Privacy Policy

Last updated: October 22, 2026

This Privacy Policy explains how Berkeley Labs LLC (“Berkeley Labs”, “we”, “us”) collects, uses and shares information when you use Jist, meaning the Jist apps for iOS and Android, the web app at app.tryjist.com, and related services. It also explains the choices you have. Berkeley Labs is responsible for your personal data (the “controller”, in the terms of European data protection law).

1. Information we collect

Information you give us

• Account: your email address and password. Passwords are stored by our sign-in provider, Supabase, as a one-way hash, so we never see them. You can also add a display name.
• Your library: the sources you follow (including lists you import, such as OPML files); the items you save, open, finish or dismiss; your reading and listening progress; highlights, notes and collections; your topic and source rules; your choices in Discover; your Briefs; and the share links you create.
• Private feed links: if you add a private feed, we store its link so Jist can retrieve it for you. See Private feeds.
• Pages you save: when you use Save to Jist (the share sheet on iPhone and Android, or the Jist browser extension), Jist receives the address and title of the page you chose, fetches that page from our servers to make a readable copy, and keeps it in your Library. The browser extension sends a page only when you click it: it doesn’t read the pages you visit or store anything itself. On iPhone, the share sheet uses a key kept on your device that can only save pages and follow sources; signing out removes it.
• Ask: the questions you ask and your Ask history.
• Settings: such as time zone, language, reading speed and reader display preferences.
• Notifications, if you allow them: your phone’s push token, so Jist can send the notifications you chose in You › Notifications, and a note of each one sent, so it’s sent only once. Signing out of the app removes the token.
• Messages you send us, such as support requests.

Information collected automatically

• How you use Jist: Jist records interactions such as opening, finishing or saving an item, or restoring one from Filtered, to decide what to surface for you and to explain its choices. For your trial or Jist Day recap, it notes which pieces’ Jists and Long Jists you opened and where you used Catch Me Up, and keeps that for 30 days. It also notes when you last used Jist: after 30 days away, it stops retrieving sources that only you follow, and starts again when you’re back.
• App analytics (iOS and Android apps only), if you allow it: events about the screens you view and the features you use, with your device type, operating system, app version, IP address and approximate location derived from it. Screen addresses can include the internal ID of the item you are viewing. This goes to PostHog, linked to your account ID and email address. In the EEA, the UK and Switzerland, analytics stay off unless you turn them on in You › Privacy. Everywhere else they are on, and you can turn them off there at any time.
• Crash and error reports: when the iOS or Android app crashes or runs slowly, or one of our servers hits an error, Sentry receives technical details such as your device model, operating system, app version and the error. Server reports name the feature that failed but never include your sign-in details, the contents of your requests, or links you added.
• Server logs: our hosting and infrastructure providers record technical information about requests, such as IP address, app or browser version and time, for security and troubleshooting.
• Cookies and device storage: the web app uses essential cookies to keep you signed in and stores your reader display settings in your browser. It uses no analytics, advertising or tracking cookies. The mobile apps store your session, recently viewed reading and any downloads on your device.

Information from others

• Purchases: when you buy Pro, Apple or Google processes your payment, and RevenueCat tells us your subscription status. We never receive your payment card details.
• Sign in with Apple or Google: if you use one, Apple or Google tells us your email address and your name (Apple may give us a private relay address instead of your own), and Google also gives the address of your profile picture, which our sign-in provider keeps with your account. We never see your Apple or Google password.
• YouTube, if you choose Connect YouTube: the channels you subscribe to and your channel’s name and picture. See Connect YouTube.

What we don’t collect

Jist doesn’t access your contacts, photos, camera, microphone or precise location, and doesn’t use advertising identifiers.

What your reading can reveal

The sources you follow and what you read, highlight and ask can say something about your interests, beliefs, health or politics. Jist uses the topics of your reading only to organize it and to suggest sources to you. It never uses your reading for advertising, never sells it, and keeps it private to your account unless you share something yourself. You can remove a source, an item or your whole account at any time.

2. How we use information

• To provide Jist: create and secure your account, retrieve and organize the sources you follow, build Today, Stories and Briefs, sync your library across devices, and answer your Ask questions.
• To personalize Jist for you: decide what to surface, compress or filter, explain those decisions, and recommend sources in Discover. Personalization uses your own follows, rules and activity, and is used only inside Jist.
• To manage subscriptions, trials and Jist Days.
• To communicate with you: confirmation and password-reset emails, account and security notices, and replies to your messages. We don’t send marketing email. If we start, every message will include a way to unsubscribe.
• To keep Jist safe: prevent abuse, fraud and security incidents, and enforce our Terms.
• To understand and improve Jist: usage analytics, crash reports, and quality checks of AI summaries of content from sources.
• To comply with the law.

We don’t sell your personal information, share it for cross-context behavioral (targeted) advertising, or use it to make decisions that produce legal or similarly significant effects about you.

3. AI processing

Jist uses AI models from Anthropic and OpenAI to summarize and analyze content, group coverage into Stories, write Briefs and answer Ask questions.

• What we send: the text of articles, transcripts and other content from sources; for Ask, your question (to OpenAI, to find relevant passages, and, for Pro answers, to Anthropic along with those passages); and for Briefs, passages from the items and Stories selected for you.
• What we don’t send: your name, email address, notes, highlights or private feed links.
• Anthropic and OpenAI process this data to provide their services to us and, under their commercial terms, don’t use it to train their models. We don’t use your notes, highlights or Ask questions to train AI models either.
• To transcribe a podcast that has no published transcript, we send the episode’s audio from the publisher’s feed to Groq. To get captions for a YouTube video, we send the video’s public address to Supadata. Neither receives information about you.

4. Private feeds

Some publishers give each subscriber a personal feed link, for example for a paid podcast or newsletter. Jist treats such a link like a password:

• a private feed belongs to your account only. It is never recommended to anyone else, and its items are visible only to you;
• its items get Jists and work with Ask like anything else in your library, but they don’t join shared Stories, and sharing one shares the publisher’s own link instead of a Jist page;
• the link is stored only so Jist can retrieve the feed. It is never shown in the app, never written to our logs, and never sent to our background-job provider; and
• if you unfollow it, Jist stops retrieving it and deletes its link, while your highlights and history stay. If you delete your account, the feed, its link and its items are deleted.

Jist recognizes most private links automatically, and you can mark any feed as private when you add it. If you think a private link has been exposed, ask the publisher for a new one.

5. How information is shared

Things you choose to share. A share link creates a page that anyone with the link can open. It shows your display name if you have set one. Share pages ask search engines not to index them.

Public sources are shared across Jist. When you follow a public source, Jist retrieves it once for everyone who follows it, and other people may see it recommended in Discover. Other people can’t see who follows a source or anything in your library.

Publishers. Some content loads directly from publishers’ servers, such as podcast audio, images in articles, and original pages you open. Those servers receive your IP address and device information, as they would if you visited them directly, and their own privacy policies apply.

YouTube. Jist uses YouTube API Services: videos play in YouTube’s embedded player, loaded from youtube-nocookie.com. When you play a video, Google receives information such as your IP address and device information and may store cookies or similar data on your device, as described in the Google Privacy Policy.

YouTube comments and channel details. Jist also uses the YouTube Data API. When you open a video’s Comments tab or a channel’s page, Jist’s servers ask YouTube for that video’s top public comments or that channel’s public details (picture, description and subscriber count). The request carries the video’s or channel’s ID, not your information. Jist shows comments as YouTube has them, keeps YouTube’s answers for at most a day and never adds them to your account. Commenters’ and channels’ pictures load from YouTube’s image servers, like other images.

Connect YouTube. If you choose Connect YouTube, Google asks whether Jist may see your YouTube account (read-only). Jist uses that permission once: its servers ask YouTube for the channels you subscribe to and for your own channel’s name and picture, show you the list so you can choose which channels to follow, and then give the permission back to Google. Jist doesn’t keep the permission or your list of subscriptions; the channels you choose become follows like any others. Jist keeps the name and picture of the account you imported from for 29 days after each import, so You › Connected accounts can show it, and then deletes them, as YouTube’s rules require. You can remove it there sooner; that doesn’t unfollow anything. You can review or remove any app’s access to your Google account at any time on Google’s security settings page, security.google.com/settings/security/permissions. Jist’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Videos and social media posts. When an article includes a video, an audio player or a social media post (for example from YouTube, Vimeo, TikTok, Spotify, X, Instagram, Facebook, Bluesky or Threads), Jist first shows the post’s text or the video’s thumbnail picture, which loads from the service’s image server like other images in articles. The service’s own player or post loads only when you tap to play the video or show the post. A post you save to Jist shows the platform’s own post when you open it. When a player or post loads, the service receives your IP address and device information and may store cookies or similar data on your device, under its own privacy policy, as it would on the publisher’s site. To show a saved post’s words, Jist’s servers ask the platform for the post’s public details; that request carries the post’s link, not your information.

Service providers. We share information with companies that run parts of Jist for us, only as needed for that work:

Legal and safety. We may disclose information if we believe in good faith that the law requires it, such as in response to a subpoena or court order, or that it is necessary to protect the rights, property or safety of Jist, our users or others.

Business transfers. If Berkeley Labs is involved in a merger, acquisition, financing, reorganization or sale of assets, information may be transferred as part of that transaction, and this policy will continue to apply to it.

With your consent. We may share information for other purposes if you ask us to or agree.

6. How long we keep information

• Your account and library are kept while your account is open. Free plan limits on searchable history hide older items; they don’t delete anything.
• Your Ask history (your questions, your searches and the answers Jist gave) is kept until you delete it: one question or search at a time, or everything with Clear all, in Ask › History. You can pause it in You › Data & Privacy; while it’s paused, new questions and searches aren’t kept, only a count of answers for the daily limit.
• When you delete your account, your account, login, library and private feeds are deleted from our database immediately, and your share links stop working. Copies in database backups are overwritten within 30 days.
• Service-provider records such as analytics events, crash reports, server and job logs, and email delivery records are deleted on those providers’ own retention schedules. You can ask us to delete your analytics data sooner.
• Subscription records are kept by Apple, Google and RevenueCat, as payment and tax rules require.
• A YouTube account you imported from (its name and picture) is deleted 29 days after each import.
• Content from public sources, such as articles, transcripts and AI summaries of them, isn’t tied to you and stays in Jist’s shared library after you leave.
• On your device, recently viewed reading and downloads stay until you remove them, sign out, delete your account or delete the app. Signing out or deleting your account clears them from that device.
• Support messages are kept as long as needed to help you and to keep a record of our correspondence.

7. Security

Information is encrypted in transit (TLS) and at rest (AES-256 at our database provider), and access controls keep each account’s private data separate. Private feed links live only in our database, encrypted at rest like everything else, and are never written to logs. Access to production data is limited to Berkeley Labs and used only when needed to support you, run Jist, or comply with the law. No system is perfectly secure. If a security incident affects your personal information, we will notify you, and the relevant authorities, as the law requires.

8. Your choices and rights

• Delete: delete your account in the app or on the web, as described on our Delete your account page.
• Copy: download a copy at any time in You › Account › Export your data: everything we hold for your account as a JSON file, and your follows as OPML, which other feed readers can import. You can also ask us by emailing support@tryjist.com.
• Correct: change your settings in the app, or ask us to correct your information.
• Analytics: turn app analytics on or off in You › Privacy. Crash reports are separate and stay on, because we need them to keep the app working.
• Emails: account and security emails are part of having an account, so you can’t opt out of them while it is open.

U.S. state privacy rights

Depending on where you live, you may have the right to know what personal information we have about you and to access it, to correct it, to delete it, to receive a portable copy, and to opt out of the sale of personal information, targeted advertising and certain profiling. We don’t sell personal information, share it for targeted advertising, or use it for profiling that has legal or similarly significant effects, but you can make any of these requests.

To make a request, email support@tryjist.com from the address on your account so we can verify that it’s you. We will respond within the time the law requires. You may use an authorized agent, and we may ask for proof that the agent is authorized. We won’t discriminate against you for exercising your rights. If we decline your request, you may appeal by replying to our decision, and if you are not satisfied with the outcome you may contact your state attorney general.

We treat Global Privacy Control signals as a request to opt out of sale and sharing. Because we don’t sell or share personal information, nothing further changes. We don’t share personal information with third parties for their own direct marketing.

9. Children

Jist is for people 16 and over and is not directed to children. We don’t knowingly collect personal information from anyone under 16. If you believe someone under 16 has given us personal information, contact us and we will delete it.

10. Where information is processed

Berkeley Labs is based in the United States, and Jist stores and processes information in the United States. Some of our providers also process it in other countries where they operate. When personal data from the EEA, the UK or Switzerland is transferred to the United States or another country without an adequacy decision, we rely on the European Commission’s Standard Contractual Clauses (and the UK and Swiss equivalents) in our providers’ data protection terms, or on the EU-U.S. Data Privacy Framework and its UK and Swiss extensions where a provider is certified. The provider table in section 5 shows which applies to each. You can ask us for a copy of these safeguards at support@tryjist.com.

11. People in the EEA, the UK and Switzerland

If you live in the European Economic Area (EEA), the United Kingdom or Switzerland, data protection law such as the GDPR gives you the rights below. Berkeley Labs LLC is the controller of your personal data, and you can reach us at support@tryjist.com.

Why we use your data (legal bases)

Your rights

You can ask to access your data, correct it, delete it, receive a copy in a portable format, or restrict how we use it. You can object to any use based on our legitimate interests, and withdraw consent at any time without affecting what happened before. You can download your data yourself (see Copy, above). For anything else, email support@tryjist.com from the address on your account. We reply within one month, or tell you within that month if we need longer.

Automated decisions. Jist automatically decides what to surface, compress or filter for you. These decisions organize your own reading and have no legal or similarly significant effect on you. You can always see what was filtered, restore it, and change the rules.

Complaints. You can complain to a data protection authority. In the EEA, find yours in the list of national authorities. In the UK, contact the Information Commissioner’s Office. In Switzerland, contact the Federal Data Protection and Information Commissioner. We’d appreciate the chance to fix things first, so please write to us too.

12. Changes to this policy

We may update this policy. If a change is material, we will notify you in the app or by email at least 30 days before it takes effect, unless it must take effect sooner for legal or security reasons. The date at the top shows when it last changed.

13. Contact

Questions about privacy: support@tryjist.com. Berkeley Labs LLC.