Privacy Policy

Joi App — Szupia Inc. · common@szupia.net

Effective Date: July 9, 2026

1. Information We Collect

We may collect account information (such as name, email, and login credentials), wellness data (such as PHQ-9, GAD-7 self-assessment responses, and self-reported mood), optional wearable health summaries from Apple Health or Health Connect (sleep duration and consistency, heart-rate variability, resting heart rate, breathing rate, blood oxygen saturation, exercise minutes, and step count, only after you connect a supported health service and enable wearable data collection; on iOS 18 and later, optionally including State of Mind mood entries), face data (short video clips processed to summarize visual cues for reflection — raw video is deleted promptly and only derived cue summaries may be stored), voice data (audio processed to summarize voice cues for reflection — raw audio is deleted promptly and only derived cue summaries may be stored), device information (camera/microphone permissions, IP address, device type), usage data (completed surveys, app interactions, session logs), and report-export data you choose to generate or share. On iOS, JoiApp may also write your completed reflection sessions to Apple Health as Mindful Minutes; we do not modify or delete any other Apple Health record.

2. How We Use Your Information

We use your data to provide and improve our services, generate personal insights and wellness recommendations, deliver notifications and reminders, maintain app security and prevent misuse, build optional wearable baselines and routine-change alerts, create user-requested reports, and support research and analytics in de-identified form.

3. Sharing of Information

We do not sell your data. With your explicit consent, we send wellness assessment scores (PHQ-9, GAD-7) and derived mood metrics to OpenAI to generate personalized wellness insights and recommendations. No personal identifiers, video, audio, or face data is sent to OpenAI. You can grant or revoke this consent at any time in Privacy Settings. We may also share information with service providers (cloud hosting), researchers (only anonymized or aggregated data), or legal authorities (if required by law).

Apple Health / Health Connect Data

Health data you connect from Apple Health or Android Health Connect — and the baselines and routine-change alerts derived from it — is used solely to show you your own personal wellbeing insights inside the app. We do not use it for advertising, we do not sell it, and we do not share it with third parties or use it for research or analytics (de-identified or otherwise). It is never sent to OpenAI or any other third party.

4. Data Security

We use encryption, secure storage, and restricted access controls to protect your data. If you choose password-protected PDF export, JoiApp generates the report at your request, sends it to the backend only to apply in-memory AES-256 password protection, returns the protected file and password, and does not store the unencrypted or encrypted report server-side. You are responsible for sharing the password separately from the file. However, no system is completely secure, and we cannot guarantee absolute protection.

5. Your Rights

You may access and update your information, withdraw consent at any time, request deletion of your account and data, and contact us with privacy concerns.

6. Data Retention

We retain your data as long as necessary to provide services or as required by law. Optional Apple Health or Health Connect daily summaries, computed baselines, and routine-change alerts are retained for up to 24 months unless you delete your account or request deletion earlier. Password-protected report exports are not retained server-side after the request completes. If you delete your account, your personal data will be permanently removed within a reasonable timeframe; consent records may be retained where required for legal compliance.

7. Children’s Privacy

Joi App is not intended for children under 18. We do not knowingly collect personal information from children without parental consent.

8. Changes to this Policy

We may update this Privacy Policy from time to time. When changes are made, we will notify you within the app and update the Effective Date above.

9. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at info@szupia.net.