Effective November 1, 2026
Jelly Drops LLC is a Delaware limited liability company. Delaware file number 7342805, formed March 25, 2019. Registered agent: Registered Agent Solutions, Inc., 838 Walker Road, Suite 21-2, Dover, Kent County, Delaware 19904.
This policy explains how Jelly Drops LLC (“we”) collects, uses and shares information when you use our devices, apps, websites and related services, and the choices you have. It does not cover third-party platforms you connect, which have their own privacy policies.
(1) Information you give us: name, phone number, email, business name, industry, and what you write in forms and messages. (2) Account and billing information: your sign-in details, plan, usage credit and order history. Card payments, when available, are handled by a payment processor; we do not store full card numbers. (3) Business content: products, services, materials and media you upload or let the device capture for you. (4) Data from platforms you connect, within the access you grant: performance of your posts, and comments and messages your accounts receive. (5) Device, app and log information: identifiers of your Harko device and of your app installation; your phone's model, operating system, app version and language; the screens you open and the features you use; errors and crash reports; and service logs. We use this to keep the service working and secure and to improve it. It does not include the text of your messages. (6) Phone data you choose to share: if you turn it on in the app (Me › Phone data), your phone's calendar events, contacts and, on Android, notifications are copied to your own Harko device or Harko Cloud box so your assistant can use them. Each is off until you turn it on, and turning it off deletes the copy.
We use information to provide the service you ask for: generating content for your business, publishing and replying as you instruct, producing your reports, running and supporting your device, billing, answering your enquiries, keeping the service secure, and meeting legal obligations. We do not sell your personal information, and we do not use your business content to advertise to others.
When the service handles comments and messages for you, it processes information about the people who sent them, such as account names and message text. We process that information on your behalf and under your instructions, only to deliver the service to you, and delete or return it when our relationship ends as agreed. You are responsible for having a lawful basis to collect that information and for giving any notices the law or the platform requires.
To deliver AI features we send the minimum necessary content to AI model providers. Your assistant's conversations, and data from platforms you connect (such as posts, comments, messages and the names of the people who sent them), are processed only in the United States: by Anthropic, which provides the assistant's language model, and by our hosting provider, which runs our servers and storage. Image and video generation, speech (reading replies aloud and transcribing voice) and search over documents you add to a knowledge base use providers in mainland China. They receive only what each request needs, such as your prompt, your voice recording or your document, and not data from your connected platforms unless you ask Harko to use that content in an image, a video or speech. Providers may use the data only to perform services for us. We share information otherwise only with your consent, when required by law or legal process, to protect rights and safety, or as part of a merger or acquisition subject to this policy.
Our servers are in the United States, and data from platforms you connect is stored only there. Since October 19, 2026, media files (photos, videos and other files from your devices, and those your assistant creates) are stored on our servers in the United States; a copy of earlier files stays on our former servers in mainland China until October 26, 2026, when it is deleted. The generation services in mainland China described in section 5 receive the content of each request; documents you add to a knowledge base are kept by that service so they can be searched. If you use Harko without a Harko box (Harko Cloud), your assistant runs on our servers in the United States, and what it keeps — conversations, memory, Library files and goals — is stored there instead of on your own device. You can export or delete it in the app the same way.
We keep information only as long as needed for the purposes above. Business content and generation records are kept while your account is active and deleted or de-identified after you close it or ask us to delete them, unless we must keep them longer to meet legal, tax or accounting obligations or to resolve disputes. Logs are kept for a limited period for security and troubleshooting. App usage statistics (screens, features, errors) are kept in detail for up to 180 days, and daily activity counts for up to 400 days.
To make videos with you in them, Harko creates a video avatar from your face — from a 10–30 second video you record, or from one frontal selfie. The video or selfie, and the avatar made from it (a record of your face and, from a video, your voice), are biometric information. We collect it only after you agree on the consent screen shown before you record or take the selfie, and we keep a record of that consent (the date, the version of the text and your device’s network address). We use it only to make the videos you ask for. We never sell, lease or trade it, and we do not use it to identify you or for any other purpose. We store it on our servers in the United States. To build the avatar and to make each video, it is sent to our video generation provider in mainland China, which may use it only to provide that service to us. We keep it until you delete your avatar or your account, and in any case we delete it 3 years after you last used it. When you delete your avatar, we delete your video or selfie from our servers and withdraw your consent record. You can delete your avatar at any time in the Harko app (Me › Video avatar). Only you may make an avatar of yourself, and you must be 18 or older.
We use technical and organisational safeguards such as encryption in transit, least-privilege access and audit logs. No method of transmission or storage is completely secure. If a security incident affects your personal information, we will notify you and the authorities where the law requires.
You can access and update your account information in the app or by contacting us. You can ask us to give you a copy of, correct or delete your personal information, and you can disconnect platforms at any time. Depending on the state you live in, you may have additional rights under state privacy laws; we will honour requests as those laws require and will not discriminate against you for making them. We may need to verify your identity before acting on a request.
The service is meant for businesses and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we will delete it.
This website uses local storage for basic functions such as remembering your theme and language; that data stays in your browser. It also uses Umami, an open-source analytics tool we host ourselves on our US server, to count aggregate usage: page path, referrer, device type, browser language and which kind of button was clicked. It sets no cookies, collects no names, phone numbers or email addresses, and does not track you across sites. You can block it with your browser’s privacy settings or an extension; the site works the same either way.
In the Harko app (Me › Connectors) you can connect accounts such as Google, Microsoft 365, Notion, QuickBooks, Klaviyo, GitHub, Dropbox, Zoom, Canva or a bank account through Plaid, so your Harko assistant can look things up for you. Each connection is read-only unless you choose to allow changes, and the assistant asks you before it changes or sends anything. When you connect Google, you choose which access to grant — for example, reading your Gmail messages, your Google Calendar events, your Google Drive files or your Google Sheets. We use that data only to answer the requests you make to your assistant: it is read when you ask (or when a task you set up runs) and passed to the AI model that powers your assistant only to produce that answer. We do not sell it, use it for advertising, or use it to train or improve AI models, and people at Jelly Drops do not read it unless you ask us to (for support), it is needed for security or abuse investigation, or the law requires it. Where the access tokens are kept depends on how you use Harko. With a Harko box, they are stored encrypted only on your box (connections made earlier move onto it the next time they are used), and your box makes the requests to each provider; our servers keep only a record of the connection (provider, account name, granted access, expiry and status) and pass on what the box fetches for the app, such as your sales figures. A few requests need our app's own credentials, so our servers make them with your token without keeping it: signing in and renewing access for most providers, and every request to Etsy and Plaid. With Harko Cloud (no box), the access tokens are stored encrypted on our servers. Content is not kept by us unless you ask the assistant to save it to your Library, and your conversation history stays on your device, where you can delete it in Data controls. You can disconnect an account at any time in the app, which also asks the provider to revoke our access, or revoke it in your Google Account settings (Security › Your connections to third-party apps). Harko's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We send tips and offers by email only if you opt in: an unticked box when you sign up, or the switch in the Harko app (Me › Notifications) or in your AnyModel account settings. We keep a record of your choice (when, where you made it, and the wording you saw). Every marketing email has a one-click unsubscribe link and our postal address; unsubscribing takes effect immediately, and you can also turn these emails off in the app or the settings at any time. Emails about your account, sign-in codes, orders, your plan and billing are not marketing and still come. We send them in the language you picked (in the language menu of our website or AnyModel, or with the language link in the email); if you have not picked one, in your browser’s or phone’s language, or else in English. We keep that language with your account.
We may update this policy when the law or our practices change. Updates are published on this page with a new version label, and material changes will be highlighted. For questions or requests about your personal information, email privacy@jellydropsllc.com. Postal address: Jelly Drops LLC, c/o Registered Agent Solutions, Inc., 838 Walker Road, Suite 21-2, Dover, DE 19904.