JOUNA · Legal information
Providers that process data
These are the providers that process personal data on behalf of [RAZÓN SOCIAL] to run JOUNA. Each does so under contract, solely to provide its service to us, and with the safeguards described in the Privacy Policy (www.jouna.app/ar/en/privacy).
For each one you will find the country where it processes the data, what it does, what data it receives and since when it has been on this list. The Terms of Service (www.jouna.app/ar/en/terms) and the conversation mode Usage Policy (www.jouna.app/ar/en/usage-policy) refer to this page.
Language models
They process requests to conversation mode. Only their paid services are used, and those do not use the data to train models. Conversation mode uses one at a time, and moves to the next if the one in use does not respond.
Before a request goes to any of them, the personal data that is detected is removed from it: identity documents, phone numbers, emails, bank accounts, cards, health terms, and the names of your members and of the people who book.
OpenAI
Processes requests to conversation mode. Does not use the data to train models.
- Country: United States.
- What it receives: the text of each request, without the personal data that is detected; counts about your organisation (for example, how many classes it has); and the names of its activities, venues, plans and team when the request needs them. It never receives data about members or about people who book. It also checks that text, and any text conversation mode passes on to other people, for offensive content.
- How long it keeps it: up to 30 days, to detect abuse, unless the law requires it to keep it longer.
- On this list since 26 September 2026.
- Its data policy: https://openai.com/policies/privacy-policy/
Google (Gemini API, paid tier)
Processes requests to conversation mode. Does not use the data to train models.
- Country: United States and other countries where Google has data centres.
- What it receives: the text of each request, without the personal data that is detected; counts about your organisation (for example, how many classes it has); and the names of its activities, venues, plans and team when the request needs them. It never receives data about members or about people who book.
- How long it keeps it: for a limited period, solely to detect breaches of its usage policies.
- On this list since 26 September 2026.
- Its data policy: https://ai.google.dev/gemini-api/terms
Anthropic
Processes requests to conversation mode. Does not use the data to train models.
- Country: United States.
- What it receives: the text of each request, without the personal data that is detected; counts about your organisation (for example, how many classes it has); and the names of its activities, venues, plans and team when the request needs them. It never receives data about members or about people who book.
- How long it keeps it: up to 30 days. If a request breaches its usage policies, it may keep it for up to 2 years to review it.
- On this list since 26 September 2026.
- Its data policy: https://www.anthropic.com/legal/privacy
Infrastructure and technical services
They run the application, store what is uploaded and deliver alerts.
Fly.io
Hosts the application and the database.
- Country: Brazil (São Paulo).
- What it receives: all platform data: your account, your activity, your bookings and your payments.
- On this list since 26 September 2026.
- Its data policy: https://fly.io/legal/privacy-policy
Cloudflare
Stores and delivers uploaded images and video.
- Country: United States.
- What it receives: photos and video of activities and profiles.
- On this list since 26 September 2026.
- Its data policy: https://www.cloudflare.com/privacypolicy/
Sentry
Records application errors so they can be fixed.
- Country: United States.
- What it receives: technical information about each error and the device. Personal data is removed before the record is sent.
- On this list since 26 September 2026.
- Its data policy: https://sentry.io/privacy/
Expo
Delivers push alerts to your phone’s notification service (Apple or Google).
- Country: United States.
- What it receives: your phone’s identifier for receiving alerts, and the text of each alert.
- On this list since 26 September 2026.
- Its data policy: https://expo.dev/privacy
Payments
They process payments for bookings, plans and dues.
Mercado Pago
Processes payments and refunds.
- Country: Argentina.
- What it receives: the amount, the description and the status of each payment. You enter your card details in Mercado Pago and they never pass through JOUNA.
- On this list since 26 September 2026.
- Its data policy: https://www.mercadopago.com.ar/privacidad
Changes to this list
Using, alternating between or replacing providers on this list is part of running the service and does not change what you accepted.
Before adding a new provider, we publish it on this page and notify you in the app and by email at least 10 calendar days in advance. The notice says who it is, in which country it processes the data and what for.
If you disagree, write to hola@jouna.app before the change takes effect. You can stop using the feature that needs it at no cost: in the case of conversation mode, everything it does can be done from the app’s screens. You can also close your account.
If security or keeping the service running requires adding a provider without that notice period, we publish it here and notify you as soon as it happens, with the same right to object.
Contact
For any question about these providers, or to ask for a copy of the safeguards for a transfer, write to hola@jouna.app or to [RAZÓN SOCIAL], [DOMICILIO LEGAL].