Privacy Policy
Last updated: 14 October 2026
This policy explains how hejj handles personal data when you use our website, web app, Hejj Messenger, our Telegram bot and Mini App, and our developer and agent interfaces (together, the “Service”). Please read it together with our Terms of Service.
1. Who we are
The Service is operated by Banimo AB, a company registered in Sweden with organisation number 559585-4356 (“hejj”, “we”, “us”). We are the controller of the personal data described in this policy, except where we say otherwise. You can reach us about anything in this policy at [email protected], in English or Swedish.
When a third-party service you choose to connect (for example an AI assistant, a messaging app or a developer’s app) receives data from hejj at your request, that service handles it under its own terms and privacy policy, not this one.
2. The short version
- We collect what we need to run your start page, sync it and keep it safe.
- We don’t sell your personal data, and we don’t show ads or use advertising trackers.
- We don’t use analytics or tracking cookies. We only set cookies that are strictly necessary, for example to keep you signed in.
- Your boards are stored on your device and on our servers so they work offline and sync between your devices.
- Hejj Messenger messages are encrypted in transit but are not end-to-end encrypted.
- Integrations (AI agents, Telegram, third-party apps, connected accounts) only receive data when you turn them on, and you can turn them off at any time.
- You can export your data from the menu and delete your account from Settings.
3. What we collect
Account information
When you sign up, we receive your name, email address and profile picture from the sign-in provider you use (currently Google), and whether your email address is verified. If an email and password option is offered, we store your password only in hashed form. We also store your sign-in provider’s account identifier and, encrypted, the access tokens it gives us (including for a second account you link, for example for a calendar). We create an internal account identifier. You need to provide this information to create an account; without it we can’t provide the Service. Everything else you give us is optional.
Your content
Everything you put into hejj: boards, pages, containers, links, notes, notebooks, checklists, pictures, PDFs, tags, icons, colors, layout, widget settings (for example reminders, countdowns, chart numbers, feed and calendar addresses, sites you monitor), and your preferences. Content you add through Telegram, an AI agent, a share sheet or a bookmarklet is stored the same way. Our apps remove location, camera and similar metadata from pictures before upload where they can. PDFs are stored as you upload them, so check them for embedded information (such as the author) before you add them.
Usage information
To power features such as “most used” and “recently opened”, we record when you open an item and how (for example a click, a search result or the Telegram Mini App). We also keep a history of changes to your content (such as titles, links, descriptions, tags and short excerpts of notes), which we use to sync your devices, to restore and troubleshoot, and to show you features based on your own activity, such as “most used”.
Device and technical information
When you sign in, we store a session record with its creation and expiry time, your IP address and your browser’s user agent, to keep you signed in and to protect your account. Our servers process IP addresses temporarily to deliver the Service and to apply rate limits against abuse. Our technical logs record which part of the Service was used, when, the result and, if you are signed in, your account identifier. We design our logs so they do not contain the contents of your boards or messages.
Data from services you connect
If you connect a calendar, a feed, a developer’s app, a business service (for example a payment or app-store analytics provider) or Telegram, we receive and store what is needed to make that connection work, such as access tokens, API keys, secret links, your Telegram user ID, username and first name, and the data those services return. See Services you connect.
Hejj Messenger
Your Hejj ID, display name, display picture, status and status message, contacts, contact requests, ignore list, conversations, messages and pictures you send. See Hejj Messenger.
When you contact us
If you email us, we receive your email address and whatever you choose to tell us, and use it to answer you.
We don’t ask for, and ask you not to store, special categories of data (such as health data) in hejj. If you choose to store it, we process it only as part of providing the Service to you.
Content you add may include personal data about other people, for example in notes, calendar events or messages. You are responsible for having the right to add it. Some data about you also comes from other users, for example contact requests and messages they send you.
4. How we use it and why
Where data protection laws such as the GDPR or UK GDPR apply, we rely on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Creating and running your account; storing, syncing, searching and displaying your content; providing the features and integrations you use | Performance of our contract with you (the Terms) |
| Fetching titles and icons for links you save, refreshing widgets, checking sites you monitor, sending reminders you set | Performance of our contract with you |
| Security emails (for example when a new agent, app or Telegram account is connected), verification and password emails, service notices | Performance of our contract and our legitimate interest in keeping accounts secure |
| Preventing fraud, spam and abuse; rate limiting; securing and debugging the Service; backups | Our legitimate interests in operating a safe and reliable service |
| Administering the Service: viewing the list of accounts (name and email address) and site-wide statistics such as totals of users and storage | Our legitimate interest in operating and maintaining the Service |
| Answering your emails and messages to the hejj team | Our legitimate interest in helping you |
| Browser notifications, and connecting a calendar or another account you choose | Performance of our contract with you (you can switch them off at any time) |
| Sharing your time zone or language with a developer’s app | Your consent, which you can withdraw at any time in the app without affecting earlier processing |
| Complying with law, enforcing our Terms, and establishing or defending legal claims | Legal obligation and our legitimate interests |
We do not use your content for advertising, we do not sell it, and we do not currently use it to train artificial intelligence models. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Before we use personal data for a new purpose, we will inform you as the law requires and ask for your consent where needed.
5. Your device, cookies and offline data
hejj is built to work offline. To do that it keeps a copy of your boards, pending changes, files waiting to upload, and recently viewed pictures and PDFs in your browser’s storage (such as its database, local storage and the app’s offline cache). It also remembers small preferences on each device, such as theme, zoom, recent emoji and window positions.
Cookies. We only use cookies that are strictly necessary: to keep you signed in, to keep your session secure, and to complete sign-in with your provider. We don’t use analytics, advertising or cross-site tracking cookies, so we don’t ask for cookie consent. Browser storage used for offline and preference features is likewise needed for features you ask for.
When you sign out in a browser, the app removes your boards, pending changes, cached pictures and PDFs, and the places and conversations it remembered for your account from that browser. Device preferences such as theme and zoom stay. On a shared or public computer, you may also want to clear the site’s data in your browser settings. You are responsible for the security of your own devices.
6. Links, icons and feeds
When you save a link, our servers visit that address to read its title, description and icon. These requests come from our servers, not from your browser, and we don’t add cookies or information identifying you. The website sees a request from hejj, not from you. The address itself is sent, so avoid saving links that contain private information. If we can’t find an icon, we may ask a third-party icon service for it, sending only the website’s domain name.
In the same way, our servers fetch feeds, calendar links and other addresses you add to widgets, and send regular requests to sites you ask us to monitor. Public data such as holidays is fetched by country and year only.
7. Hejj Messenger
- What others see. Your Hejj ID is a public name: anyone can find out whether an ID exists and send a contact request to it. Anyone who knows your Hejj ID can see your display name and display picture, even if you have turned requests off or ignore them, so choose a picture you are happy to show publicly. Only your accepted contacts see whether you are online, idle or away, and your status message. We don’t show your email address to other Messenger users.
- Messages. Messages, pictures and BUZZes are stored on our servers so they can be delivered and shown on all your devices. They are encrypted in transit but not end-to-end encrypted, which means our systems can technically access them. Access to message content is limited to what is needed to operate and secure the Service, to handle messages a participant sends or forwards to us, and to comply with the law. We don’t use message content for advertising. We may disclose messages to authorities where the law requires it. Messages from people you ignore are stored but not shown to you.
- Presence. Whether you are online, idle or typing is shared with your contacts in real time. Typing and live presence are not stored; we store only your chosen status, status message, invisible setting and when you last signed out of Messenger. You can appear invisible.
- Your controls. You can turn contact requests off, ignore people, remove contacts, clear a conversation for yourself and export your chat history.
- What the other person keeps. Clearing a conversation only clears it for you. When you delete your account, your conversations are deleted for both participants, but we can’t remove copies other people have made (for example screenshots).
- Writing to the hejj team. Messenger includes a contact for the hejj team, which is always on your contact list. Once you write to it, it sees your online status and display picture like any contact. Messages you send to it are read by our team, who aim to reply but can’t guarantee a response or response time. We use them to help you. It is not an emergency or guaranteed-support channel.
8. Services you connect
These features are optional. They share data only after you connect them, and you can disconnect them at any time in the app.
- Sign in with Google and Google Calendar. Signing in shares your name, email address and profile picture with us. If you link a calendar, we request read-only access and use it to show your events in your widgets and, if you turn them on, in reminders and alerts. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We don’t use Google user data to train AI models, sell it, or use it for advertising, and we pass calendar data to an AI assistant only if you explicitly allow it to read your widget data.
- Telegram. If you connect our Telegram bot, we store your Telegram user ID, chat ID, username and first name. Messages you send to the bot are kept briefly so you can choose where to save them. The bot sends you the names of your boards and items, short previews of your own messages, a masked form of your email address, and, if you choose, your alerts (such as reminders, countdowns, calendar events and site-down alerts). The Mini App shows your boards inside Telegram. Telegram processes all of this under its own policies.
- AI agents. If you create an agent key or connect an AI assistant, it can read the boards you select, and add to or change them unless you choose read-only (all boards with write access is the default, so review it when you connect). This includes notes, links, pictures and PDFs and, only if you allow it, data shown in your widgets. Links and pictures an agent saves are fetched by our servers like any other link. That data is then processed by the provider of the assistant you use, under its terms. We are not responsible for how that provider handles it.
- Apps from developers. When you connect a developer’s app to a widget, the app receives an identifier unique to that connection, which view you are looking at, roughly when you have hejj open and when you tap its buttons, and, only if you tick the boxes, your time zone and language. We don’t give it your name, email address, IP address, boards or other content. Data the app sends to your widget is stored encrypted. The developer’s own privacy policy applies to its app.
- Business and other accounts. If you add an API key, secret link or similar credential to a widget, we store it encrypted, use it only to fetch the figures that widget shows, and the app shows only a masked form of it. If those figures include personal data about others (for example your customers), you are responsible for having a lawful basis to view it in hejj.
9. Notifications and email
If you turn on browser notifications on a device, your browser gives us a push address for it. Notifications are sent through your browser maker’s push service, encrypted so that the push service can’t read them. You can turn them off in Settings or in your browser.
We send email mainly about your account and its security, for example verifying your address, resetting a password where available, and telling you when a new AI agent, app or Telegram account is connected. We don’t send marketing email without your consent.
11. International transfers
We are based in Sweden. We and our service providers may process data in other countries, including outside the European Economic Area and the United Kingdom. When we transfer personal data internationally, we rely on appropriate safeguards, such as adequacy decisions or standard contractual clauses approved by the relevant authorities. You can ask us for more information, or for a copy of the safeguards, at [email protected].
12. How long we keep it
We keep personal data for as long as your account exists and as needed to provide the Service, then delete it, except where we must keep it longer to comply with the law or to resolve disputes. The periods below are approximate: our cleanup runs regularly rather than at an exact moment.
| Data | How long |
|---|---|
| Your account and content | Until you delete them or your account |
| Change history and records of when you opened items (including entries about things you have deleted) | Until you delete your account (some older entries may be removed sooner) |
| Things you delete | Restorable from Trash for 30 days. “Delete forever” erases the item’s content and files promptly; otherwise they are removed from our live systems some time after that, generally within about three months, and from backups as they roll over. Change history entries are kept as described above |
| Sign-in sessions (with IP address and browser) | Until you sign out, or about 60 days without use |
| Messages you send to the Telegram bot | About a week if not saved; a few days once saved or cancelled |
| Data sent to your widgets by apps | Until replaced, or about 30 days without being viewed |
| Delivered notifications | About 30 days |
| Messages in Hejj Messenger | Until either participant deletes their account. Clearing a conversation hides it for you only |
| A released Hejj ID | A record of it is kept for about 90 days so nobody can impersonate its previous owner |
| Backups | Overwritten on a rolling basis, normally within about 30 days |
| Technical logs | Rotated automatically and kept only for a limited period, longer only to investigate a specific security incident |
| Rate-limit and abuse-prevention records | Held only in server memory, briefly (cleared when the server restarts) |
| Emails you send us | As long as needed to help you and to keep a record of our correspondence |
| Messages to the hejj team in Messenger | Like other conversations: until you delete your account |
| Abuse reports and our decisions on them | As long as needed for that purpose |
When you delete your account, we delete your account, content, files, connections and Messenger data from our live systems promptly. Some technical records, such as checks of sites you monitored, end shortly after. Messages already delivered to Telegram or other services stay there. Copies in backups are removed as the backups roll over. We may keep information we are legally required to keep, and aggregated information that no longer identifies you.
13. Security
We use technical and organizational measures designed to protect your data, including encryption in transit, encryption of stored credentials and of data that connected apps send, hashed passwords and access keys, separation of each account’s data, access controls and rate limits.
No service can be perfectly secure. You are responsible for keeping your sign-in account, devices, agent keys and connected services secure, and for telling us at [email protected] if you suspect unauthorized access. If a personal data breach affects you, we will notify you and the authorities where the law requires it.
14. Your rights and choices
Depending on where you live, you may have the right to access your personal data, to correct it, to delete it, to receive it in a portable format, to restrict or object to certain processing (including processing based on legitimate interests), and to withdraw consent at any time without affecting earlier processing. You may have additional rights under the law where you live.
Many of these you can do yourself, at any time:
- Edit or delete any content, and empty the Trash.
- Export your boards from the menu, and your chat history from Hejj Messenger.
- Disconnect AI agents, apps, Telegram and connected accounts.
- Turn notifications and optional sharing off.
- Sign out of all other devices, or delete your account in Settings.
For anything else, email [email protected] from the address on your account. We may need to verify your identity before acting, and we will reply within the time the law requires (usually one month). If you are not satisfied, you have the right to complain to a data protection authority: in Sweden, the Swedish Authority for Privacy Protection (IMY, imy.se), or the authority where you live or work. We would appreciate the chance to address your concern first.
15. Children
The Service is not directed to children. You must be at least 18 years old to use hejj. We don’t knowingly collect personal data from anyone under 18. If we learn that an account belongs to someone under 18, we may close the account and delete its data. If you believe this has happened, contact us.
16. Changes to this policy
We may update this policy as the Service changes. We will post the new version here and update the date at the top. If a change is significant, we will let you know in an appropriate way, for example in the app or by email.