Privacy Policy

Effective Date: May 19, 2026 Last Updated: May 19, 2026

This Privacy Policy explains how Joji Inc. (“Joji,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use the Joji website, mobile application, and related services (collectively, the “Services”).

Joji is incorporated in Delaware and provides a consumer health technology service designed to help individuals and families better understand, organize, and follow through on health information, including discharge instructions, medical records, care notes, appointments, reminders, family care tasks, and other information users choose to provide.

This Privacy Policy is intended to describe our practices in plain language. It does not replace our Terms of Service or any additional consent we may ask you to review for specific features.

1. Important Summary

Here are the most important things to know:

  • You control what you add to Joji. Joji receives health information when you choose to enter it, upload it, import it, photograph it, scan it, or share it with the Services.
  • Joji is not a medical provider. Joji does not provide medical diagnosis, treatment, prescriptions, emergency services, or professional medical advice.
  • Joji is not a HIPAA covered entity. Joji is a consumer-controlled health app. We are not a healthcare provider, health plan, healthcare clearinghouse, or HIPAA business associate of a provider or clinic at launch.
  • We use HIPAA-grade privacy and security practices. Even when HIPAA does not apply, we treat health information as sensitive and protect it using administrative, technical, and organizational safeguards.
  • Your data is encrypted. We encrypt communications with Joji and data stored by the app.
  • We do not sell your personal data or personal health information. We do not sell personal data to advertisers, data brokers, employers, insurers, or other third parties.
  • We do not share identifiable health information without your direction or a reason described in this Policy. This may include sharing with service providers that help us operate Joji, with people you authorize, or when required by law.
  • Joji limits access to identifiable Health Information. Joji personnel may access identifiable Health Information only when reasonably necessary to provide support, debug or maintain the Services, prevent abuse, conduct safety reviews, investigate security issues, comply with law, or operate the Services.
  • Identifiable Health Information is not used for research, product improvement, AI training, advocacy organization partnerships, employer benefit programs, or clinic partnerships. If Joji uses data for those purposes, we use de-identified data.
  • AI output may be incomplete or incorrect. Joji may use artificial intelligence to summarize, organize, explain, or suggest next steps based on information you provide. AI-generated information should be reviewed carefully and is not a substitute for professional medical advice.
  • You may request access, correction, export, or deletion of your information. Some requests may require identity verification and may be subject to legal or technical limits.

2. Who This Policy Applies To

This Policy applies to:

  • people who create a Joji account;
  • adults age 18 or older who create or use a Joji account;
  • adults age 18 or older who create or manage a caregiver instance or profile for a minor for whom they are a parent or legal guardian;
  • adults age 18 or older who link accounts with another adult for caregiver or family support;
  • people invited to view or help manage information in Joji, such as family members or caregivers;
  • visitors to our website; and
  • people who contact us for support, feedback, or product updates.

If you use Joji on behalf of another person, you are responsible for making sure you have the legal authority or appropriate permission to provide, view, or manage that person’s information.

3. Joji Is Not a Healthcare Provider

Joji is a technology service. Joji does not provide medical care, diagnosis, treatment, prescriptions, emergency services, or professional medical advice.

Information provided by Joji, including summaries, reminders, explanations, suggested questions, or next steps, is for informational and organizational purposes only. You should not rely on Joji as your only source of medical information. Always consult a qualified healthcare professional regarding medical questions, symptoms, treatment decisions, medication decisions, or emergencies.

If you think you may have a medical emergency, call 911 or seek emergency medical help immediately.

4. HIPAA and Consumer Health Information

Many healthcare providers, health plans, and healthcare clearinghouses are subject to the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). Joji is generally intended to operate as a consumer-controlled health application where users choose what information to add, import, photograph, scan, or share.

Joji is not a HIPAA covered entity. Unless we separately state otherwise in writing, Joji is not acting as your healthcare provider, health plan, healthcare clearinghouse, or HIPAA business associate of a healthcare provider, clinic, or health plan.

This means that health information you provide to Joji may not be protected by HIPAA in the same way it would be when held by your doctor, clinic, hospital, or health plan. Even so, Joji treats health information as sensitive and uses HIPAA-grade privacy and security practices, including encryption of communications and data stored by the app.

Joji may also be subject to state consumer health privacy laws, consumer protection laws, data breach notification laws, and other privacy laws where applicable. We will comply with applicable legal requirements.

5. Information We Collect

We collect information in several ways.

A. Account Information

When you create or use a Joji account, we may collect information such as:

  • name;
  • email address;
  • phone number;
  • password or authentication information;
  • date of birth or age range;
  • account preferences;
  • family, caregiver, or legal guardian relationships;
  • linked account permissions;
  • payment or subscription status, if applicable; and
  • communications with us.

B. Health Information You Provide

Joji may collect health-related information that you choose to provide, upload, import, photograph, scan, type, speak, or otherwise add to the Services. This may include:

  • discharge instructions;
  • after-visit summaries;
  • medical records imported from EHRs, patient portals, health apps, or other sources;
  • visit notes;
  • medication lists;
  • diagnoses, symptoms, conditions, allergies, lab results, or care instructions;
  • photos or files you upload;
  • questions you ask Joji;
  • answers, notes, summaries, reminders, or care plans created in Joji;
  • information about appointments, follow-up tasks, or care goals;
  • information about a minor, family member, dependent, or adult linked account if you add them to your account; and
  • any other health or care-related information you choose to provide.

We refer to this information in this Policy as “Health Information.”

C. EHR Imports and Connected Services

Joji may allow you to import health records from EHR systems, patient portals, health record sources, or other services. Joji may also allow you to connect external services, such as a calendar, wearable device, cloud storage account, or other service.

We collect information from a connected service only after you authorize the connection. The information available from a connected service depends on that service and the permissions you grant. You may be able to disconnect a connected service through Joji, the third-party service, or your device settings.

Joji is not responsible for the accuracy, completeness, or privacy practices of third-party services or record sources.

D. Discharge Instructions, Photos, and Uploaded Files

Joji may allow you to photograph, scan, upload, or otherwise submit discharge instructions, after-visit summaries, care instructions, and related documents. Joji may use these materials to generate summaries, reminders, care tasks, suggested questions, or other organizational support.

You are responsible for making sure you have the right to upload or share any information you provide, including information about another person.

E. Family, Guardian, Caregiver, and Linked Account Information

Joji is intended for use only by adults age 18 or older. Joji does not permit minors to create or independently use their own accounts. Adult parents or legal guardians may create and maintain caregiver instances or profiles for minors. Joji may also support linked accounts between adults for caregiver or family support. If you invite someone to view, manage, or help with information in Joji, we may collect information about that person, such as name, email address, phone number, relationship to you, permissions, and activity within the Services.

If someone invites you to access information in Joji, we may collect similar information from you to create or manage your access.

You are responsible for managing access permissions and removing access when it is no longer appropriate.

F. Usage, Device, and Technical Information

We may automatically collect information about how you access and use the Services, including:

  • device type;
  • operating system;
  • browser type;
  • IP address;
  • app version;
  • pages or screens viewed;
  • features used;
  • crash logs;
  • diagnostic data;
  • approximate location based on IP address; and
  • dates and times of use.

We use this information to operate, secure, debug, improve, and understand the Services.

G. Cookies and Similar Technologies

Our website may use cookies, pixels, local storage, or similar technologies to keep the site working, remember preferences, understand usage, improve the Services, and communicate with users.

We do not use cookies to collect the contents of your Health Information for advertising purposes. If we use analytics or marketing tools on our website, we will use reasonable efforts to avoid sending identifiable Health Information to those tools.

6. How We Use Information

We use information to:

  • create and manage your account;
  • provide, operate, maintain, and improve Joji;
  • import, process, organize, summarize, and display health information you provide;
  • generate reminders, care tasks, summaries, suggested questions, or follow-up items;
  • support family, guardian, caregiver, and linked account features that you choose to use;
  • process discharge instructions, after-visit summaries, uploaded files, and EHR imports;
  • support AI-powered explanation, summarization, and organization features;
  • respond to support requests and feedback;
  • send service-related messages, such as account, security, billing, or policy updates;
  • send optional product updates or marketing communications, where permitted;
  • detect, prevent, and respond to fraud, misuse, security incidents, or technical problems;
  • comply with legal obligations; and
  • create de-identified or aggregated information that does not reasonably identify you.

7. Use of Artificial Intelligence

Joji may use artificial intelligence and machine learning tools to provide features such as:

  • summarizing medical records or discharge instructions;
  • translating complex medical language into simpler language;
  • suggesting questions to ask a clinician;
  • identifying follow-up tasks or reminders;
  • helping organize health history;
  • helping users understand information they have added to Joji; and
  • supporting caregiver and family coordination.

AI-generated information may be incomplete, outdated, inaccurate, or inappropriate for your situation. You are responsible for reviewing AI-generated information and confirming important medical information with a qualified healthcare professional.

Joji does not use identifiable Health Information for research, product improvement, AI training, advocacy organization partnerships, employer benefit programs, or clinic partnerships. If Joji uses data for those purposes, we use de-identified information.

Joji personnel may access identifiable Health Information, including information that may be considered protected health information or “PHI” when held by a HIPAA-covered entity, only when reasonably necessary to provide support, debug or maintain the Services, prevent abuse, conduct safety reviews, investigate security issues, comply with law, or operate the Services.

8. De-identified and Aggregated Information

Joji may create de-identified or aggregated information from information collected through the Services. De-identified or aggregated information is information that does not reasonably identify you.

Joji may use de-identified or aggregated information for purposes such as:

  • improving the Services;
  • understanding product performance;
  • improving AI features;
  • conducting research and analytics;
  • supporting advocacy organization partnerships;
  • supporting employer benefit or clinic partnership programs;
  • explaining general usage trends; and
  • developing new features.

Joji does not use identifiable Health Information for these purposes.

We do not attempt to re-identify de-identified information except as permitted by law, such as to test whether de-identification is effective.

9. How We Share Information

We may share information in the following ways.

A. With People You Authorize

You may choose to share information with family members, caregivers, clinicians, advocates, or other people. You control whom you invite and what access they receive, subject to the sharing tools available in Joji.

When you share information outside Joji, that person or organization’s own privacy practices may apply.

B. With Service Providers

We may share information with service providers that help us operate Joji. These may include companies that provide hosting, cloud infrastructure, security, analytics, customer support, communications, payment processing, EHR connection services, AI processing, and other technical or operational support.

We require service providers that process Health Information to protect that information through written agreements, including business associate agreements or equivalent data protection agreements where appropriate.

Service providers may access information only as needed to perform services for us and are not permitted to sell your personal information or use your Health Information for their own marketing purposes.

C. With Healthcare Providers or Clinics at Your Direction

If you ask Joji to send, export, or share information with a healthcare provider, clinic, care team, or other third party, we may share the information you direct us to share.

Clinics may recommend Joji to patients, but unless we specifically say otherwise, clinics do not control your Joji account and do not receive your information from Joji unless you choose to share it.

D. With Legal Authorities or When Required by Law

We may disclose information if we believe it is reasonably necessary to:

  • comply with applicable law, regulation, subpoena, court order, or legal process;
  • respond to lawful requests from government or law enforcement authorities;
  • protect the rights, safety, and security of users, Joji, or others;
  • investigate fraud, misuse, or security issues; or
  • enforce our Terms of Service.

Where legally permitted and practical, we may attempt to notify you before disclosing Health Information in response to legal process.

E. Business Transfers

If Joji is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, information may be transferred as part of that transaction. If this occurs, we will seek to require the recipient to honor this Policy or provide notice of material changes.

F. De-identified or Aggregated Information

Joji may share de-identified or aggregated information that does not reasonably identify you for research, analytics, product improvement, AI improvement, advocacy organization partnerships, employer benefit programs, clinic partnerships, or other lawful business purposes.

Joji does not share identifiable Health Information for those purposes.

10. What We Do Not Do

Unless this Policy changes or you give explicit consent, Joji does not:

  • sell your personal data;
  • sell your identifiable Health Information;
  • give your personal data or identifiable Health Information to advertisers, data brokers, employers, insurers, or other third parties for their own marketing or business purposes;
  • use your identifiable Health Information for research, product improvement, AI training, advocacy organization partnerships, employer benefit programs, or clinic partnerships, except that limited personnel may access identifiable Health Information when reasonably necessary for support, debugging, abuse prevention, safety reviews, security investigations, legal compliance, or operation of the Services;
  • share your identifiable Health Information with your employer;
  • share your identifiable Health Information with an insurance company for underwriting, eligibility, or pricing decisions;
  • allow clinics to access your account simply because they recommended Joji; or
  • use your identifiable Health Information to make automated decisions with legal or similarly significant effects about you.

11. Your Choices and Rights

Depending on where you live and how you use Joji, you may have rights to:

  • access information we maintain about you;
  • correct or update certain information;
  • export or download your information;
  • delete your account or request deletion of certain information;
  • withdraw consent for certain uses or sharing;
  • opt out of marketing communications;
  • manage cookies or tracking technologies where available;
  • limit or revoke access you have granted to family members, caregivers, linked accounts, or connected services; and
  • ask whether your information has been shared and with whom, where required by law.

To make a request, contact us at info@jojihealth.com or use the controls available in the app.

We may need to verify your identity before completing certain requests. Some information may be retained where necessary to comply with law, prevent fraud or abuse, resolve disputes, enforce agreements, maintain security, or preserve de-identified or aggregated records.

12. Account Deletion and Data Retention

We keep personal information for as long as reasonably necessary to provide the Services, maintain your account, comply with law, resolve disputes, enforce agreements, and support legitimate business purposes.

If you close your account or request deletion, we will delete or de-identify personal information within a reasonable period, unless we are required or permitted to retain it. Before deleting your account, we may give you the opportunity to export your information.

Some information may remain in backups, logs, security records, legal records, or de-identified/aggregated datasets for a limited period or as permitted by law.

13. Security

Joji uses administrative, technical, and organizational safeguards intended to protect personal information and Health Information. These safeguards include:

  • encryption of data in transit;
  • encryption of data stored by the app;
  • access controls designed to limit access to authorized personnel and systems;
  • authentication and account security controls;
  • logging, monitoring, and audit practices;
  • vendor review and written vendor security obligations;
  • backup and recovery practices;
  • security testing and vulnerability management appropriate for the stage of the company; and
  • incident response practices designed to identify, investigate, and respond to potential security incidents.

No system is perfectly secure. We cannot guarantee that unauthorized access, loss, misuse, or disclosure will never occur. If we learn of a security incident that requires notice, we will notify affected users and regulators as required by law.

14. Minors, Family Members, and Caregiver Accounts

Joji is intended for use only by adults age 18 or older. Minors may not create or independently use their own Joji accounts.

An adult parent or legal guardian may create and maintain a caregiver instance or profile for a minor. Adults may also link accounts with other adults to support caregiver functionality, family coordination, or shared care management.

If you add, manage, or access information about another person, including a minor, you are responsible for making sure you have the legal authority or appropriate permission to do so. You are also responsible for keeping sharing permissions up to date.

If we learn that a minor has created or independently used a Joji account without appropriate parent or legal guardian involvement, we will take reasonable steps to delete or restrict the account.

15. Communications

We may send you service-related communications, including account, security, billing, legal, and product notices. These are necessary for the Services and you may not be able to opt out while maintaining an account.

We may also send optional newsletters, product updates, or promotional communications. You may opt out of optional marketing communications by using the unsubscribe link, adjusting settings, or contacting us.

If we offer text messaging, you may opt in to receive texts. Message and data rates may apply. You may opt out as instructed in the text message or by contacting us.

16. Third-Party Services and Links

Joji may contain links to third-party websites, apps, services, portals, or resources. Joji may also allow you to connect third-party services.

We are not responsible for the privacy practices, security, content, or accuracy of third-party services. When you use third-party services, their own terms and privacy policies apply.

17. Payment Information

If Joji offers paid subscriptions or purchases, payment information may be processed by third-party payment processors or app store providers. Joji may receive limited information about your purchase, such as subscription status, transaction identifiers, and billing-related metadata, but we do not receive full payment card details unless we specifically state otherwise.

18. State-Specific and International Privacy Rights

Some privacy laws may provide additional rights depending on where you live, including rights related to consumer health data, access, deletion, correction, portability, consent, and opt-out choices.

Joji is based in the United States and is intended primarily for use in the United States. If you access the Services from outside the United States, you understand that your information may be processed in the United States, where privacy laws may differ from those in your location.

We will respond to privacy requests as required by applicable law.

19. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice as appropriate, such as by updating the “Last Updated” date, posting a notice in the Services, or sending you a message.

Your continued use of Joji after an updated Policy becomes effective means you accept the updated Policy, to the extent permitted by law.

20. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or Joji’s privacy practices, contact us at:

Joji Inc.
495 Henry St #1059
Brooklyn, NY 11231
Email: hello@jojihealth.com