Who sees what, in plain sentences.

Everything you add belongs to your account. The database itself checks every read and write against who you are (Postgres row-level security, on every table), so you see your own things and things shared with you, and nothing else.

Other people on Junior can see your display name, so they can share with you. Nothing else about you. Someone who types your exact email address can learn whether it has a Junior account, and its name; that's how sharing finds you.

The people who run Junior can reach the database to keep it working and to restore something you ask to have back.

You share a single item, a recipe, a menu, an event, a trip, with a person you pick. They're asked first and can say no, and nothing lands on their calendar until they say yes. Either of you can end a shared recipe at any time.

You can also make a link for a recipe, a menu or a trip that anyone with the link can read, and turn it off later. A recipe you add to Community can be seen by everyone on Junior.

Junior's assistant is Claude, made by Anthropic. When you chat, or ask Junior to read a photo or a document, what you send goes to Anthropic to be answered. Anthropic's commercial terms say it may not train models on customer content.

The assistant keeps a short list of things about you: facts you told it, and a few it worked out, marked as such. It reads that list with each message. You can see every one in Settings, under Assistant, and forget any of them there. You can delete a whole conversation from the chat.

Every add, change and delete in Junior is written to a history log that the app itself can't edit or empty. So anything deleted by mistake can be put back. Today that's done for you: ask from Feedback inside Junior.

It also means deleting something doesn't erase it from that log. Photos and documents are removed for good 30 days after you delete them.

Settings, under Your data, has Download everything: one ZIP with a spreadsheet for every kind of thing you keep, one file with all of it, and your photos and documents. It holds only what you own, never what other people shared with you. We email you when it's ready, and delete the file from our servers after 7 days.

Delete my account is there too. You type DELETE, then a code we email you. Your account is locked and hidden at once, and 30 days later everything you own is erased for good, history copies included. Until then, signing in and pressing Keep my account puts it all back. Things you shared stop being shared; copies other people made of your community recipes stay with them, without your name.

Nightly database backups are kept for 8 days, so an erased account is fully gone from them a week or so later.

You sign in with a password, or with a 6-digit code emailed to you. Junior never emails a link that signs you in. Junior is invite-only: an account is made only from an invite.

• SupabaseThe database and file storage everything you add lives in, hosted on Amazon Web Services in the US (us-east-1). Always.
• VercelRuns the Junior app and this website. Always.
• AnthropicClaude, the AI behind Junior's assistant and this website's Ask Junior chat. It gets what you send in chat, plus anything you ask Junior to read or estimate: a photo, a receipt, a lab report, a recipe page, a meal's nutrition. When you use the assistant, Ask Junior, or one of those features.
• ResendSends Junior's emails: sign-in codes, invitations, reminders, and replies to questions you leave for us. It gets your email address and the message. When Junior emails you.
• GoogleGoogle Calendar sync, both ways. Disconnecting revokes Junior's access and deletes its tokens; events already written to Google stay there. Only if you connect Google Calendar.
• PlaidLinks a bank account to Money so transactions come in on their own. Plaid's own sign-in window loads only when you link a bank. Only if you link a bank.
• StripePayments for a paid plan. Junior never sees your card number. Only if you pay for a plan.
• InstacartGets the grocery lines you haven't checked off, to fill a cart. Only when you press Shop on Instacart.
• OpenStreetMapTurns a place's name and city into a pin on Junior's maps. The maps themselves are served from Junior's own storage, so no map company sees where you look. When you save a place.
• Title and reference lookupsTMDB, TVmaze, Apple's iTunes, Open Library, Wikidata and Wikipedia get the title of a film, show, book or podcast to fill in its cover and details. Your browser loads some covers straight from those sites, so they see your IP address like any website would. NOAA gets a date and a location for a story's weather, and Frankfurter gets currency codes and dates for exchange rates. When you add or open those things.
• Links you pasteJunior fetches the page at a link you give it, such as a recipe, to read it. When you paste a link.

On these public pages, and not inside Junior, we count anonymous visits to make the site better: which version of the page you saw, how long you stayed, how far you scrolled, which parts you clicked, the site that sent you, and whether you're on a phone, tablet or computer. If one of our ads brought you, we also count the campaign name we put on that ad's link, like “instagram” and “dinners”.

One cookie remembers which version you saw, for 90 days, and holds nothing else. It never follows you to another site. Nothing stored identifies you: no IP address, no browser details, no account. It all goes to Junior's own database; no outside analytics company sees it.

We don't count you at all if you're signed in, or if your browser sends Do Not Track or Global Privacy Control.

Ask Junior, the chat on these pages, runs on Anthropic's API. It answers from this website's own pages and can't see any Junior account, including yours. Chats aren't stored. If you leave a question for a person, from the chat or the Contact page, we keep it with your email, your name if you give one, and that chat, so someone can reply; we email you a note with its number when it arrives, and reply by email.

Your email, and if you give them, your first name, what you'd use Junior for and a one-line note. Also the page you joined from and which version of the home page you saw, so we know what brought you. Not your IP address or your browser.

It's used for one thing: inviting you. We send one email to say you're on the list and one when your invite is ready. No newsletter, and we never share your email. Only Junior's admins can see the list.

To be taken off, use the Remove me link in your confirmation email: one click, then confirm, and your entry is deleted. Like every change in Junior, the deletion is noted in a history log only Junior's admins can read.

Questions? Write to us from the Contact page. Contact us. To leave the waitlist, use the link in your confirmation email.