Privacy Policy - Ajeeb Personal

Effective date: 2026-08-24 Last updated: 2026-08-24 Operator: Tryfecta, Kuwait Contact: privacy@ajeeb.ai

This policy describes the product as it operates today. It does not promise protections that are disabled, planned, or available only in source code.

Plain-English summary

• Ajeeb stores what you submit and the records created by features you use.
• Ajeeb's application and tools run on our server. The main language model uses OpenAI through Codex OAuth, so prompts and relevant context can be processed outside our server.
• Family-name masking exists in the product but is currently disabled. Family names can be included in prompts sent to an AI provider.
• Connected services can provide email, calendar, contact, file, device, health, commerce, and account data when you authorize them.
• /delete_me starts a 30-day grace period. A normal message during that period can restore the account. The purge runs after the grace period.
• We do not sell personal data and we do not show advertising in Ajeeb.

1. Who we are

Ajeeb Personal is a personal assistant operated by Tryfecta in Kuwait. In this policy, "Ajeeb", "we", and "us" refer to Tryfecta. "You" means the person using an Ajeeb account.

Privacy requests: privacy@ajeeb.ai General support: support@ajeeb.ai

2. Data we collect

2.1 Data you submit

Depending on the features you use, this can include:

• phone number, email address, profile details, language, and preferences;
• messages, voice notes, images, videos, files, and generated media;
• tasks, reminders, calendar events, goals, routines, notes, and diary entries;
• people, family, relationship, household, travel, health, and work details;
• receipts, expenses, invoices, orders, subscriptions, and billing details;
• feedback, approvals, corrections, and account-support requests.

2.2 Data from connected services and devices

When you connect or authorize a service, Ajeeb can receive the data covered by that permission. This can include:

• Google profile, Gmail, Calendar, Drive, and Contacts data;
• Apple device, notification, location, place, and Health data;
• Deliveroo, Adventure Key, and other connected-service account data;
• device model, operating-system version, app version, locale, and push token;
• OAuth permissions and tokens needed to keep the connection working.

You can disconnect an integration from Ajeeb's settings. Disconnecting locally does not prove that the provider revoked its own grant; use the provider's account controls as well when you need immediate provider-side revocation.

2.3 Data Ajeeb creates

Ajeeb can create:

• conversation history, summaries, memories, inferred preferences, and retrieval logs;
• action, tool, approval, cost, delivery, safety, and reliability records;
• generated files, media, transcripts, embeddings, and knowledge indexes;
• feature-usage, login, device-session, error, and security audit records.

Some inferred information can be wrong. Use Ajeeb's memory controls to correct, forget, or delete it.

3. How we use data

We use data to:

• answer requests and maintain conversation continuity;
• remember user-provided context and retrieve relevant information;
• create and manage tasks, reminders, files, media, and approved actions;
• operate connected services that you choose to use;
• deliver notifications and proactive help that you enable;
• enforce safety, permissions, quotas, and abuse controls;
• diagnose failures, measure reliability, and improve the private product.

We do not sell personal data. We do not use Ajeeb messages to serve ads.

4. AI and service providers

4.1 Main AI processing

Ajeeb runs its application, database, memory tools, and action tools on our server. Its main language model currently uses OpenAI through Codex OAuth. Normal chat prompts, system instructions, selected conversation history, retrieved memory, and tool results can be sent to OpenAI when needed to answer.

Hermes is Ajeeb's agent runtime and tool harness. It is not a local language model. Calling the runtime "Hermes" does not mean the language-model processing stays on our server.

4.2 Other processing providers

Features can send the minimum data needed for that feature to another provider, including voice, transcription, image, video, search, email, calendar, payment, commerce, and notification providers. Providers and enabled features can change.

Provider systems have their own security, retention, and legal terms. We do not promise that a provider deletes data immediately, keeps it in Kuwait, or never uses abuse-monitoring retention unless that promise is confirmed by the current provider agreement.

4.3 Infrastructure

The main Ajeeb server is hosted by Hostinger in France. Cloudflare provides DNS and network protection. PostgreSQL and Redis run on the Ajeeb server.

5. Family and sensitive data

Family information is sensitive. Ajeeb contains safety rules that limit family data access, cross-user disclosure, emotional adaptation, and outbound actions.

The product also contains an optional family-name masking mechanism. That mechanism is currently disabled. Family names and related context can therefore be included in prompts sent to an AI provider when they are relevant to a request.

Do not rely on /family list, alias tokens, or a "local-only" label as proof that a specific message stayed on this server. A future private mode will be described here only after its end-to-end processing path is enabled and independently tested.

6. Retention, backups, and deletion

• Active account data is retained while the account or feature remains active, subject to feature-specific retention controls and cleanup jobs.
• /delete_me requires confirmation and then marks the account for deletion.
• The account has a 30-day grace period. Sending a normal message during the grace period can restore it.
• After the grace period, a purge job removes user-scoped database rows, files, profile data, and matching cache/session data. Failed cleanup work can require an operator retry.
• Minimal deletion and security audit records can remain where needed to prove that an operation occurred or investigate abuse. Current deletion audit data is not guaranteed to be automatically purged after 12 months.
• Local backups are created daily, kept on the production server for about 14 days, and protected by owner-only filesystem permissions. The backup archives are compressed but are not encrypted backup files. No offsite Ajeeb backup is currently verified.

Deleting an account does not delete information already held independently by a connected provider. Use that provider's deletion and revocation controls too.

7. Security

Current protections include TLS for public web traffic, owner-restricted server access, per-user application checks, audit logs, rate limits, confirmation gates, and field encryption for selected secrets.

Not every database field, log, media file, OAuth token, or backup archive is encrypted at rest today. We are correcting known gaps. No system can guarantee absolute security.

If we confirm a security incident that materially affects your personal data, we will use available contact channels to notify affected users and meet applicable legal obligations.

8. Your controls

Depending on the surface and feature, you can:

• inspect, correct, pin, or forget memories;
• export account, memory, file, and knowledge data;
• disable proactive messages and notifications;
• disconnect integrations and revoke them at the provider;
• delete individual records, conversations, files, or the whole account;
• ask privacy@ajeeb.ai for access, correction, deletion, or clarification.

Some controls are not yet available on every surface. Contact us when an in-app control does not cover the data you need to manage.

9. International processing

Core stored data is hosted in France. AI and feature providers can process data in other countries, including the United States and European Union. Using a connected or AI-backed feature can therefore transfer data outside Kuwait.

10. Children

Ajeeb Personal is intended for users aged 18 and older. Contact privacy@ajeeb.ai if you believe a child has an account that should be removed.

11. Changes and contact

We will update the date on this page when this policy changes. For a material change, we will notify affected users through an available account channel when practical before the new use begins.

Questions, requests, and complaints: privacy@ajeeb.ai

This policy is governed by applicable law in the State of Kuwait. It should be reviewed by qualified Kuwait counsel before a public commercial launch.