Privacy & security

In short

Jandost exists to keep your health data, and we treat it as something entrusted to us. We do not sell data, show ads, or use your data for anything other than providing the service to you.

What data, and where

Without an account, all data stays on your phone in an encrypted database (SQLCipher, AES-256). The key is kept in the operating system’s secure keystore.

If you create an account and sync, data is sent to the Jandost server over HTTPS. Sensitive data (such as menstrual cycle data) is also encrypted at the field level on the server.

Cycle data only goes to the server if you turn on “Cycle cloud sync” yourself, and it is never shared with anyone.

Sharing

Only people you invite can access a profile, and you can revoke access at any time. Every access is logged.

Artificial intelligence

Smart features are enabled only with your separate consent. Identifying details are removed before sending, and your data is never used to train models.

Your rights

You can download a full export of your data (JSON and CSV) at any time from the app or the web dashboard.

With “Delete account”, after a 30-day grace period, all your data and files are permanently erased from the server.

Security

Passwords are stored with Argon2id; two-step verification (TOTP) and passkeys are supported; sessions use rotating tokens with reuse detection.

Contact

Questions or requests about privacy? Write to [email protected].