FriendJo is not an emergency or medical service. If you are in crisis, use the help numbers on our support page.
FriendJo is operated by Flourixa Technologies Inc., a company incorporated in Alberta, Canada ("FriendJo", "we", "us"). This policy explains how we handle personal information when you use friendjo.com, the FriendJo app and related services.
Our Privacy Officer is responsible for how we protect personal information and answers all privacy requests.
We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Alberta's Personal Information Protection Act (PIPA), Quebec's Act respecting the protection of personal information in the private sector (Law 25) for Quebec residents, and, for people in the European Economic Area or the United Kingdom, the GDPR and UK GDPR.
We collect only what we need to run FriendJo.
| Category | What it includes | When |
|---|---|---|
| Account | Email address, name if you give it, language preference, sign-in method (email link, password, Google or Microsoft) | When you create an account |
| Conversations | Your messages to Jo and the other companions, and their replies | When you chat |
| Voice | No audio. Speech recognition runs in your browser; we receive only the resulting text, like a typed message | When you use the microphone |
| Personal wellbeing signals (optional) | From your calendar: the timing and number of meetings, after-hours and weekend activity, time left for focus. If you connect Microsoft 365: also the times your emails are sent. Never event titles, descriptions, attendees, email subjects, senders, recipients or content | Only if you connect your calendar (and, for Microsoft 365, email) and turn on personal wellbeing. When you connect, we also read up to 6 weeks of past timing so your insights are useful from the first day |
| Workplace membership | Your organization, team and role, if your employer invited you | When you join an organization |
| Payments | A Stripe customer reference and subscription status. Card details go directly to Stripe; we never see or store them | When you subscribe |
| Usage | Message counts, features used, trial status | As you use FriendJo |
| Technical | IP address, browser and device type, kept in short-lived server logs for security and troubleshooting | Each visit |
| Safety | A daily count of crisis-support events (no message text) | Only if a conversation triggers crisis support |
We use your information only to:
We do not sell personal information, use it for advertising, or make decisions about you that have legal or similarly significant effects based solely on automated processing.
Legal bases (for EEA and UK users): performing our contract with you; your consent for optional features such as personal wellbeing, which you can withdraw at any time; our legitimate interests in security and improvement; and legal obligations.
FriendJo's companions are powered by AI models from Anthropic (Claude) and, as a backup, Google (Gemini). These providers process your text only to produce a result for us. Under their business terms, they do not use it to train their models. We never use your conversations to train AI models either.
| Feature | Provider | What is sent | What is not sent |
|---|---|---|---|
| Chat replies | Anthropic; Google as backup | Your message and your recent conversation (up to 20 messages) | Your email, account details or payment information |
| Crisis safety check | Anthropic | The single message being checked | Your history or account details |
| Personal wellbeing reflection | Anthropic; Google as backup | Summary numbers only, such as "meeting load: elevated" | Messages, names, calendar titles or attendees |
| Workplace mood trends | Anthropic; Google as backup | Workplace messages with emails, phone numbers, links and account numbers removed, without names or user IDs | Who wrote them |
| Voice playback | Google Cloud Text-to-Speech | The text of Jo's reply | Your voice or your messages |
Crisis safety. Every message is checked for signs of crisis, first by keywords and then by an AI check. If a crisis is detected, Jo shows local crisis-support numbers. We record only a daily count, with no message text. Staff see only totals across all users, never who or what was said.
AI can make mistakes. Jo offers support and conversation, not medical, psychological or professional advice.
If your organization gives you FriendJo, your employer sees only anonymous group trends. These protections are built into the product and cannot be switched off by the organization.
| Your employer CAN see | Your employer can NEVER see |
|---|---|
| Anonymous team trends (for example, meeting load rising) for groups of 5 or more active members | Your conversations, in any form |
| How many people have joined | Your personal wellbeing indicator, reflections or scores |
| Overall usage counts | Your calendar event titles, descriptions or attendees |
| Which person contributed to any trend |
We share personal information only with providers that help us run FriendJo, under contracts that limit their use of it to providing their service.
| Provider | Purpose | Information involved |
|---|---|---|
| Anthropic | AI replies, crisis safety check, reflections | See section 5 |
| Google (Gemini) | Backup AI provider | See section 5 |
| Google Cloud Text-to-Speech | Reading Jo's replies aloud | Reply text only |
| Render | Hosting the app | All data passing through the service; short-lived server logs |
| Neon | Database hosting | All stored account and service data |
| Brevo | Sending service emails (sign-in links, invitations, confirmations) | Your email address and the email's content. Brevo may record anonymous open and click statistics |
| Stripe | Payments | Email, subscription and payment details |
| Google, Microsoft | Sign-in and calendar connection, if you choose them | Sign-in data; calendar timing and, for Microsoft 365, email send times (section 3) |
| Slack, Zoom | Workplace activity timing, if your organization connects them | Activity timing and counts only |
| Cloudflare, jsDelivr, Google Fonts | Delivering fonts, icons and page components to your browser | Your IP address and browser details, as with any website request |
We may also disclose information when required by law, to protect someone's safety, or as part of a merger or sale of the business, in which case we will notify you.
FriendJo's servers and database are in the United States (Oregon and Ohio). Our AI and email providers may also process data in the United States or other countries.
When your information leaves Canada (or the EEA or UK), it may be subject to the laws of those countries, including access by their authorities. We protect it with contracts that require our providers to safeguard it to standards comparable to ours and, for EEA and UK data, with recognized transfer mechanisms such as Standard Contractual Clauses.
Quebec residents can ask us for more information about these transfers at friendjo@flourixatech.com.
We keep personal information only as long as needed for the purposes in this policy.
| Data | How long |
|---|---|
| Conversations | Until you delete them or your account |
| Personal wellbeing snapshots | 90 days, then deleted automatically |
| Personal wellbeing signals (calendar timing) | 180 days, then deleted automatically |
| Personal wellbeing data after you opt out | Signals, snapshots and your calendar connection are deleted immediately; summary baselines are kept until you delete your account |
| Workplace activity signals | Only the last 8 days are used for team trends; older entries are kept while the organization's account exists |
| Anonymous team trends | While the organization's account exists; they cannot identify anyone |
| Voice playback audio | Up to 24 hours in temporary memory; never stored in our database |
| Sign-in links and tokens | Expire after use or within a short time, after which they no longer work |
| Server logs | Short periods, typically under 30 days |
| Payment and tax records | As long as Canadian tax law requires, generally 6 years |
| Your account, after you delete it | Deleted immediately. Usage counts are kept without any link to you. If you used a free trial, we keep only a one-way fingerprint of your email and sign-in account ID (it cannot be turned back into them), solely to prevent repeated free trials |
| Backups | Deleted data disappears from our backups within 30 days |
You can do most of this yourself, right away, in your settings:
You also have the right to access, correct or delete your information, to withdraw consent, and (in the EEA, the UK and Quebec) to data portability and to object to or restrict certain processing. Write to friendjo@flourixatech.com. We answer within 30 days and may need to confirm your identity.
If you're not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada, Alberta's Office of the Information and Privacy Commissioner, Quebec's Commission d'accès à l'information, or, in the EEA or UK, your local data protection authority.
FriendJo uses only two cookies, both necessary for the service. We use no analytics, advertising or tracking cookies.
| Cookie | Purpose | Lasts |
|---|---|---|
| session | Keeps you signed in and protects forms against forgery | Up to 31 days, or until you sign out |
| fj_lang | Remembers your language (English or French) | 1 year |
Our pages also load fonts and icons from Google Fonts, Cloudflare and jsDelivr, which receive your IP address and browser details as part of delivering them.
On pages where you can pay, Stripe's payment script may set its own fraud-prevention cookies (such as __stripe_mid and __stripe_sid). See Stripe's cookie policy.
We protect your information with safeguards appropriate to its sensitivity:
No system is perfectly secure. If a breach creates a real risk of significant harm, we will notify you and the relevant privacy authorities as the law requires. Please tell us at friendjo@flourixatech.com if you suspect someone has accessed your account.
Age. FriendJo is for people 16 and older. If we learn that someone under 16 has an account, we delete it. Parents or guardians can contact us at friendjo@flourixatech.com.
Changes. If we change this policy in a meaningful way, we will notify you by email or in the app before the change takes effect, and update the date at the top.
Contact. Privacy Officer, Flourixa Technologies Inc. — friendjo@flourixatech.com. General support: support@friendjo.com.
A French version of this policy is in preparation.