Skip to content
JOJO
← Back to home

Privacy policy

Introduction

JOJO (SAS) processes your personal data in compliance with the GDPR and French data protection laws.

This policy describes the processing carried out within the JOJO application, whose iOS version is being launched.

Data controller

Company name: JOJO (SAS)

Registered office: 9 Rue des Colonnes, 75002 Paris, France

Contact email: contact@myjojo.ai

RCS: 100 731 942 R.C.S. Paris

Data collected

Personal data:

Identity, contact details, account information.

Declared health data:

Symptoms, habits, digestive and emotional well-being that you choose to share.

Technical data:

IP address, device, connection and usage logs.

Apple Health

The JOJO app may request read-only access to certain Apple Health data (for example, steps, physical activity, sleep, or other categories you choose to authorize).

This access is used solely to enrich your experience in the app and provide you with more comprehensive tracking. It is designed in accordance with Apple's guidelines for health data.

JOJO does not store this Apple Health data on its servers, share it with third parties, or use it for tracking or advertising purposes.

You can revoke this access at any time from the app or your iOS device settings.

Purpose of collection

  • Create and manage your account (legal basis: contract performance, Art. 6.1.b GDPR).
  • Provide digestive and emotional tracking (legal basis: explicit consent for health data, Art. 9.2.a GDPR).
  • Ensure security and prevent abuse (legal basis: legitimate interest, Art. 6.1.f GDPR).
  • Send service communications (legal basis: contract or legitimate interest as applicable).

Data sharing

No commercial sharing: We never sell your personal data to third parties.

Technical providers: We only share data necessary with our subcontractors (hosting, infrastructure, analytics) under contract with confidentiality and security obligations.

We may also transmit data when required by law (competent authorities).

Transfers outside the EU

Some providers may process data outside the EU. In such cases, JOJO implements appropriate safeguards under the GDPR, including standard contractual clauses of the European Commission.

Data retention

Account and tracking data: retained for the duration of the account, then deleted or anonymized after 3 years of inactivity, unless required by law.

Technical and security logs: retained up to 12 months. You can request deletion of your data when legally possible.

Your rights

Under the GDPR, you have the following rights:

  • Right to access your personal data
  • Right to rectify your data
  • Right to delete your data
  • Right to data portability
  • Right to restrict and right to object
  • Right to withdraw consent at any time for health data

To exercise these rights: Contact us by email at contact@myjojo.ai

You also have the right to lodge a complaint with the CNIL (www.cnil.fr).

Security

We implement appropriate security measures to protect your data:

  • HDS-certified hosting (Health Data Host) by Cegedim Cloud
  • Encryption of sensitive data
  • Access limited to authorized personnel only
  • Continuous monitoring of our systems

For health data, the HDS hosting setup is being deployed with our provider Cegedim Cloud, as part of the iOS app launch.

Cookies and similar technologies

We use strictly necessary cookies for the service and, where applicable, audience measurement cookies subject to your consent when required.

You can change your preferences at any time from the cookie settings in the app or your browser.

Changes to this policy

This privacy policy may evolve to adapt to new features or legal requirements.

We will inform you of any significant change by email or via a notification in the app.

Last updated: 03/15/2026.

Contact

For any questions about this privacy policy, contact us at:

Email: contact@myjojo.ai