YouYour device
MMaya's device
Only the people in the chat hold the keys.
Messages are encrypted on your device before they are sent. Jex is not in this chat and has no key to it.
Security at Jex
Your chats stay private. Even when Jex helps.
Chats between people stay between those people. When you invite Jex, they work inside a private runtime, with only the context you allow.
- End-to-end encrypted chats
- A private runtime for Jex
- Memory you can see and edit
Dinner plans
Andrew, Maya + Jex
End-to-end encrypted · Jex replies from the private runtime
Jex can help because they are invited—not because they have a master key.
Jex can only work with what a conversation shares with them. The protection is in exactly what Jex can reach, where that work happens, and who else can get to it.
Jex in the chat
Two kinds of chat. One clear boundary.
Jex's access changes only when you invite them.
YouYour device
Private runtime
MMaya's device
Jex joins as a named participant.
Jex works inside a private runtime with only the messages and context this chat allows. A seat in the conversation, not access to everything in your life.
A locked room for software
When Jex helps, the work happens here.
Jex's private runtime proves it is running approved code before a key is ever released. Messages are opened only inside that isolated environment, and only while Jex prepares a reply.
- 01
Arrives locked
Delivery and storage systems only ever handle encrypted message data.
- 02
Proves its code
Before a key is released, the runtime proves it is running approved Jex code.
- 03
Uses only allowed context
Jex works from the thread, memories, and connected data permitted for this request.
- 04
Returns locked
The reply is encrypted back to the thread before it leaves the runtime.
Outside the runtimeEncrypted data, routing, and delivery.Inside the runtimeOnly the context permitted for this request.
What “Family logistics” can useScoped to this chat
Allowed
- This conversation
- Messages from Family logistics
- Family memories
- 3 details shared with this group
- Weekend calendar
- Read availability · ask before changes
Work chatsPrivate calendar
Context with boundaries
Helpful in this chat doesn't mean access everywhere.
Jex starts with the conversation you are in. Every request is checked against who is present and what that chat is allowed to use. A detail from one conversation is not automatically available in another.
Visible memory
What Jex remembers is never a mystery.
Useful details live in an encrypted memory vault, not as invisible facts absorbed into a model. You can see what Jex remembers, where it came from, who can use it, and remove it when it no longer belongs.
MemoryEncrypted vault
Sarah is gluten-free.
- Available to
- Family only
- Saved from
- Dinner thread
- Added
- August 17
Family logistics · Jex is here
Add dinner to the family calendar?
SpinasseTuesday, September 8 · 6:30 PM
Dinner with Maya and Andrew
Dinner with Maya and Andrew
This will change “Family calendar”
Approval before action
Jex can prepare. You give the final yes.
Understanding a request is different from acting on it. Calendar changes and other consequential steps are shown before they happen, with the account and effect named in plain language.
The more consequential the action, the more explicit the permission.
Plain answers
The questions we would ask, too.
Can Jex employees read my chats?
No. Chat messages and scoped Memory are end-to-end encrypted, and the people who work on Jex hold no key to them. Servers, databases, logs, and support tools only ever hold encrypted data. If you send something to support or report a safety issue, the team sees only what you chose to include. Messages sent over SMS travel through carrier networks and are handled separately.
Are conversations used to train AI models?
We do not make a blanket promise today. Our Privacy Policy allows conversation content to help operate, test, secure, and improve Jex. Google Calendar data is never used to train generalized AI models. We will make a broader promise when the policy and the system support it.
What information reaches a model provider?
Only what a request needs: the message, permitted Memory, and connected-account data for that work. Depending on the feature, Jex may use Anthropic, OpenAI, or Google. Google data keeps its separate Limited Use protections.
What happens when I remove Jex from a chat?
Jex stops receiving new message keys and cannot read anything sent after that. Memory created earlier keeps its own scope and can be removed at any time.
How do I delete a memory, chat, or account?
Edit or remove any memory in Memory. Deleting a chat removes your history and clears its runtime state, relay content, and attachments. Deleting your account disables it immediately and starts a 30-day recovery window before permanent deletion, keeping only the narrow legal and audit records the law requires.