Privacy

Last updated: October 5, 2026

MyJackfruit is built on one idea: your data is yours. This page says what we collect, why, where it is kept, and what you can do about it.

Who we are

MyJackfruit, GilbPlatform and GilbApp are run by Gilb International AS, which licenses them from their owner, Kai Gilb. Gilb International AS is the controller of the personal data described here.

Questions about privacy: appsupport@gilb.com

What we collect, and why

When you visit myjackfruit.com. The site sets no cookies. To learn how our pages are used, we use PostHog analytics, hosted in the EU: which pages are viewed, what is clicked, where visitors come from and how far they scroll. It stores nothing on your device, does not recognize you from one visit to the next, and is set not to keep your IP address. If your browser sends Do Not Track or Global Privacy Control, the analytics do not load at all. Our host, Cloudflare, handles each request, and with it your IP address, to deliver and protect the site.

In GilbApp (gilb.com/app) and in your vaults (yourname.gilb.com) there are no analytics and no tracking. Other pages on gilb.com are not part of MyJackfruit and are not covered by this policy.

When you join the waiting list. We store what you enter: your email address and, if you choose, your name, phone, company, what you want to build, your experience, which AI you use and your team size. We also store the notice you saw and the page you sent the form from. The form checks you are not a bot with Cloudflare Turnstile, which sends your IP address to Cloudflare for that check. We use these details only to manage your place on the waiting list and contact you about early access, including checking whether you already have an account. Managing your place includes our own notes, an assessment of how well early access fits you, and your place in line. Only we read the list.

When you create an account in GilbApp. We store your email address and your passkey's public key. You sign in with a passkey, or with a one-time code we email you; the code works once, for ten minutes. GilbApp sets three cookies, all needed for signing in: a session cookie, one that limits how often codes can be sent (24 hours), and one that returns you to where you were. We use your IP address to limit abuse of sign-in.

What you put in your vaults. Your vaults hold what you put in them. Inside MyJackfruit, only you and the people and apps you grant access can see your records. Your vault's address and your profile are public by design; your records are not, unless you share them. Gilb International AS runs the servers and could technically reach stored data. We do so only to run, secure and back up the service, or when the law requires it.

When you connect an AI. You choose which AI works with your vaults, and you connect it yourself. Today you can connect Grok from inside GilbApp, or connect the AI model you use from your own terminal; more choices, such as Claude Code and OpenAI, are coming. What your AI reads from your vaults goes to its provider under your own agreement with them. We do not send your data to an AI on your behalf.

Security logs. Our servers log requests, including IP addresses, to keep the service secure. We keep these logs for up to 30 days.

Where your data is kept

During early access, the service runs on servers in Norway operated by Gilb International AS. Backups of the platform's databases are stored in Apple iCloud. Apple may store them outside the EEA, under the safeguards Apple uses for such transfers.

Before public launch, we move the service to Hetzner: your data will be stored in Germany and backed up in Finland, both in the EEA. We will update this page when the move is done.

Who else handles your data

We use these providers, each only for the task named:

• Cloudflare: hosts myjackfruit.com, carries all traffic to GilbApp and the vaults, and runs the Turnstile bot check.
• PostHog (EU): analytics for the pages of myjackfruit.com only.
• Resend: sends sign-in codes by email.
• Apple (iCloud): stores backups during early access.
• Hetzner: will host the service and its backups from public launch.

We do not sell your data, and we do not use it for advertising.

How long we keep it

• Waiting list: until we offer you early access or close the list, and no longer than 12 months after our last contact with you. You can ask us to remove it sooner.
• Account and vaults: for as long as you have an account.
• Security logs: up to 30 days.
• Backups: up to 14 days.

Your rights

You can ask us to show you the data we hold about you, to correct it, to delete it, to limit how we use it, or to stop using it. You can take your whole vault with you at any time with Export in GilbApp. Write to appsupport@gilb.com, and we answer within a month.

About deleting. When you ask us to delete something, we remove it from use and from everything you, others and apps can see. Our store keeps a history of every change. Until full erasure is built, which we will do before public launch, a removed record stays in that history, where only we can reach it.

If you think we handle your data wrongly, you can complain to the Norwegian Data Protection Authority, Datatilsynet (datatilsynet.no (opens in a new tab)), or to the authority in your own country.

Children

Young people are welcome to build with MyJackfruit, for school projects or anything else. From 13, you can use it yourself; if you are under 18, you need a parent's or guardian's permission. For children under 13, a parent or teacher sets up the account and is responsible for it.

Changes

When we change this policy, we update the date at the top. If a change matters to you, we tell you by email first.