Privacy Policy

This policy explains how Joji Inc. (“Joji,” “we,” or “us”) collects, uses, shares, and protects information when you use the Joji app, website, and related services.

Joji helps you and your family understand, organize, and follow through on health information: discharge instructions, medical records, visit notes, recovery plans, appointments, reminders, and the care tasks that pile up between visits.

We have written this in plain language, because a privacy policy you cannot read is not much of a promise. It does not replace our Terms of Service or any separate consent we ask you to review for a specific feature.

1. Summary

• You decide what goes into Joji. We receive health information when you choose to enter it, upload it, import it, photograph it, record it, or share it.
• We use HIPAA-aligned safeguards designed for sensitive health information. These include encryption in transit and at rest, access controls, logging, workforce privacy requirements, and contractual protections for service providers that handle Health Information. Section 4 explains more.
• We never sell your health information. This includes your records, documents, recordings, transcripts or any other personal health information you add.
• Your information is encrypted. In transit and at rest.
• We do not use your health information for advertising. No advertising SDKs in the app or advertising pixels carrying health information.
• We do not train AI models on your health information, and we require our AI vendors not to either.
• We look at patterns, not at people. We measure how the product is used so we can make it better. That analysis happens across groups of users and not by reading individual health records.
• We may tell you about other things Joji offers. That decision happens inside Joji. We do not hand your information to anyone else so they can market to you.
• Joji is not a doctor. Summaries, reminders, and suggestions are here to help you stay organized. Anything that matters medically belongs with your care team.
• If you connect your calendar, we use it only to show your appointments. Google Calendar data is never sold, licensed or used for any other purpose. Section 21 explains this in full.
• You can take your information with you, or delete it. Sections 15 and 16 explain how.

2. Who This Policy Applies To

This policy applies to:

• people who create a Joji account;
• adults 18 or older who manage a profile for a child they parent or are the legal guardian of;
• adults who link accounts with another adult for caregiver or family support;
• people invited into a care circle to view or help manage information in Joji;
• visitors to our website; and
• people who contact us for support, feedback, or product updates.

If you use Joji on behalf of someone else, you are responsible for having their permission or the legal authority to do so.

3. Joji Is Not a Healthcare Provider

Joji is a technology service. We do not provide medical care, diagnosis, treatment, prescriptions, emergency services, or medical advice.

Everything Joji produces, including summaries, reminders, explanations, suggested questions, and recovery tasks, is there to help you stay organized and prepared. It is not a second opinion. Bring medical questions to a qualified healthcare professional, and do not rely on Joji as your only source of health information.

If you think you may have a medical emergency, call 911 or seek emergency help immediately.

4. How We Protect Your Information

We use privacy and security safeguards designed for sensitive health information.

These include:

• technical and organizational safeguards designed to protect your information;
• controls intended to limit access to authorized personnel;
• privacy and security requirements for service providers that handle information on our behalf; and
• ongoing security practices designed to protect our systems and data.

A note on HIPAA. Joji is a consumer health app and HIPAA does not apply to us in the same way it applies to your doctor’s office. We nevertheless use HIPAA-aligned privacy and security practices designed to protect sensitive health information.

We are also subject to applicable consumer health privacy, consumer protection, and data breach notification laws. Section 23 describes additional rights that may apply to you.

5. Information We Collect

A. Account information

Your name, email address, phone number, sign-in credentials, date of birth or age range, preferences, family and caregiver relationships, care circle permissions, purchase status, and your messages to us.

B. Health information you provide

Whatever you choose to add: discharge instructions, after-visit summaries, imported medical records, visit notes, medications, diagnoses, symptoms, conditions, allergies, lab results, care instructions, vitals, photos and files, questions you ask Joji, the summaries and care plans Joji creates for you, appointments and follow-up tasks, and information about a family member whose profile you manage. We call all of this your “Health Information.”

C. Connected health records

Joji can import records from electronic health record systems and patient portals. We use a health record aggregation service to make those connections. We only pull records after you authorize a connection, and only what that source and your permissions allow. You can disconnect a source at any time, through Joji or through the source itself.

We are not responsible for the accuracy or completeness of records a health system sends us.

D. Documents, photos, and scans

You can photograph, scan, or upload discharge paperwork, after-visit summaries, insurance documents, and similar materials. Joji reads them to build summaries, reminders, tasks, and suggested questions. You are responsible for having the right to upload anything you add, including information about another person.

E. Visit recordings and transcripts

If you use Joji’s recording feature, audio from the visit is temporarily processed to create a transcript. We receive and store the resulting transcript, summary, medication changes, follow-up items, and suggested questions. We do not permanently store the audio. Section 7 explains how recordings are handled.

F. Care circle and family profiles

If you invite someone into your care circle, or manage a profile for a family member, we collect that person’s name, email address, phone number, relationship to you, the permissions you grant, and their activity in Joji. If someone invites you, we collect the same from you. You are responsible for keeping permissions current and removing access when it no longer fits.

G. Recovery programs

If you use a recovery module or another structured program, we collect your progress through it: tasks completed, check-ins you submit, milestones reached, and whether you finished.

H. Usage and device information

Collected automatically: device type, operating system, browser, IP address, app version, screens viewed, features used, crash logs, diagnostic data, approximate location from your IP address, and dates and times of use.

I. Cookies

Our website uses cookies and similar technologies to keep the site working, remember your preferences, understand usage, and measure the effectiveness of our marketing and advertising. We do not use cookies or advertising pixels to collect Health Information, and we do not place advertising pixels on pages where Health Information appears.

J. Google Calendar

If you choose to connect your Google Calendar, Joji reads your calendar events so that your upcoming appointments appear alongside the rest of your health information and so we can remind you about them.

We request read access to your Google Calendar events and nothing else. We do not request access to Gmail, Google Drive, contacts, photos, or any other Google service. You can disconnect your calendar at any time from inside Joji, or by removing Joji’s access in your Google Account permissions page. Section 21 explains how this data is handled.

6. How We Use Information

We use information to:

• provide, operate, maintain, and improve Joji;
• personalize and support the features and services you choose to use;
• process, organize, and present health information and other content you provide;
• provide AI-assisted, transcription, reminder, scheduling, caregiver, and care-management features;
• communicate with you about your account, the service, support, security, billing, and product updates;
• understand how Joji is used and measure product performance;
• protect Joji, our users, and our systems from misuse, fraud, security threats, and technical problems;
• comply with legal and regulatory obligations; and
• create de-identified or aggregated information as described elsewhere in this policy.

7. Visit Recording

Joji can record a medical visit and turn it into a transcript and a summary you can review afterward. Recording is always initiated by a user action.

A. Let people know you are recording

Recording laws vary by state, and some states require everyone in the conversation to provide recording consent. Joji reminds you before recording starts, but you are responsible for getting permission.

Ask your care team before recording. If anyone says no, do not record.

B. What happens to your recording

We do not permanently store your audio.

When you use Joji’s recording feature, your audio is sent to AWS to create a transcript. AWS processes this information on Joji’s behalf under a Business Associate Agreement (BAA) and our data-protection requirements.

Joji uses automated tools to identify and remove personal identifiers, such as names, from visit transcripts before they are used for additional AI processing.

Joji keeps the resulting transcript and summary in your account. You can delete them at any time from inside the app.

C. Transcripts are not perfect

Speech recognition misses words. Summaries leave things out. Think of a Joji recording the way you would think of notes a friend took for you: genuinely useful for remembering what was said, but not a replacement for what your clinician wrote down. Check anything important with your care team.

D. What we never do with recordings

• We do not sell recordings, transcripts, or summaries.
• We do not use them to train AI models, and we do not let our vendors use them to train theirs.
• We do not share them with your clinic, your employer, or your insurer unless you ask us to.

8. Artificial Intelligence

Joji uses artificial intelligence to summarize medical records and visit information, explain health information, organize your health history, identify follow-up tasks and reminders, answer questions, and provide other features within the app.

A. Information sent for AI processing

When you use an AI-powered feature, Joji may send personal information and Health Information needed to provide that feature to third-party processors. This may include:

• medical records and information contained in those records;
• documents and discharge instructions;
• visit transcripts;
• medications, conditions, allergies, lab results, appointments, and recovery information;
• questions and information you enter into Joji; and
• other relevant Health Information stored in your Joji account.

We limit the information sent to what is reasonably necessary to provide the feature you are using.

B. Third-party processors

Joji uses OpenAI to provide AI-powered features and AWS for cloud, transcription, and related processing services.

These companies process information on Joji’s behalf and may use it only to provide services to Joji.

C. How third-party processors protect your information

Joji has Business Associate Agreements (BAAs) or equivalent data-protection agreements with third-party processors that handle Health Information on our behalf.

We require these providers to protect your information with the same or equivalent privacy and security protections described in this Privacy Policy. They may use your information only to provide services to Joji and may not sell it, use it for advertising or marketing, or use your Health Information to train their general-purpose AI models.

For AI and transcription processing, Joji also uses zero-data-retention protections. Information submitted for this processing is not retained by the processor after the processing covered by those protections is complete.

AI can make mistakes. It may miss something, use outdated information, or produce an answer or summary that does not fit your situation. Review important information and confirm medical questions with a qualified healthcare professional.

D. Your permission

Before any Health Information is sent to OpenAI or AWS for AI or transcription processing, Joji asks for your permission in the app. The permission screen names these providers and describes the information that is sent. You can withdraw this permission at any time in Settings. Joji’s core features depend on this processing, so Joji cannot work without it. If you withdraw permission, we stop sending your Health Information to these providers for AI and transcription processing, and your account is closed and deleted as described in Section 16. You can restore your account within 30 days by contacting us and allowing this processing again.

9. De-identified and Aggregated Information

We may create de-identified or aggregated information from information collected through Joji. This information is processed so that it is not reasonably linked to you.

We may use de-identified or aggregated information for purposes such as improving Joji, understanding how the service is used, research, analytics, quality measurement, and developing new products or features.

We do not attempt to re-identify information that has been de-identified, except where permitted by law for purposes such as testing or validating our privacy methods.

Google user data, including Google Calendar data, is handled separately as described in Section 21 and is not included in the uses described in this section.

10. Personalization and Promotions

Joji may use information about your account and how you use the app to personalize your experience, including which features, programs, or Joji services we show you.

We do not sell your personal or Health Information or share it with third parties for their own advertising or marketing.

We may send you optional updates or promotional messages about Joji. You can opt out of those messages at any time. This does not affect important account, security, or service-related communications.

11. How We Share Information

A. With people you choose

You can share information with family members, caregivers, clinicians, or anyone else through Joji’s sharing tools. You decide who you invite and what they can see. Once information leaves Joji, the recipient’s own privacy practices apply.

B. With the vendors that help us run Joji

We share information with third-party service providers that help operate Joji, including AWS, OpenAI, and providers of health record connections, security, analytics, customer support, communications, and payment processing.

Every provider that handles Health Information for us is subject to a written Business Associate Agreement (BAA) or equivalent data-protection agreement.

We require these providers to give personal information and Health Information the same or equivalent privacy and security protection described in this Privacy Policy. They may not sell your Health Information, use it for advertising or marketing, or use it to train their general-purpose AI models.

For AI and transcription processing, we use zero-data-retention protections so information submitted for that processing is not retained by the processor after processing is complete.

C. Clinics

A clinic may recommend Joji to you, but that does not give the clinic access to your Joji account or Health Information.

Your information is not automatically shared with the clinic. If you choose to share information with your care team, you control what is shared and when.

D. When you ask us to

If you ask us to send or export information to a clinician, a care team, or anyone else, we send what you tell us to send.

E. When required by law

We may disclose information when required by law or legal process, or when reasonably necessary to protect Joji, our users, or others.

When allowed by law, we may notify you before disclosing your Health Information.

F. If Joji changes ownership

If Joji is acquired, merged, or sold, your information may transfer as part of that transaction. Any new owner would remain subject to applicable privacy laws and the commitments described in this policy.

G. De-identified information

As described in Section 9.

12. How We Limit Use of Your Information

Unless you specifically ask us to, Joji does not:

• sell your personal information or Health Information;
• use or share your Health Information for advertising, marketing, underwriting, or other unrelated commercial purposes;
• allow third parties to use your Health Information for their own purposes, including training general-purpose AI models;
• provide clinics, employers, insurers, or other organizations access to your account or Health Information without your direction; or
• use your Health Information to make decisions about you that have legal or similarly significant effects.

Google user data is subject to the additional limitations described in Section 21.

13. How We Measure and Improve Joji

We use analytics to understand how Joji is used, identify problems, and improve the product. This may include information about feature use, app performance, device type, and other technical activity.

We generally review this information in aggregate rather than looking at individual users.

Our team does not routinely read your health records. Staff may access identifiable Health Information only in the limited circumstances described in Section 14, such as providing support you request, investigating an account-specific technical or security problem, or complying with the law.

14. Who at Joji Can See Your Information

Access is limited by role and it is logged. Joji staff may access identifiable Health Information only when it is reasonably necessary to:

• help you with a support request you made;
• diagnose, debug, or repair a technical problem;
• prevent or investigate abuse, fraud, or a security incident;
• conduct a safety review;
• comply with a legal obligation; or
• maintain the availability, integrity, and security of Joji when access to identifiable Health Information is reasonably necessary.

15. Your Choices and Rights

Depending on where you live, you may have rights over your personal information, including the ability to access, correct, delete, export, or limit certain uses of it. You can also withdraw your permission for third-party AI processing at any time, as described in Section 8D.

You can manage many of these choices in the app or contact us at support@jojihealth.com. We may need to verify your identity before completing a request, and in some cases we may retain information where permitted or required by law.

If you are legally authorized to act on behalf of another person, including a deceased user, you may contact us at support@jojihealth.com to request access to or deletion of their information. We may ask for documentation confirming your authority.

16. Deleting Your Account

You can delete your account any time from inside Joji.

When you delete your account, we deactivate it immediately and your information stops being available in the app. For 30 days, you may contact us at support@jojihealth.com to restore an accidentally deleted account. After that period, we begin permanently deleting the account information from our active systems, subject to limited information we may retain where permitted or required by law.

Copies may remain temporarily in encrypted backups until those backups are overwritten under our normal retention schedule. We do not use backup copies except for security, disaster recovery, or legal purposes.

De-identified or aggregated information created before you deleted is not affected, because it is no longer information about you.

While your account is open, we keep your information for as long as you are using Joji, and as long as we need to in order to meet legal obligations, resolve disputes, and keep the service secure.

17. Security

Section 4 describes the safeguards we use. We take them seriously and we keep improving them.

No system is perfectly secure, and we would rather say that plainly than imply otherwise. If a security incident happens that requires notice, we will tell affected users and regulators as the law requires, including under state breach notification laws and the FTC Health Breach Notification Rule.

18. Adults, Minors, and Family Profiles

Joji is for adults 18 and older. Minors cannot create or independently use their own accounts.

A parent or legal guardian can create and manage a profile for a child. Adults can also link accounts with other adults for caregiver support, family coordination, or shared care management.

If you add, manage, or view information about another person, including a child, you are responsible for having the permission or legal authority to do so, and for keeping sharing permissions current.

If we learn a minor has created or used an account without a parent or guardian involved, we will take reasonable steps to delete or restrict it.

19. Messages From Joji

We send messages about your account, security, billing, legal matters, and important product notices. These are part of the service, so you may not be able to turn them off while you have an account.

We may also send optional newsletters and product updates. You can opt out of those any time using the unsubscribe link, your settings, or by emailing us.

If you opt in to text messages, message and data rates may apply. You can opt out as described in the message or by contacting us.

20. Third-Party Services

Joji may let you connect or open services provided by other companies, such as health portals, calendars, or other external tools.

When you choose to use a third-party service, that company’s own terms and privacy policy apply to the information it collects or handles. Joji is not responsible for the privacy, security, or content of services operated by other companies.

21. Google User Data and Limited Use

Joji offers an optional Google Calendar connection so that your appointments appear alongside your health information. This section explains exactly how that information is handled.

Joji’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In practice, that means:

• We request read access to your Google Calendar events, and nothing else. We do not request access to Gmail, Google Drive, contacts, photos, or any other Google service.
• We use your Google Calendar data only to provide and improve the appointment features you can see in Joji.
• We do not sell, rent, or license Google user data to anyone. We do not transfer it to third parties except where necessary to provide those features, to comply with applicable law, or as part of a merger or acquisition after obtaining your explicit prior consent.
• We do not use Google user data for advertising of any kind, including retargeting, personalized, or interest-based advertising.
• We do not use Google user data to create, train, or improve generalized artificial intelligence or machine learning models.
• We do not allow humans to read your Google user data, except where you have given us specific permission, where it is necessary for security purposes such as investigating a bug or abuse, where required to comply with applicable law, or where the data has been aggregated and is used for internal operations.
• Google user data is not included in the de-identified and aggregated information described in Section 9, and is not used for any purpose described in that section.

You can disconnect your Google Calendar at any time from inside Joji, or by removing Joji’s access in your Google Account permissions page. When you disconnect, we delete the calendar data we hold.

22. Payments

Joji is currently free to use, and no payment is required.

In the future, we may offer paid plans or features, and some features may be limited or unavailable unless you choose to pay for them.

If you purchase a subscription or paid feature through a mobile app store, the store will handle billing, renewals, and cancellations under its own terms.

Payment card details are handled by the app store or our payment processor. Joji does not receive your full card number.

23. State Privacy Rights

State privacy laws may give you additional rights depending on where you live.

A. Washington, Nevada, and Connecticut

Residents of Washington, Nevada, and Connecticut may have additional rights regarding personal and consumer health information. Depending on the law that applies, these may include the right to confirm whether we collect, share, or sell your consumer health data; access, correct, delete, or obtain a copy of it; receive information about third parties with whom it has been shared; withdraw certain consents; stop certain collection or sharing; and appeal a denied request.

Sections 5, 6, and 11 describe the types of information Joji collects, where it comes from, how we use it, and the types of service providers with whom we share it.

We do not sell consumer health information or use geofencing around health care facilities.

B. California

California residents may have additional rights to access, correct, delete, or obtain a copy of personal information and to learn how it is collected, used, and disclosed. We do not sell or share personal information as those terms are defined under California law.

C. Other States

Other state privacy laws may provide similar rights. We honor those rights where they apply.

To exercise a privacy right, email support@jojihealth.com or use the privacy controls available in the app. We may need to verify your identity before completing a request.

24. Using Joji Outside the United States

Joji is based in the United States and built for use here. If you use it from somewhere else, your information will be processed in the United States, where privacy laws may differ from the ones where you live.

25. Changes to This Policy

We may update this policy. For small changes, we will update the “Last Updated” date. For material changes, especially any change that expands how we use or share information we already hold about you, we will tell you in the app or by email before it takes effect, and we will ask for your consent where the law requires it.

Continuing to use Joji after an updated policy takes effect means you accept it, to the extent the law allows.

26. Contact Us

Questions, concerns, or requests about this policy or how we handle your information:

Joji Inc.
495 Henry St #1059, Brooklyn, NY 11231
support@jojihealth.com