Privacy Policy

1. Who we are & scope

This Privacy Policy describes how Jeani Inc., a Delaware corporation, 1702 Woodburn Rd, Durham, NC 27705 ("Jeani," "we," "us"), processes personal data when you use our mobile app, firmware, websites, dashboards, APIs, and related services (the "Service"). By using the Service, you agree to the collection and use of information in accordance with this Policy.

2. Age

The Service is intended for individuals 16 years of age and older. We do not intentionally collect personal data from persons under 16. If you are under 16, do not use the Service.

3. Data we collect

• Account & contact data: name, email, phone number, profile details, settings.
• Transaction data: subscription and billing information (processed by third-party payment providers).
• Communications: the messages you send to and receive from Jeani, by text (iMessage or SMS) or in the app, with any photos, files or voice notes you include; what you say in a voice conversation with Jeani; notes you record on your Apple Watch; support tickets; feedback; and AI chatbot interactions.
• Device & usage data: device identifiers, OS/app version, events, diagnostics, crash logs, browser type.
• Movement & activity data ("Movement Data"): IMU/sensor signals, derived metrics, sleep data, training context, symptoms you log.
• Videos & form analysis: videos of you moving that you send Jeani, and what we derive from them to coach you: the key moments, body-position measurements (joint angles, timing) and a 3D model of your body's position through the movement. See section 10.
• All-day capture (only if you turn it on): your Apple Watch's motion sensor signal through the whole day and night, and every heart-rate reading in Apple Health. See section 11.
• Context & relationships: Organizations/teams you join, your role, coaches/admins associated.
• Support & feedback: help tickets, surveys, beta feedback, in-app messages.
• Cookies & tracking: limited cookies and SDKs for authentication, analytics, and performance. We do not currently respond to Do Not Track (DNT) signals.

4. How we collect data

• Directly from you (account sign-up, logs, settings, entries, and the messages you send Jeani).
• When you sign up or sign in with your phone number: the number, and a one-time code sent to it to confirm it is yours.
• Automatically from your device (events, performance, sensors with permissions).
• From Organization administrators, when you join a team space (only within the scope shown to you).

5. How we use data

• Provide, operate, and secure the Service (accounts, syncing, insights, support).
• Personalize your experience and generate wellness/performance insights not constituting medical advice.
• Improve safety, reliability, and performance (analytics, testing, troubleshooting).
• Develop new features, models, and algorithms (including de-identified/aggregated statistics).
• Train our proprietary AI models to enhance the Services. We do not use Google user data to train these models (see section 9).
• Communicate transactional updates; send marketing only if you opt in.
• Comply with legal obligations, prevent fraud, and enforce terms.

6. Legal bases & consent

Where required, we rely on the following legal bases to process your data:

• Consent: for Sensitive Data including Movement Data and any health-related information you provide.
• Contract performance: to deliver the Service you signed up for.
• Legitimate interests: for security, fraud prevention, and Service improvement.
• Legal compliance: where required by applicable law.

Jeani is generally not a HIPAA "covered entity." We do not sign BAAs unless separately agreed in writing with an Organization.

7. Confidentiality & security

• We treat your personal data and Movement Data as Confidential Information.
• We use encryption in transit, role-based access controls (RBAC), logging/monitoring, least-privilege access, workforce training, and periodic security reviews.
• We restrict access to personnel and service providers under written confidentiality obligations and need-to-know principles.

Incident response.

If a security incident materially affects your personal data, we will notify you without undue delay (target within 72 hours of discovery) with available details and mitigation steps, subject to law-enforcement needs.

8. Sharing your data

We share personal data only in these circumstances:

• At your direction (e.g., joining an Organization). We display exact fields and recipients before you accept.
• With service providers (cloud, analytics, support) under binding confidentiality and data-protection terms.
• To run the texting service and payments: Sendblue delivers messages between you and Jeani; Twilio sends the one-time codes that confirm your number; Stripe processes payments made on our website (your card details go to Stripe, not to us). Each receives only what it needs for that job.
• To analyse videos you send: Modal, our GPU cloud provider, runs the analysis service on our behalf; pictures and measurements from the analysis are sent to our AI provider (currently OpenAI) to write your coaching. See section 10.
• For voice: ElevenLabs turns speech into text and Jeani's words into speech. In a voice conversation in the app, your voice is streamed to ElevenLabs to be transcribed, and Jeani's replies are spoken by ElevenLabs; ElevenLabs keeps no recording of the conversation and deletes its transcript within 7 days, while the transcript stays in your conversation with Jeani. When Jeani sends you a voice note, its words are sent to ElevenLabs to be spoken, and we keep the audio file so our messaging provider can deliver it. Voice notes you send Jeani, and notes you record on your Apple Watch, are transcribed by our AI provider (currently OpenAI); we keep the words, not the audio.
• To check messages before they are sent: before Jeani sends you a message, TypeSafe, an AI model provider, checks what Jeani is about to send or save (the message, and any note, reminder or memory that goes with it) against our safety rules, for example that it gives no medication doses and sends you to no third party. When TypeSafe is unsure, or would stop a message, one of our AI providers (currently OpenAI or Anthropic) makes the decision, and it also re-checks a share of the messages TypeSafe has cleared. TypeSafe also reads each text you send Jeani, together with the message of Jeani's before it, to decide whether Jeani should react to it straight away with a tapback (such as a 👍 or ❤️), and whether a short reply such as “thanks” or “ok” needs a written answer at all. It does not see the photos or files you send. TypeSafe's service is hosted in the United States, and TypeSafe does not train its models on this text. Under its terms it may keep the text for as long as it considers necessary to provide and support its service, including to monitor for fraud and abuse and to meet legal obligations, and it may keep and freely use information derived from the checks, such as logs, statistics and their results. If you connect Google Health, your messages are not sent to TypeSafe (see section 9).
• To read the web for you: when you send Jeani a link, or Jeani needs a fact from the web to answer you (such as a race's date or what a device measures), Firecrawl, a web-reading service, opens the page and returns its text, and runs the web searches Jeani writes. Firecrawl receives the addresses of the pages Jeani opens and the words of each search. Jeani writes a search with the topic only, never your name or details of your health, and Firecrawl does not receive your health readings, your messages, or the photos and files you send. Firecrawl is based and hosted in the United States, and may keep the addresses, searches and copies of the pages it fetched under its own privacy policy. If you connect Google Health, Jeani does not search the web for you (see section 9), though it still opens links you send.
• For legal reasons (compelled by law or to protect rights, safety, security).
• In business transfers (e.g., merger, acquisition, financing) with continuous protections and required notices.

We do not sell your personal data.

9. Connected health services & Google user data

Jeani reads from a health service only after you connect it yourself, and only for as long as it stays connected. You can disconnect any service at any time in the app under You → Wearables. Disconnecting stops all further access immediately and deletes that service's stored tokens from our systems.

What Jeani reads from Google Health. When you connect Google Health, Jeani requests exactly three read-only permissions and nothing else:

• Sleep (googlehealth.sleep.readonly): your sleep sessions and stages, so Jeani can see how you slept, learn your usual wake time, and time its morning message.
• Activity and fitness (googlehealth.activity_and_fitness.readonly): your exercise sessions and daily step totals, so Jeani can tick off what your plan asked for, read your training load, and talk about the sessions you actually did.
• Health metrics and measurements (googlehealth.health_metrics_and_measurements.readonly): your heart-rate variability, resting heart rate and body measurements, so Jeani can tell a hard day from an easy one and adjust what it asks of you.

Jeani never requests write access to Google Health, and never adds, edits or deletes anything in your Google account.

How we handle it. We read these readings from Google's API when you or Jeani need them, rather than bulk-copying your Google history into our database. Access and refresh tokens are encrypted at rest using AES-256-GCM. Readings that Jeani surfaces to you, such as in your daily read, your plan, your metric pages or a reply in the conversation, are stored in your account so that the app and the assistant keep their memory.

AI processing. Jeani is an assistant built on large language models. To answer you, and to write your plan and your daily read, the readings relevant to that request are sent to our AI providers (currently Anthropic and OpenAI) as part of it. We use these providers under business terms that prohibit training on our customers' data, and we do not use Google user data to develop, train or improve any generalised artificial-intelligence or machine-learning model. If you connect Google Health, the messages Jeani drafts for you, and your replies to them, are checked only by these providers and are never sent to TypeSafe, the message-checking service described in section 8; and Jeani never runs a web search for you through Firecrawl, so nothing derived from your Google data leaves in a search.

Limited Use. Jeani's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically:

• We use Google user data only to provide and improve the user-facing features described above.
• We do not transfer Google user data except as necessary to provide or improve those features, for security purposes, or to comply with applicable law.
• We do not allow humans to read Google user data, except: with your explicit consent (for example, when you ask us for help with a problem); where necessary for security purposes such as investigating abuse; to comply with applicable law; or where the data has been aggregated and anonymised for internal operations.
• We never sell Google user data, never transfer it to advertisers or data brokers, never use it to serve or personalise advertising, and never use it for credit or lending decisions.

Removing access. Disconnecting Google Health in the app deletes our tokens but does not itself revoke the grant held at Google. You can also remove Jeani's access from your Google account at myaccount.google.com/permissions. Deleting your Jeani account removes your conversation, plan, health history, memories and connections. The same commitments in this section apply to the other services you can connect (Oura, WHOOP and Apple Health), each of which is read-only and separately disconnectable.

10. Videos & form checks

When you send Jeani a video of yourself moving and ask for feedback, Jeani analyses it to coach you. This is what happens to it:

• Processing. We copy the video from our messaging provider to our analysis service, remove its audio, and run computer-vision models on it to find you, the key moments of the movement and anything you are holding, and to build a 3D model of your body's position. The service runs on GPU infrastructure provided by Modal, under our control.
• Coaching. Pictures from the analysis (frames of the video and renders of the 3D model) and the measurements are sent to our AI provider (currently OpenAI) so it can write your feedback, under business terms that prohibit training on our customers' data.
• In the app. A copy of the video without its sound (at a reduced resolution), a still from it, the 3D model of your body through the whole movement, the measurements of every rep and the notes Jeani writes about it are kept with your account, so you can replay the video and the 3D model in the app.
• No identification. The 3D model describes your body's position and movement. We do not use it, or the video, to recognise or identify anyone, and we do not create face templates.
• Improving Jeani. We may use the videos you send, and the movement data derived from them, to develop and improve Jeani's own movement models, for example to find the key moments of a movement more accurately. You can ask us not to use yours this way at any time.
• Other people. If other people appear in your video, they are processed along with you, and Jeani may briefly analyse them while working out which person is you. Please only send videos you have the right to share.
• Retention. The original video is deleted from our analysis service automatically 30 days after you send it. The copy kept for replay, the 3D model, the measurements and Jeani's notes stay with your account until you ask us to delete them, and are deleted immediately when you delete your account. The feedback Jeani wrote stays in your conversation. The copy held by our messaging provider follows its own retention.

Sending a video and asking for feedback is how you consent to this processing. You can ask us to delete a video, and everything kept from it, at any time.

11. All-day capture (opt-in)

All-day capture is off unless you turn it on. Jeani asks you separately, and you can say no and keep using everything else. If you turn it on:

• What it collects. The full signal from your Apple Watch's motion sensor (accelerometer) through the day and night, not only during workouts; and every heart-rate reading in Apple Health, as far back as your history goes, with the app or device that recorded each one.
• Why. To improve the insights Jeani gives you, and to develop and improve Jeani's own models of movement, recovery and health. It is never used for advertising and never sold.
• Where it goes. It is stored in our own systems, with your account. It is not shared with our AI providers, with TypeSafe or with any other third party.
• Turning it off. You can turn it off at any time by writing to privacy@jeanihealth.com. Collection stops the next time the app opens, and your watch discards anything it has not yet sent. Ask us and we will delete what was already collected; it is also deleted when you delete your account.

12. Organization/Team spaces

When you join an Organization, designated admins/coaches may view data only within the scope shown to you during the join flow (e.g., weekly movement scores, symptom check-ins, trends). You can leave at any time; data shared while a member may remain available to that Organization per its policies.

13. International transfers

We are based in the United States and may process your data in the US and other countries. We use appropriate legal transfer mechanisms where required by applicable law.

14. Retention

We retain personal data as long as necessary to provide the Service and for legitimate business purposes (security, compliance), then delete or de-identify it. Videos you send for a form check are deleted from our analysis service after 30 days; the copy kept for replay in the app and its measurements stay with your account until you ask us to delete them (section 10). All-day capture data is kept as section 11 describes. You may request deletion at any time, subject to legal holds and exemptions.

15. Your choices & rights

Depending on your location, you may have rights to:

• Access, correct, or delete your personal data.
• Export or port your data to another service.
• Object to or restrict certain processing.
• Withdraw consent at any time (without affecting prior lawful processing).

Use in-app tools or contact us at privacy@jeanihealth.com to exercise these rights. You may also manage Organization connections, research invitations, and marketing preferences in Settings.

16. Cookies / SDKs / analytics

We may use app SDKs and limited cookies on web properties for authentication, analytics, and performance. We do not currently recognize Do Not Track (DNT) signals. Manage permissions in your OS/app settings. Third-party tools are used under confidentiality and are not permitted to use your data for their own advertising.

17. Third parties & links

Third-party services you connect are governed by their own terms and privacy policies. Review them before connecting. Jeani is not responsible for third-party data practices.

18. Changes to this Policy

We may update this Policy from time to time. Material changes will be notified in-app or by email. Continued use of the Service after the effective date constitutes acceptance of the updated Policy.

19. Contact

Jeani Inc.
1702 Woodburn Rd, Durham, NC 27705
privacy@jeanihealth.com
857-204-7608