Bonjou — Privacy Policy

The short version

Bonjou does not collect your data. Everything you enter — your medications, supplements, schedule, profiles, and food checks — stays on your iPhone. If you use iCloud, it syncs privately through your own Apple iCloud account, which we cannot access. If you choose to share a read-only view of a routine with a caregiver, that too travels only through your own iCloud, encrypted, and we still cannot see it (see "Live caregiver monitoring" below). We have no servers that receive your health information, no third-party analytics, and no advertising. We do not sell, rent, or share your data with anyone. (The app does send a little anonymous, non-personal usage and purchase data to our own dashboard — see "Anonymous analytics & purchase reporting" below.)

What information Bonjou handles, and where it lives

We do not operate a backend server that receives your personal or health information. We have no account system — there is no login, no email collection, no user database.

iCloud sync

If you enable iCloud sync (a Bonjou Plus feature), your Bonjou data syncs through Apple's CloudKit private database tied to your Apple ID. This keeps your data consistent across your own devices. We cannot read your private CloudKit data — Apple acts only as a processor on your behalf. Your data is governed by Apple's iCloud terms and privacy policy while in transit and at rest in iCloud.

Apple Health (HealthKit)

If you choose to import medications from Apple Health, Bonjou reads that information on your device only. Per Apple's requirements and our own design:

• Health data is never transmitted to us or any third party.
• Health data is never used for advertising or marketing.
• We do not write data to Apple Health.
• You can revoke Bonjou's Health access at any time in iOS Settings → Privacy & Security → Health.

Permissions Bonjou may request, and why

• Apple Health (read) — to import your medication list so you don't retype it. Optional.
• Camera — to scan a supplement label or barcode when adding an item. Optional; images are processed on-device and not stored or transmitted.
• Calendar — only if you turn on calendar mirroring, to add your dosing schedule to your own calendar. Optional.
• Notifications — to remind you at your scheduled dose times. Optional.

Declining any permission simply disables that convenience feature; the app otherwise works fully.

On-device intelligence

Bonjou uses Apple's on-device Foundation Models (Apple Intelligence) on supported devices to help interpret food entries and summarize interactions. This processing happens entirely on your iPhone. No prompts, food entries, or health information are sent to us or to any cloud AI service.

Interaction reference database

To keep its interaction information current, Bonjou downloads a public, read-only reference database (sourced from FDA labels, NIH, and similar public sources). This is a one-way download of general reference data — Bonjou sends no personal information, no medication list, and no usage data to retrieve it. Your medications and health data are never transmitted as part of this update.

What we do NOT do

• We do not use third-party analytics; the only reporting that leaves your device is the anonymous, non-personal analytics described below.
• We do not use advertising SDKs or ad tracking, and we do not ask for App Tracking Transparency permission because we don't track you.
• We do not sell or share your information with data brokers or advertisers.
• We do not create profiles of you for marketing.

Sharing a profile (.bonjou export)

Bonjou lets you export a profile as a .bonjou file to share with a caregiver (for example, via AirDrop or Messages). This only happens when you initiate it and choose the destination. We are not involved in and cannot see that transfer.

Live caregiver monitoring (Bonjou Plus)

Bonjou Plus lets you share a read-only, live view of a profile's daily routine with a caregiver you choose — for example, an adult child keeping an eye on a parent's medication adherence from their own phone.

• You start it, and you choose who. Sharing only begins when you tap "Share monitoring" and invite a specific person. Nothing is shared automatically.
• What the caregiver can see: the item names, doses, and whether each was taken, skipped, or is still pending for the day — read-only. They cannot change your schedule, your items, or anything else in your app.
• Where it travels: through your own Apple iCloud account using Apple's CloudKit sharing (CKShare). The shared information is encrypted and moves directly between your iCloud and the caregiver's iCloud. We never receive it and cannot read it — Apple acts only as a processor on your behalf, exactly as with your own private iCloud sync.
• No alerts to the caregiver. Bonjou does not send the caregiver notifications about your doses or any missed doses; they simply see your log when they open the app.
• You can stop at any time. Turning it off (Manage people → Stop sharing) immediately revokes access; the caregiver's view stops updating and no longer shows your routine. The caregiver is not notified when you stop.

Both sharing a routine and watching someone else's require Bonjou Plus.

Your control and choices

• Delete your data: Because data is stored on your device (and your own iCloud), you can remove it at any time by deleting items in the app, using "Reset all data" in Settings, or deleting the app. Deleting the app removes local data; to remove iCloud copies, also delete Bonjou data from iCloud in iOS Settings.
• Export: You can export a profile as a file at any time.
• Revoke permissions: Manage Health, Camera, Calendar, and Notification access in iOS Settings.

Children's privacy

Bonjou is intended for adults managing their own or their family's supplements and medications. It is not directed to children under 13 (or the equivalent minimum age in your region), and we do not knowingly collect information from children. Because we collect no data, no special children's-data processing occurs.

Legal & regulatory

Although Bonjou is a direct-to-consumer app and not subject to HIPAA, we honor consumer health-data expectations, including the FTC Health Breach Notification Rule and applicable U.S. state health-data laws (e.g., Washington's My Health My Data Act). Since your health information never leaves your device or your private iCloud, the risk surface is minimal by design. If our practices ever change in a way that involves collecting data, we will update this policy and obtain consent where required.

Changes to this policy

If we update this policy, we will revise the effective date above and, for material changes, surface a notice in the app. Continued use after an update means you accept the revised policy.

Anonymous analytics & purchase reporting

The app reports a few anonymous things to our own dashboard (called Proceeds, hosted for us by Supabase) through our first-party analytics component, PulseKit. Each is tied only to a random install identifier created on your device — it is not your Apple ID, IDFA, or IDFV, is not linked to your name or identity, and is not used to track you across other apps or companies. None of it includes the content you create in the app.

• A once-a-day "app opened" ping — a count that the app was opened, with the app version and OS version, so we can gauge how many people use the app.
• A purchase report — if you buy or restore a purchase, the Apple-signed transaction details (product identifier, transaction identifier, and date) are relayed so the sale is recorded. This contains no payment card details and no identity.
• A daily subscription-status snapshot — if the app offers a subscription, once a day PulseKit reports whether a subscription is currently active and which plan, so we can count active subscribers in aggregate. If the app has no subscription, nothing is sent here.

This reporting is built into the app; it does not read or transmit the content you create. In App Store terms it maps to Product Interaction, Purchase History, and a Device ID (the random install identifier), all declared as not linked to your identity and not used for tracking.

Contact

Questions about privacy? Contact Hello Good Day LLC at hi@hellogoodday.com