Privacy Policy

Effective date: March 22, 2026
Last updated: March 22, 2026

1. Who we are

This Privacy Policy explains how Joise (“Joise,” “we,” “us”) processes personal data when you use the Joise mobile application and related services (the “Service”).

Data Controller:
Infinicode Patrycja Rychlik-Widera, a sole proprietorship (jednoosobowa działalność gospodarcza) registered in Poland
Registered address: ul.Sokolska 30a/98, 40-086 Katowice, Poland
Contact: hello@joise.app

If you are in the United States, Joise acts as the business/owner of the data described in this Privacy Policy.

2. Scope

This Privacy Policy applies to:

the Joise iOS app and any beta versions,
our website https://www.joise.app,
communications with us (support, feedback, surveys),
waitlist / early access sign-ups.

3. Summary (plain language)

Joise helps you plan your day by turning wearable/sleep and symptom signals into a “focus forecast.” We:

collect only what we need to provide and improve the Service,
ask for permission before accessing Apple Health / HealthKit,
do not sell your health data,
do not use HealthKit data for advertising.

4. Personal data we collect

Depending on how you use Joise, we may collect:

A) Account & profile data

email address, name (optional), authentication identifiers (e.g., Sign in with Apple tokens), account preferences, time zone.

B) Health & wellness data (sensitive / special category)
If you connect Apple Health / HealthKit or other wearables, and you authorize access, we may process:

sleep metrics (e.g., duration, timing, stages where available),
activity or training data,
other health signals you choose to connect.

C) Symptom and self-reported data

symptoms (e.g., hot flashes, sleep disruption, cognitive complaints),
notes you enter, ratings, tags, schedules, routines.

D) App usage & device data

in-app actions (feature usage), settings, crash logs,
device identifiers (typically pseudonymous), OS version, device model, language,
IP address (usually transient) and approximate region (derived from IP).

E) Communications

messages to support, feedback, survey answers, interview participation (if you opt in).

F) Purchases
Subscriptions and payments are processed by Apple via In-App Purchase. We receive purchase confirmation/status and entitlement information, but we do not receive your full payment card details.

5. How we use your data

We use your data to:

Provide the Service

create and manage your account,
generate your focus forecast and recommendations based on your inputs,
sync authorized wearable/Apple Health data,
show your history, trends, and planning tools.

Personalize and improve

improve forecast accuracy and user experience,
troubleshoot issues, prevent fraud, keep the Service secure,
run analytics to understand feature performance (preferably without using HealthKit data for advertising).

Communicate with you

support requests, important service messages, onboarding,
marketing emails only if you opt in (where required).

Comply with law

tax/accounting, legal obligations, enforcing our terms.

6. Legal bases (GDPR / EEA / UK)

If you are in the EEA/UK, we rely on:

Contract necessity: to provide the Service you request (account, core features).
Consent:
- for Apple Health / HealthKit access, and for processing health/symptom data where required,
- for marketing communications (where required),
- for non-essential cookies/trackers on the website (if any).
Legitimate interests: service security, fraud prevention, and limited analytics where appropriate (we do not use HealthKit data for ads).
Legal obligation: accounting, compliance requests, lawful disclosures.

You can withdraw consent at any time (see Section 10).

7. How we share data

We share data only as needed:

A) Service providers (processors)
We use vetted vendors for hosting, databases, analytics, crash reporting, customer support, email delivery, and subscription management. Examples (replace with your actual vendors):

Hosting/Cloud: Google Firebase
Analytics: Mixpanel/Firebase
Crash reporting: Firebase Crashlytics
Subscription infrastructure: RevenueCat
AI processing: Open Router

They may process personal data only on our instructions and with appropriate safeguards.

B) Apple / App Store
Apple processes App Store purchases and may process certain device/transaction data as the platform provider.

C) Legal and safety
We may disclose information if required by law, court order, or to protect rights, safety, and security.

D) Business transfers
If we’re involved in a merger, acquisition, financing, or asset sale, data may be transferred subject to confidentiality and notice where required.

We do not sell your personal data.
We do not share HealthKit data for advertising.

8. International transfers

Our vendors may process data outside the EEA/UK (including in the United States). Where required, we use appropriate safeguards such as Standard Contractual Clauses and vendor security measures.

9. Data retention

We keep personal data only as long as necessary:

account data: while your account is active,
health/symptom and forecast history: until you delete it or close your account (or as configured in-app),
logs and security records: typically up to 90 days unless needed longer for security/legal reasons, anonymised analytics or statistical records may be retained in aggregate form.
legal/accounting records: as required by law.

10. Your rights and choices

In-app controls

Disconnect Apple Health/HealthKit in iOS settings or in-app (if available).
Adjust notification and preference settings.

EEA/UK rights
You may have the right to access, correct, delete, restrict, object, and portability. You can also withdraw consent at any time.

How to exercise rights
Email hello@joise.app with your request. We may ask to verify your identity.

Right to complain
You can complain to your local data protection authority. In Poland, the authority is the President of the Personal Data Protection Office (UODO).

11. US privacy disclosures (general)

Depending on your state and our size/thresholds, you may have rights to access, delete, and opt out of certain processing. Joise does not sell personal data and does not share health data for targeted advertising.

California
California residents may have the right to opt out of “sale” or “sharing” of personal information for cross-context behavioral advertising, and other rights, subject to exceptions.

12. Consumer health data (US – Washington / Nevada and similar laws)

Joise processes wellness and symptom information that may be considered “consumer health data” under certain US state laws.

We obtain consent where required to collect and use consumer health data for providing the Service.
If we ever share consumer health data with third parties beyond service providers acting on our instructions, we will obtain any legally required separate, explicit consent beforehand.
We do not sell consumer health data.
We do not use geofencing around healthcare facilities to identify, track, or target individuals.

13. Children

Joise is not intended for children. You must be at least 18 to use the Service (or the age of majority where you live). If we learn we collected personal data from a child, we will delete it.

The app is not intended for children where prohibited by law. If you are under the age at which you can lawfully consent to data processing in your country, a parent or legal guardian must provide any required consent.

14. Security

We use administrative, technical, and organizational measures designed to protect your data. No method of transmission or storage is 100% secure.
For sensitive health and symptom data, we encrypt the data both in transit (using TLS) and at rest and implement strict role‑based access controls so that only authorised personnel with a need to know can access this information.

15. Changes to this Privacy Policy

We may update this Privacy Policy. If changes are material, we will provide notice in the app and/or on our website. The “Last updated” date will reflect the current version.

16. Contact

Questions or requests: hello@joise.app
Mailing address: ul. Sokolska 30a/98, 40-086, Katowice