JiWell — Privacy Policy
Welcome to Jiwell. Jiwell is a brand, trademark, and application wholly owned and operated by Evoflex AB (Org.nr: 559498-1796). We are committed to handling your personal data securely and in accordance with GDPR and Swedish data protection law.
1. Introduction and Legal Entity
This policy describes how we collect, use, store and protect personal data across the Jiwell application and services.
2. The Data Controller
Evoflex AB serves as the Data Controller.
- Company Name: Evoflex AB
- Organization Number: 559498-1796
- Contact Email: info@evoflex.se
3. Data We Collect and Why
A. Account & Identity Data
Name, email, password and profile details — used to create your account, verify identity and provide support.
B. Health & Biometric Data (Special Category)
Diet plans, workout logs, body measurements and body fat percentage — used to calculate fitness progress, personalise recipes and track physical development. We process this highly sensitive data only based on your explicit consent.
C. E-commerce & Financial Data
Billing and shipping address, purchase history and cashback balances — used for transactions, fulfilment and rewards. Payment processing is handled by secure third-party gateways (e.g. Stripe, Klarna). Evoflex AB does not store your full credit card numbers.
D. User-Generated Content (Community)
Posts, comments, images and community interactions. Information shared in Community may be visible to other users.
E. Technical & Usage Data
Device identifiers, IP addresses, operating systems and interaction logs — used for security, debugging and performance.
4. How We Share Your Data
Evoflex AB does not sell your personal data. Data is shared only with trusted third parties under data processing agreements:
- Cloud hosting providers
- Payment processors
- Fulfilment partners
- Legal compliance authorities when required
5. Data Security (Zero Trust Approach)
We implement encryption in transit and at rest, a secure modular design and strict access controls. Access to your sensitive health data is restricted to you and the automated systems required to generate your personal insights.
6. Data Retention
- Health data: deleted upon account deletion
- Financial transaction data: retained up to 7 years per Swedish accounting law
- Community posts: may remain anonymised after deletion unless removal is requested
7. Your GDPR Rights
- Access: request copies of your personal data
- Rectification: correct inaccurate information
- Erasure: request account and data deletion
- Restriction: temporarily halt processing
- Data Portability: receive health data in a structured format
- Withdraw Consent: revoke health data processing consent (limiting functionality)
Contact info@evoflex.se to exercise these rights.
8. Changes to this Policy
Evoflex AB reserves the right to update this Privacy Policy as our services evolve. Significant changes will be notified via the app or email before they take effect.
9. Contact Us
Evoflex AB
Org.nr: 559498-1796
Email: info@evoflex.se
Address: Drottninggatan 15, 702 10 Örebro
