Privacy Policy

This Privacy Policy explains what information the JAB AI app collects, how we use it, who we share it with, how long we keep it and the choices you have. It applies to the JAB AI apps for iPhone and Android and to this website, jabai.app. JAB AI is operated by Limitnil ("Limitnil", "we", "us").

1. Who we are

JAB AI is an AI martial arts coach app operated by Limitnil. Limitnil decides how and why your personal information is processed in the app (in data protection terms, Limitnil is the "controller"). You can reach us at [email protected].

2. Information we collect

2.1 Your account and profile

• Sign-in. You can sign in with Apple, with Google, or with a guest account created on your device. With Apple or Google we receive your name and email address. Apple may give us a private relay address instead of your real email if you choose "Hide My Email". A guest account has no name or email.
• Profile. A public username (shown on leaderboards), your martial art, lead hand, preferred units, sex, birth year and height.
• Onboarding answers. Your experience level, your goals, a free-text description of the technique you want to learn, how many days a week you can train, and how you found the app.

2.2 Your training progress

XP, level, rank, lessons completed, exam results, game scores, streaks, gear, achievements and daily tasks. This is what lets your progress follow you between phones and appear on the leaderboards.

2.3 Video analysis

If you use video analysis, you upload or record a video of your training or sparring (up to about 90 seconds), with its sound. When you film a round in the app, it asks to use your microphone so the round is recorded with sound; if you say no, it films without sound. Here is what happens to the video:

1. The video is uploaded to our file storage (Cloudflare R2).
2. It is processed on Modal, a cloud computing service, where the fighter in the video is tracked.
3. The video and key frames from it are sent to Google's Gemini API, which grades the round and writes the coach's report.
4. The raw upload is deleted after processing. We keep a processed copy of the round, its thumbnail and its key frames so you can replay your analysis, until the analysis or your account is deleted.

Analysis videos and images are stored at hard-to-guess (unlisted) links rather than behind a login. Anyone who has a link can open it, so only share links with people you trust. Videos can show other people, such as a sparring partner; please only upload videos you have the right to share.

2.4 Fuel (nutrition)

• What you log. Meals (food names, items, calories, macronutrients and a grade), weight entries, calorie targets, your goal weight and, if you set one up, a "make weight" plan.
• Meal photo scans. When you scan a meal, the photo is sent to Google's Gemini API to estimate the food in it. The photo is not stored on our servers; it stays in the app's storage on your phone.
• Typed meals. If you describe a meal in words, the description is sent to Google's Gemini API in the same way.
• Food search. Food search uses USDA FoodData Central data that our own server holds, so your searches are not sent to the USDA.
• Barcodes. Barcodes are read on your phone and the number is looked up directly in Open Food Facts, a public food database.

2.5 AI coach chat

The messages you write to the AI coach and the coach's replies are stored on our server so you can see your conversation. The recent part of the conversation (your messages and the coach's replies) is sent to Google's Gemini API to generate each new reply. You can report a reply in the app.

2.6 Purchases

Subscriptions are bought through the Apple App Store or Google Play, which handle your payment. We don't receive your card details. RevenueCat, our subscription service, receives your purchase and subscription status, linked to your JAB AI account ID, so the app knows whether you have JAB AI Pro.

2.7 Device, usage and diagnostic information

• Device details. Your platform (iOS or Android), app version and, if you allow notifications, a push notification token.
• Usage events. Firebase Analytics records how the app is used, for example which onboarding steps are completed, so we can see where the app works and where it doesn't.
• Crash and diagnostic data. Firebase Crashlytics and Sentry receive crash reports and error details (such as device model, operating system version and what the app was doing when it failed) so we can fix bugs.
• IP address. Like any internet service, our servers and providers see the IP address your phone connects from. An approximate region, such as your country, can be inferred from it. We don't ask for your device's location.

3. Camera and on-device processing

Lessons, exams and arcade games use your camera to follow your movements. This uses Google ML Kit pose detection, which runs on your phone. Those camera frames are not uploaded to us or anyone else, and they are not stored. Only the results, such as a score or an exam grade, are saved to your progress.

Barcode scanning also runs on your phone with ML Kit. Only the barcode number leaves your phone, to look the product up in Open Food Facts.

The camera is only used to send anything when you choose to: recording or uploading a video for analysis, or taking a meal photo for a scan, as described in section 2.

4. Third-party AI services

Some JAB AI features are powered by AI models run by other companies. When you use those features, the content described below is sent to them. This section names each one, what it receives and why. The app asks for your permission before any of it is sent (during setup, or the first time you use one of these features), and you can turn it off at any time in Settings → AI features. If you don't allow it, your first program is picked by the app itself and the AI features ask again before they're used.

AI results can be wrong. Analyses, coach replies, food scan estimates and program picks are generated by AI. They can be inaccurate or incomplete, so don't rely on them for decisions about your health or safety. You can report an analysis, a scanned meal or a coach reply in the app.

5. How we use your information

• To create and run your account, and to keep your progress in sync across devices.
• To provide the features you use: lessons, exams, games, video analysis, the AI coach, Fuel and leaderboards.
• To personalise your training, for example picking your first program and setting calorie targets.
• To manage your subscription and the free plan's limits.
• To send push notifications you have allowed.
• To keep the app secure, moderate usernames, and prevent cheating and abuse.
• To fix crashes and bugs and to understand how the app is used so we can improve it.
• To answer your messages and requests, and to meet our legal obligations.

We don't sell your personal information, and we don't use your health and fitness information for advertising.

6. Who we share it with

We share information only with the service providers that help us run JAB AI, and only what each one needs for its job:

We may also share information:

• With other users, only as described in section 7 (leaderboards).
• For legal reasons, if we must do so to comply with the law or a valid legal request, or to protect the rights, safety or property of our users, the public or Limitnil, including to investigate fraud or abuse.
• In a business transfer, if Limitnil or JAB AI is involved in a merger, acquisition or sale of assets. We'll let you know before your information becomes subject to a different privacy policy.
• With your permission, in any other case.

7. Leaderboards and what others see

JAB AI has weekly and all-time leaderboards. Other users can see your username, level and rank, your fighter's gear and your game scores on them. Your name, email, body details, meals, weights, coach chats and analyses are never shown to other users.

• Guest accounts and accounts without a username don't appear on the boards.
• You can take yourself off the boards at any time in Settings → Show me on the boards.
• The boards may include example fighters run by JAB AI, so the boards are never empty. They are not real users.

8. Advertising and tracking

JAB AI doesn't show ads today. We may add ads through Google AdMob in the future. If we do:

• AdMob may use your device's advertising identifier and similar device information to show and measure ads.
• On iPhone, personalised ads and tracking happen only if you allow it through Apple's App Tracking Transparency prompt. If you don't, you'll only see non-personalised ads.
• You can reset or limit your advertising identifier at any time in your phone's settings (on iPhone, under Privacy & Security → Tracking; on Android, under Settings → Privacy → Ads, or Google → Ads, depending on your device).
• We'll update this policy before ads go live.

On iPhone, the app may ask for permission to track for ad measurement (Apple's App Tracking Transparency). Saying no doesn't limit any feature of the app.

9. Push notifications

Push notifications are optional. We use them for things like the free-trial reminder and the progress of a video upload, and may add others such as training reminders. On iPhone, if you choose "Not now" when the app offers the trial reminder, the reminder may still arrive quietly in Notification Center, where you can keep or turn off notifications. If you allow them, your device's push token is stored with your account and used through Firebase Cloud Messaging. You can turn notifications off at any time in your phone's settings.

10. Health and fitness information

Some of what you give us is health and fitness information: your sex, birth year, height, weight entries, meals, calorie targets, goal weight and weight plan. We use it only to run the app's features, such as your calorie targets and your Fuel log. We never use it for advertising and never sell it. Meal photos and meal descriptions are sent to Google's Gemini API only to estimate your food (section 4).

JAB AI is not a medical device and doesn't give medical advice. Calorie and weight targets are estimates. Talk to a doctor before starting a new training program, diet or weight cut. See our Terms of Service for more.

11. How long we keep it

• Account, profile, progress, meals, weights and coach messages: until you delete your account.
• Video analyses (the processed round, thumbnail and key frames): until the analysis or your account is deleted. To have a single analysis deleted, email us.
• Raw video uploads: deleted after processing.
• Meal photos: never stored on our servers; they stay on your phone until you remove the app.
• Database backups: kept for a few days, then replaced by newer ones.
• Analytics and crash data: kept by Firebase and Sentry for their standard retention periods.
• Subscription records: RevenueCat's customer record is deleted when you delete your account. Apple and Google keep their own purchase records under their policies.

We may keep information for longer if the law requires it.

12. Deleting your account

You can delete your account at any time in the app: open Settings and tap Delete account at the bottom. This permanently deletes your account and all its data from our servers (your profile, progress, leaderboard entries, meals, weights, coach messages, analyses and their videos and files) and deletes your subscription customer record at RevenueCat. It can't be undone. Guest accounts are deleted the same way.

Deleting your account doesn't cancel an App Store or Google Play subscription. Cancel it in your store account settings first.

If you can't open the app, email [email protected] from the email address on your account, or include your username, and ask us to delete your account. We'll do it within 30 days. Some data may remain for a short time in our database backups (kept for a few days) and in crash reports held by our crash-reporting providers for their retention periods.

Step-by-step instructions are on jabai.app/delete-account.

13. Your rights and choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you and get a copy of it.
• Correct information that is wrong. You can change your username and other profile details in the app's settings.
• Delete your information (section 12).
• Portability: receive your information in a commonly used, machine-readable format.
• Object to, or ask us to restrict, processing based on our legitimate interests.
• Withdraw consent where we rely on it, for example by turning off notifications or tracking in your phone's settings. This doesn't affect processing that already happened.

To use any of these rights, email [email protected]. We may ask you to confirm the request comes from you, for example by writing from the email on your account. We aim to respond within 30 days.

EEA and UK

If you are in the European Economic Area or the United Kingdom, you also have the right to complain to your local data protection authority. We'd appreciate the chance to sort out your concern first, so please contact us.

US state privacy laws (including California)

Residents of California and other US states with privacy laws have the right to know what personal information we collect and how we use and disclose it (this policy describes it), and to access, correct and delete it. The categories we collect are identifiers (name, email, username, account ID, device identifiers), commercial information (subscription status), internet and app activity (usage events, crash data), audio-visual information (videos and meal photos you choose to send), and sensitive information you choose to give us (body measurements, weight and diet). We collect them from you, from your device and from the sign-in and payment services you use, for the purposes in section 5.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We use sensitive personal information only to provide the app's features. We won't treat you differently for using your privacy rights. You can make a request yourself or through an authorised agent by emailing us.

14. Legal bases (EEA and UK)

If you are in the EEA or the UK, we process your information on these legal bases:

• Contract: to provide the app and the features you ask for, including your account, training, analyses, the coach, Fuel, leaderboards and your subscription.
• Legitimate interests: to keep the app secure and working, fix crashes, understand how the app is used so we can improve it, moderate usernames and prevent cheating and abuse. You can object to this processing.
• Consent: for push notifications, for tracking and personalised ads on iPhone through Apple's App Tracking Transparency prompt, and, where the law treats the body, weight and diet details you choose to enter as health data, for processing that data. You can withdraw consent at any time, for example by deleting those entries or your account.
• Legal obligation: where we must process information to comply with the law.

15. International transfers

Our servers and our service providers may be located outside your country, including in the United States, so your information may be processed in countries whose data protection laws differ from yours. Where the law requires safeguards for these transfers, we rely on the mechanisms our providers offer, such as the European Commission's Standard Contractual Clauses.

16. Security

We protect your information with measures such as encrypted connections (HTTPS) between the app and our servers, access rules so each account can only read its own private data, private storage for backups and limited administrative access. Analysis videos are stored at unlisted links (section 2.3), so keep those links private. No system is perfectly secure, and we can't guarantee the security of information sent over the internet. If you think your account has been compromised, contact us.

17. Children

JAB AI is not directed to children under 13, and the app is rated for teens and up. We don't knowingly collect personal information from children under 13. If we learn that we have, we will delete it. If you believe a child under 13 has given us information, please contact us.

18. Changes to this policy

We may update this policy from time to time. When we do, we'll change the "Last updated" date at the top of this page. If the changes are significant, we'll also let you know in the app or by other appropriate means before they take effect.

19. Contact us

Questions about this policy or your information? Email [email protected].

JAB AI is operated by Limitnil.