Jesina LLC

Jesina Privacy Policy

Version 1.5 · Effective November 6, 2026

This policy explains, in plain language, what information Jesina collects, how we use it, who we share it with, how long we keep it, and the choices you have. By creating an account or linking a financial account, you agree to this policy.

1. Who we are

Jesina LLC ("Jesina," "we," "us") operates the Jesina portfolio analysis service at askjesina.com. Questions about this policy or your information can be sent to privacy@askjesina.com.

Jesina was formerly called REMfolio.

Jesina LLC is a Colorado limited liability company. References in this policy to Jesina LLC, "Jesina," "we" or "us" mean Jesina LLC.

2. What Jesina is and is not

Jesina is an informational and educational tool. It shows you your own numbers and holdings, applies published benefit rules, and explains financial ideas. It does not give personalized investment advice, and it is not a registered investment adviser at this time.

What you see: your own facts shown back to you (balances, holdings, your current mix, spending, benefit estimates), observations about your own numbers (for example, your emergency cash compared with a common benchmark, or your TSP contribution compared with the employer match), and general education. Projections are hypothetical illustrations based on your answers and stated assumptions, not predictions.
What Jesina does not do: recommend a target mix, a stock or international share, specific funds, account placement, trades or rebalancing; send optimizer suggestions or rebalancing alerts; or tell you what to buy, sell or hold. Ask Jesina and the REM copilot are set to decline those requests.
If this changes: if Jesina later offers personalized investment guidance, we will update this policy first and ask you to agree again before you use it.

3. Information we collect

Account information you give us: your email address, password (stored only as a one-way hash), and sign-in security settings such as two-step sign-in and passkeys. If you choose to get sign-in codes by text message or email, we also keep the mobile number or email address you verified for that purpose, encrypted, and use it only to send sign-in codes and security alerts.
Invited accounts: Jesina accounts are created only by invitation. When we invite you, we store your email address and, if the person inviting you adds them, your name and a short note, all encrypted; we also keep a masked form of your email address (for example, j•••@example.com) for our account records. The invitation link works once and expires after 72 hours, and we keep only a one-way hash of it, never the link itself. When you accept, you choose your own password, which we store only as a one-way hash that is also encrypted, and you then set up a second sign-in step (a code by text or email, a passkey or an authenticator app) before you can use Jesina. For that step we keep the sign-in security settings described above.
Your Household Profile: answers you provide in our intake questions, such as a household name you type (it is not sent to AI features), whether you are a military member, a federal civilian employee or both; your age, pay grade, years of service, goals, income, spending, debts and the mix of your investments; and, for military clients, your VA disability rating and monthly VA compensation, whether Combat-Related Special Compensation (CRSC) is approved, whether you elected the Survivor Benefit Plan (SBP), and any SBP annuity or VA Dependency and Indemnity Compensation (DIC) you receive. We save these answers to your account, encrypted, so you can come back and update them. You can clear them at any time with Start over on the Household Profile page or with Delete all my data. Guard and Reserve answers and an optional second adult are described in Section 4. Sample households in the app are fictional and are not your data.
Risk preference answers: the five questions about how you feel about ups and downs in the market are saved with your Household Profile. Jesina does not show you a risk score or label, and does not send these answers to AI features. They are used only inside Jesina's internal calculations.
Federal civilian employment and pension information (only if you choose Federal civilian or Both): your retirement system (FERS, CSRS or CSRS Offset); whether you are working, retired or have left federal service; your federal pay and high-3 average salary; years of service and unused sick leave; birth year; whether you are married (for the survivor benefit estimate); whether you are in a special retirement group (such as law enforcement or firefighters); military service you may count toward your pension and whether the deposit is paid; Social Security and outside-earnings estimates; and any pension or supplement estimate you type in. We do not ask for your agency, employee ID, Social Security number or personnel records. We treat this as sensitive financial information.
Your planning assumptions: choices you make within Jesina's limits, such as the number of months of expenses to keep in reserve, the age to plan to, and the interest rate above which debt counts as high-interest. Federal civilian clients may also choose the age they plan to leave federal service and their survivor benefit election. If you leave a choice blank, Jesina uses its default. If you saved a stock-share or international-share range in an earlier version, it stays in your encrypted profile but is no longer shown or used in anything you see; Start over or Delete all my data removes it.
Your saved Budget: on the Budgeting page you type planned spending and income by category for upcoming months, choose when to highlight differences, and may choose the spending category for a merchant. We store those plans and settings, and the cleaned-up merchant names you re-categorized (up to 300), as one encrypted record. The "actual" months shown beside your plan are recalculated from your linked bank transactions each time and are not saved in the Budget.
Your Ask Jesina choices: three optional switches on My Accounts (use my linked holdings, use my household summary, and let Grok write the My Accounts summary), all off until you turn them on. We keep a dated record of each time you turn one on or off, and the policy version in force.
Help improve answers switch (off until you turn it on): if Jesina offers this switch on My Accounts and you turn it on, we keep a record each time you mark an Ask Jesina or copilot answer as helpful or not helpful. The record holds only coded fields: how the answer was produced (for example by the AI, from public SEC filings, from our knowledge base, from a safety rule or from a fixed template), a topic code from a fixed list that our server picks, the version of the answer format, the results card the answer was about, your vote and the date. It never holds your question or the answer, and there is no comment box. With the switch on, we also record, as yes/no codes with no amounts, outcomes of things you already do in Jesina: accepting or dismissing a budget suggestion, reaching your emergency-cash benchmark or the full TSP match on a later run, and finishing a lesson. These records are tied to a one-way code rather than your email, are used only in company-level counts (groups smaller than 10 are not reported) to improve Jesina's answers, wording and tests, and are never used to train an AI model. We keep a dated record of each time you turn the switch on or off. Turning it off stops new records.
Learning progress (if you use Learn): when you use Learn while signed in, we keep the learning path you picked, which lessons you started and finished, and whether you passed each lesson's check. We do not keep your answers to the checks. We use this to show your progress and your next lesson. It is never used to choose sponsored content.
Referral codes (if the referral program is on): we give each account one referral code. It is random and is not based on your email address. If you enter a friend's code before your first paid subscription, we record the code as how you found Jesina and use it to apply the referral rewards described in the referral terms, including at checkout through Stripe. We do not tell the code's owner who used it. To stop code guessing, we keep a count of wrong code entries for your account for 2 days. Jesina looks at how codes are used only in totals.
Partner sign-ups (if Jesina works with partners): if you come to Jesina through a partner's page on askjesina.com or use a partner's code, we record which partner it was as your sign-up source. Partner pages are run by Jesina, carry no third-party code or trackers, and are covered by this policy. Partners do not get access to Jesina or to your account, and we do not give them your personal information. We count sign-ups, trials and paid subscriptions by partner in totals only, and groups smaller than 10 are not reported.
Estate organizer (if you use it): a checklist of important papers (for example a will, trust, powers of attorney, DD-214, SGLI or VGLI, SBP election, TSP beneficiary form, insurance, deeds and titles, an account list, a passwords plan, funeral wishes and military burial benefits). For each item you can note whether you have it, where it is kept (a short note you type) and when you last reviewed it. You can also list beneficiaries by account type (name and relationship) and contacts for your survivors (name, relationship and one way to reach them), and print a summary to keep with your papers. We do not ask you to upload documents and we do not store them. What you enter is encrypted, is never sent to AI features, is not written to our logs, and is used only to show your checklist and print your summary. Before your contacts are shown or printed, we ask you to confirm your second sign-in step. We do not contact the people you list. Enter only what you are comfortable sharing and are entitled to share; a person you list can ask us, through privacy@askjesina.com, to see or delete what was entered about them. The estate organizer is a checklist only; it does not give legal advice or do estate planning for you.
Account details: if you choose one at sign-up, the audience group that describes you (active duty, Guard and Reserve, veteran, retiree, federal civilian or family); the time your email address was verified; your plan, its status and your trial end date; the last time you were active (recorded at most every 15 minutes); and, if you leave, the date and the reason you choose to give. They are used to run your account and, in company-level counts only, to run and improve Jesina (Section 8).
Linked account data (through Plaid): for accounts you choose to connect, the account names, types, and last four digits (masks); balances; investment holdings (quantity, price, value and, where your institution provides it, cost basis); bank transactions from checking and savings accounts; and the date your institution last updated the data. For new bank connections we ask Plaid for up to 24 months of transaction history. If you upload a holdings file, we store what is in it the same way.
Information we derive: from your bank transactions we estimate monthly income by source (for example military pay or VA compensation), spending by category, which spending is essential (such as rent, utilities, groceries, insurance and medical) or non-essential (such as dining out, entertainment and travel), money you move to savings, and how many months of essential expenses your cash covers. You can change whether a category counts as essential.
Your household model and Decision Records: we combine your Household Profile answers, your linked balances and holdings, and the estimates above into one encrypted model of your household (called the household ontology in the app): your accounts, holdings, income, expenses, debts, goals, planning assumptions, for federal civilian clients your federal service and pension estimates and, if you add them, your Guard and Reserve service, active-duty periods and a second adult. Each fact records whether you typed it, it came from a linked account, or it was estimated. A Decision Record is a saved receipt of one calculation: its ID, which facts and versions it used, the assumptions in use, and headline results such as the chance your money lasts and whether your emergency cash meets the benchmark. It is not a recommendation.
Device and log data: technical information such as IP address, browser type, pages requested, timestamps, and error details, used to keep the service running and secure. We also keep a sign-in security log (for example, sign-ins, failed codes, changes to sign-in methods, invitations, account deletion, and sign-in pauses after repeated wrong passwords) that stores a one-way hash of your account and IP address, not your email, phone number or the codes themselves. To apply daily fair-use limits we keep daily counts of Ask Jesina questions (totals for each day and, for the current day, a count for each account; the count only, never the questions). Each day's counters are deleted when you use Delete all my data or close your account, and counters older than 90 days are deleted automatically.

We use only essential cookies needed to keep you signed in and protect your session. For your security, you are signed out after 30 minutes of inactivity and after 8 hours at most. While you are signed in, Jesina keeps a temporary, encrypted record of your session on its database so you stay signed in when Jesina is updated. It can include your most recent household results and your Ask Jesina conversation from the current session. It is deleted when the session ends, at most 8 hours after your last activity, and when you delete your data. We do not use advertising or cross-site tracking cookies.

4. Guard and Reserve and a second adult in your household

These two parts of the Household Profile are in Jesina today (Product Version 1.5.0). Both are optional, and everything in them is typed by you.

Guard and Reserve: your Reserve status (drilling, Individual Ready Reserve, or retired Reserve), drill periods a year, annual training days, drill pay (typed by you, or taken from the public Department of Defense basic pay table for your grade and years of service), retirement points to date, qualifying years, the age you plan to serve until, the average pay used for retired pay, days of qualifying active duty, and up to three active-duty periods (start month, length, monthly pay, and whether it counts as qualifying). Jesina uses them to estimate points, qualifying years and Reserve retired pay, and to show active-duty pay as income in your plan. The estimates are for education; the service decides your actual points and pay. The only outside source is the public pay table.
A second adult in your household: if you choose to add one in the optional Second adult step, that person's age, monthly earnings before taxes, retirement-account and taxable balances, cash savings, monthly additions to retirement accounts, Social Security estimate and claim age, pension or annuity per month and start age, and VA compensation per month, and whether your linked accounts already include their money (so it is not counted twice). We do not collect a name, date of birth, Social Security number, email address or any other identifier for that person, and we do not contact them. Enter only what you are comfortable sharing and are entitled to share. That person can ask us, through privacy@askjesina.com, to see or delete what was entered about them.
What you see: with a second adult, Results show a combined household card and table, and Budgeting shows that person's income as read-only. Ask Jesina and the copilot receive only the aggregated household figures described in Section 7.
Same protections: these answers are encrypted, used only for your plan, never sold, included in Start over and Delete all my data, and covered by the AI limits in Section 7.

5. How we use your information

To provide the service: show your accounts and cash flow, build your household model, estimate military and federal pension benefits, show your Budget compared with your actual spending, and point out facts about your own numbers (for example when your linked data is out of date, your emergency cash is below the benchmark, or your TSP contribution is below the amount needed for the full agency match).
To explain and teach: to answer your questions with general education and to describe your own numbers, including with AI features as described in Section 7. We use the age, life stage, status (for example Guard or Reserve, or federal civilian) and goals you enter in your Household Profile to suggest a learning path and which lessons to show and in what order. A suggested path is only a suggestion: you can change it at any time, and every lesson is open to everyone. We never use them to choose sponsored content, which is picked by page topic alone.
To secure your account, prevent fraud and abuse, and troubleshoot problems.
To communicate with you about your account, this policy, and service changes. We also send education emails, and a newsletter, only if you choose to receive them (see "Emails we send" below).
To meet legal and regulatory obligations.

We do not sell or rent your personal information.

Federal employment and pension information is used only for planning inside Jesina: to estimate your pension and supplement and to plan your savings and retirement timing. We do not use it to verify your employment or to make credit, employment or insurance decisions, and we do not share it with your agency, the Office of Personnel Management (OPM) or anyone else except the service providers listed in Section 11. Pension figures are estimates; your agency or OPM decides your actual benefit.

Emails we send

Account and service emails: sign-in codes, security alerts, invitations, billing notices, and notices about this policy or changes to the service. We send these while you have an account. They contain no sponsored content.
Education emails: a welcome series, lesson reminders and life-event prompts (for example, when you update your Household Profile to say you are leaving the service). We build them from the life stage, status, goals and life events you enter in your Household Profile and, if you use Learn, the lessons you have finished, never from linked-account data or a second adult's information. We send them only if you agree to receive them, every one has an unsubscribe link that works without signing in, and they never contain sponsored content.
Newsletter: if you subscribe to our newsletter, we send it to you only because you subscribed, and every issue has an unsubscribe link. Every subscriber gets the same newsletter. Any sponsored content in it is labeled "Sponsored" and chosen by topic, not by your data.
Your choice: unsubscribing from education emails or the newsletter does not affect your account or the service emails above.

6. How we use Plaid

We use Plaid Inc. to gather your data from financial institutions. By using our service, you grant Jesina and Plaid the right, power, and authority to act on your behalf to access and transmit your personal and financial information from your relevant financial institution. You agree to your personal and financial information being transferred, stored, and processed by Plaid in accordance with the Plaid End User Privacy Policy.

You choose which accounts to connect, and you give consent in Plaid Link before any account is connected.
Access is read-only. Jesina cannot move money, make trades, or change anything at your financial institution.
Your bank login credentials go to Plaid, not to Jesina. We never see or store them.
Automatic updates: when Plaid tells us it has new investment data for an account you linked, we refresh that account automatically, so you do not have to press Refresh. We act on the notice only after checking that it really came from Plaid. This retrieves the same kinds of information described above; nothing new is collected. If refresh at sign-in is turned on, we also refresh your linked accounts through Plaid in the background after you sign in, unless a connection was refreshed in the last 15 minutes or has just reported an error. This also retrieves only the same kinds of information.

7. AI features

Some answers and summaries in Jesina are generated by xAI's Grok models, run by xAI. xAI processes what we send to produce the answer and handles it under its own terms and privacy policy. AI answers can be wrong, so check them against your own numbers. In education-first mode the AI features are set to explain and describe, and to decline requests for personal buy, sell, hold, mix, fund or rebalancing advice. Here is what is sent, feature by feature:

REM copilot (results page, including Explain this): there is no separate switch. When you ask the copilot a question, we send it the figures behind your results so it can explain them: about you (service status, age, pay grade, years of service, retirement system, retirement goal age and the monthly amount you plan to need); your current mix by asset class; your TSP and BRS contribution and match figures; your emergency cash, its target, the shortfall and the monthly amount that would fill it; your benefit estimates (pension, VA offset and survivor-benefit cost, with notes that can state your VA disability rating percentage, whether Combat-Related Special Compensation is approved, your Survivor Benefit Plan cost and survivor amount, and, for survivors, your SBP annuity and VA Dependency and Indemnity Compensation (DIC) amounts) and the share of your need they cover; the hypothetical projection; and the planning assumptions in use. If they apply, we also send: your federal civilian pension, supplement and timing estimates; your Guard or Reserve status, points, qualifying years, drill and training pay and estimated retired pay, and for planned active-duty periods only how many there are and their combined length and points, not each period's dates or pay; and, for a second adult, their age, the age difference, their monthly earnings, one monthly total of their benefits, one total of the balances you typed for them, a yes/no answer to whether your linked accounts include theirs, and the combined household totals. Dollar amounts are exact figures rounded to the nearest dollar. We also send your question and the last 6 messages of your copilot conversation. Only if education-first mode is off, the copilot also receives the Decision Record ID and engine versions, your risk label and target stock share, the target mix, expected return and volatility, fund costs, the TSP fund mix and account placement, rebalancing details and validation results.
Your VA and survivor benefit details (copilot): because the copilot explains your benefit estimates, what we send it can include your exact VA disability rating percentage (or that it is below 50%), the monthly VA offset amount, whether CRSC is approved, your SBP cost and survivor amount, and the exact monthly SBP annuity and DIC amounts you entered. This happens each time you ask the copilot a question; there is no separate switch. If you prefer not to share these details, you can leave those fields blank or not use the copilot, but your benefit estimates will then leave them out. A VA disability rating can show that you have a service-connected disability and how severe it is. We use it only to estimate your benefits and explain your results, and we never use it for advertising or to choose sponsored content. As with everything we send, xAI processes it to produce the answer and handles it under its own terms and privacy policy (see "AI providers" in Section 13).
Ask Jesina: your question and the last few turns of the conversation, including answers Jesina wrote. If you have run your results in the current session, we also send your service status, pay grade, age and retirement system. Only if education-first mode is off, we also send the Decision Record ID, your risk label and risk level, your target stock share and your TSP fund mix. xAI may search the public web to answer, so the wording of a question can be used in a search; please do not put personal details in questions. For company financials we look up public SEC filings, and no personal information goes to the SEC.
Live search of public X posts (Ask Jesina): on the Plus, Family and Premium plans, and for invited test accounts before paid plans begin, when your question names a public company or ticker symbol, Ask Jesina may also search recent public posts on X. For that search we send xAI, which runs the search on X, only a short search topic built from your question: the ticker symbols, the public company name and common news words such as "earnings" or "merger" (at most 140 characters). We do not send your full question, the conversation, your holdings, your household summary or anything else about you for this search. The Free Planner does not use X search. What the posts say is shown in a separate, labeled section that says whether news or filings confirm it; Jesina does not vouch for any post.
Public economic data (if available): Ask Jesina may also use dated public figures, such as inflation, cost-of-living adjustments, Treasury yields and TSP fund share prices, that Jesina collects from public government sources. We collect these figures without sending those sources any information about you.
Linked holdings switch (off until you turn it on): if on, we add your top positions (ticker, name, asset class, value and share of your portfolio) and your overall mix by asset class. Never account numbers or account names.
Household summary switch (off until you turn it on): if on, we add a summary of your plan made of totals and figures, not records: your service status; your total investable assets; your emergency cash in months, and its target; the planning assumptions in use; your high-interest debt total; and your goals (the age retirement withdrawals start, and a near-term goal's amount and years, not its name). If they apply, it also includes: your Guard or Reserve status, qualifying years, retirement points, yearly drill and training pay, estimated retired pay and the number of planned active-duty periods (a count, with no dates or pay); for a second adult, their age, combined investable assets and monthly earnings for both of you, income from benefits at retirement for the household and for them, one monthly total of their benefits (no benefit types or starting ages), and a yes/no answer to whether your linked accounts include theirs (any linked balances of theirs are added into the totals, not listed separately); and, if you linked a bank account, the number of months analyzed, monthly income, essential and non-essential spending, savings rate, money moved to savings each month, and monthly averages by spending category. Dollar amounts are exact figures rounded to the nearest dollar. Only if education-first mode is off, it also includes the Decision Record ID, the household model version, your risk label, your target stock share and your stock and international share ranges. It never includes your risk answers, your name, the household or goal names you typed, account numbers, institution or account names, individual transactions or merchant names. You can turn the switch off at any time on My Accounts.
My Accounts summary switch (off until you turn it on): the plain-English summary at the top of My Accounts is written by Grok only if you turn this switch on. While it is off, Jesina writes the summary itself and sends nothing to xAI. If it is on, we send account types and totals, your current mix and fund mix, monthly cash-flow totals, and concentration facts (your largest stock and the share of single stocks). Institution names and account names are removed before sending; accounts are described generically, for example "Account 1 (taxable brokerage)."
Never sent to AI features: your login credentials, Plaid access tokens, your email address, account numbers or masks, institution or account names, individual transactions or merchant names, anything you enter in the estate organizer, your answer votes and outcome records, and the household or goal names you typed, unless you type them into a question yourself.

8. Company records, operations tools and automated assistants

Jesina keeps a small number of records to run the company. None of them holds your balances, holdings, accounts, names or contact details.

Company event log: a log of events such as signing up, starting or ending a trial, and an account-link error code. Each event is tied to a one-way code rather than your email, with the audience group you choose at sign-up. It is used in counts to run and improve Jesina. Groups smaller than 10 are not reported. When you delete your data, the link to you is removed.
Operations audit log: a record of actions taken by the CEO, by automated assistants and by the system: what was done, to what, when and with what result. It holds no email address and no member data.
Automated assistants: Jesina uses automated assistants to help run the company. They have their own limited credentials, every action is logged, and actions with consequences (such as deleting an account or a refund) need the CEO's approval first. Each approval is recorded. The assistants have no access to your account data.

9. Billing and payments

Jesina does not charge for the service today. When paid plans begin, payments and subscriptions are handled by Stripe, Inc., our payment processor and billing service provider.

Your card: you enter your card details on Stripe's hosted page, and your card number never reaches Jesina. The Free Planner is a one-month plan, and a card is requested only to verify you.
What Jesina keeps: a Stripe reference for you, your plan, its status, your trial and billing dates, the amounts charged, a record of each billing event Stripe sends us (its event ID, type, plan, amount and time) and proof that you agreed to automatic renewal. Never a card number.
Cancel in one step: you can cancel online in My Accounts > Plan & billing > "Update payment method or cancel". Cancelling stops future charges.
Refunds: Jesina reviews each refund request, and the CEO approves every refund before it is made.
Stripe's role: Stripe receives and processes your card and payment details, charges and refunds, and keeps the subscription records it needs, under its own terms and privacy policy. It is a service provider under Section 11. Jesina never receives or stores your full card number.

10. Support, analytics and advertising

Support assistant: when you chat with Jesina's support assistant, we keep the conversation text for 90 days and a short ticket summary for 24 months. The assistant sees only what you type in the chat, not your balances, holdings, Household Profile or linked-account data. It is run by xAI as a service provider, as described in Section 7.
Product analytics: Jesina counts how features are used through its own company event log (Section 8). We do not use third-party analytics or advertising trackers in the signed-in app.
Advertising attribution: when Jesina advertises on other platforms, we use our own tracked links on askjesina.com to count which ad led to a visit or sign-up, and we keep only a short campaign code. We do not send members' email addresses to advertising platforms.
Sponsored content in lessons (if shown): sponsored content in Learn is chosen by the lesson's topic and, for the number of sponsor spots, by your plan, never by your Household Profile, linked accounts, learning progress or anything else about you. We count views and clicks only as totals, with no user, plan or profile details. A link to a sponsor carries only a campaign code, and sponsors never receive your personal information.

12. How we protect your information

Encryption in transit (HTTPS/TLS) and at rest; your saved answers, Budget, household model and linked-account data are additionally encrypted by the application, and Plaid access tokens are encrypted as well.
Two-step sign-in and passkey options for your account, invitation-only accounts, a pause on password sign-in after 5 wrong passwords in a row, and multi-factor authentication on all of our administrative systems.
Least-privilege access: only authorized personnel with a business need can access production data.
A written information security program, consistent with the FTC Safeguards Rule (16 CFR Part 314), with one person responsible for overseeing it.

No system is perfectly secure, but we work to protect your information and will notify you as required by law if a breach affects it.

13. How long we keep information and how we delete it

Disconnect anytime: when you disconnect a linked account, we revoke Jesina's access through Plaid and immediately delete the data we stored for that account. Your saved Budget is not part of a linked account and stays until you clear it.
Household Profile: kept, encrypted, until you clear it with Start over, use Delete all my data, or close your account. This includes your risk preference answers, federal civilian answers, planning assumptions, Guard and Reserve answers and second-adult answers.
Budget: kept, encrypted, until you press Clear my plan on the Budgeting page, use Delete all my data, or close your account. Start over on the Household Profile page does not clear it.
Household model and Decision Records: the latest household model is kept, encrypted, and replaced each time results are calculated; it is deleted when you disconnect your linked accounts, use Start over or Delete all my data, or close your account. We keep references to your 20 most recent Decision Records (the record ID, which facts and versions it used, the assumptions in use, and headline results, with no balances or transactions), encrypted, until you use Start over or Delete all my data or close your account. In education-first mode these records do not store a recommended mix, a risk label or a target stock share. Records made by earlier versions may hold a risk label and stock share; they age out as newer records are made, and you can remove them at any time with Start over.
Ask Jesina choices: the dated record of your holdings, household-summary and My Accounts summary choices is kept until you use Delete all my data or close your account.
Answer feedback and outcomes: kept for 13 months, then deleted. When you use Delete all my data or close your account, they are deleted or made anonymous so they can no longer be linked to you.
Learning progress: kept while your account exists, and deleted when you use Delete all my data or close your account.
Email choices and unsubscribes: your email choices are kept while your account exists, and a record of the emails we sent you is kept for 13 months. If you unsubscribe, we keep a one-way coded (hashed) form of your email address on a do-not-email list, even after you delete your data or close your account, only so we never send you marketing email again by mistake. If you later choose to get our emails again, that new choice replaces it.
Estate organizer: kept, encrypted, until you change or remove it, use Delete all my data, or close your account.
Referral codes and partner sign-up source: kept while your account exists, and deleted when you use Delete all my data or close your account. Counts of wrong code entries are deleted after 2 days.
Daily usage counters: the counts described in Section 3 are deleted from every day when you use Delete all my data or close your account; per-account counts are removed once the day has passed, and all daily counters are deleted after 90 days.
Sign-in phone number and email: kept, encrypted, until you remove them on the Security page, your account is closed, or your access is ended. Records of codes sent are deleted after 2 days. The sign-in security log is kept for 24 months.
Invitations and closed accounts: an invitation link stops working once it is used or after 72 hours. If an invitation is not accepted, we delete the invited account, including your email address, name and note, when it is no longer needed, and we review open invitations at least every quarter. When your account is deleted, we end your sessions; delete your email address, name, note and password hash, your sign-in methods, your Household Profile, Budget and other planning data, your consents and your invitation records; and remove your linked accounts through Plaid. We keep only a closed-account record with the masked form of your email address and the dates, for 24 months as a record of who had access. You can also delete your data yourself at any time with Delete all my data on the Security page.
Sessions: a session record is deleted when the session ends, at most 8 hours after your last activity, and when you use Delete all my data or close your account.
Account details: kept while your account exists. If you leave, the departure date and the reason you gave stay on the closed-account record for 24 months.
Company event log: kept for 24 months, then deleted. When you use Delete all my data, the link to you is removed at once and the row remains only as an anonymous count.
Operations audit log and approvals: the audit log is kept for 24 months. Approval records are kept for 12 months after their last activity. Automated-assistant credentials are stored only as a one-way hash, and a hash is deleted 12 months after its key expires or is revoked. A locked copy of the audit log is also kept outside our main systems (see Locked audit copy below).
Billing records: while your account exists, Jesina keeps your Stripe reference, plan, status, dates and amounts, and a record of each billing event. Because tax and accounting laws require it, we keep billing and payment records for 7 years after the end of the tax year in which the payment was made. When you subscribe, we keep a checkout consent record as proof that you agreed to automatic renewal: what was shown to you (the version of the terms and a fingerprint of their exact wording, including the checkbox), the plan, term, price and any trial, that you ticked the checkbox, the time, and the Stripe references for that checkout. The record cannot be changed. It is kept until the later of 3 years after you agreed and 1 year after your subscription ends (3 years if a checkout never became a subscription), and is then deleted automatically. The checkout consent record is not part of the locked audit copy. After it is deleted, a copy may stay in our hosting provider's database backups for up to 7 days, until those backups expire. When you use Delete all my data or your account is deleted, we delete your billing customer record, ask Stripe to delete your customer record, and remove the link between you and the billing records we must keep, except where a tax or legal record has to show who was billed, and then only for as long as required. Stripe keeps its own records under its terms.
Locked audit copy: each day, a copy of the new entries in our operations audit log and billing event log is stored with Backblaze, our storage provider. The copy holds no name, email address or account key, and none of the Stripe references we keep for you; billing entries hold only the event ID, type, plan, amount and times. Each copy is locked for about 24 months, so no one, including Jesina, can change or delete it early. Audit log copies are then deleted automatically; billing copies are deleted no later than the end of the billing record period above.
What stays after Delete all my data: when you use Delete all my data, we remove your data from our systems as described in this section, and we remove the link between you and the billing records we keep, except where we must keep it for tax or legal records. The locked audit copy is not changed: it stays locked for about 24 months and is then deleted as described above. We keep it, and the billing records, only because they are needed to protect our systems against tampering and fraud, to keep accurate records, and to meet our legal obligations. Privacy laws such as California's allow a business to keep information for these purposes even after a deletion request. Your checkout consent record also stays, still linked to your account key and Stripe customer reference, until its period in the billing records bullet ends, because California's automatic renewal law requires us to keep it; it is then deleted.
Support conversations: conversation text is deleted after 90 days and ticket summaries after 24 months.
Privacy requests: a record of each request (with no copy of your data) is kept for 24 months after it is completed.
Account closure: when you close your Jesina account, we delete your personal and financial information within 30 days.
Backups: deleted data may remain in encrypted backups until they expire within the hosting provider's backup retention period.
AI providers: Jesina does not keep your AI questions or the AI's answers after your session ends; during a session, your Ask Jesina conversation is part of your encrypted session record (Section 3). xAI keeps what it receives under its own terms.
Legal requirements and security: we keep minimal records only when the law requires it or when they are needed to keep Jesina secure and its records accurate, and only for as long as this section states.

14. Your choices and rights

Access: ask for a copy of the personal information we hold about you.
Correct: update your profile, Budget and planning assumptions in the app, or ask us to fix inaccurate information.
Delete: ask us to delete your information or close your account, or use Delete all my data in the app. A few records stay for security, tax or legal reasons, as described in Section 13.
Control AI sharing: turn the holdings, household-summary and My Accounts summary switches on or off at any time on My Accounts.
Withdraw consent: disconnect any linked account at any time in the app, and turn off Help improve answers at any time on My Accounts.

To make a request, email privacy@askjesina.com with the subject "Privacy Request." We will verify your identity and respond within 30 days. Residents of states with privacy laws, such as California, may have additional rights; we honor those rights and will not discriminate against you for using them.

15. Financial privacy

Some of the information we handle is nonpublic personal information under the Gramm-Leach-Bliley Act (GLBA). Jesina follows its privacy obligations for that information, including limiting how it is used and shared as described in this policy.

16. Children

Jesina is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

17. Changes to this policy

We may update this policy. We will post the new version here with a new "Last updated" date and, for material changes, notify you by email or in the app before the change takes effect. When this policy changes materially, we ask you to agree to the new version before you link a new account or update a connection.

18. Contact us

Jesina LLC
Email: privacy@askjesina.com