This policy is published under Washington's My Health My Data Act (RCW 19.373). It applies to consumer health data about Washington consumers that ZinXan AI Ltd collects in connection with the JabKeeper app, jabkeeper.com and JabKeeper support. ZinXan AI Ltd is registered in England and Wales, company number 12451101. Health privacy contact: matilde.enevoldsen19@gmail.com.
1. Consumer health data we collect and how we use it
Medicine and injection information: the medicine name, prescribed dose, injection dates and sites, schedule and notes you enter in the app. Used to keep your diary and to show the countdown, site rotation and reminders you ask for.
Physical measurements and goals: weight, height, goal weight and weekly pace, and results the app calculates from them, such as BMI and estimated goal dates. Used to show your weight history, charts and progress.
Symptoms and nutrition: symptoms and side effects you record, their severity and timing, and food, calorie and protein entries. Used to keep your symptom and food records and summaries.
The app keeps all of the above in a local database on your device to provide the diary you request. It is not sent to us, and we cannot view it.
Support correspondence: health information you choose to include in an email to us. Used only to answer your request, handle a complaint or rights request, and keep records the law requires.
Website connection information: IP address, requested page, time and browser details when you visit jabkeeper.com, which could reveal an interest in a health product. Used only to deliver and secure the website. We do not use it to infer your health or target advertising.
2. Where this data comes from
- You, when you enter information in the app or send us an email.
- Apple Health, when you allow JabKeeper to read your body weight.
- Someone you authorise, if they contact us on your behalf.
- Your browser or device, when you visit our website.
3. Consumer health data we share
- Weight and calorie entries are written to Apple Health, only if you turn on Health sync and allow it.
- Your next injection, with its date, medicine and dose, is added to your device's default calendar, only if you turn on Calendar and allow it.
- Support emails you send, including any health information in them, are handled by our email provider.
- Website connection information is handled by our website hosting and security providers.
- Information we hold may be disclosed where the law requires it.
We do not sell consumer health data.
4. Third parties and affiliates we share it with
- Apple, through Apple Health, when you turn on Health sync.
- The calendar provider behind your default calendar (for example Apple, Google or Microsoft), when you turn on Calendar.
- Google, which provides our Gmail support mailbox.
- Laravel Cloud and Cloudflare, which host and protect jabkeeper.com.
- Professional advisers, only where a specific request or complaint requires it.
- Courts, regulators or law enforcement, only where the law requires it.
We do not share consumer health data with any affiliate.
5. How to exercise your rights
You have the right to:
- confirm whether we collect, share or sell your consumer health data, and access it, including a list of all third parties and affiliates we have shared it with or sold it to, and an active email address or other online contact for each;
- withdraw your consent to our collection and sharing of your consumer health data; and
- delete your consumer health data.
In the app. You can view, edit and delete your diary entries. To withdraw your consent and delete the whole diary from your device, go to Settings, Privacy & support, and choose Withdraw consent and delete diary. Turn off Health sync or Calendar in JabKeeper's settings to stop that sharing.
By email or post. Email matilde.enevoldsen19@gmail.com, or write to our registered office above, marked “JabKeeper Health Privacy”. Tell us which right you want to use. You do not need to create an account. We may ask for reasonable information to confirm that the request comes from you or someone you have authorised.
Our response. We respond within 45 days of receiving your request. If we reasonably need more time, we may extend this once by up to 45 more days, and we will tell you why within the first 45 days. Responses are free for up to two requests a year. When we delete your data, we also notify the processors and third parties we shared it with, and we delete copies in backups within six months.
Appeals. If we decline to act on your request, you can appeal by replying to our decision or emailing matilde.enevoldsen19@gmail.com with the word “Appeal”. Within 45 days of receiving your appeal, we will tell you in writing what action we have taken or not taken, and why. If we deny your appeal, you can complain to the Washington State Attorney General.