This policy is published by Limitnil, which operates the JAB AI app, under Washington's My Health My Data Act (RCW 19.373). It describes the health-related information the app handles, in the form that law asks for, and adds to our Privacy Policy. We follow it for everyone, wherever you live. Nevada and Connecticut have similar laws, and the same practices apply to you there.
- We collect your body details, weight, meals, training and coach chats only to run the features you use.
- We never share this information with advertisers, including Meta, and we never sell it. The few events we send Meta for ad measurement (installs, trials, purchases) contain none of it.
- Features that use AI send some of it to Google and TypeSafe, and only after you allow that in the app.
- You can delete all of it at any time in Settings → Delete account.
1. What we collect, why and how we use it
These are the kinds of consumer health data JAB AI collects. For each, we say what it is used for. We use all of it only to provide the features you ask for and to keep them working and safe. We do not use it for advertising, to build advertising audiences, or for any purpose not listed here.
- Body details
- Your sex, birth year and height. Used to set calorie and macro targets and to personalise your training. Your birth year also decides which privacy rules apply to your account, for example that accounts under 18 never get ad measurement.
- Weight and weight plans
- Weight entries, your goal weight, your calorie targets and, if you set one up, a "make weight" plan. Used for your Fuel log, your weigh-ins and your plan. Plans have limits on how fast they lose weight.
- Food and nutrition
- Meals you log (food names, items, calories, macronutrients and a grade), and the meal photos and descriptions you scan or type. Used to estimate the food and keep your Fuel log. Meal photos are not stored on our servers.
- Training and goals
- Lessons, exams, game scores, streaks and daily tasks, plus your experience level, goals, the technique you describe and how many days a week you can train. Used to run lessons and progress, pick your first training program, and show scores on the leaderboards.
- Training videos and body-movement data
- Videos of your training or sparring that you upload or record, key frames from them, and body-movement (pose) data worked out from them. Used to grade your round and write the coach's report. Camera tracking in lessons, exams and games runs on your phone and is not uploaded or stored.
- Coach conversations
- Your messages to the AI coach and its replies. They can mention injuries, pain, diet or fitness. Used to write replies and to show you your conversation.
- Results we work out from the above
- Calorie targets, grades, analyses, reports and program picks that our systems and AI services produce from the information above. Used only inside the app.
We don't collect your precise location, and the app doesn't read Apple Health or Health Connect.
2. Where it comes from
- You. What you enter, upload, record, scan or type, and what you say to the coach.
- Your phone's camera and microphone, only when you choose to film a round, scan a meal or use a camera lesson.
- Food databases. USDA FoodData Central (a copy on our server) and Open Food Facts give us facts about foods, not about you.
- AI services. Google's Gemini API estimates food and grades rounds, and TypeSafe's Jev picks programs. They give us results.
- Our own calculations from the above, such as targets and grades.
3. What we share, and with whom
We share no consumer health data with them
We tell Meta about installs, app opens, finished setup, free trials and purchases, for adults who allow it (Privacy Policy, section 8). Those events never include your body details, weight, meals, videos, analyses or chats, and no event is named after a health or body feature. We have no affiliates that receive it. We do not sell consumer health data.
The companies below handle consumer health data for us, to run the app. Each receives only what it needs:
- Google: Gemini API
- Your round's video and key frames, meal photos and meal descriptions, and the recent part of your coach conversation with the records your question needs, to grade rounds, estimate food and write replies.
- TypeSafe AI, Inc.: Jev
- Your martial art, experience, goals, the technique you described and your training days, to pick your first program, and your latest coach messages, to sort what you ask. It doesn't receive your name, email or account ID.
- Our servers, Cloudflare (R2 storage) and Modal
- Store and process everything above for you: your records on the server we rent, your analysis videos and key frames in Cloudflare's storage, and Modal's computers that track the fighter in an uploaded video.
- Google: Firebase Analytics
- Usage events that say a feature was used, for example that a meal was logged. Never the values you entered, such as weight, calories or food names. In the EEA and UK only if you agree.
The app asks for your permission before any AI feature sends your content (during setup, or the first time you use one), and you can turn it off at any time in Settings → AI features. We use these providers only to handle the data to run JAB AI. Their own terms and privacy policies are linked in our Privacy Policy, section 4.
4. Your rights and how to use them
You have the right to:
- Confirm whether we collect, share or sell your consumer health data.
- Access it, including a list of all third parties and affiliates we have shared it with.
- Withdraw consent to our collecting and sharing it.
- Delete it.
How to use them:
- Delete: in the app, Settings → Delete account, which permanently deletes your account and its data from our servers and your customer record at RevenueCat (jabai.app/delete-account). Our backups are replaced within a few days, well inside the six months the law allows. You can delete single meals in the app. To have a single video analysis deleted, or anything else deleted without closing your account, email us.
- Withdraw consent: Settings → AI features for AI processing, Settings → Privacy for analytics and ad measurement, or delete your account.
- Confirm or access: email [email protected] from the address on your account, or with your username.
We answer within 45 days of getting your request. If we need more time we may extend that once by 45 more days, and we'll tell you why within the first 45 days. Content that was already sent to an AI service to produce a result is handled under that provider's own terms (see Privacy Policy, section 4).
If we turn your request down
You can appeal. Reply to our answer, or email [email protected] with "Appeal" in the subject line. Within 45 days we'll tell you in writing what we did and why. If we deny your appeal, you can complain to the Washington Attorney General at atg.wa.gov/file-complaint.
5. Consent
We collect and use consumer health data where that is necessary to provide the feature you asked for. For anything beyond that we ask first. We won't collect other kinds of consumer health data, or use or share it for other purposes, without telling you here and getting your consent first. We won't sell it, and we won't share it with advertisers.
6. People under 18
The same protections apply to everyone. Accounts under 18, and accounts with no age, are never included in ad measurement. Parents can contact us at the address below to ask about their teen's information.
7. Changes and contact
If we change this policy we'll update the date at the top of this page, and we'll ask for your consent first if a change means collecting, using or sharing more consumer health data than described here.
Questions, requests or appeals: email [email protected].
JAB AI is operated by Limitnil.