Join Waitlist

Privacy Policy

Effective Date: August 25, 2026 Last Updated: August 25, 2026

This policy explains how Joji Inc. (“Joji,” “we,” or “us”) collects, uses, shares, and protects information when you use the Joji app, website, and related services.

Joji helps you and your family understand, organize, and follow through on health information: discharge instructions, medical records, visit notes, recovery plans, appointments, reminders, and the care tasks that pile up between visits.

We have written this in plain language, because a privacy policy you cannot read is not much of a promise. It does not replace our Terms of Service or any separate consent we ask you to review for a specific feature.

1. The Short Version

The details are below. These are the points that matter most.

  • You decide what goes into Joji. We receive health information when you choose to enter it, upload it, import it, photograph it, scan it, record it, or share it.
  • We hold your information to hospital-grade standards. We apply HIPAA-grade practices: encryption in transit and at rest, role-based access controls, workforce confidentiality training, audit logging, and written business associate agreements or equivalent data protection agreements with the cloud infrastructure, storage, and AI processing vendors that handle health information for us. Section 4 has the detail.
  • We never sell your health information. Not your records, not your documents, not your recordings, not your transcripts. Not to advertisers, not to data brokers, not to employers, not to insurers.
  • Your information is encrypted. In transit and at rest.
  • We do not use your health information for advertising. No advertising SDKs in the app, no advertising pixels carrying health information, no health-based audiences shared with ad platforms.
  • We do not train AI models on your health information, and we require our AI vendors not to either.
  • We look at patterns, not at people. We measure how the product is used so we can make it better. That analysis happens across groups of users, not by reading individual health records.
  • We may tell you about other things Joji offers. That decision happens inside Joji. We do not hand your information to anyone else so they can market to you.
  • Joji is not a doctor. Summaries, reminders, and suggestions are here to help you stay organized. Anything that matters medically belongs with your care team.
  • If you connect your calendar, we use it only to show your appointments. Google Calendar data is never sold, licensed, shared, or used to train AI. Section 21 explains this in full.
  • You can take your information with you, or delete it. Sections 15 and 16 explain how.

2. Who This Policy Applies To

This policy applies to:

  • people who create a Joji account;
  • adults 18 or older who manage a profile for a child they parent or are the legal guardian of;
  • adults who link accounts with another adult for caregiver or family support;
  • people invited into a care circle to view or help manage information in Joji;
  • visitors to our website; and
  • people who contact us for support, feedback, or product updates.

If you use Joji on behalf of someone else, you are responsible for having their permission or the legal authority to do so.

3. Joji Is Not a Healthcare Provider

Joji is a technology service. We do not provide medical care, diagnosis, treatment, prescriptions, emergency services, or medical advice.

Everything Joji produces, including summaries, reminders, explanations, suggested questions, and recovery tasks, is there to help you stay organized and prepared. It is not a second opinion. Bring medical questions to a qualified healthcare professional, and do not rely on Joji as your only source of health information.

If you think you may have a medical emergency, call 911 or seek emergency help immediately.

4. How We Protect Your Information

We hold your health information to the standards hospitals are held to, whether or not the law requires us to.

In practice, that means:

  • encryption of your data in transit and at rest;
  • role-based access controls, so only the people who need access have it;
  • confidentiality obligations and training for everyone who works here;
  • audit logging of access to health information;
  • written business associate agreements or equivalent data protection agreements with every vendor that handles health information for us, including our cloud infrastructure, storage, and AI processing vendors;
  • vendor security review, backup and recovery practices, vulnerability management, and documented incident response procedures.

A note on HIPAA. HIPAA is the federal law that governs doctors, hospitals, health plans, and clearinghouses. Joji is none of those. It is an app you download and control, so HIPAA does not apply to us the way it applies to your doctor’s office. We built to its standards anyway, because that is the right way to handle this kind of information.

We are also subject to state consumer health privacy laws, consumer protection laws, breach notification laws, and the FTC Health Breach Notification Rule. Section 23 covers the rights those give you.

5. Information We Collect

A. Account information

Your name, email address, phone number, sign-in credentials, date of birth or age range, preferences, family and caregiver relationships, care circle permissions, purchase status, and your messages to us.

B. Health information you provide

Whatever you choose to add: discharge instructions, after-visit summaries, imported medical records, visit notes, medications, diagnoses, symptoms, conditions, allergies, lab results, care instructions, vitals, photos and files, questions you ask Joji, the summaries and care plans Joji creates for you, appointments and follow-up tasks, and information about a family member whose profile you manage. We call all of this your “Health Information.”

C. Connected health records

Joji can import records from electronic health record systems and patient portals. We use a health record aggregation service to make those connections. We only pull records after you authorize a connection, and only what that source and your permissions allow. You can disconnect a source at any time, through Joji or through the source itself.

We are not responsible for the accuracy or completeness of records a health system sends us.

D. Documents, photos, and scans

You can photograph, scan, or upload discharge paperwork, after-visit summaries, insurance documents, and similar materials. Joji reads them to build summaries, reminders, tasks, and suggested questions. You are responsible for having the right to upload anything you add, including information about another person.

E. Visit recordings and transcripts

If you use Joji’s recording feature, we receive the transcript generated from your recording and the summary, medication changes, follow-up items, and suggested questions built from it. Section 7 explains how recordings are handled.

F. Care circle and family profiles

If you invite someone into your care circle, or manage a profile for a family member, we collect that person’s name, email address, phone number, relationship to you, the permissions you grant, and their activity in Joji. If someone invites you, we collect the same from you. You are responsible for keeping permissions current and removing access when it no longer fits.

G. Recovery programs

If you use a recovery module or another structured program, we collect your progress through it: tasks completed, check-ins you submit, milestones reached, and whether you finished.

H. Usage and device information

Collected automatically: device type, operating system, browser, IP address, app version, screens viewed, features used, crash logs, diagnostic data, approximate location from your IP address, and dates and times of use.

I. Cookies

Our website uses cookies and similar technologies to keep the site working, remember your preferences, and understand usage. We do not use cookies or pixels to collect your Health Information, and we do not place advertising pixels on pages where health information appears.

J. Google Calendar

If you choose to connect your Google Calendar, Joji reads your calendar events so that your upcoming appointments appear alongside the rest of your health information and so we can remind you about them.

We request read access to your Google Calendar events and nothing else. We do not request access to Gmail, Google Drive, contacts, photos, or any other Google service. You can disconnect your calendar at any time from inside Joji, or by removing Joji’s access in your Google Account permissions page. Section 21 explains how this data is handled.

6. How We Use Information

We use information to:

  • create and manage your account;
  • run, secure, maintain, troubleshoot, and improve Joji;
  • import, organize, summarize, and display the health information you add;
  • build reminders, care tasks, summaries, suggested questions, and follow-up items;
  • transcribe and summarize visits when you use that feature;
  • run the care circle, caregiver, and family profile features you choose to use;
  • deliver recovery modules and other care programs;
  • show your upcoming appointments and remind you about them, if you connect your Google Calendar;
  • decide which Joji features, plans, and programs to show you inside the app, as described in Section 10;
  • answer your support requests;
  • send you messages about your account, security, billing, and this policy;
  • send optional product updates where you have allowed it;
  • measure how the product performs, in aggregate, as described in Section 13;
  • detect and respond to fraud, misuse, security incidents, and technical problems;
  • meet our legal obligations; and
  • create de-identified and aggregated information, as described in Section 9.

7. Visit Recording

Joji can record a medical visit and turn it into a transcript and a summary you can actually use afterward. Recording never starts on its own. You start it, and you stop it.

A. Let people know you are recording

Recording rules vary by state. In some states everyone in the conversation needs to agree before you record. Joji reminds you before recording begins, but we are not in the room with you.

So: tell your care team you would like to record, and get their okay first. Most clinicians are used to this and are fine with it, and asking usually takes about five seconds. If someone asks you not to record, please don’t. Some practices have policies about it.

B. What happens to your recording

We do not store your audio.

To turn speech into text, your recording passes through a speech-to-text service we work with under contract. That service operates under a zero data retention policy: your audio is deleted as soon as the transcript comes back. It is not kept, not reviewed, and not used to improve their product or train their models.

Joji keeps the transcript and the summary in your account. You can delete a recording, its transcript, and its summary at any time from inside the app.

C. Transcripts are not perfect

Speech recognition misses words. Summaries leave things out. Think of a Joji recording the way you would think of notes a friend took for you: genuinely useful for remembering what was said, but not a replacement for what your clinician wrote down. Check anything important with your care team.

D. What we never do with recordings

  • We do not sell recordings, transcripts, or summaries.
  • We do not use them to train AI models, and we do not let our vendors use them to train theirs.
  • We do not share them with your clinic, your employer, or your insurer unless you ask us to.
  • We do not listen to your recordings, except in the narrow situations described in Section 14.

8. Artificial Intelligence

Joji uses AI to summarize records and discharge instructions, translate clinical language into plain language, suggest questions worth asking, spot follow-up tasks and reminders, organize your health history, answer questions about what you have added, and help caregivers coordinate.

AI can get things wrong. It may miss something, use outdated information, or produce a summary that does not fit your situation. Review what it gives you, and confirm anything that matters with a qualified healthcare professional.

We do not use your Health Information to train AI models, and we require the AI vendors that process information for us to do the same, in writing. We may use de-identified information to evaluate and improve AI features, and we look at how those features perform, such as whether a summary got edited or dismissed, to make them better.

9. De-identified and Aggregated Information

We create de-identified and aggregated information from data collected through Joji. We de-identify using methods consistent with the HIPAA de-identification standard at 45 C.F.R. § 164.514, either by removing identifiers under the Safe Harbor method or through expert determination.

This section does not apply to information we receive from Google APIs. Google user data, including your Google Calendar data, is excluded from everything described in this section. We do not de-identify it, aggregate it, license it, or sell it. Section 21 explains how we handle it.

Once information has been de-identified, it is no longer information about you, and the limits this policy places on personal information and Health Information no longer apply to it. We may use, analyze, combine, publish, license, or sell de-identified and aggregated information for lawful purposes, including:

  • improving Joji and understanding how it performs;
  • evaluating and improving AI features;
  • research, analytics, and quality measurement;
  • measuring outcomes of recovery programs and reporting those aggregate outcomes to the provider organizations we work with;
  • producing aggregate reports and benchmarks for provider organizations, researchers, public health entities, patient advocacy organizations, and other partners;
  • describing general usage trends publicly; and
  • developing new features and products.

We do not try to re-identify de-identified information, except as the law permits to check that our methods work. We require anyone who receives de-identified information from us to agree not to attempt re-identification.

10. What Joji Shows You

Joji uses what it knows about your account to decide what to surface inside the app: which features to show you, which plan or program might fit, and which of Joji’s own products and services to tell you about. If you are recovering from surgery, Joji may point you toward a recovery module. If you are managing care for a parent, Joji may point you toward caregiver features.

Three limits apply, and they are firm:

  • We do not hand your information to third parties for their marketing. The decision about what to show you happens inside Joji. Nobody else receives your information in order to market to you.
  • We do not use advertising technology. No advertising SDKs in the app, no advertising pixels carrying health information, no health-based audiences built or shared with ad platforms, and no geofencing of health care facilities.
  • We do not sell your information. See Section 12.

You can turn off promotional messages any time. Use the unsubscribe link, your notification settings, or just email us. That will not remove account and security messages, or the functional prompts inside the app that are part of how Joji works.

11. How We Share Information

A. With people you choose

You can share information with family members, caregivers, clinicians, or anyone else through Joji’s sharing tools. You decide who you invite and what they can see. Once information leaves Joji, the recipient’s own privacy practices apply.

B. With the vendors that help us run Joji

We share information with the companies that make Joji work: cloud hosting and infrastructure, storage, security, health record aggregation, AI and speech processing, analytics, customer support, communications, and payment processing.

Every vendor that handles Health Information for us is under a written agreement, either a business associate agreement or an equivalent data protection agreement. They may only use your information to do work for us. They may not sell it, market to you, or use it to train their own models.

C. Clinics

A clinic that recommends Joji to you does not get access to your account or your information. If you want to share something with your care team, you can, but that is your choice to make and it happens through you.

D. When you ask us to

If you ask us to send or export information to a clinician, a care team, or anyone else, we send what you tell us to send.

E. When the law requires it

We may disclose information when we reasonably believe we need to in order to comply with a law, regulation, subpoena, court order, or legal process; to respond to lawful government or law enforcement requests; to protect the rights, safety, and security of our users, Joji, or others; to investigate fraud or a security issue; or to enforce our Terms of Service.

Where the law permits it and it is practical to do so, we will try to tell you before we disclose Health Information in response to legal process.

F. If the company changes hands

If Joji is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may transfer as part of that transaction. We will seek to require the recipient to honor this policy, or to give you notice and a chance to delete your information first.

G. De-identified information

As described in Section 9.

12. What We Never Do

Some promises are worth writing down. Unless you specifically ask us to, Joji does not:

  • sell your personal information;
  • sell, rent, or license your Health Information, medical records, documents, recordings, or transcripts;
  • give your Health Information to advertisers, data brokers, or ad networks;
  • use your Health Information to target ads to you anywhere, or build health-based advertising audiences;
  • give your Health Information to your employer;
  • give your Health Information to an insurance company for underwriting, eligibility, coverage, or pricing;
  • use your Health Information to train AI models, or let our vendors use it to train theirs;
  • give a clinic access to your account because it recommended Joji;
  • use your Health Information to make automated decisions that have legal or similarly significant effects on you; or
  • operate a geofence around a health care facility, or use your location near one to infer anything about your health.
  • sell, license, or transfer Google user data to anyone, or use it for any purpose other than the features you connected it for.

13. How We Measure the Product

We pay attention to how people use Joji so we can make it better. We want to know how many people finish setting up, which screens people give up on, how long a record import takes, and whether a recovery module actually helps someone leave with their next appointment scheduled.

Our analytics tools receive events describing actions and outcomes, such as “record import completed” or “recovery task marked done,” plus technical context like app version and device type. They do not receive the contents of your Health Information.

We analyze all of it in aggregate. Our team looks at patterns across groups of users. We do not make product decisions by reading someone’s health records.

14. Who at Joji Can See Your Information

Access is limited by role and it is logged. Joji staff may access identifiable Health Information only when it is reasonably necessary to:

  • help you with a support request you made;
  • diagnose, debug, or repair a technical problem;
  • prevent or investigate abuse, fraud, or a security incident;
  • conduct a safety review;
  • comply with a legal obligation; or
  • otherwise keep Joji running.

This is the exception, not the routine.

15. Your Choices and Rights

Depending on where you live, you may have the right to:

  • see the information we hold about you;
  • correct or update it;
  • export or download it;
  • delete your account or specific information;
  • withdraw consent for certain uses or sharing;
  • opt out of promotional messages;
  • manage cookies and tracking where available;
  • limit or revoke access you gave to family members, caregivers, care circle members, or connected services;
  • find out whether your information has been shared and with whom, where the law requires it; and
  • appeal if we deny one of these requests.

Use the controls in the app, or email us at hello@jojihealth.com. We may need to verify your identity first. We may keep some information where we are required to, such as to comply with the law, prevent fraud, resolve a dispute, or maintain security.

If a Joji user dies, their personal representative may request a copy of the records in that person’s account. Requests should be made within six months, and we may ask for documentation showing your authority to act on the person’s behalf. Email hello@jojihealth.com to start a request.

16. Deleting Your Account

You can delete your account any time from inside Joji.

When you do, we deactivate it immediately. Your information stops being available in the app right away, and we permanently delete it from our systems 30 days later.

That 30 day window is there on purpose, so that an accidental deletion is fixable. If you change your mind, email us at hello@jojihealth.com within 30 days and we can bring your account back. After 30 days it is permanently gone and cannot be recovered, so it is worth exporting anything you want to keep before you delete.

Two other things to know. Encrypted backups roll over on a fixed schedule, so a copy may sit in backup briefly before it is overwritten. And de-identified or aggregated information created before you deleted is not affected, because it is no longer information about you.

While your account is open, we keep your information for as long as you are using Joji, and as long as we need to in order to meet legal obligations, resolve disputes, and keep the service secure.

17. Security

Section 4 describes the safeguards we use. We take them seriously and we keep improving them.

No system is perfectly secure, and we would rather say that plainly than imply otherwise. If a security incident happens that requires notice, we will tell affected users and regulators as the law requires, including under state breach notification laws and the FTC Health Breach Notification Rule.

18. Adults, Minors, and Family Profiles

Joji is for adults 18 and older. Minors cannot create or independently use their own accounts.

A parent or legal guardian can create and manage a profile for a child. Adults can also link accounts with other adults for caregiver support, family coordination, or shared care management.

If you add, manage, or view information about another person, including a child, you are responsible for having the permission or legal authority to do so, and for keeping sharing permissions current.

If we learn a minor has created or used an account without a parent or guardian involved, we will take reasonable steps to delete or restrict it.

19. Messages From Us

We send messages about your account, security, billing, legal matters, and important product notices. These are part of the service, so you may not be able to turn them off while you have an account.

We may also send optional newsletters and product updates. You can opt out of those any time using the unsubscribe link, your settings, or by emailing us.

If you opt in to text messages, message and data rates may apply. You can opt out as described in the message or by contacting us.

Joji may link to other websites, apps, and portals, and may let you connect third-party services. We are not responsible for their privacy practices, security, content, or accuracy. When you use them, their terms and privacy policies apply.

21. Google User Data and Limited Use

Joji offers an optional Google Calendar connection so that your appointments appear alongside your health information. This section explains exactly how that information is handled.

Joji’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In practice, that means:

  • We request read access to your Google Calendar events, and nothing else. We do not request access to Gmail, Google Drive, contacts, photos, or any other Google service.
  • We use your Google Calendar data only to provide and improve the appointment features you can see in Joji.
  • We do not sell, rent, or license Google user data to anyone. We do not transfer it to third parties except where necessary to provide those features, to comply with applicable law, or as part of a merger or acquisition after obtaining your explicit prior consent.
  • We do not use Google user data for advertising of any kind, including retargeting, personalized, or interest-based advertising.
  • We do not use Google user data to create, train, or improve generalized artificial intelligence or machine learning models.
  • We do not allow humans to read your Google user data, except where you have given us specific permission, where it is necessary for security purposes such as investigating a bug or abuse, where required to comply with applicable law, or where the data has been aggregated and is used for internal operations.
  • Google user data is not included in the de-identified and aggregated information described in Section 9, and is not used for any purpose described in that section.

You can disconnect your Google Calendar at any time from inside Joji, or by removing Joji’s access in your Google Account permissions page. When you disconnect, we delete the calendar data we hold.

22. Payments

Some parts of Joji are free and some require payment. If you buy a subscription or a paid feature through a mobile app store, the store bills you under its own terms, and you manage renewals and cancellations through your app store account.

Payment card details are handled by the app stores or by our payment processor. We receive limited transaction information: what you purchased, its status, the renewal date, and a transaction identifier. We never receive your full card number.

23. State Privacy Rights

State privacy laws may give you additional rights depending on where you live.

A. Consumer health data (Washington, Nevada, Connecticut)

If one of these laws covers you, you have the right to confirm whether we collect, share, or sell your consumer health data; to find out who we have shared it with; to withdraw consent for its collection and sharing; to have it deleted; and to appeal if we deny a request.

We collect consumer health data for the purposes in Section 6, from the sources in Section 5, and share it only as described in Section 11. We do not sell consumer health data as those laws define “sell,” and we do not operate geofences around health care facilities.

B. California

California residents can request access to, correction of, deletion of, and portability of personal information, and can ask about the categories of personal information we collect, why, and who receives it. We do not sell or share personal information as the CCPA defines those terms. We will not treat you differently for exercising these rights.

C. Other states

Other state privacy laws may give you similar rights to access, correct, delete, and port your personal information, to opt out of certain processing, and to appeal a denial. We honor those rights where they apply.

To exercise any of them, email hello@jojihealth.com or use the controls in the app.

24. Using Joji Outside the United States

Joji is based in the United States and built for use here. If you use it from somewhere else, your information will be processed in the United States, where privacy laws may differ from the ones where you live.

25. Changes to This Policy

We may update this policy. For small changes, we will update the “Last Updated” date. For material changes, especially any change that expands how we use or share information we already hold about you, we will tell you in the app or by email before it takes effect, and we will ask for your consent where the law requires it.

Continuing to use Joji after an updated policy takes effect means you accept it, to the extent the law allows.

26. Contact Us

Questions, concerns, or requests about this policy or how we handle your information:

Joji Inc.
495 Henry St #1059
Brooklyn, NY 11231
Email: hello@jojihealth.com