Privacy policy

Who we are

The Jay Way (Jay) is operated by Brighter Day Software Pty Ltd (ABN 85 682 366 034). Jay is for parents, guardians and authorised carers aged 16 or over who are organising a child's care and disability-related family records. It is not for children to use independently to manage their own care.

Account holders aged 16 or 17

If you are 16 or 17, your own parent or legal guardian must read the Terms of use, this policy and How Jay uses AI with you, agree to the Terms on your behalf and consent to your use of Jay before you use it. This includes the handling of sensitive information and overseas AI processing described here. You must still have authority to provide and manage the child and third-party information you add. Accepting the Terms confirms that you have this permission; it is not independent verification of your parent's or guardian's identity.

Information we collect

Depending on the features you use, we collect:

• your email address, account identifiers and authentication records;
• child and family information you enter, including the medications you record for your child (see Medications);
• documents, selected Google Drive files, conversations, Journey items and saved research;
• appointments and reminders you add or ask Jay to set, such as an appointment's title, date and time, provider and location, and the wording of a reminder (see Reminders and notifications);
• if you connect Gmail, information from the emails and attachments Jay selects as relevant to your child, and your Gmail address (see Gmail);
• subscription and entitlement status, but not full payment-card details;
• a device push token if you choose to enable notifications; and
• limited security, usage, error and audit records needed to operate Jay.

Product analytics. The app records how it's used, so we can see where parents get stuck and improve it. From the moment you first open the app, including before you sign in, this covers which set-up screens are reached and which steps are finished or skipped. After you agree to our terms it also covers actions such as opening the app, adding a document, choosing a plan or opening a notification. Each event holds the screen or action, when it happened, the app version, your screen size, the kind of device and its operating system, and a random identifier for this copy of the app, which is replaced when you sign out. If you answer the question about how long Jay's first finds would have taken you, that answer is recorded too. Product analytics never includes anything you type, what's in your documents, your name, your child's name, your location or your account details, and we don't link it to your account.

Medications. You can keep a list of your child's medications on their profile, during set-up or later, so it's ready to check and to bring to appointments. An entry holds what you write: the medication's name and, if you add them, the dose, when it's given, what it's for, who prescribed it, when it started or stopped, and your notes. Jay may suggest a medication it finds in your documents or chat, but it's added only if you confirm it. Jay doesn't work out, compare or change doses, and the list isn't a clinical record. When Jay answers in chat or helps you write a letter, it can use a medication's name, what it's for, whether your child still takes it and when it started or stopped, which may be sent to OpenAI as described below. Jay doesn't send the dose, when it's given, who prescribed it or your notes from this list for AI processing. Some meeting summaries, such as one for a paediatrician, include the full list as you recorded it, and you choose whether to share a summary. You can edit an entry, mark it No longer taking or remove it in Profile → Medications. A removed medication leaves the list and is no longer used, but earlier versions of your child's profile keep it until you delete your child's profile or your account. Your child's current list, including medications no longer taken, is included if you ask for a copy of your information.

Suggestions from your documents. When you add a clinical, therapy, school or NDIS document, Jay reads it for details that may belong on your child's profile, such as a diagnosis, therapy, medication name, goal, or what helps or is hard for your child. Each one waits in Review profile updates, with the document it came from, and is added only if you accept it. To find and check them, Jay sends excerpts of that document, and your child's name, for AI processing, as described in How Jay uses AI.

Why we use it

We use this information to provide and secure Jay, organise authorised records, answer questions with sources, support account and subscription functions, troubleshoot faults, understand how Jay is used so we can improve it, prevent misuse, and meet legal obligations. We do not sell family information or use it for third-party advertising.

Who processes it

We use service providers only where needed to operate Jay. These include Supabase for authentication, database and storage; Resend for authentication email delivery; Fly.io for the application service; PostHog for product analytics; OpenAI for selected AI processing; Google when you connect Google Drive or Gmail; RevenueCat for purchase and entitlement status; Expo for push-token registration and notification delivery; and Apple for App Store distribution, purchases and subscriptions.

We require service providers to protect information consistently with this policy and applicable law. Google Drive access is limited to files you deliberately choose. Jay cannot browse the rest of your Drive and does not edit or delete original Google files.

Gmail (optional)

Connecting Gmail is optional and is being introduced gradually, so it may not yet be available in your app. If you connect it, Jay asks Google for read-only access. Jay cannot send, change, label or delete your email.

What Jay looks at. Jay uses Gmail search to find only emails that contain your child's name (or another name you've told Jay they go by), or that come from senders you have confirmed (such as a school, therapist or plan manager), from your child's date of birth up to five years back. It reads the emails that search finds, including their attachments, to look for information about your child. Some of them, such as a school newsletter from a confirmed sender, may turn out not to be about your child.

What Jay keeps. Jay processes the full text of each email it reads temporarily and does not store it. It keeps the facts it finds, each with the sender, date, subject and a short supporting quote of up to 500 characters (no more than 1,000 characters from any one email), so you can see where each fact came from. Attachment copies are temporary: they expire within 24 hours of first being copied and are then removed, unless you choose to save one. Saved attachments stay in Jay until you delete them. Jay also keeps your Gmail address, to show which mailbox is connected, and an encrypted access token.

Who processes it. Selected excerpts are processed by OpenAI to find relevant facts, and Gmail-derived information is stored with Supabase and processed on Fly.io, as described above. Gmail information is never sold, never used for advertising, and never used to train generalised AI models. People at Brighter Day do not read it, except with your permission for a support request, for security, or where the law requires. Notifications about new findings contain counts only, never email content.

Your controls. You can review and remove any fact Jay found, delete saved attachments, or disconnect Gmail at any time. Disconnecting removes Jay's saved connection and temporary copies, and asks Google to remove Jay's access, unless the same Gmail account is still connected for another child in Jay. Facts and saved attachments stay until you delete them or your account. You can also remove Jay's access in your Google Account permissions.

The Jay Way's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Reminders and notifications

If you allow notifications, Jay can remind you before appointments, before the deadlines of grants and funding you save in Discover, and about things you ask it to remind you about in chat. You can add an appointment yourself, or ask Jay in chat to add, move or cancel one, and undo the change.

Jay keeps your appointments and chat reminders with your child's profile so it can show and update them. Jay's server prepares the wording of appointment and chat reminders, and the app on your phone words funding deadline reminders. Your phone schedules and shows every reminder as a notification on the device, so reminder wording is not sent through a push notification service. Appointment and chat reminders leave out your child's name, and with Private lock screen turned on they show no details on the lock screen.

You can change reminders in Profile → Settings → Notifications or turn notifications off in your phone's settings. A removed appointment moves to Removed items, where you can restore it or delete it permanently, which erases its details. Reminders you set in chat stay with your child's records after they're done or cancelled. Appointments and reminders are deleted when you delete your child's profile or your account.

Adding appointments to your calendar. If you tap Add to Calendar, your phone opens its own calendar screen with the appointment's title, time, repeats and location filled in. You choose the calendar and save it. On iPhones still on iOS 16, your phone first asks whether Jay may use your calendar, and Jay asks only so it can add events. Jay doesn't read your calendar or keep a copy of what you save there, and later changes in Jay don't update that event.

AI and overseas processing

AI requests may send the minimum relevant text or selected content to OpenAI. Some service providers may process information in the United States and other countries where they or their subprocessors operate. Supabase data for Jay is hosted in Australia, and Jay's primary application service runs in Sydney. Overseas privacy protections may differ from Australian law.

See How Jay uses AI for the safeguards and limits that apply.

Retention and deletion

Family information is generally kept while your account is active, unless you delete an item or your account. Limited security, transaction and audit records may be retained where reasonably needed or legally required. Deleted information may remain in protected backups until those backups rotate out of service.

Gmail emails and attachment copies are kept only as described under Gmail.

You can disconnect Google Drive or Gmail, delete individual items where offered, or start account deletion in the app. See Account and data deletion.

Access, correction and complaints

You can review and correct information in Jay, request access or correction, or make a privacy complaint by emailing hello@thejaywayapp.com. We will acknowledge a privacy complaint within 7 days and aim to respond within 30 days. If you are not satisfied, you may contact the Office of the Australian Information Commissioner.

Security and changes

Jay uses authenticated access, child and family separation controls, encryption in transit, and restricted operational logging. No security measure can remove all risk. We may update this policy when the service or law changes and will publish the updated effective date here.