What Jack knows, and what he does with it.
Effective [Month D, 2026] · Last updated [Month D, 2026]
Draft — under legal review. Items in [brackets] are placeholders.
- Your screenshots and chats are yours. We use them to answer you and to let you pick a convo back up. We don't sell them.
- Delete a convo and its screenshots go with it. Close your account and everything goes within 30 days.
- Your prompts are processed by third-party AI providers under agreements that stop them keeping or training on your data.
- Our coaches may review chats to make Jack better. You can turn that off in one tap. Screenshots and photos are never reused.
- Payments go through Stripe. We never see your full card number.
What we collect
Account. Name, email, and a hashed password, or your Google account ID if you sign in with Google.
What you give Jack. Screenshots you upload, the messages you type, convo names, and anything you add to your profile (photos, prompts, bio, the details in "About you").
Usage. Which features you use, chats used per month, device type, app version, crash logs, and approximate location from your IP address. On the phone app we also record session replays so we can see where the app confuses people; what you type is masked in those replays, and they never include your screenshots.
Payment. Handled by Stripe. We keep your plan, billing status, and the last four digits of your card.
Dictation. If you use the mic, your device's own speech service (Apple or Google) turns speech into text. The audio never reaches our servers.
Your screenshots
Screenshots often contain other people's names, photos, and messages. You're responsible for having the right to share them. We treat them as private: they're stored encrypted, tied to your account, visible only to you, and used only to answer the question you asked and to keep your convo history. We never post, publish, or share them, and we never use them to train anything.
How we use it
To run Jack (read your convos, write replies, coach your profile), to keep your history so you can pick up where you left off, to bill you, to fix bugs, to stop abuse, and to send you service emails like receipts and the day-6 trial reminder. Marketing emails are opt-in and one click to stop.
AI processing
Jack's answers are generated by large language models run by third-party AI providers. Your screenshots and messages are sent to them to produce a reply, under agreements that prohibit them from keeping your data beyond the request or using it to train their models. We do not train models on your screenshots or photos. Jack's coaching knowledge comes from our own coaching library and from conversations shared with us by consenting clients.
Making Jack better
Our coaches may read chats to check Jack's answers, and may adapt a text exchange, with names and identifying details removed, into the examples Jack learns from. Screenshots and photos are never part of this. You can opt out any time in Profile → Privacy ("Help improve Jack"); when it's off, coaches don't see your chats and nothing from them is reused.
Who we share with
Only the vendors we need to run the service: Vercel and Supabase for hosting and storage (in the United States), the AI providers above, Stripe for payments, Resend for service email, PostHog for usage analytics and session replay, and Trigger.dev for background jobs. Each is bound by contract to use your data only for us. We'll share data if the law requires it, or to protect someone from harm. We never sell it. Ever.
How long we keep it
Convos and screenshots: until you delete them, then they're removed right away. Your account: until you close it, then everything is erased within 30 days, except billing records we're legally required to keep. Backups roll off within [N] days.
Your rights
Wherever you live, you can see, export, correct, or delete your data from inside the app (Profile → Account), or by emailing jack@wingmanjack.com. Residents of California, the EU, the UK, and other regions have additional rights under local law, and we honor them. We don't treat you differently for using them.
Cookies
We use a small number of cookies and similar storage to keep you signed in, remember your settings, and measure how the site and app are used (PostHog). We don't run ad networks and we don't use tracking cookies for advertising.
Security
Encryption in transit and at rest, access limited to staff who need it, and logs on that access. No system is perfect; if something goes wrong that affects you, we'll tell you.
Children
Jack is for adults 18 and over. We don't knowingly collect data from anyone under 18. If you think we have, tell us and we'll delete it.
Changes and contact
If we change this policy in a way that matters, we'll email you before it takes effect. Questions: jack@wingmanjack.com · [Company legal name], [address].