Jaylu · by the Quantum Key Institute
Privacy Policy
Last updated 03-11-2026
Jaylu works by listening to what you tell it. This policy says plainly what we collect, where it goes, how long we keep it, and what we never do with it. It applies to the Jaylu app; the Quantum Key Institute's general privacy policy applies to its courses and websites.
Quantum Key Institute Pty Ltd (ABN 93 684 008 366) ("we", "us") handles your personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Because your answers can include information about your health and state of mind, we treat everything you tell Jaylu as sensitive information, and we collect it only with your consent, which you give when you accept this policy and when you answer the questions.
The short version
- Nobody at Jaylu reads your answers or your sessions. Software does. A person can open a session only to help you when you ask, or where the law requires it, with a written reason that is logged.
- Your answers are deleted seven days after a session is made. The session text and recording stay in your library.
- Jaylu remembers a short summary of you so that each session fits better than the last. You can read it and erase it any time under Terms & privacy in the menu.
- Research copies have no names. What we learn from across all sessions is a de-identified note of themes, never tied to you.
- Delete your account any time from My profile and everything goes at once.
- We never sell your information, and we never share it with advertisers.
1. What we collect
| What | Why |
|---|---|
| Email address, first name, time zone, your appearance and voice settings | To sign you in, address you, reset your daily session at your midnight, and run the app |
| Your answers to the session questions, typed or spoken, and the text of what you say when you tap to talk | To write your session. Spoken answers are turned into text; the audio is not kept |
| The sessions made for you: the script and the recording | So you can listen to them, and so a session can be re-recorded in another voice if you ask |
| A short summary of you and a list of your recent sessions (goal, style, what you wanted, how you said it went) | So the next session builds on the last ones |
| Your own voice, only if you choose to make one: the recording of you reading the consent line and passage, its one-time code, a text transcript of it, when and from which device and IP address it was made, and the voice model made from it | To make your voice, keep a record that you agreed to it, and read your sessions in it. See Your own voice |
| Notes you leave after a session (rating, whether you felt a shift, what you liked) | To improve Jaylu. Free-text notes are read by the Jaylu team |
| Access codes you enter, your plan, payment status, and invoices | To give you access and bill you. Card numbers are held by Stripe, not by us |
| Passkey public keys (if you set up Face ID or fingerprint sign-in), Google account email (if you sign in with Google) | To sign you in without a code. We never receive your biometric data; it stays on your device |
| Technical records: when sessions were made, how long they took, what they cost us, errors, and safety flags (that a session was stopped or written with care, never the text) | To run and improve the service and keep it safe |
We do not use advertising trackers or analytics cookies inside Jaylu. The app stores your sign-in and a few preferences on your device.
2. How your sessions are made
Your answers, with the summary of your past sessions, are sent to an AI model run by Anthropic (United States) which writes the script, and a second model which checks it. The script is sent line by line to ElevenLabs (United States) to be recorded in the voice you chose, and spoken answers are transcribed by ElevenLabs. Anthropic does not use what we send it to train its models and keeps it only briefly. ElevenLabs keeps a history of what it has voiced in our account, which we use only to avoid paying twice for the same line, and handles that content under its business terms. Neither company knows who you are: they receive your words, not your name or email.
2A. Your own voice
If you choose to hear your sessions in your own voice, you record yourself reading a consent line with a one-time code and a short passage. ElevenLabs (United States) transcribes the recording so we can check the code was spoken, and makes a synthetic voice model from it, held in our ElevenLabs account. We treat your recording and voice model as sensitive information and collect them only with the consent you give on that screen.
Your voice is used only to read your own sessions. It is not used to identify you, not used to train AI, not sold and not shared with anyone else. We keep the recording, its transcript and the details of when it was made, as the record of your consent, for as long as your voice exists. Only a named Jaylu admin can listen to it, to check a voice belongs to the person who made it, and that access is logged.
You can delete your voice at any time from the menu, and it goes with your account if you delete that. Deleting it removes the voice model from ElevenLabs, your recording, its transcript and every clip spoken in your voice. We keep only a note that a voice existed, when it was made and deleted, its code and who deleted it.
3. Who sees what
Your answers and your sessions are processed by software. The Jaylu team can see that a session was made, when, in which style and voice, how long it is, what it cost us, and the reviewer model's score and notes, but not what you wrote or what the session says. If you ask us for help with a particular session, or the law requires it, a named team member can open it after writing a reason, and that access is recorded.
We do not sell your information, and we do not share it with advertisers.
4. Where your information goes
Jaylu runs on servers and services outside Australia. By using Jaylu you consent to your information being stored and processed by:
- Supabase, our database and sign-in provider;
- Render (Singapore), the servers that run the app and make your sessions;
- Cloudflare, which stores your recordings;
- Anthropic (United States), which writes and checks your sessions;
- ElevenLabs (United States), which records the voice, makes your own voice if you ask for one, and transcribes what you say;
- Resend, which sends our emails;
- Stripe, which takes payments, and later Apple or Google if you subscribe through an app store;
- Google, only if you choose to sign in with Google.
These providers may be subject to different privacy laws from Australia's. We choose providers that commit in writing to keeping your information confidential and secure, and we give each one only what it needs for its job.
A planned move. We plan to move Jaylu to a related company owned by the same founders, in another country, in 2027. When that happens, your account, your subscription, your saved payment method (held by Stripe) and the information needed to keep running Jaylu for you move to that company, which then handles it under this policy. We will email you at least 14 days before, and you can cancel or delete your account before then if you do not want that. The Terms of Service have the details.
5. How long we keep things
- Your answers: deleted seven days after each session is made. Unfinished questionnaires are deleted after 30 days.
- Your sessions and recordings: kept while your account has access, so you can keep listening. 90 days after your access ends, recordings are deleted; 120 days after, the session data is deleted. We email you before the recordings go.
- What Jaylu remembers about you (the summary and session list): kept while your account has access, erasable by you at any time, deleted with your session data.
- Your own voice (if you make one): the recording, its transcript and the voice model are kept until you delete your voice or your account, until 30 days after your plan stops including your own voice, or until we delete it under the Terms. If you make your voice as the free gift on a plan without your own voice, the voice model is deleted as soon as your gift session has been made, and the recording and its transcript are kept for 30 days so we can make your voice again if you move to a plan that includes it. After those 30 days they are deleted.
- Account, access and billing records: while you have an account, and as long as the law requires for financial records (generally seven years for invoices).
- Everything, if you delete your account: immediately. We keep a record that an account existed, with its email, plan and dates, for refunds, chargebacks and legal obligations, and nothing of its content.
6. Research and improvement
When a session is made, a small model writes a de-identified note: a few general themes and a two-sentence summary with names, places, employers, ages and any other identifying detail removed. These notes are stored without your user id and are what we use to understand what people need and to improve the sessions. We never use your identifiable answers or sessions for marketing, and we never publish them.
7. Safety
If what you write shows that you may be in danger of harming yourself or someone else, Jaylu does not make a session and shows you how to reach help. We record that this happened, not what you wrote, and that attempt does not count against your plan. Where your answers show a hard time without danger, the session is written under extra care rules. Jaylu is not monitored by people in real time.
8. Your rights
You can see and change your name, email, voice and appearance in the app; read and erase what Jaylu remembers about you under Terms & privacy; and delete your account under My profile. You can also ask us for a copy of the personal information we hold about you, ask us to correct it, or complain about how we have handled it, by emailing support@quantumkeyinstitute.com. We respond within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
9. If you are outside Australia
Jaylu is run from Australia, and Quantum Key Institute Pty Ltd is the controller of your information. If you are in the United Kingdom, the European Union or another place with its own privacy law, you also have these rights, and we honour them wherever you are:
- Why we may use your information: to provide the service you signed up for (the contract between us); with your consent, for your answers and anything about your health or state of mind, which you can withdraw at any time by erasing what Jaylu remembers or deleting your account; and for our legitimate interests in keeping Jaylu safe, secure and improving, which never override your rights.
- Your rights: to see the information we hold about you, to correct it, to have it deleted, to get a copy you can take elsewhere, to object to or restrict how we use it, and to withdraw consent. Most of this you can do yourself in the app; for the rest, email us and we answer within 30 days.
- Automated decisions: software writes your sessions, but no decision with a legal or similarly serious effect on you is made automatically.
- Transfers: your information is stored and processed in Australia, Singapore and the United States by the providers listed above, under written terms that protect it, including the standard contractual clauses where those apply.
- Complaints: you can complain to your local data protection authority, for example the Information Commissioner's Office in the United Kingdom or the authority in your EU country.
10. Security
Information is encrypted in transit and at rest with our providers, access to systems is limited to the people who run Jaylu, and recordings are served through time-limited links. No system is perfectly secure; if a breach ever affects you, we will tell you and the regulator as the law requires.
11. Children
Jaylu is for people aged 18 and over. We do not knowingly collect information from anyone under 18; if you believe we have, contact us and we will delete it.
12. Changes
We will update this policy when the service or the law changes. The current version is always in the app under Terms & privacy. If a change matters, you will be asked to agree to it again before continuing.
13. Contact
Quantum Key Institute Pty Ltd, ABN 93 684 008 366, [CONFIRM: registered address]. Email support@quantumkeyinstitute.com [CONFIRM: support email]. Website quantumkeyinstitute.com.
Read with the Terms of Service, the Health Notice and Disclaimer and the Refund and Cancellation Policy.