Privacy Policy

1. Who We Are

Enjour is a personal energy tracking app that helps you understand the relationship between food, thoughts, relaxation, and your energy levels. Enjour is operated by Kyener Pte. Ltd. (UEN 202642095E), 160 Robinson Road, #14-04, Singapore Business Federation Center, Singapore 068914. For privacy questions, contact us at [email protected].

2. What We Collect

We collect only what is necessary to provide the service:

• Account information: Your email address, used to identify your account and authenticate you.
• Energy observations: The food, thought, and relaxation entries you log, along with before/after energy ratings. This is the core data of the app.
• Device token (FCM): A notification token generated by your device, used solely to deliver push notification reminders you have agreed to receive. This token is rotated automatically by your device and is not linked to any advertising system.
• App usage data: Basic information about how features are used (e.g. number of entries logged), used to improve the app. No keystroke logging, no screen recording.

We do not collect location, contacts, camera, microphone, or any data unrelated to energy tracking.

3. How We Use Your Data

• To provide the service: Your observations are stored in Firebase Firestore (Google Cloud) under your account and used to generate your personalised AI energy insights.
• AI analysis: Your aggregated 45-day observation history is sent to the Anthropic Claude API to generate energy insights and causal hypotheses. This data is processed transiently and is not used to train Anthropic's models (covered under Anthropic's API terms).
• Push notifications: We may send you notifications to support your energy tracking journey. You can disable notifications at any time in your device settings.
• Service improvement: Anonymised, aggregated usage patterns help us improve app features.

4. Data Storage and Security

Your data is stored in Google Firebase Firestore, hosted in the United States (us-central1 region). Firebase applies encryption at rest and in transit. Access is restricted to your account via Firebase Authentication.

We do not store your password — authentication is handled by Firebase Auth or your Apple/Google account directly.

5. Data Retention and Deletion

Your data is retained for as long as your account is active. When you delete your account through the app:

• Your Firebase Auth account is deleted immediately.
• Your Firestore records are marked for deletion and permanently purged within 30 days by an automated process.
• You can delete your account at any time from Profile → Delete Account.

6. Third-Party Services

We use the following third-party services, each with their own privacy policies:

• Google Firebase (Auth, Firestore, Cloud Functions, Messaging) — firebase.google.com/support/privacy
• Anthropic Claude API (AI energy insights) — anthropic.com/privacy
• Apple Sign In / Google Sign In — governed by Apple and Google's respective privacy policies.

We use Firebase Analytics, scoped specifically to onboarding and first-entry events (e.g. onboarding step completion, first food/thought/relax entry saved) — see firebase.google.com/support/privacy. We do not use any advertising SDKs, third-party analytics platforms (e.g. Mixpanel), or data brokers.

7. AI-Generated Insights and Your Data

Enjour uses the Anthropic Claude API to generate personalised energy insights. Here is exactly what happens:

• Your entries are summarised and aggregated before being sent to the API — raw personal text is not transmitted.
• The API processes your data transiently to generate a response. Anthropic does not retain your data after the response is returned.
• Your data is never used to train Anthropic's AI models. This is covered under Anthropic's API usage policy.
• Insights generated are saved to your account only in Enjour's Firestore database, not shared with any third party.

For more detail, see Anthropic's privacy policy at anthropic.com/privacy.

8. International Data Transfers (GDPR)

If you are located in the European Union or European Economic Area, your data is transferred to and processed in the United States via Google Firebase (see Section 4). This transfer is conducted under Google Cloud's Standard Contractual Clauses (SCCs), a mechanism approved by the European Commission for lawful international data transfers under the General Data Protection Regulation (GDPR). Firebase's terms and SCCs apply automatically to Enjour as a Firebase customer — see firebase.google.com/support/privacy for details.

9. Your Rights

Depending on your location, you may have rights including:

• Access: Request a copy of your data.
• Deletion: Delete your account and all associated data from within the app.
• Portability: Request your data in a structured format.
• Correction: Update incorrect data directly within the app.
• Lodge a complaint: If you are in the EU/EEA, you have the right to lodge a complaint with your local data protection supervisory authority, independent of contacting us directly.

To exercise any of these rights, contact us at [email protected].

10. Children's Privacy

Enjour is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has created an account, contact us at [email protected] and we will delete it promptly.

11. Changes to This Policy

If we make material changes to this policy, we will notify you via the app or email before the changes take effect. Continued use of Enjour after changes constitutes acceptance of the updated policy.

12. Contact

For any privacy questions or concerns: [email protected]