Jumbo Privacy Policy
Last updated: 30 July 2026 · This policy covers the Jumbo mobile app by Havio Health.
Jumbo exists so you can talk about your health in your own words and see your patterns over time. That only works if you trust us with sensitive information — so this policy is written to be read, not skimmed past. If anything is unclear, email us at privacy@haviohealth.com.
1. Who is responsible for your data?
Havio Health AB, org. no. 559430-1250, Birger Jarlsgatan 57C, 113 56 Stockholm, Sweden ("we", "us") is the data controller for all personal data processed in Jumbo.
Contact: privacy@haviohealth.com
2. What is Jumbo — and what is it not?
Jumbo is a self-management companion for people living with Long COVID. It helps you capture how you feel, track your energy, and see patterns across time.
Jumbo is not a healthcare provider and does not provide medical advice, diagnosis, or treatment. We are not a covered entity under US health law (HIPAA), and Swedish patient-records law (patientdatalagen) does not apply to Jumbo — instead, everything we do with your data is governed by the EU General Data Protection Regulation (GDPR) and rests on your explicit consent.
3. What data do we collect?
Account information — your email address, name, year of birth, sex, and country/ region, collected when you sign up (by email code, or Apple/Google sign-in).
What you share in conversations — what you tell Jumbo by voice or text: your symptoms, energy, treatments, daily life, and anything else you choose to share. This is health data, and it is the core of the service.
Health information derived from your conversations — Jumbo's AI organizes what you said into your profile: symptoms, treatments and medications, energy descriptions and scores, goals, milestones in your story, notes on how you like to be spoken to, and saved moments. Every fact in your profile is anchored to something you actually said — Jumbo is built so it cannot invent facts about you.
Reminders — reminders you set are scheduled locally on your device. We do not use push-notification services, and no notification content leaves your phone.
Usage and diagnostics — basic information about how the app is used (which screens and features are opened, performance timings) and crash reports when something breaks. These are scrubbed of your conversation content — what you tell Jumbo never appears in a crash report or usage event.
What we do NOT collect: we have no advertising or ad-tech trackers in the app, we do not collect your precise location, and we never see your device contacts, photos, or other apps.
4. What happens to your voice?
When you speak to Jumbo, your audio is streamed to our transcription provider (Deepgram) and converted to text in real time. The audio itself is never stored — not by us, and not kept by Deepgram beyond processing the request. Only the transcript is saved. We have disabled the use of your audio for improving Deepgram's models.
5. How does AI process your data?
Jumbo's replies, summaries, and home cards are generated by AI. To do this, your messages and your profile are sent to our AI provider, Anthropic (the maker of Claude), which processes them on our behalf:
- Anthropic does not use your data to train its models.
- Anthropic retains API inputs and outputs for a short operational period (currently up to 7 days) and then deletes them.
- AI output in Jumbo is informational — it reflects patterns back to you. Our systems never make decisions about you or your care. Jumbo makes no automated decisions with legal or similarly significant effects (GDPR Art. 22).
- AI can be wrong, even when it sounds specific and confident. Jumbo is designed to anchor what it stores to your own words, but generated text is not medical advice.
6. On what legal grounds do we process your data?
| Purpose | Data | Legal basis |
|---|---|---|
| Creating and operating your account | Account information | Contract (Art. 6(1)(b)) |
| The core service: conversations, profile, energy tracking, summaries | Health data and everything you share | Your explicit consent (Art. 9(2)(a) with Art. 6(1)(a)) |
| Sending sign-in codes and essential service emails | Email address | Contract (Art. 6(1)(b)) |
| Optional product emails and news | Email address, name | Your opt-in consent (Art. 6(1)(a)) — every email has an unsubscribe link, and opting out never affects the service |
| Keeping the app reliable and improving it: crash reports, performance, usage patterns | Usage and diagnostic data (never conversation content) | Legitimate interest (Art. 6(1)(f)) — you can object at any time |
| Complying with law (e.g. accounting, responding to authorities) | Minimal records | Legal obligation (Art. 6(1)(c)) |
You give your explicit consent in the app before Jumbo processes any health data. Without that consent, Jumbo cannot function — health processing is the service.
You can withdraw your consent at any time, and it is as easy as giving it: delete your account in the app (Me → Delete account), or email us. Withdrawal stops all processing going forward; it does not affect the lawfulness of processing before withdrawal.
7. Where is your data stored, and does it leave the EU?
Your data is stored in the EU: our database and backend (Supabase) run in Ireland (AWS eu-west-1).
Some of our processors are US companies, so limited processing happens in the United States: Deepgram (voice transcription), Anthropic (AI processing), Resend (email delivery), and Sentry (crash reporting). These transfers are protected by the European Commission's Standard Contractual Clauses (SCCs), supplemented where applicable by the EU-US Data Privacy Framework. You can request a copy of the safeguards via privacy@haviohealth.com.
8. Who do we share your data with?
Only the processors that make the service work, each bound by a data-processing agreement and processing your data only on our instructions:
| Processor | What it does | What it processes |
|---|---|---|
| Supabase (hosting, Ireland/EU) | Database, sign-in, backend | All app data, at rest in the EU |
| Deepgram (US) | Voice-to-text | Audio (not retained), transcripts |
| Anthropic (US) | AI conversations and summaries | Messages and profile (not used for training; deleted ≤ 7 days) |
| Resend (US) | Sending sign-in emails and, only if you opt in, product emails | Email address, name |
| Sentry (US) | Crash and performance reporting | Technical diagnostics, scrubbed of conversation content |
Each of these providers is contractually required to protect your data to the same standard we do. We never sell your data. We never share it for advertising or marketing. There is no ad-tech or data mining in Jumbo — health data is used only to provide the service to you.
9. How long do we keep your data?
- Your account and health data: for as long as your account exists. When you delete your account, all of it is permanently deleted from our production systems immediately. Residual copies in encrypted backups expire automatically within 7 days.
- Voice audio: never stored (see §4).
- Sign-in codes: minutes.
- AI provider copies: deleted by Anthropic within 7 days; Deepgram retains nothing beyond processing the request.
- Diagnostics: crash and usage reports expire at Sentry after 90 days.
10. Your rights
Under the GDPR you can: access your data (your profile and timeline are visible in-app; you can request a full copy), correct it (facts are editable in-app), delete it (in-app account deletion), restrict or object to processing, export it (data portability), and withdraw consent (§6).
Email privacy@haviohealth.com for anything not available in-app. We respond within one month.
If you believe we have handled your data wrongly, you have the right to lodge a complaint with the Swedish Data Protection Authority, Integritetsskyddsmyndigheten (IMY) — imy.se — or your local EU supervisory authority. We'd appreciate the chance to resolve it directly first.
11. Age
Jumbo is intended for adults and is not directed at children. You must be at least 16 years old to use Jumbo.
12. Changes to this policy
When we make material changes, we will show you the updated policy in the app and ask for your agreement again before you continue. The date at the top always tells you when this document last changed.