1. Who We Are

Joy Health Technologies LLC ("JOY," "we," "us," "our") operates the JOY mobile application on iOS (Apple App Store) and Android (Google Play Store), as well as the website at joyhealthtechnologies.com. Our principal contact is:

• Email: joy@joyhealthtechnologies.com
• Website: joyhealthtechnologies.com

JOY is not a healthcare provider, health plan, or healthcare clearinghouse and is therefore not a HIPAA-covered entity.

2. Information We Collect

2.1 Information You Provide Directly

• Account credentials: Email address and password, or authentication tokens when you sign in with Apple or Google.
• Profile information: First name and age range (seniors); display name and relationship (caregivers and Memory Companions).
• Uploaded content: Photos, voice recordings (up to 60 seconds), written captions, messages, and occasion labels uploaded by caregivers to the Family Memory Library.
• Voice replies: Short audio recordings (up to 60 seconds) made by senior users during daily sessions.
• Wellness responses: Daily check-in answers covering exercise, sleep, meditation, bowel regularity, dental hygiene, and breathing habits — answered Yes/No or equivalent by senior users.
• Gratitude reflections: Short free-text or voice entries recorded during the Gratitude session step.
• Mood check-ins: Emoji-based mood selections during sessions.
• Support communications: Messages you send to joy@joyhealthtechnologies.com.

2.2 Information We Collect Automatically

• Session activity: Which daily session steps were completed, timestamps, streak counts, brain game scores, breathing round counts, and session completion status.
• Usage analytics: Screen views, button taps, feature usage — tracked via our Firestore analytics events collection (15 event types across 12 screens). This data is pseudonymous (keyed to your user ID while your account is active). It is de-identified and aggregated before any reporting or product improvement analysis.
• Device information: Platform (iOS or Android), OS version, and device model — used for compatibility and bug tracking.
• Push notification tokens: Expo push tokens used to deliver session reminders and caregiver notifications. Stored in Firestore under your user profile.

2.3 Information We Do Not Collect

• We do not collect precise GPS location.
• We do not access your contacts, calendar, or other apps.
• We do not collect financial or payment information — all subscription billing is handled directly by Apple or Google.
• We do not use tracking pixels, third-party advertising SDKs, or behavioral ad targeting.
• We do not sell your data to any third party.

3. How We Use Your Information

4. Data Storage and Security

All JOY data is stored on Google Firebase (Firestore database and Firebase Storage), hosted on Google Cloud infrastructure in the United States. Firebase employs AES-256 encryption at rest and TLS 1.2+ encryption in transit.

Photos and voice recordings are stored in Firebase Storage with access rules that restrict reads and writes to authenticated users within the same family account. We use technical safeguards designed to prevent unauthorized access to your content.

We apply the principle of least privilege — our application code requests only the permissions required to deliver each feature. For a full description of our security practices, see our Security Policy.

5. Artificial Intelligence — Anthropic Claude API

When a caregiver uploads a photo, JOY calls the Anthropic Claude API to generate warm, personalized conversation prompts ("reminiscing prompts") for that memory. The following data is sent to Anthropic's servers:

• The person's name or occasion label
• The relationship (e.g., "Daughter," "Group")
• The photo caption
• The photo category (e.g., "Holidays," "Grandchildren")

Photos are never sent to Anthropic. No images leave JOY's Firebase Storage environment.

The generated prompts are stored in the memory document in Firestore and displayed during the senior's daily session. They are suggestions only — not medical guidance, clinical assessments, or therapeutic recommendations.

Anthropic's handling of this data is governed by their Privacy Policy. We use an Anthropic Claude model via Firebase Cloud Functions; the specific model may change over time as Anthropic releases improvements. We cannot control Anthropic's internal retention of API request logs — see Anthropic's Privacy Policy for details. For more information, see our AI Disclaimer.

6. Third-Party Services

We do not share your personal data with any party not listed in the table above.

7. Family Account Data Sharing

JOY operates on a family account model. When a senior and caregiver link accounts:

• Caregivers can see: session completion status, streak count, mood (emoji), brain game scores, wellness check-in answers, and voice replies recorded by the senior.
• Seniors see: photos, messages, and voice recordings uploaded by caregivers.
• Memory Companions (trusted non-family users) can see session activity and send curated prompts, as configured by the senior or caregiver.

No data is shared outside the linked family group without your explicit consent. For full details see our Family Sharing Policy.

Caregiver authority: Caregivers represent that they have the senior user's permission or legal authority to assist with account setup, upload content on their behalf, and view the shared activity data described above. By linking accounts, caregivers confirm this authorization.

8. Data Retention

We retain your data as long as your account is active. Specific retention schedules:

See our full Data Retention Policy and Data Deletion Policy.

9. Your Rights and Choices

In-App Controls

• Delete individual photos and voice recordings via the Edit Memory screen in the caregiver dashboard
• Toggle push notifications on/off in the app (Profile → Settings)
• Toggle Memory Exercises (quiz) on/off (Profile → Account)
• Control caregiver weekly reminder day and time (Caregiver Settings)

Data Rights — Contact Us

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and all associated data (see Account Deletion Policy)
• Portability / Export: Request a copy of your personal data in JSON format. We will verify your identity via your account email before processing and fulfill the request within 30 days.
• Withdraw consent: Opt out of non-essential data processing

Email us at joy@joyhealthtechnologies.com. We respond within 30 days.

10. Children's Privacy

JOY is designed for adults aged 13 and older. We do not knowingly collect personal information from children under 13. If we learn that a child under 13 has provided personal information, we will delete it promptly. Contact us at joy@joyhealthtechnologies.com if you have a concern.

11. Cookies and Tracking (Web)

The JOY mobile app does not use cookies. Our website (joyhealthtechnologies.com) uses minimal session cookies required for functionality (served by Netlify). We do not use third-party advertising or tracking cookies. See our Cookie Policy for details.

12. HIPAA Notice

JOY is not currently a HIPAA-covered entity or business associate. We are not a healthcare provider, health plan, or healthcare clearinghouse. Information you enter into JOY may be health-related in nature, but it is not handled as HIPAA Protected Health Information (PHI) unless JOY later enters a covered healthcare relationship. If JOY's business model changes to include covered healthcare services, this policy will be updated accordingly and users will be notified. If you need HIPAA-compliant health record management, please contact your healthcare provider's designated systems directly.

13. Platform-Specific Privacy

iOS (Apple App Store)

When you use Sign In with Apple, Apple may share a relay email address rather than your real email. JOY stores and uses whatever email Apple provides. Apple's privacy label for JOY reflects the data categories described in this policy. You may review app privacy details in the App Store listing.

Android (Google Play Store)

When you use Google Sign-In on Android, we receive your Google account name and email. Android users can manage app permissions (microphone, photos) via Android Settings → Apps → JOY → Permissions at any time.

14. Changes to This Policy

We may update this Privacy Policy. We will notify you of material changes by updating the Effective Date at the top of this page and, for significant changes, via email or an in-app notice. Continued use of JOY after changes are posted constitutes acceptance of the revised policy.