JiWell – Privacy Policy

About JiWell and Data Controller

JiWell AB is a company established in Sweden under Swedish law. JiWell is a service developed and provided by JiWell AB. JiWell AB is the data controller responsible for the processing of your personal data in connection with the services we provide and for complying with applicable data protection legislation.

This Privacy Notice describes how JiWell collects, uses, transfers, stores and protects your personal data. It applies when you use our web or mobile application, make purchases in our shop, access our articles and e-books, use the cashback system, or otherwise interact with JiWell's services.

What Personal Data Do We Process?

JiWell may process the following categories of personal data:

• Name
• Email address
• Phone number
• Account information
• Gender, age and country (optional)
• Training data (logged sessions, schedules, history)
• Nutrition data (meal logs, nutritional intake, custom diet plans)
• Body measurements (e.g. weight, body fat, muscle mass)
• App usage and activity
• Order and payment information from our shop
• Cashback and reward information
• Customer support communication
• Community and referral interactions
• Uploaded images, notes or other user-generated content
• Device data (e.g. IP address, operating system, app version)
• Marketing and preference data

Data Sources

We obtain personal data directly from you when you register and interact with our services. Some data is generated automatically during your use of JiWell. In some cases, data may also be obtained from third-party integrations if you choose to link JiWell with external platforms.

Purposes of Processing

We process your personal data for the following purposes:

• Account management (create, log in, recover, delete, age verification)
• Provision of app features (training, nutrition, body measurements, articles/e-books, shop, cashback, community)
• Processing payments and managing orders
• Providing customer support and communication
• Personalizing your app experience
• Developing, improving and debugging JiWell
• Analyzing user behavior and trends
• Preventing misuse and ensuring security
• Marketing and sending personalized offers
• Customer and market analysis and anonymized reporting

Payments and Orders

When you make purchases in JiWell's shop, we process personal data necessary to manage orders, payments, deliveries and invoicing. This includes contact details, order information and payment-related data.

For payments, we use Stripe Payments Europe, Ltd. as our payment service provider. Stripe is an independent data controller for the payment information you provide when making a purchase. For more information, please see Stripe's Privacy Policy: https://stripe.com/privacy

Legal Bases for Processing

The legal bases for processing your personal data are:

• Your consent
• Necessity for the performance of a contract with you
• Our legal obligations (e.g. accounting and payment requirements)
• Our legitimate interests (e.g. improving services, ensuring security, marketing)

If you do not provide the personal data required, we will not be able to provide the app's features or process your purchases.

Recipients of Personal Data

Access to your data is restricted to JiWell departments that require it to perform their duties. We may also use data processors, for example for:

• Payment services (Stripe)
• IT operations and hosting
• Customer support
• Marketing tools

These processors are contractually bound and may only process data according to JiWell's instructions.

Stripe may process and store your payment information as an independent data controller.

Processing of Health Data

In order to provide JiWell's services, we need to process certain health-related data, such as your nutrition, training and body measurements. This data is processed only with your explicit consent and is used to provide personal recommendations, analyze your progress and improve your experience.

International Data Transfers

In some cases, your personal data may be transferred outside the EU/EEA. JiWell ensures that appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses.

Stripe may transfer payment data to countries outside the EU/EEA. Stripe applies safeguards in accordance with applicable data protection legislation.

Third-Party Integrations

JiWell may offer integrations with third-party platforms (e.g. fitness apps, payment services). Such integrations are always optional and occur only if you actively choose to enable them. In such cases, certain data may be shared between JiWell and the external service. Please review each third party's privacy policy for further details.

Profiling

JiWell does not make automated decisions that produce legal effects concerning you. Some profiling may occur in the form of personalized recommendations based on your app usage.

Retention Periods

We retain your personal data for as long as necessary to provide the service or as long as we have a legal obligation. If your account has been inactive for more than five (5) years, it will be deleted or anonymized. If you delete your account, we will cease processing your personal data, except for data we are legally required to retain (e.g. for accounting purposes).

Children and Age Restrictions

JiWell is not directed at children under the age of 13, or under the age of digital consent in your country (whichever is higher). We do not knowingly collect personal data from children below this age. If you, as a guardian, discover that your child has submitted personal data to us, please contact us so we can delete the data.

Your Rights

In accordance with the GDPR, you have the following rights:

• Right to information
• Right of access (to obtain a copy of your personal data)
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to object to processing
• Right to data portability