Last updated 16 August 2026
What this site knows about you.
Almost nothing, and this page says exactly what that means rather than gesturing at it in nine pages of boilerplate.
The short version
This website is a window onto software that runs on a personal computer. The interesting data — conversations, memories, files, credentials — lives on that machine and is never uploaded here.
This site collects anonymous usage analytics and nothing else. There are no accounts for visitors, no newsletter, no advertising, and no data sold or shared with anyone.
What this site stores
Google Analytics 4, with IP anonymisation switched on and every advertising signal denied by default. It records which pages were viewed, roughly where in the world from, and which browser. It cannot identify you.
A single session flag recording that you dismissed the mobile call-to-action, kept in your browser's session storage. It disappears when you close the tab and never reaches a server.
Content Security Policy violation reports, which contain the URL of the blocked resource and nothing about you. These exist so security misconfigurations get found rather than silently tolerated.
What this site never stores
No conversations with Jarvis. No memories, files, filenames, commands, repository contents or anything Jarvis reads on the machine it runs on. None of that touches this server, because the assistant's brain does not run here.
No passwords. Access to the private console uses a device-bound credential and a passcode; the credential's private key never leaves your device, and the passcode is stored only as an irreversible hash.
No biometric data of any kind. When a fingerprint or face unlocks the console, that check happens entirely on your own hardware — the result reaches this site as a signature, never as an image or a template.
Third parties
Vercel hosts this site and processes request logs as part of serving it. Google Analytics processes the anonymous usage data described above. That is the complete list.
The AI model provider is called from the personal machine, not from this website, so no prompt or reply passes through this domain.
Your choices
Blocking analytics with any content blocker, or enabling Do Not Track, breaks nothing on this site. Every page works identically without it.
To ask what is held about you, or to have anything removed, email hello@jarvisflow.tech. Every message gets a reply within one working day.
This policy describes jarvisflow.tech only. Software you run on your own machine is governed by whatever you configure it to do.