Privacy Policy

01Who we are

ROCKJAW LTD, a company registered in England and Wales ("we", "us"), owns and operates the Jawnetic app and this website, and is the data controller for the personal data described here. ROCKJAW LTD is registered with the UK Information Commissioner's Office (ICO) as a data controller.

This policy covers the Jawnetic iOS app and jawnetic.com. Plain version: we use your data to run your training, we do not sell it, we do not use it for advertising, and you can export or delete it.

02What we collect

• Account information: your name, email address and password, or the name and email shared with us if you sign in with Apple or Google.
• Profile and onboarding answers: training goals, experience level, schedule and preferences.
• Training data: session logs (date, duration, resistance level), pre-session health check answers, recovery notes, streaks, badges, milestones, challenge entries and the reports generated from them, plus any bodyweight or nutrition figures you choose to type in.
• Apple Health readings, only if you allow it (see section 4).
• Facial photos, only if you use face scans and give explicit consent (see section 5). Face scans are currently paused in the app.
• AI coach messages: the questions you ask the coach and its replies.
• Community content: posts, comments and images you share in the in-app community, which other members can see, and any reports or blocks you make.
• Referral and rewards data: referral codes you create or use, and rewards you earn.
• Consent and eligibility records: when you confirm you are 18 or over or give biometric consent, we record the answer, the time, the policy version, your country (derived from your IP address) and your device's user-agent string.
• Usage data: screens and features used and in-app events, measured with our own first-party analytics. We do not use any advertising or third-party tracking SDK, and we do not track you across other apps or websites.

03How we use it

• To run the app: build your programme, time your sessions, keep your streaks, badges and reports, and power the AI coach. Lawful basis: performance of our contract with you.
• To show your training readiness from Apple Health and, when available, to analyse face scans. Lawful basis: your explicit consent.
• To send service emails such as sign-up confirmations and account notices. Lawful basis: contract.
• To keep the service safe: moderating the community, preventing abuse and fixing faults. Lawful basis: our legitimate interests.
• To improve Jawnetic using aggregated, first-party usage statistics. Lawful basis: our legitimate interests.

We do not sell your personal data, and we do not use it for advertising or profiling for marketing.

04Apple Health

With your permission, the Jawnetic iOS app reads these Apple Health types: sleep analysis, heart rate variability, resting heart rate and dietary sodium. Access is read-only. Jawnetic never writes to Apple Health.

• The readings are used to work out your daily training readiness level and to explain how sodium affects facial water retention.
• Your readiness result is stored on your account. If you use the AI coach, a short summary (for example "recovery 72/100, sleep 7.1h, HRV 48ms") is included in the request so the coach can tailor its answer (see section 6).
• Apple Health data is never used for advertising or marketing, never sold, and never shared with data brokers.
• You can switch access off at any time in iOS Settings > Health > Data Access & Devices > Jawnetic.

05Face scans and biometric data

Face scans use photos of your face to produce jawline scores and progress comparisons. Under UK and EU GDPR this is special category biometric data, so we only process it with your explicit, opt-in consent (Article 9(2)(a)).

• Before any scan: you confirm you are 18 or over, then tick three separate consent statements. We record your consent with a timestamp and the policy version.
• Storage: photos are kept in private, encrypted storage that only you and our analysis process can access.
• Retention: 12 months from upload by default, then deleted automatically. You can choose a shorter period.
• Deletion: you can delete scans or withdraw consent at any time in the app, or by emailing us. Withdrawing consent deletes your scan photos.
• No sale or sharing: we never sell, license or share biometric data with advertisers, data brokers or anyone else for their own purposes.

06AI processing

Jawnetic uses Google Gemini models, reached through an AI gateway (currently the Lovable AI Gateway), for two things: analysing a facial photo when you run a scan, and answering you in the AI coach. The coach receives your message and a short training and recovery summary, not your photos.

Under our agreements with these providers your inputs are not used to train their general-purpose models. Providers may keep requests for a limited period for abuse monitoring, safety and debugging, and a small share may be reviewed by authorised staff for those purposes. These providers may process data outside the UK, including in the United States (see section 12).

AI scores, projections and coach answers are estimates. They are not medical advice or a measurement you should rely on.

07Purchases and the Tuff Gum shop

The Jawnetic app is free and sells nothing in-app. There are no subscriptions or in-app purchases.

The app can link you to ROCKJAW's online shop to buy Tuff Gum, a physical product. Checkout opens in an in-app browser on ROCKJAW's Shopify store (rockjaw.co.uk). Your order, delivery and payment details are entered there and handled under the ROCKJAW shop privacy policy; card details are processed by the payment provider and never reach the Jawnetic app. The shop links carry a tag (utm_source=jawnetic) so we can see that an order started in the app.

Earlier versions of Jawnetic, including the web version, offered a paid tier billed through Apple or Stripe. If you bought one, we keep the transaction record (product, purchase and expiry dates) as part of your account and our accounting records.

08Who we share data with

We use these service providers (processors) to run Jawnetic. They act on our instructions and may only use your data to provide their service to us.

We may also disclose data if the law requires it, or to protect the rights and safety of our users. If ROCKJAW's business is sold or restructured, your data would move with it under this same policy.

09How long we keep it

• Account, profile and training data: while your account is open. When you delete your account, it is removed from our live systems straight away, and from backups within 30 days.
• Face scan photos: 12 months from upload by default, or sooner if you choose a shorter period, delete them, withdraw consent or delete your account.
• Consent and age records: kept as long as needed to show we had your consent, then deleted with your account.
• Purchase records: as long as UK tax and accounting law requires.

10Your rights

Under UK GDPR you have the right to access, correct, delete, restrict or object to the processing of your data, to receive a portable copy, and to withdraw consent at any time.

• Export: in the app, go to Account Settings and choose Export my data for a machine-readable JSON copy.
• Delete: in the app, go to Account Settings and choose Delete my account.
• Anything else, or if you cannot sign in: email support@jawnetic.com. We acknowledge requests within 5 working days and respond in full within one month.

11Age requirement

Jawnetic is only for people aged 18 or over. Face scan features ask you to confirm your age before any photo is taken and stay switched off if you say you are under 18. We do not knowingly collect data from anyone under 18. If we learn that we have, we delete it promptly.

12International transfers

Jawnetic is run from the United Kingdom. Some providers, including our cloud infrastructure, email and AI providers, may process data outside the UK and EEA, including in the United States. Those transfers rely on the UK International Data Transfer Addendum and/or the EU Standard Contractual Clauses, with encryption in transit and at rest. Email us for a copy of the relevant safeguards.

13US residents

Biometric laws. Jawnetic does not currently serve residents of Illinois, Texas, Washington, Colorado or New York. Sign-ups from those states are blocked, and any biometric data from a user later identified as a resident there is deleted.

California (CCPA/CPRA). You can ask to know, correct or delete the personal information we hold, and to limit use of sensitive personal information. We do not sell or share personal information as those laws define it. Email us to make a request.

14Security

We encrypt data in transit and at rest, restrict access so each user can only reach their own records, and serve photos only through short-lived signed links. No system is perfectly secure, but we work to protect your data and will notify you and the ICO of a serious breach as the law requires.

15This website

jawnetic.com sets no cookies and runs no analytics or advertising scripts. Our web server keeps standard access logs (IP address, time, page requested, browser type) for security and troubleshooting.

16Changes

If we change this policy, we will post the new version here and update the date above. If a change materially affects how we use your data, we will tell you in the app before it takes effect.

17Contact and complaints

Data controller: ROCKJAW LTD (trading as Jawnetic), registered in England and Wales.
Email: support@jawnetic.com

Our company number, ICO registration reference and registered address are available on request at the same address.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office. If you are in the EU or EEA, you can also contact your local data protection authority.