact manager you use through an AI assistant. This policy explains what information Joia collects, how we use it, and the choices you have. “Joia,” “we,” and “us” mean Customer Boost AI, LLC dba Joia, a Utah limited liability company. Questions: support@getjoia.com.

The short version

• Joia stores what you tell it about people you meet. Optional, read-only Google Calendar and Google Contacts connections are planned but not available yet.
• Joia never reads your email. It never writes to your phone’s contacts or to your Google Calendar or Contacts.
• Joia never uses face recognition and never stores photos of people.
• We don’t sell your information or use it for advertising. We don’t train AI models on it.
• You can delete all of your data at any time.
• If Joia holds information about you and you aren’t a Joia user, you can ask us to remove it. We act within 30 days.

Information we collect

Your account

You can sign in with Google or with a one-time code sent to your email (Sign in with Apple is coming). Our sign-in provider, WorkOS, handles this for us. We receive your name (if you share it), your email address, and an account ID. Signing in, including with Apple, only logs you in: it doesn’t give Joia access to your iCloud or phone contacts, email, or photos. If you sign in more than one way, we link those sign-ins to your one Joia account. We also record when you confirmed that you are 18 or older and live in the United States. We also keep your account’s time zone (for example, Mountain Time), taken from your browser when you connect an assistant or from your assistant, so dates and “today” are right for you.

What you tell Joia

When you ask your AI assistant to remember something, the assistant sends Joia the details, for example a person’s name, where you met, what they do, who they know, notes, and follow-ups. We store those details along with the exact sentence you said. Keeping the sentence lets you, and us when fixing problems, check that Joia recorded it correctly. Each detail is labeled:

• Confirmed: you stated it plainly.
• Unconfirmed: you hedged, for example “I think” or “maybe.”
• Inferred: it didn’t come from your own words, for example a contact list you imported or notes your assistant kept before you used Joia.

Google Calendar and Contacts (optional, not available yet)

These connections aren’t available yet. When they are, if you choose to connect them, Joia gets read-only access to your Google Calendar events (to identify the event where you met someone) and your Google Contacts (to import people you already know). Joia never requests access to Gmail or any other email. Connecting these is optional, and you can disconnect them at any time from your Google Account permissions page.

Contacts you import

If you upload a contacts file (CSV or vCard) or ask your assistant to import a list, we store the people in it.

New contacts on your phone (optional)

This is off until you say yes to it, and you can turn it off at any time on your account page; turning it off deletes the fingerprints described below. Once you’ve said yes, if your AI assistant can read your phone’s contacts, it may send them to Joia when you use Joia, so Joia can tell you which contacts you’ve added since you last used it and offer to save details about them. Joia uses the names, phone numbers, and email addresses only for that comparison and doesn’t store them. It stores a private fingerprint of each phone number or email address (a scrambled code made with a secret key and a value unique to your account) and the date it first saw it. Fingerprints are private, not anonymous: Joia can recognize a number or address it has seen before in your account, but fingerprints can’t be turned back into the number or address, and they can’t be matched across accounts. Deleting your data deletes them too.

Connection and technical data

We record which AI assistants you’ve connected to Joia and when. Access tokens are stored only in a scrambled (hashed) form. Our servers log basic request information, such as IP address, time, and which endpoint was called, to keep the service secure and working. We design our logs to exclude the content of your notes and the details of the people you save.

Visits to getjoia.com

Our website counts how many times each page is viewed and how often the “Copy prompt” button is clicked, as daily totals. It uses no cookies and stores nothing in your browser, and these counts don’t include your IP address or anything else that identifies you. If your browser sends Global Privacy Control or Do Not Track, your visit isn’t counted. We don’t use third-party analytics.

How we use information

• To run Joia: save, search, and return your information when you ask for it.
• To keep Joia secure, prevent abuse, and enforce usage limits.
• To fix problems and improve how Joia records what you say.
• To contact you about your account or changes to Joia.

Joia does not run an AI model on your information. Your AI assistant (for example, Meta’s Muse) interprets your requests and is governed by that company’s own privacy policy.

Google user data

Joia’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We use Google Calendar and Contacts data only to provide the features you turned on. We don’t use it for advertising, sell it, or use it to train AI models. People at Joia can’t read it unless you give permission, it’s needed for security, or the law requires it.

How we share information

We don’t sell or rent personal information, and we don’t share it for advertising. We share it only:

• With service providers that run Joia for us under contract, such as our hosting provider (Render), our sign-in provider (WorkOS), and Google if you choose to sign in with your Google account.
• With the AI assistant you connect, when you ask it to read your Joia data.
• If required by law, or to protect the rights, safety, or security of our users or others.
• As part of a merger, acquisition, or sale of assets, subject to this policy.

Information about people who aren’t Joia users

Joia users save details about people they meet. If a user shares a message or screenshot, their assistant may save one short line from it, credited to the person who wrote it, never the full message or the image. If you think Joia holds information about you and you aren’t a Joia user, you can ask us to remove it:

1. Email support@getjoia.com with the subject “Removal request.” Include your name and the email addresses and phone numbers someone might have saved for you.
2. Verifying it’s you: we send a confirmation message to each email address you list, and you reply to confirm. For each phone number, we text a short code to that number, and you send the code back to us by email. We act only on email addresses and phone numbers you have verified this way.
3. We search every Joia account for records matching your verified email addresses and phone numbers, whether saved as a contact detail or written in a note, and delete those records along with their notes and history. If your address or number appears only in a note about someone else, we remove just the address or number. A name alone isn’t enough for us to act, because many people share names.
4. We keep a scrambled code of your verified email addresses and phone numbers, made with a secret key, so they can’t be saved again later, even inside a note. We never keep them in readable form.
5. We also delete any contact fingerprints (see “New contacts on your phone”) that match your verified email addresses and phone numbers, in every account.
6. We confirm by email once removal is complete, within 30 days of verifying your request.

To protect everyone’s privacy, we won’t tell you which users had saved your information, and removals happen without notifying those users.

Keeping and deleting information

• We keep your information while your account is active.
• So a request your assistant sends twice is only done once, Joia keeps a copy of its recent replies for up to 24 hours. Delete everything and removal requests erase them.
• Delete everything: you can delete all of your Joia data in one step at api.getjoia.com/account. You’ll be asked to sign in again first. Your assistants are disconnected and your data is hidden right away. For 30 days you can restore it by signing in there; after 30 days it’s permanently erased from our live systems, and we have our sign-in provider (WorkOS) delete your sign-in record there (unless you’ve signed up again with it), and copies in encrypted backups are erased automatically within 7 days after that.
• Removing Joia from your AI assistant stops the assistant’s access but does not delete your data. Use “Delete everything” for that.

Security

Joia uses HTTPS for every connection. Our database is encrypted at rest by our hosting provider. Access tokens are stored only as hashes, and contact fingerprints are keyed hashes that can’t be reversed. Joia doesn’t store Google access tokens; Google sign-in is handled by WorkOS. Secrets are kept out of our code. No system is perfectly secure, but we work to protect your information and will tell you promptly if a breach affects it.

Joia staff can reach your data only through a few restricted admin tools, and only to give you support you’ve asked for, with your permission. Every use is recorded with the date, what was done, and why.

Your choices and rights

You can see, correct, export, and delete your information through your AI assistant, on your account page at api.getjoia.com/account (where you can see everything Joia holds, confirm or delete details that aren’t confirmed, and download a copy), or by emailing us. Depending on where you live, including California, you may have additional rights, such as knowing what we collect and not being discriminated against for using your rights. We don’t sell or share personal information for cross-context behavioral advertising. To make a request, email support@getjoia.com. We’ll respond within 45 days, as California law requires.

Who can use Joia

Joia is for adults 18 and older in the United States. We don’t knowingly collect information from children under 13 who use Joia. If you believe a child has used Joia, contact us and we’ll delete the account.

Changes

If we make material changes, we’ll update the date above and tell you before they take effect.

Contact

Customer Boost AI, LLC dba Joia · Utah · support@getjoia.com · 51 West Center Street #180, Orem, UT 84057