jim — Privacy Policy

Effective date: July 13, 2026 Operated by: Chito Systems LLC ("we", "us") Contact: support@chitosystemsllc.com

jim is a fitness and health data platform. This policy explains what we collect, why, and what we do with it — in plain language.

The short version: your data belongs to you. We don’t sell it, we don’t run ads, we don’t track you across the internet, and you can export or permanently delete everything, at any time. We store and process your data for exactly one purpose: making jim work for you.

What we collect

Account information. Your email address and authentication credentials (managed by AWS Cognito). Login tokens are stored securely on your device (iOS Keychain).

Fitness data you enter. Workouts (exercises, sets, reps, weights), nutrition logs (foods, meals, calories, macros), goals and goal journal notes, body metrics (weight, height, age, gender), and weekly check-in responses.

Apple Health data (optional). If you grant permission, jim reads health data such as sleep, heart-rate variability/recovery, and steps from Apple Health, and can save workouts you log back to Apple Health. You control this permission in iOS Settings and can revoke it at any time. Apple Health data is used only to compute your summaries and inform your training and nutrition guidance. We never sell Apple Health data, never use it for advertising or marketing, and never share it with third parties except the service providers below acting on our instructions.

Messages you send to Jim. Conversations with the in-app guide, including onboarding and check-in conversations.

We do not collect: your location, contacts, browsing history, financial information, or advertising identifiers. jim contains no third-party advertising and does not track you across other apps or websites.

How we use it

• To provide the service: build and adjust your training plan, compute nutrition targets, generate summaries and insights from your own data.
• AI processing: your messages and relevant fitness context are sent to large-language- model providers (via OpenRouter, including DeepSeek, Anthropic, and Google models) to generate responses, plans, and insights. Every one of these requests carries zero-data-retention enforcement on the request itself — providers that would store or train on the content are excluded from serving it, and if no compliant provider is available the request fails visibly rather than quietly falling back to one that retains data. We never enable prompt logging on our account, and we do not use your conversations or fitness data to train AI models.
• To send transactional email (verification and password-reset codes). No marketing email without separate consent.

jim provides fitness information and tools. It does not provide medical, clinical, or dietary advice, and is not a substitute for a physician or licensed professional.

Where your data lives

Data is stored on Amazon Web Services (US East region): user database (PostgreSQL/DynamoDB), authentication (Cognito), and email (SES). Data is encrypted in transit and at rest.

Service providers

• Amazon Web Services — hosting, storage, authentication, email delivery
• OpenRouter (and the model providers it routes to) — AI response generation
• Apple — HealthKit, TestFlight/App Store distribution

We do not sell your personal data to anyone.

Retention and deletion

You can delete your account in the app (Profile → Delete Account). This permanently deletes your account and personal data — delete means delete. De-identified quality-review records (plan-generation and goal-extraction logs not linked to your identity) may be retained to improve the service.

Children

jim is not intended for anyone under 16. We do not knowingly collect data from children.

Changes

We'll update this page and revise the effective date when the policy changes. Material changes will be announced in the app.

Your rights

Your data is yours. Email support@chitosystemsllc.com to request a complete export of your data, a correction, or deletion. In-app data export is planned; until then, export requests are fulfilled by email.