Legal

Privacy Policy

Effective October 7, 2026

1. Who we are

Jawww (“we”, “us”) is an iPhone app offering short daily face and posture routines with a game-like reward system. This policy explains what data the app handles, why, and the choices you have. Questions: baptiste@penel.net.

2. Data stored only on your device

Without an account, everything stays on your iPhone, in the app’s local storage:

• your onboarding answers (focus, available time, preferences);
• completed routines and steps, Aura points, levels, streak and check-ins;
• the cards you have unlocked and the card shown on your Home screen;
• your settings, including the daily reminder.

We do not receive this data. Deleting the app, or using Account › Delete local progress, erases it.

3. Optional account and league

If you choose to create an account to appear in the league, we process:

• Sign in with Apple identifier and the email address Apple shares with us. You can choose “Hide My Email”, in which case we only receive an Apple relay address. We never show your email to other users.
• Username and country you pick. They are visible to other players in the league. No real name is needed.
• Activity records: the date and type of completed routines, moves and check-ins, and the Aura earned, used to compute rankings and streaks.
• Invite code, friends and referrals created when you invite someone or join through an invite.
• Moderation data: reports you send or receive (reason and date) and players you have hidden.
• An Apple refresh token, kept on our server only so we can revoke your Sign in with Apple authorization when you delete your account.

This data is hosted by our backend provider, Supabase, and used only to run the league, prevent cheating and moderate usernames.

4. Purchases

Subscriptions are processed by Apple through the App Store. We never see your payment details. We use RevenueCat to check whether your subscription is active; it receives an anonymous app user identifier and your purchase history from Apple, not your name or card.

5. Notifications

The daily reminder uses local notifications scheduled on your iPhone. No push token is sent to us. You can turn reminders off in the app or in iOS Settings.

6. What we don’t do

• No advertising and no advertising identifiers.
• No tracking across other companies’ apps or websites.
• No sale or rental of personal data.
• No camera, no photos, no biometric or face analysis.
• No third-party analytics SDK.

7. Why we process data (legal bases)

We process league and account data to provide the service you asked for (performance of a contract), and moderation data for our legitimate interest in keeping the league fair and safe. Purchase verification is necessary to deliver your subscription.

8. Retention and deletion

Account data is kept as long as your account exists. Go to Account › Delete my account in the app: we revoke your Sign in with Apple token, then permanently delete your account, username, league history, friends, invites and reports from our servers. Progress saved on your iPhone stays until you reset it or delete the app.

9. Your rights

Depending on where you live (including under the GDPR and US state privacy laws), you may request access to, correction of, export of or deletion of your personal data, and object to certain processing. Most of this can be done directly in the app; otherwise, email baptiste@penel.net. You may also lodge a complaint with your local data protection authority.

10. Age

Jawww is intended for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.

11. Security and transfers

Data is encrypted in transit (HTTPS). Server access is restricted by row-level security so each user can only read what the league needs. Our providers may process data outside your country under appropriate safeguards such as standard contractual clauses.

12. Changes

If we change this policy, we will update the date above and, for significant changes, tell you in the app.

Controller: Baptiste Penel · baptiste@penel.net