Jo is the assistant built into the aijo Care app and the web Care Dashboard. This page explains what Jo can and cannot see, what is checked before anything is sent, what we record, and who is responsible for the data. It sits alongside our privacy policy and security page.
Off until your organisation says yes
Jo is switched off by default. Only a SuperAdmin can switch it on, and that means accepting written terms. Staff cannot switch it on for themselves. Any member of staff can switch it off for themselves.
Managers stay in control
Tier 1 managers and above can see who agreed the terms and on what date. They can revoke access for everyone at any time.
What Jo can and cannot see
Jo cannot see care records, logs or messages. It never writes to or changes a record, and it is not a clinical tool. Nothing that identifies the person asking, your organisation or anyone you support is added to what is sent.
Safeguards before anything is sent
aijo checks for NHS numbers, postcodes, dates, email addresses, the names of people you support and statements about someone's health. If it finds one, nothing is sent and the person is told. These are safeguards, not a promise that nothing slips through, so please tell staff not to type personal details into Jo.
Every request is logged
We record who asked, when, whether it was answered or refused, and how large it was. aijo does not store the text itself. Switching Jo on or off is recorded in the audit trail, and so is each acceptance of the terms, with the exact wording shown.
If the terms change
If the terms change in a way that matters, Jo switches off for your organisation until a SuperAdmin accepts the new version.
Speaks your language
Jo uses your organisation's own words, such as residents or homes.
Who does what with your data
Your organisation is the controller. aijo, a trading name of Halo Integrated Care Solutions Ltd (company number 16859502), is the processor. Anthropic, PBC provides the AI model for Jo only. It is an optional sub-processor, and the app says so when Jo is switched on.
Where the AI model runs
Jo's processing is not limited to the UK and may take place in the United States. Transfers are covered by the UK Addendum and Standard Contractual Clauses in Anthropic's data processing terms. Anthropic keeps requests and answers for up to 30 days. Anthropic states that data sent through its API is not used to train its models without the customer's permission.
Questions
Email hello@aijo.uk if you would like more detail on any of this.