Privacy & data
Jen only asks for what she needs to help you, and this page explains exactly what that is and where it goes.
Last updated 6 September 2026
Who we are
Hiya Jen (“Jen”, “we”, “us”) is a life-admin assistant provided by Hiya Jen Ltd, a company registered in England & Wales. The service is operated by JSM Forum Websites. We are the data controller for the personal information described here. If you have any question about your data, email [email protected].
What we collect
- Your email address — used to sign you in with a magic link and to send you the messages you ask for (reminders, replies, the weekly digest).
- Your mobile number — only if you add one, and only so we can send you text-message reminders and, if you use it, reply on WhatsApp.
- What you tell Jen — the messages you send, the letters she drafts for you, the documents and messages you ask her to explain or check, and the reminders, lists and contracts you save.
- Payment details — handled entirely by Stripe, our payment provider. We never see or store your full card number; we keep only your subscription status and renewal date.
- Basic technical data — things like your approximate location from your IP address and your browser type, used to keep the service secure and working.
Photos you upload
When you send Jen a photo — of a letter, a bill, a calendar, a suspicious message or a screen you need help with — the image is sent to our AI provider so it can be read, and then discarded. We do not store the image. Only the resulting written explanation or extracted text is saved to your account, so you can look back at it later.
Who processes your data for us
We use a small number of trusted suppliers to run the service. They only process your data on our instructions:
- OpenAI — powers the AI that reads, explains and drafts. Content sent for processing is not used to train their models.
- Mailgun — sends and receives email on our behalf.
- Twilio — sends text messages and carries WhatsApp replies.
- Stripe — takes and manages subscription payments.
- Our hosting provider — stores your account and its data on secure servers in Europe.
Some of these suppliers are based outside the UK. Where that is the case, the transfer is covered by an adequacy decision or by standard contractual clauses that keep your data protected to UK standards.
Why we are allowed to use it
- To provide the service you asked for — performing our contract with you.
- To keep the service secure and reliable — our legitimate interest in preventing abuse and fixing faults.
- To send you marketing — only with your consent, which you can withdraw at any time.
How long we keep it
We keep your account and its contents for as long as your account is open. If you close your account, we delete your personal data within 30 days, except where we must keep limited records (such as payment records) for legal or accounting reasons.
Cookies
We use one essential cookie to keep you signed in. We do not currently use advertising or analytics cookies. If that changes, we will ask for your consent first.
Your rights
Under UK data protection law you can ask us to show you the data we hold about you, correct it, delete it, send it to you in a portable form, or stop a particular use of it. Email [email protected] and we will respond within one month. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk.
Changes to this page
If we make a significant change to how we use your data, we will tell you by email before it takes effect. The date at the top of this page always shows when it was last updated.