Joey privacy policy

01What stays on your phone

• Your notes, exercise settings and app settings are saved on the phone.
• Joey works out sets, estimated 1RM and PRs on the phone. It never sends your notes to an AI service.
• Widgets and the Apple Watch app get today's session, last time and this week's training days. Widgets read them from storage shared on the phone (an App Group). The Watch gets them over its direct connection to the iPhone.
• Rest timer alerts are notifications scheduled on the phone.

02If you make an account

An account is optional. It's for syncing between devices. With an account, we keep the following on our server (Supabase):

• Your email address, or the account identifier and email address from Apple or Google if you sign in with one of them
• Each day's note text, its weight unit (kg or lb) and when it was edited
• Whether Joey Pro is active and when it ends. RevenueCat, which handles purchases, sends this to our server

We use these only to sync your devices, to restore your log on a new phone and to provide Pro features.

03Purchases

The App Store (Apple) or Google Play takes the payment. We never receive your card number or other payment details.

Joey uses RevenueCat to check and restore purchases. RevenueCat receives what you bought, when, the store's transaction details and an ID Joey assigns: your account ID if you have an account, otherwise a random ID for the device.

If you use a campaign code, the store and RevenueCat record which code the purchase used. Our server also stores that code with your Pro status, to count purchases per campaign.

04Crash reports

When Joey crashes or hits an error, it sends Sentry the error, the device model and the OS and app versions.

Joey is set up not to attach your email address or anything else that identifies you. Sync errors send only the kind of error, never note text.

05Usage counts

To improve Joey, it sends PostHog:

• Which screens you open, and when the app opens and closes
• That certain things happened: finishing the intro, logging your first set, importing (how many days), opening the Pro screen, buying, restoring a purchase, opening code redemption, exporting (which format), saving a backup, changing reminder days (how many days), restoring a deleted note, and sync keeping both devices' edits (how many days)
• Device type, OS and app versions, and language

It never sends note text, exercise names, weights or your email address. PostHog tells installs apart by a random ID per device, not by your account.

06Notifications

Joey sends announcements through Expo's push service and Apple's or Google's notification service. If you allow notifications, we store the push token, the device type (iPhone or Android) and its language on our server. With an account, the token is linked to it, and signing out unlinks it. Deleting your account deletes the tokens linked to it.

While notifications are allowed, Joey refreshes the token about once a week when you open it. A token that hasn't been refreshed for 180 days, from a phone that stopped using Joey or turned notifications off, is deleted.

You can turn notifications off in the phone's settings at any time.

07Apple Health and Health Connect

Only if you turn it on, Joey saves each day you log as a strength training workout. It saves the start and end times, and on Android the note's title too (for example, "Upper A").

When you record a workout on Apple Watch, the Watch measures heart rate and active energy and saves them to Health. Joey reads them only to show them on the Watch during the workout. Apart from that, Joey reads nothing from Health or Health Connect.

Joey never sends Health or Health Connect data to our server or to anyone else, and never uses it for ads or marketing. Joey's use of Health Connect follows Google's Health Connect Permissions policy, including its Limited Use requirements.

You can stop saving at any time in Joey's settings and in Health or Health Connect.

08Files

• Backups and exports are files you save or share to a place you choose, such as iCloud Drive, Google Drive or Messages. That service's terms apply to them.
• Files you import (CSV exports from Strong or Hevy, Joey backups, text) are read on the phone.
• Photos of a paper log are read on the phone, with Apple's Vision on iPhone and Google's ML Kit on Android. The photo never leaves the phone, and its temporary copy is deleted once it is read. The text stays on the phone until you import it; after that it is a note like any other and syncs if sync is on.
• On Android, ML Kit sends Google usage statistics: the device model, the Android and app versions, how long reading took, the image format and size, and an ID for each installation. They don't include the photo or its text.

09Who we share information with

We don't sell personal information or give it to anyone for advertising. The service providers above handle it on our behalf, only as far as running Joey needs. We give it to no one else unless the law requires it.

10Where information is stored

All of our service providers are US companies, and information may be stored on servers in the United States and elsewhere.

• Supabase, Inc. (US): accounts and sync
• RevenueCat, Inc. (US): purchases
• Functional Software, Inc. (Sentry, US): crash reports
• PostHog, Inc. (US): usage counts
• 650 Industries, Inc. (Expo, US): notifications

The US has no comprehensive federal privacy law like Japan's Act on the Protection of Personal Information; privacy laws there are set state by state. Through each provider's terms and data processing agreement, we require the same level of protection Japanese law asks for.

11Security

All traffic is encrypted. The server's database lets each account read and write only its own rows. Few people can access the data, and we check a provider's security before choosing it.

12How long we keep information

• Your account and synced notes: until you delete the account
• Push tokens: deleted after 180 days without a refresh
• Crash reports: 90 days
• Usage counts: 1 year
• Purchase records: as long as the stores' and RevenueCat's terms and tax and accounting law require

13Deleting your account and log

In Joey, open Settings and choose Delete account. This deletes your account, your synced notes and your Pro status from our server, and can't be undone.

Deleting the account doesn't cancel a yearly plan. Cancel it in your App Store or Google Play subscriptions.

Notes on the phone are removed when you delete the app. Save a backup first if you want to keep them.

If you can't use the app, email [email protected] from your account's address. We'll confirm it's you and delete the account within 30 days.

14Your rights

You can ask us for a copy of your information, or to correct it, stop using it or delete it. Email [email protected].

If you live in the EEA or the UK, we rely on these legal bases: providing the service you asked for (accounts, sync and purchases), our legitimate interest in keeping Joey working and improving it (crash reports and usage counts), and your consent (notifications and Health), which you can withdraw in the phone's settings. You can also object to processing, ask to move your data, and complain to your local data protection authority.

If you live in California: we don't sell or share personal information as the CCPA defines those terms, and we won't treat you differently for using your rights.

15Children

Joey isn't meant for children under 13. If we learn we've received information from a child under 13, we delete it.

16Changes to this policy

When this policy changes, we update this page. For important changes, such as collecting something new, we also tell you in the app.

17Contact

• Operator: Tomoki Ota
• Address: sent without delay on request
• Email: [email protected]