JengaPulse
Legal
Privacy Policy
Last updated 31 October 2026
On this page
JengaPulse is a health tracking app covering nutrition, fitness, mental wellness and sobriety. This policy explains what the app collects, why it needs it, who else handles it, and how to get it removed. It applies to the JengaPulse mobile apps and to jengapulse.com.
The short version. Your health entries are yours. We do not sell them, and we do not use them for advertising. The only data that leaves our systems goes to the named service providers below, each doing one job on our behalf. You can export everything, or delete your account and everything in it, from inside the app, with or without a subscription.
1. What we collect
| Category | What it is | Why we need it |
|---|---|---|
| Account | Phone number, email address or both, display name, and — if you use Sign in with Apple or Google — the identifier, email and name that service returns. | To create your account and sign you back in, and to tell you when its sign-in number or email address changes. JengaPulse has no passwords; we send a one-time code instead. |
| Profile | Date of birth, gender, height, current and target weight, activity level, diet type (which can reveal a religious practice, such as halal or kosher), and what you tell us during setup: your goals and preferences, stress level, wellness concerns and mood baseline. Also the currency the app shows amounts in, taken from your phone's region unless you had already entered amounts in dollars. | To calculate your calorie and macro targets and personalise what the app shows you. |
| What you log | Meals and their nutrition, water, weight entries, workouts and exercises, mood check-ins, journal entries, sobriety records (your start date, what you are staying away from, check-ins, cravings and triggers), your conversations with Pulse, and emergency contacts (their name, phone number and relationship to you). | This is the product. Without it the app has nothing to show you. |
| Photos | Photos you take or choose for AI meal and nutrition label scanning. When you log a meal from a scan, its photo is kept with that meal. | To identify food and estimate its nutrition, and to show you what you ate. See section 3. |
| Health app data | With your permission, read from Apple Health or Health Connect: steps, distance, calories burned (active and resting), heart rate and resting heart rate, workouts, sleep and floors climbed. It stays on your phone. | So you don't have to log by hand what your phone or watch already counted. See section 2. |
| Device and usage | A random identifier the app makes for your phone, your push notification token, platform and time zone, and the language and region you use the app in; and, for analytics, your device's make and model, operating system, language and region settings, app version and screen size, and which screens and features you use. | To deliver reminders, keep daily totals on your local day, write reminders, messages and emails in your language and its formats, and find out which parts of the app are broken or unused. See section 5. |
| Network | Your IP address, which every request from the app or a browser carries. | To limit how often one address can ask for sign-in codes or use the app, and to investigate errors and slow requests. See section 7. |
| Subscription | Whether you subscribe, whether you are in a free trial, when it renews, and the store's purchase records, linked to your account. | To unlock the hubs you subscribe to. We never see your card details — payment is handled entirely by Apple or Google. |
2. Health and wellness data
Nutrition, weight, mood, journal and sobriety entries are sensitive personal data, and we treat them that way.
- They are used to operate the app for you, and for nothing else.
- They are never sold, rented, or shared with advertisers or data brokers.
- They are not used to train anyone's AI models.
- Our analytics records that a feature was used — never what you wrote or logged in it. See section 5.
Apple Health and Health Connect
Data is only read after you grant permission, and only the types listed in section 1. It stays on your phone: the app uses it to show your activity and daily totals, and never sends it to our servers. When you log a workout in JengaPulse, the app also writes that workout and the energy it burned to Apple Health or Health Connect, if you allowed it, so your other health apps see it. You can revoke either permission at any time in your device settings, and the app keeps working without it. In line with Apple's and Google's rules, Health data is never used for advertising or shared with third parties for their own purposes.
3. AI features and what leaves your device
Some features send data to an AI provider to be processed. Which provider, and what it receives, depends on the feature:
- Meal photo and nutrition label scanning — Google (Gemini) receives the photo.
- Pulse, the AI chat — OpenAI receives the conversation's recent messages, and what Pulse needs to answer you: your mood and how it has been going, your mood baseline and wellness concerns, and your days sober and triggers. It is also given the crisis lines for your country, and, in a conversation started from SOS, told that it is a crisis.
- Recipe generation — OpenAI receives what you ask for: the diet, calories, time, servings and ingredients to include or leave out, and your request.
- Workout generation — OpenAI receives your goal and preferences, with your gender, an age group and a body-type category, never your exact age or weight.
Meal plans and recipe searches don't use AI: they are built from our own recipes and Spoonacular's (see section 6).
- Before an AI feature first sends anything, the app asks you, and it asks again whenever what's sent changes. If you choose Not now, that feature doesn't run — it asks again the next time you open it — and the rest of the app works normally. When you allow it, your answer is kept with your account, so it holds on every phone you sign in on.
- You can withdraw it as easily as you gave it: Settings → Privacy & Security → AI features. From then on our servers refuse every AI request from your account until you turn it back on. In a conversation with Pulse started from SOS, the app asks again; if you choose Not now, it shows your emergency number and the way to SOS instead, and sends nothing to OpenAI.
- Requests don't include your name, phone number or email. Requests to OpenAI carry a code made from your account's identifier, which can't be turned back into it, so OpenAI's safety systems can tell one account's misuse from another's without knowing whose it is.
- The AI chat is given the crisis lines for where your phone is: the country its time zone points to, or your phone number's when that doesn't say. If you choose another country in the app's crisis lines, that choice is kept on your phone and sent with each message, so the chat gives the same lines as the app. Our servers don't keep it.
- Under OpenAI's API terms, and under Google's paid-tier Gemini API terms, data sent through these APIs is not used to train their models. Each may keep requests for a limited time to detect abuse, under its own terms.
The AI is not a clinician. Nutrition estimates from a photo are approximations, and Pulse is not a substitute for professional care, diagnosis or medical advice. If you are in crisis, use SOS in the app or contact your local emergency services.
4. SOS and the crisis lines
SOS shows the crisis lines for the country your phone's time zone points to, or your phone number's country when the time zone doesn't name one. You can choose another country instead; that choice is kept on your phone, and goes with each message to Pulse so it gives the same lines. The numbers are part of the app, and opening SOS sends nothing to us. Where we haven't verified a line for your country, it shows 112 and Find A Helpline. A conversation with Pulse started from SOS is stored as a crisis conversation, as described in section 3. SOS, the crisis lines and your emergency contacts never need a subscription.
5. Analytics and crash reports
We use PostHog to see which screens and features are used and where the app fails. It is linked to your account by its identifier alone: PostHog receives that identifier; your plan, when you joined, whether you finished setup and whether notifications are on; the device details listed in section 1; and which screens and features you use, including the subscription screens and purchases — never your name, email address or phone number, and never what you wrote or logged. Like every service the app talks to, it also sees the IP address each request comes from, and may use it to estimate your country and city. Crash reports carry the same identifier, the error and the app's last few steps before it, and no contact details.
Earlier versions of the app sent more: your email address and display name with your analytics profile, your email address or phone number with crash reports, and your phone's name with every event. The current version sends none of these, and clears the email address and display name from your analytics profile the next time you open it with analytics on. Events already sent keep what they carried until you delete your account, which deletes your analytics profile and its events (section 7).
You can turn both off: Settings → Privacy & Security → Usage analytics.
6. Who else processes your data
Each of these does one job on our behalf, under contract, and may not use your data for their own purposes.
| Provider | What they handle |
|---|---|
| MongoDB Atlas | Stores your account and everything you log. |
| Render | Runs our servers, and keeps their logs. |
| Cloudflare | Carries requests to our servers, so it sees your IP address and each request. |
| OpenAI | Processes Pulse, recipe generation and workout generation — see section 3. |
| Processes meal photo and nutrition label scanning — see section 3. | |
| Spoonacular | Recipe searches and meal plans: what you search for, your diet, calorie targets and ingredients. Nothing that identifies you. |
| USDA FoodData Central | Food searches: the words you search for. |
| Open Food Facts | Barcode scans: the barcode number. |
| Twilio | Sends the one-time code to your phone. |
| Resend | Sends the one-time code to your email, and tells you by email when your account's sign-in number changes, or when its email address does (that one goes to the old address). |
| Apple & Google | Sign you in, if you use Sign in with Apple or Google. Take the payment and manage the subscription; they never share your card with us. |
| RevenueCat | Manages subscription state, linked to your account identifier. Receives purchase records, not payment details. |
| PostHog | Analytics and crash reports — see section 5. |
| Bunny CDN | Stores and serves meal photos. |
| Expo, Apple & Google push services | Deliver notifications. Their text passes through them, and can include your name, milestones, weight changes and weekly totals. |
| Google Fonts | Serves the fonts on jengapulse.com, so it sees your IP address when you visit. The app doesn't use it. |
These providers operate in various countries, so your data may be processed outside Kenya. We only use providers that commit to appropriate safeguards for international transfers.
We will also disclose data if the law requires it, or to protect someone's safety. If JengaPulse is ever acquired, your data may transfer with it — we will tell you before that happens and before this policy changes.
7. How long we keep it
- While your account is open — your entries are kept so you can see your own history, which is the point of a tracking app. Nothing is deleted because a subscription ends.
- When you delete your account — your account and everything you logged are removed from our database immediately, and your photos from our image storage within minutes. Encrypted backups roll off within 30 days.
- A number or email address your account moved away from — kept for 30 days, so that whoever signs in with it is told the account has moved, rather than being given an empty one. It isn't used after that and is deleted, and it's deleted with your account.
- Meal photos — a photo sent only for scanning is held as long as the request takes, then discarded. A photo you log a meal with is kept with that meal, and deleted from our image storage when you delete the meal (unless another of your meals shows it) or your account.
- Analytics and subscription records — when you delete your account, RevenueCat deletes its record of your subscription, and an hour later PostHog deletes your analytics profile; PostHog removes the profile's events in a later batch. If one of them is unavailable, we keep asking until it's done. Apple and Google keep their own records of your purchases.
- IP addresses — used to limit requests, and held in memory only for that. Our servers write them to their logs only with errors, slow requests and requests for pages that don't exist, never to our database, and those logs expire under our host's retention. Cloudflare and Render also see each request, under their own terms.
- Records we must keep — a minimal transaction record may be retained where tax or accounting law requires it.
8. Your rights, and deleting your account
You can, at any time, with or without a subscription:
- See and correct everything you have logged, from inside the app.
- Export your data — Settings → Privacy & Security → Export my data. It makes a JSON file of everything in your account.
- Decline the AI features or withdraw your consent to them (Settings → Privacy & Security → AI features), turn analytics off, or revoke Health permissions, without losing the rest of the app.
- Delete your account and all of your data — Settings → Privacy & Security → Delete account. You will be asked to confirm. This is permanent and cannot be undone. Deleting your account does not cancel a subscription; cancel that in your App Store or Google Play settings.
Without a subscription, Your data on the JengaPulse Premium screen opens the same page.
Depending on where you live you may also have rights to object to or restrict processing, or to complain to a data protection authority — in Kenya, the Office of the Data Protection Commissioner. Write to support@jengapulse.com and we will respond within 30 days.
9. Security
Traffic is encrypted in transit with TLS. Data is encrypted at rest by our hosting and database providers. Sign-in uses one-time codes and signed tokens rather than passwords, so there is no password of yours for us to lose. Access to production systems is limited to those who need it.
No system is perfectly secure. If a breach affects your data, we will notify you and the relevant authority as the law requires.
10. Children
JengaPulse is not intended for anyone under 13, and we do not knowingly collect their data. Some features — sobriety tracking in particular — are written for adults. If you believe a child has given us data, write to support@jengapulse.com and we will delete it.
11. Changes and contact
If this policy changes materially we will update the date above and notify you in the app before the change takes effect. Continuing to use JengaPulse after that means you accept the revised policy.
Questions, requests, or anything that looks wrong: support@jengapulse.com.