Clear about what
stays and what’s shared.

The short version

• We do not sell or share your personal information, and there are no advertising trackers or analytics cookies.
• The Windows app works on your PC. By default nothing you read, say or type leaves your computer.
• We collect only what we need to run website accounts, support, the beta and, when it goes on sale, Jiffy Reach+.
• You can ask for a copy of your information, or for it to be deleted, at any time.

Who we are

Jiffy Reach is made by Jiffy Jr Development, in the United States. This notice covers the website jiffyreach.com, website accounts, the licence service at licence.jiffyreach.com, the Jiffy Reach Windows application and its browser companion. Questions: support@jiffyreach.com or the support page.

What the website collects

Support and beta requests

The public support and beta request forms save your description, topic, and any optional email, page address, browser or assistive-technology details you give. An email address is required only to request beta access or to create a website account. When a request arrives, a copy is emailed to our support inbox so we can answer it. Do not send passwords, financial details or private screen content in a message.

Website accounts

To create an account you give an email address, a password, a username and your first and last name. Your password is handled by our account provider and stored only in hashed form: we never see it. Your first and last name stay private to your account. Your username is the only name we would ever show to other people, for example if we add community features. We also record which version of these terms you agreed to, and when. We use your email to sign you in and to send account emails (confirming your address and resetting your password). We do not send marketing email.

Beta downloads

We record whether your account is approved for the beta. When you choose Download, we create a link that works for 10 minutes. We keep no download history of our own; our hosting provider may keep ordinary request logs.

Jiffy Reach+ licences and signing in the app

Jiffy Reach+ is not on sale yet. When it is, or when you add a licence key to your account, the licence service stores:

• the licence key;
• the payment provider’s customer and subscription identifiers, the subscription status and the date it is paid until;
• which website account the key belongs to, by an internal number, not by name or email.

It does not store your name, email address or card details. When the app signs in with your account, you approve a short code on this website. The code is kept for at most 10 minutes and the app receives only the licence key. To stop guessing, the licence service briefly keeps counters of recent attempts. They expire within two hours.

Payments

When Jiffy Reach+ is on sale, payments are taken by Stripe. Stripe collects and keeps your card details and billing information under Stripe’s privacy policy. We never see or store your full card number. Stripe tells us the customer and subscription identifiers and whether the subscription is active, so the licence works.

What we never collect

This website does not capture your screen, listen to your microphone, run OCR on your computer, or send anything to an AI model. It has no advertising, no analytics trackers and no third-party scripts. We do not sell or share personal information, including for targeted advertising, and we do not use it to make automated decisions about you.

Service providers

A few companies process information for us, only to provide the service:

• Cloudflare hosts the website, the beta download storage and the licence service. It may process connection information such as IP addresses to deliver and protect them. It also counts visits to the website with Cloudflare Web Analytics, which uses no cookies, does not follow you to other sites and does not build a profile of you.
• Supabase runs website accounts and stores support requests, in a data centre in the United States.
• Resend sends account emails and support-request alerts.
• Stripe takes payments, when Jiffy Reach+ is on sale.
• Anthropic receives requests only from the Windows app, and only if you turn on cloud AI (see below).

We may also disclose information if the law requires it, or to protect people’s safety or the service from fraud or abuse.

Cookies and device storage

We use only storage the site needs to work, so there is no cookie banner. When you sign in, your browser keeps your session so you stay signed in. Theme, text size, spacing and motion preferences are saved in your browser. There are no advertising or analytics cookies: the website’s visit counts come from Cloudflare Web Analytics, which sets none. You can sign out or clear your browser’s site data at any time; clearing it signs you out.

How long we keep it

Account information is kept while you have an account. Support messages and beta requests are kept until they are dealt with, unless removed earlier. To limit spam, the server stores a keyed hash derived from your connection address, not the address itself, with a public report. Page query strings and fragments are removed before saving. No automatic email confirmation is sent. Licence records are kept while the subscription exists and afterwards only as long as needed for accounting and the law. Provider security logs and backups have their own, shorter retention periods.

To delete your account, send an “Account and data” request from your account page or the support form. We delete the account, its profile and its support requests within 30 days and confirm by email. Website accounts are separate from the Windows application: deleting one does not affect Jiffy Reach on your PC or a Jiffy Reach+ licence.

Your choices and rights

You can ask us to show you, correct, export or delete the personal information we hold about you. You can edit your name and username and delete your own support requests in My account. For anything else, send an “Account and data” request or email support@jiffyreach.com. We answer within 30 days. We may need to confirm that a request comes from you, usually by replying to the email on your account; without a way to contact you, we may be unable to verify a deletion request. Depending on where you live, you may have further rights, and you will never be treated differently for using them. If you are unhappy with our answer, you may also complain to your local data protection authority.

Children

Jiffy Reach is not directed to children under 13, and we do not knowingly collect their information. You must be at least 13 to create an account; if you are under 18, ask a parent or guardian first. If you think a child under 13 has given us information, contact us and we will delete it.

Security

Everything travels over HTTPS. Passwords are stored only as hashes, download links are signed and short-lived, and access to stored requests is limited to authorized operators. No system is perfectly secure; if you find a problem, please tell us through our security policy.

Where information is processed

Jiffy Reach is run from the United States, and account data is stored there. If you use the website from elsewhere, your information is transferred to and processed in the United States.

The Jiffy Reach Windows application

By default, nothing leaves your PC

Screen reading, speech, voice recognition, OCR, the Secure Vault and AJ on Ollama all run on your PC. The app has no analytics, no tracking, and needs no account; problem reports are sent only if you agree (below).

Optional cloud AI

Only if you add your own Anthropic API key and turn on “Allow cloud AI”: your question and relevant screen text go to Anthropic, under Anthropic’s own terms. Screen images are sent only if “Allow sending screen images” is also on; an image shows whatever is in the front window. Passwords and other secrets are removed from the text first, and the vault is never sent. Private Mode blocks cloud AI entirely. Jiffy Reach+ cloud AI, when available, follows the same rules: requests pass through our licence service to Anthropic, and we keep only usage counters, never the content.

Downloads

The Whisper speech model is downloaded once, from its public host.

Licence and update checks

When they are switched on, the app sends only your licence key to licence.jiffyreach.com to check a Jiffy Reach+ subscription, and asks for the newest version number. The update check carries nothing about you. Jiffy Reach Free needs neither.

Problem reports, only if you say yes

The first time Jiffy Reach starts, it asks whether it may send problem reports, and you can change your answer at any time in Settings, Diagnostics. If you say yes, then when something goes wrong it sends jiffyreach.com the lines of its own log around the problem, the Jiffy Reach and Windows versions, how much memory and how many processors your PC has, and a random number that groups reports from one installation. At most one report an hour. Before anything is sent, the app removes passwords, card numbers, codes, anything in quotation marks (which is where what you said and what was on your screen appear), email addresses, your Windows user name and your computer’s name. Nothing is sent in Private Mode. Reports are stored privately, used only to find and fix problems in Jiffy Reach, and your network address is kept only as a keyed scramble for limiting how often reports can arrive.

Secure Vault

The vault is encrypted on your PC (AES-256-GCM with Argon2id, tied to your Windows account). Optional sync writes encrypted files to a folder you choose; it is not a Jiffy-hosted cloud vault, and your storage provider sees only encrypted files. AJ never sees a password, a user name, or which login was used.

AI limitations

AI can misunderstand context or suggest the wrong step. Review confirmations and results, and keep another way to control your computer.

Jiffy Reach companion browser extension

The companion extension sends no data over the internet. It talks only to the Jiffy Reach application on the same computer, using the browser’s native messaging. When you use Jiffy Reach on a web page, the extension passes it the page’s structure (headings, links, buttons, form fields and their labels) and the contents of ordinary form fields so they can be read to you. It never reads password fields, one-time codes, card numbers or card security codes. When you ask Jiffy Reach to fill a login or your details, the extension types the values Jiffy Reach gives it into that page, and only if the page is the website the login was saved for. It never submits a form. The extension stores nothing and keeps no history.

Changes to this notice

We post any change here with a new date. If a change affects how we use information you have already given us, we will tell account holders by email before it applies.

Contact

Jiffy Jr Development · support@jiffyreach.com · or use the support page.