Privacy Policy

1. Terms of Use

1.1 Acceptance of Terms

By using the app and website of Iffirm, LLC DBA Journiy (“the App”, “we”, “our”), you agree to these Terms. If you do not agree, discontinue use immediately. You must be at least 18 years old (or the age of digital consent in your region).

1.2 Eligibility

You must be at least 18 years of age (or the age of digital consent in your jurisdiction).

1.3 Description of Service

You may use the App to:

Get nutritional recommendations
Sponsored content
Access nutrition information derived from public databases, restaurants, and food manufacturers

IMPORTANT HEALTH DISCLAIMER

You must always follow the recommendations of your healthcare provider. The App is not a substitute for professional medical advice, diagnosis, or treatment.
If you have a medical condition or dietary restrictions, consult your provider before making changes.

1.4 Accuracy of Nutrition Information

We gather nutrition data from the following sources:

Publicly available nutrition databases
Restaurant-provided nutritional disclosures
Government databases (where applicable)
Third-party nutrition compilers

Restaurant Nutrition Disclaimer

We do not control or verify the accuracy of nutrition information provided by restaurants, manufacturers, or third-party sources.
We do not take responsibility for incorrect nutrition data, including:

Calories
Macronutrients
Allergens
Ingredients
"Healthy" or dietary claims

Nutritional content may vary by preparation, ingredients, serving size, and restaurant location.
You assume responsibility for verifying information with the restaurant or manufacturer directly when necessary.

1.5 Sponsored Content

The App may display sponsored posts, affiliate links, or branded product information. Sponsored posts will be clearly marked.

1.6 User Responsibilities

You may not:

Provide false data
Reverse-engineer the App
Circumvent security features

You are responsible for safeguarding your login credentials

1.7 Intellectual Property

All content, branding, software, and trademarks belong to Journiy or licensors.

1.8 Disclaimers

The App is provided “as is” without warranties, including:

Accuracy of nutritional data
Health outcomes
Weight loss or fitness results
Uninterrupted service

1.9 Limitation of Liability

To the maximum extent permitted by law, Journiy is not liable for:

Errors in nutrition data
Health decisions you make in reliance on App information
Personal injury
Data loss
Indirect or consequential damage

Your sole remedy is to stop using the App.

1.10 Termination

We may suspend or terminate accounts for violations of these Terms.

1.11 Governing Law

These Terms are governed by the laws of Maryland, United States, unless otherwise required.

2. Privacy Policy

2.1 Data We Collect

Personal Identification Information (PII)

Email
Password (encrypted)
Name (optional)
Age or birth year
Gender (optional)

Personal Profile Information (PPI)

We collect user-provided wellness data:

Weight / height metrics
Health condition
Location
App behavior & activity
Sponsored content interactions

Technical Data

Device type & operating system
IP address
Cookies and advertising identifiers
Usage logs
Crash data

Nutrition Database Sources

We use:

Public nutrition databases
Restaurant-provided nutritional information
Government food databases
Third-party compiled nutrition databases

We do not guarantee accuracy.

3. HIPAA Statement

3.1 Not a HIPAA-Covered Entity

Journiy is not a Covered Entity or Business Associate under HIPAA (the Health Insurance Portability and Accountability Act).
Because we are not a healthcare provider, insurer, or processor of medical claims, the information you enter into the App is not classified as Protected Health Information (PHI) under HIPAA.

3.2 HIPAA-Aligned Protection Standards

Even though HIPAA does not legally apply to our services, we take user privacy seriously and implement safeguards that align with HIPAA security standards, including:

Encryption in transit and at rest
Access controls and authentication requirements
Secure data storage infrastructure
Audit logs and monitoring
Regular security reviews and vulnerability assessments
Strict internal data access limitations

These measures are designed to provide a level of security similar to the administrative, physical, and technical safeguards required under the HIPAA Security Rule, even though we are not bound by HIPAA regulations.

3.3 No Medical Record Storage

Because the App is for general wellness and nutrition—not medical treatment—your data does not form part of an electronic health record (EHR) or medical chart.

3.4 No Sharing of PHI

Since we do not generate or store PHI, we do not share or disclose PHI to any third parties. Any data sharing that occurs (e.g., for analytics, advertising, or sponsored content) involves only:

Non-PHI wellness data
De-identified or pseudonymized information
User-authorized data categories
Data shared under strict contractual controls

We process data based on:

Consent (for wellness data, analytics, tracking)
Contract (to provide the App)
Legitimate interests (improving services, security)
Legal obligations (regulatory compliance)

5. How We Use Your Data

We use data to:

Provide and improve App functionality
Provide nutrition recommendations
Display sponsored content tailored to your profile
Conduct analytics and usage trend analysis
Improve the accuracy and completeness of food databases
Maintain security and detect fraud

We do NOT:

Provide AI-based health recommendations
Offer medical diagnoses
Sell medical profiles

6. Third-Party Data Sharing

We may share limited or anonymized data with:

Advertisers
Analytics providers
Cloud hosting services
Partners providing sponsored content
Data enrichment providers

This sharing supports:

Personalized sponsored content
Analytics
Attribution
App improvement

We do NOT share:

Passwords
Unencrypted financial data
PHI (we do not create PHI)
Identifiable health data without consent

7. International Transfers

Transfers outside the EEA/UK use:

Standard Contractual Clauses
Adequacy decisions
Equivalent safeguards

8. Your Rights

GDPR / UK Users

You may request:

Access
Correction
Deletion (Right to be Forgotten)
Restriction
Portability
Withdrawal of consent
Objection
Complaints to a Data Protection Authority

U.S. Users (CCPA/CPRA, etc.)

You may:

Request access
Request deletion
Opt-out of data selling/sharing
Request correction

A “Do Not Sell or Share My Data” option will be available.

9. Data Retention

Account data: until you delete your account
Wellness data: deleted or anonymized after deletion
Analytics: stored in aggregate form
Sponsored content metrics: retained in anonymized form

10. Cookies & Tracking