Joi privacy notice
Broos Action develops Joi. Updated 3 November 2026. Contact [email protected] for privacy and deletion questions.
Account and cloud requests
Broos Cloud receives your name, email, password and any birthday you provide during account creation. Joi does not save your account password on the phone; it stores a session token securely. Cloud models receive messages, attachments and relevant companion context needed for your request. Local models process requests on the phone. Review your selected provider's terms.
Phone access
With permissions and connectors you enable, Joi can read notifications, contacts, calendars, location, activity information, selected files, messages and screen content. This supports summaries, memory, reminders and actions. Relevant data can be included in online requests when needed for the feature. Notification privacy settings exclude apps; connector controls limit read and action access.
Photos, videos and files
If you allow photo and video access (or audio access), Joi searches your media library on the phone only when you ask, for example to find a photo, show videos from a date, open a file or explain what is using storage. Duplicate and large file checks run on the phone, and files are only deleted after you confirm in Android's own dialog. Joi does not upload your photos or videos and does not use them for advertising. Only file names, dates, sizes and on-device links appear in the conversation you started. If you send a photo to Joi in chat, it is included in that request to your selected model. On Android 14 and later you can share only selected photos, and you can change or remove access in Settings at any time.
Voice, files, sync and browsing
Joi can send text to Broos Cloud to generate speech. Android or online speech recognition may send microphone audio to the recognition service you use. Artifacts show where files are saved. Cloud sync is opt-in and uploads supported personal records and preferences; connector credentials are excluded from the sync pack. Cloud browsing has a separate enable control and sends navigation and interaction requests to the configured backend, which maintains browser session data.
Private WhatsApp connector
Connecting WhatsApp is optional. Broos runs a separate connector session for each Joi account on its server. Linking credentials and browser session data remain on the server so the connector can restore your saved connection. Joi can retrieve conversation messages when you ask. If you enable the reply assistant, the server processes new direct messages even when the phone app is closed, using your selected categories and settings.
Messages and relevant conversation context needed for a response are sent through Broos Cloud to its configured model provider. Incoming media replies require a separate choice of images, audio or videos. Image descriptions and sampled video frames use the cloud model; speech transcription runs on the Broos server. Media analysis uses temporary files that are removed after processing. Descriptions and transcripts can appear in responses or approval drafts. Private uploaded sending attachments expire after 24 hours and are removed during server cleanup. Approval records and reply activity are stored separately from temporary media.
Review first and automatic replies are separate from permission for messages Joi initiates. You control these choices in Private WhatsApp. Pause all sending stops automatic sending and cancels pending drafts. Disconnect stops the connection while retaining the saved session; unlink removes the linked session. These actions do not erase messages already in WhatsApp or all server activity records. Contact support for server-data deletion requests. Official WhatsApp Business setup is separate and uses Meta's service.
Errors and diagnostics
Usage and diagnostics is optional. Critical errors are reported separately even when optional diagnostics is off. Reports include installation ID, filtered error details and Joi stack frames, app version and device compatibility fields. Offline reports may be queued locally. Filtering reduces sensitive content but you should avoid putting secrets in bug reports.
Ads and rewards
Google Mobile Ads and its consent platform may process advertising identifiers, device information and ad interactions according to regional consent. Rewarded ads are optional. Broos Cloud tracks claims and allowance. Credits require a confirmed cloud claim.
Retention, deletion and security
Local data remains until you delete it or clear app storage. Delete personal records in their screens and clear local logs in Settings. Account offers Joi cloud account/data deletion requests; only a server receipt confirms submission, and pending does not mean completed. Other Broos services are separate. Until the request service is available, contact [email protected]. Clearing local logs or uninstalling does not delete server data.
Cloud diagnostic reports expire after 90 days unless deleted sooner. Pseudonymous deletion receipts are kept for 365 days and contain no profile, content, password or installation identifier. We do not promise immediate erasure of backups or legally required records. Supported credentials use encrypted preferences. Broos Cloud and custom provider connections require HTTPS; local or LAN servers need a TLS gateway.
Published content and your choices
Content you choose to publish may be visible to others. Connected services receive data needed for requested actions. Broos Action does not sell private chats. Contact support to request access, correction, deletion, or details about retention and processors.
Phone approvals and WhatsApp activity retention
Private WhatsApp controls use your phone’s screen-lock confirmation. Registered phone keys sign approvals, sending settings and connector deletion requests. The server stores the registered public keys to verify those requests; your private phone key stays on the phone. Resetting phone keys pauses automation and cancels pending work, with a 24-hour delay before a new first key can be registered.
Finished sending records lose their message text after 7 days and are removed after 30 days. Voice attempts and reply logs expire after 30 days. Uncertain sending records remain until you acknowledge them. Deleting the private connector stops its worker, logs out a live session, revokes reply authority and removes its account folder, connector key and registered phone keys. Remove the linked device in WhatsApp as well. Connector session profiles and activity journals are not encrypted at rest; they rely on server access controls.
Joi cloud deletion scope
Joi cloud deletion removes active synced Joi content and diagnostics and revokes Joi sessions. The shared Broos account and data belonging to other Broos products remain unless you separately request their deletion. Private WhatsApp connector deletion is a separate control described above. Contact [email protected] if you cannot access these controls.