Jayo — Small steps, made for real life

The ground rules, in plain language.

Effective and last updated September 2, 2026

1. Agreement and scope

These Terms of Service (the “Terms”) are a binding agreement between you and How It’s Built, LLC (“Jayo,” “we,” “us,” or “our”). They govern your access to and use of the Jayo mobile and watch applications, this website, beta releases, and related content, features, and services (collectively, the “Service”). By accessing or using the Service, you agree to these Terms and our Privacy & Consumer Health Data Notice. If you do not agree, do not use the Service.

If you use Jayo for an organization, you represent that you have authority to bind that organization. Any short summary is for convenience only; these complete Terms control.

2. Adult-only eligibility

You must be at least 18 years old and have reached the age of legal majority where you live. Jayo is not directed to children or minors. You may not create an account or use the Service if you do not meet this requirement, if we previously suspended you, or if applicable law prohibits your use.

3. General wellness service—not medical care

Jayo provides general wellness, fitness, educational, and organizational information. Jayo is not a medical device, health-care provider, therapist, dietitian, emergency service, or substitute for qualified professional judgment. Nothing in the Service creates a clinician-patient or other professional relationship or constitutes medical advice, diagnosis, treatment, prescription, or a guarantee of results.

Do not use Jayo to diagnose a condition or make decisions about medication, treatment, or emergency care. Seek advice from an appropriately qualified professional about symptoms, injuries, pregnancy, medications, eating concerns, mental health, or whether an activity is suitable for you. If you think you may be experiencing an emergency, contact local emergency services immediately; do not wait for or rely on Jayo.

4. AI limitations

Parts of the Service use artificial intelligence. AI-generated output may be inaccurate, incomplete, outdated, repetitive, or unsuitable for your circumstances, even when it sounds confident. Safety checks reduce risk but cannot eliminate it. Review outputs, use reasonable judgment, and verify important information with reliable sources or a qualified professional before acting on it. Jayo does not promise a particular health, fitness, training, sleep, nutrition, or habit outcome.

5. Physical activity and safety

Physical activity involves risks, including falls, overexertion, injury, illness, property damage, and—in rare cases—serious harm or death. You are responsible for choosing an appropriate environment, equipment, intensity, and supervision. Obtain professional clearance when appropriate. Stop an activity and seek appropriate help if you experience pain, faintness, chest discomfort, unusual shortness of breath, confusion, or another concerning symptom. Do not interact with Jayo while doing so would be unsafe, including while driving or crossing traffic.

6. Accounts and security

You must provide accurate information, maintain the security of your credentials and devices, and promptly tell us about suspected unauthorized access. You are responsible for activity under your account except to the extent caused by our breach of these Terms or applicable law. Do not share an account or impersonate another person. We may require verification before acting on an account or privacy request.

7. Your content

“Your Content” includes information you submit or create through Jayo, such as coach messages, notes, goals, preferences, workout and habit records, meal photos, and feedback. You retain ownership of Your Content. You grant us a worldwide, non-exclusive, royalty-free license to host, reproduce, transmit, format, analyze, and otherwise process Your Content only as reasonably necessary to operate, personalize, secure, support, and improve the Service, comply with law, and exercise our rights under these Terms. This license ends when the content is deleted from our active systems, except for limited backup, legal, security, and de-identified uses described in the Privacy Notice.

You represent that you have the rights and permissions needed to provide Your Content and that doing so does not violate law or another person’s privacy, confidentiality, or intellectual-property rights. Do not upload another person’s health information, image, or precise location without authority and consent.

8. Acceptable use

You may not, and may not help another person to:

use the Service unlawfully, fraudulently, or to harm, threaten, or exploit anyone;
submit malware, dangerous instructions, unlawful content, or content that violates others’ rights;
probe, disrupt, overload, bypass, or defeat security, safety, access, or rate controls;
access another user’s account or data, scrape the Service, or use automated means without written permission;
reverse engineer or derive source code except where applicable law expressly permits it;
use Service output to develop or train a competing model or service, or misrepresent output as professional medical advice; or
use Jayo for clinical care, emergency monitoring, high-risk decision-making, or any purpose for which failure could foreseeably cause serious harm.

9. Device permissions and integrations

Optional features may request access to Apple Health, location, motion, camera, photos, microphone, speech recognition, notifications, or a connected service such as Strava. You control these permissions through Jayo, your device, Apple Health, or the connected service. Some features will not work without the relevant permission. Revoking access stops future collection but may not delete information you already chose to import or share; use Jayo’s deletion controls or contact us for deletion.

You are responsible for following the terms of Apple, Strava, your wireless carrier, and other third-party services you choose to connect. Jayo is not responsible for third-party services, their availability, or their independent handling of data.

10. Third-party content and attribution

The Service may display maps, research references, exercise demonstrations, and other content supplied by third parties. That content may be changed, removed, or subject to separate terms. Exercise data and videos provided by MuscleWiki.com. Certain exercise illustrations may be available under open licenses, with required attribution presented with the content.

11. License and ownership

Subject to these Terms, we grant you a limited, personal, revocable, non-exclusive, non-transferable license to use the Service for its intended purpose. The Service—including its software, design, text, trademarks, and other content—is owned by us or our licensors and protected by law. No rights are granted except as expressly stated.

If you provide feedback, you grant us a perpetual, irrevocable, worldwide, royalty-free right to use it without restriction or compensation, provided we do not publicly identify you without permission.

12. App stores

For an Apple App Store download, Apple’s Standard Licensed Application End User License Agreement governs the app license unless Apple presents an approved custom EULA. These Terms govern Jayo’s Service and supplement that license. The agreement is between you and us, not Apple; we, not Apple, are responsible for Jayo, support, product claims, and third-party intellectual-property claims. Apple has no warranty obligation beyond any refund required by its terms. Apple and its subsidiaries are intended third-party beneficiaries of this paragraph and may enforce it.

13. Beta status, changes, and availability

Pre-release and beta features may be incomplete, confidential when identified as such, and more likely to contain errors or lose data. “Coming soon” materials do not guarantee a release date, territory, platform, price, or feature. We may add, modify, suspend, or discontinue any part of the Service. We do not guarantee that the Service will always be secure, available, uninterrupted, or error-free.

14. Suspension and termination

You may stop using Jayo at any time and may request account deletion as described in the Privacy Notice. We may restrict or terminate access if reasonably necessary to protect users or the Service, comply with law, address fraud or security risk, or respond to a material breach of these Terms. Where appropriate, we will provide notice and an opportunity to resolve the issue. Provisions that by their nature should survive—including ownership, disclaimers, liability limits, and dispute provisions—will survive termination.

15. Disclaimers

TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE.” JAYO AND ITS LICENSORS DISCLAIM ALL EXPRESS, IMPLIED, AND STATUTORY WARRANTIES, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, ACCURACY, QUIET ENJOYMENT, AND WARRANTIES ARISING FROM COURSE OF DEALING OR USAGE OF TRADE. WE DO NOT WARRANT ANY PARTICULAR RESULT OR THAT CONTENT, SENSOR DATA, ROUTES, REMINDERS, AI OUTPUT, OR THIRD-PARTY CONTENT WILL BE ACCURATE, COMPLETE, SAFE, OR AVAILABLE. SOME JURISDICTIONS DO NOT ALLOW CERTAIN DISCLAIMERS, SO SOME OF THESE TERMS MAY NOT APPLY TO YOU.

16. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, JAYO AND ITS AFFILIATES, OFFICERS, EMPLOYEES, CONTRACTORS, LICENSORS, AND AGENTS WILL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, REVENUE, DATA, GOODWILL, OR BUSINESS INTERRUPTION, ARISING OUT OF OR RELATED TO THE SERVICE, EVEN IF ADVISED OF THE POSSIBILITY. OUR TOTAL LIABILITY FOR ALL CLAIMS ARISING OUT OF OR RELATED TO THE SERVICE WILL NOT EXCEED THE GREATER OF US$100 OR THE AMOUNT YOU PAID US FOR THE SERVICE IN THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM.

These limits do not apply to liability that cannot lawfully be excluded or limited, including where applicable liability for fraud, willful misconduct, gross negligence, or personal injury caused by negligence. Your non-waivable consumer rights remain in effect.

17. Indemnity

To the extent permitted by law, you will defend, indemnify, and hold harmless Jayo and its affiliates, officers, employees, contractors, licensors, and agents from third-party claims, losses, liabilities, and reasonable costs (including attorneys’ fees) arising from your unlawful use of the Service, Your Content, or your material breach of these Terms. This obligation does not apply to the extent a claim results from our own unlawful conduct.

18. Governing law and disputes

These Terms are governed by the laws of the Commonwealth of Massachusetts, without regard to conflict-of-law rules. Any dispute not resolved informally will be brought exclusively in the state or federal courts located in Suffolk County, Massachusetts, and each party consents to their jurisdiction. If the law where you live gives you mandatory consumer rights or permits disputes in your local courts, this paragraph does not take those rights away.

Before filing a claim, please send a written description to support@howitsbuilt.io and allow 30 days for a good-faith effort to resolve it, unless urgent relief is needed or the applicable limitations period would expire.

19. Export and legal compliance

You represent that you are not located in a country or region subject to a U.S. government embargo or designated as supporting terrorism and are not on a U.S. government restricted-party list. You must comply with applicable export, sanctions, health, privacy, and other laws.

20. Changes and general terms

We may update these Terms. If a change materially affects your rights, we will provide notice as required by law and state when the revised Terms take effect. Continued use after that date constitutes acceptance where permitted; otherwise, we will request consent. If a provision is unenforceable, it will be limited to the minimum extent necessary and the rest will remain effective. Our failure to enforce a provision is not a waiver. You may not assign these Terms without our consent; we may assign them in connection with a reorganization, financing, merger, sale, or transfer of the Service. These Terms and incorporated notices are the entire agreement about the Service.

21. Contact

Questions, complaints, or claims may be sent to How It’s Built, LLC at support@howitsbuilt.io.

jayoBack to Jayo

Privacy & Consumer Health Data

Your data should have a clear job.

Effective and last updated September 2, 2026

1. Who we are and what this notice covers

How It’s Built, LLC (“Jayo,” “we,” “us,” or “our”) is the controller of personal data described in this Privacy & Consumer Health Data Notice (“Notice”). This Notice explains how we collect, use, disclose, retain, and protect information through the Jayo iPhone and Apple Watch apps, this website, beta programs, support, and related services (the “Service”). It also serves as Jayo’s consumer health data privacy policy where laws such as Washington’s My Health My Data Act apply.

2. Information we collect

Category	Examples	Primary source
Account and contact	Email, display name, internal user ID, sign-in provider, support messages	You; authentication provider
Profile and preferences	Time zone, goals, intentions, constraints, availability, routines, equipment, coaching preferences	You
Wellness and health	Activity, workout, heart-rate summaries, sleep, mindfulness, meals, habits, goals, reflections, and related inferences	You; Apple Health; your devices
Precise location and motion	Workout route coordinates and timestamps; motion classifications used for workout pause/resume	Your device, only with permission during relevant workouts
User content	Coach conversations, notes, meal photos, confirmed food labels, feedback, and message transcripts you send	You
Activity and device	Workout type, date, duration, distance, reps, weights, effort, source app/device, app version, OS, notification token and delivery status	You; your device; connected services
Connected services	Strava athlete identifier, display name, granted scopes, encrypted connection tokens, and sharing status	The service you choose to connect
Technical and support	IP address, request time, browser/device type, diagnostics, security events, aggregate model usage and latency	Your browser/device; our systems and hosting providers

Please do not submit information we do not need, including government identifiers, financial-account credentials, clinical records, or another person’s sensitive data.

3. Apple Health and workout data

If you choose to connect Apple Health, Jayo may request permission to read the specific categories shown by Apple at the time of the request, currently including step count, Apple exercise time, heart rate, workouts, sleep analysis, mindful sessions, and Cardio Fitness (VO₂ max). You may grant only some categories, and you may revoke access in Apple Health or device settings.

For recent wellness context, the app reduces available Apple Health samples on your device into limited summaries. When you send a coach message, the current summary may be transmitted with that request so Jayo and its contracted AI processor can personalize the response. Jayo’s application database does not retain the raw current-health snapshot as a standalone profile record.

If you enable workout import, Jayo retains a summary that may include the HealthKit object identifier, broad activity type, start and end time, duration, available distance, and source app name and bundle identifier. Imported workouts exclude calorie values, detailed heart-rate samples, and workout routes. Workouts recorded with Jayo may separately include a route and average or maximum heart-rate values. When you choose to record a workout with Apple Watch or enable sharing to Apple Health, Jayo may write the completed workout to Apple Health.

We do not use information obtained through HealthKit for advertising, marketing, unrelated data mining, eligibility decisions, or training public or general-purpose AI models; sell it to data brokers or information resellers; or disclose it except to service providers supporting Jayo’s health and fitness functions or as you expressly direct. Revoking HealthKit access stops future access but does not automatically delete workout summaries already imported into Jayo.

4. Location, meals, dictation, notifications, and Strava

Location and motion

Jayo accesses precise location only after you start a supported outdoor workout and grant permission. Route points, timestamps, and workout metrics may be retained with the completed activity. Motion signals may help pause and resume a workout; Jayo does not retain a continuous motion history for unrelated purposes. Map providers may receive technical requests needed to display map tiles under their own terms.

Meal photos

When you choose a meal photo, it is uploaded to private, access-controlled storage. If you request photo analysis, Jayo sends the image and any optional food hint to a contracted multimodal AI provider. Proposed food labels are editable and are not treated as confirmed meal facts until you confirm them. If you save the meal, the photo, note, confirmed labels, and qualitative roles may remain with your account. Jayo does not use the photo to estimate allergens, diagnoses, calories, or portions.

Dictation and notifications

Jayo’s in-app dictation requires supported on-device speech recognition. Jayo does not upload or save the microphone audio; only message text you choose to send becomes account content. If you enable notifications, we process a device token, installation identifier, time zone, and delivery information to provide reminders and account messages. Notification previews may be visible to people with access to your device.

Strava

If you connect Strava, Jayo receives the identifiers, profile details, permissions, and tokens needed for the connection. We encrypt stored tokens. A completed run is shared only when you turn on sharing for that activity; the shared record may include its title, type, time, duration, distance, and—if available—route and timestamps in a GPX file. Disconnecting Strava stops future sharing but does not remove activities already sent to Strava; manage those in Strava.

5. Consumer Health Data Notice

“Consumer health data” can include information that identifies or can reasonably be linked to you and reveals or may be used to infer your physical or mental health. For Jayo, this may include the wellness, exercise, heart-rate summary, sleep, mindfulness, nutrition, habit, goal, precise-location, and coaching information described above.

We collect consumer health data from you, your device and Apple Health with your permission, connected services you direct us to use, and inferences created to return features such as summaries or recommendations. We collect and use it to provide the feature you request, personalize your wellness experience, maintain your history, keep the Service secure, troubleshoot, and comply with law. We share only the categories needed with processors supporting cloud infrastructure, authentication, AI generation or image analysis, and integrations you direct, as detailed in Section 8. We have no affiliates with whom we share consumer health data as of the effective date of this Notice.

We do not sell consumer health data. We do not use or share it for targeted advertising, profiling that produces legal or similarly significant effects, or to geofence a health-care facility. We will obtain any consent required before collecting or sharing an additional category for a new purpose. If a future transfer qualifies as a “sale” under consumer health data law, we will obtain a separate valid authorization before it occurs.

Subject to applicable law, you may confirm whether we collect or share your consumer health data; access it, including a list of third parties or affiliates that received it where required; withdraw consent; or request deletion. A deletion request extends to active systems and, where required, processors and backup copies under their ordinary restoration or deletion schedules. You may appeal a denial by replying to our decision. Submit requests to support@howitsbuilt.io. If an appeal is denied, we will explain how to contact the appropriate regulator where required.

6. How and why we use information

Provide the Service: authenticate you; deliver coaching, workouts, plans, reminders, histories, maps, meal tools, and integrations; and sync across supported devices.
Personalize: adapt suggestions to the goals, preferences, recent context, capacity, and information you choose to provide.
Communicate: send requested reminders, service notices, security messages, and support responses. We will request consent for promotional email where required.
Protect and maintain: prevent abuse, enforce terms, diagnose errors, measure aggregate reliability, and maintain security.
Improve: evaluate features and improve Jayo using minimized, aggregated, de-identified, or appropriately consented information.
Comply: meet legal obligations, respond to valid process, and establish or defend legal claims.

Where the GDPR, UK GDPR, or similar law applies, our legal bases are performance of our contract when we provide requested features; your consent for optional health, location, camera, microphone, notification, connected-service, and promotional uses; our legitimate interests in security, support, and proportionate improvement; and compliance with legal obligations. We rely on explicit consent or another permitted legal basis when processing health data that receives special protection.

7. AI processing

To generate a requested response or meal-photo analysis, Jayo sends a limited set of relevant inputs to a contracted AI provider. Depending on the feature, these inputs may include your message, bounded recent conversation, profile preferences, recent activity or wellness summaries, and a meal image you chose for analysis. AI output and selected summaries may be retained in your Jayo history.

We do not authorize AI providers to use Jayo personal data to train publicly available or general-purpose models. We require service providers to protect data consistently with their contracts and applicable law. Jayo does not use AI to make decisions that produce legal or similarly significant effects. Do not include information in a coach message that you do not want processed for that request.

8. When we disclose information

Recipient category	Examples and purpose	Data involved
Infrastructure and security processors	Cloudflare for this site; Google Cloud for application hosting; Supabase for authentication, database, and private storage	Account, content, health/wellness, images, routes, device and technical data as needed
AI processors	Enterprise or API services from providers such as Google or OpenAI, depending on the production configuration and feature	Only the prompt context, summary, or image needed for the requested feature
Platform providers	Apple for app distribution, HealthKit permissions, Apple Health, notifications, maps, purchases, and optional sign-in	Platform, permission, device, purchase, map-request, and health data you direct through Apple
Optional sign-in providers	Apple, Google, or Meta when you choose their sign-in method	Authentication request and provider-returned account identifier/contact data
User-directed integrations	Strava when you connect it and choose to share an activity	Connection details and the activity data you direct us to send
Content and reference providers	Exercise media services such as MuscleWiki and YMove; USDA FoodData Central for a confirmed food-label lookup	Exercise request or confirmed food search term plus ordinary technical request data; not your full Jayo profile
Professional advisers and authorities	Lawyers, auditors, insurers, courts, regulators, and law enforcement when reasonably necessary and lawful	Information relevant to the legal, safety, audit, or compliance matter
Corporate transaction recipients	A buyer, investor, lender, or successor in a merger, financing, reorganization, or sale, subject to safeguards required by law	Relevant business records, potentially including personal data

We do not sell or rent personal data. We do not “share” personal data for cross-context behavioral advertising, use sensitive data to infer characteristics for advertising, or permit third parties to target ads based on Jayo health, fitness, meal, location, or coaching data. We also do not knowingly disclose such data to data brokers. If these practices change, we will update this Notice and provide any required notice, consent, or opt-out before the change applies.

9. Cookies and the coming-soon website

The current Jayo coming-soon page has no account form, advertising technology, session replay, or analytics and does not set first-party tracking cookies. Our hosting and security providers may automatically process ordinary request data—such as IP address, browser type, request time, and security signals—to deliver and protect the site. If we later add analytics, a waitlist, or non-essential cookies, we will update this Notice and obtain consent where required.

10. Retention and deletion

We keep account and user content while your account is active and as reasonably necessary to provide the Service. Specific records may be retained for a shorter period when a feature is transient, or longer when reasonably necessary for security, fraud prevention, dispute resolution, tax or accounting, legal compliance, or to establish and defend claims. OAuth tokens are retained only while the connection remains active or until they are revoked. A current Apple Health summary is not retained as a standalone database record, while imported workout summaries are kept with your activity history. Saved meal photos and routes remain until the associated content or account is deleted, subject to the exceptions above.

After a verified deletion request, we delete or de-identify covered information from active systems unless retention is required or permitted by law. Residual copies may remain temporarily in protected backups and security logs until they expire under ordinary schedules and are not restored except for disaster recovery. We instruct processors to delete covered data when required. We may retain aggregated or de-identified information and will not attempt to re-identify it except to test our de-identification safeguards where permitted by law.

Deleting the Jayo app from a device does not delete your account or server-side records. Use the account-deletion control when available or contact us to request deletion.

11. Your controls and privacy rights

You can manage many choices in Jayo, Apple Health, device settings, and connected services. Depending on where you live, you may have rights to know or access your personal data; correct it; receive a portable copy; delete it; withdraw consent; restrict or object to processing; opt out of a sale, targeted advertising, or certain profiling; and receive equal service without discrimination for exercising a right. Because Jayo does not sell data or use it for targeted advertising, there is no sale or advertising opt-out to apply today, including through Global Privacy Control signals.

Send a request to support@howitsbuilt.io. We may verify your identity and authority to protect your account. An authorized agent may submit a request where allowed, but we may require proof of authorization and direct identity confirmation. If we deny a request, you may appeal by replying to our decision. These rights are subject to lawful exceptions.

People in the EEA, United Kingdom, or Switzerland may also complain to their local data-protection authority. California residents may exercise applicable rights to know, correct, delete, and limit certain sensitive-data uses and are protected from discrimination. Nothing in this section suggests that a law applies to Jayo when its legal thresholds or scope are not met; we may choose to honor a request more broadly.

12. Security

We use administrative, technical, and organizational safeguards designed for the nature of the data, including encrypted network transport, access controls, user-scoped database rules, private image storage, expiring image links, token protection, and data minimization. No system is perfectly secure. You are responsible for protecting your device and credentials. If a qualifying breach occurs, we will provide notices required by applicable law.

13. International transfers

Jayo is operated from the United States. We and our providers may process information in the United States and other countries whose laws may differ from yours. Where required, we use recognized safeguards for cross-border transfers, such as adequacy decisions, contractual protections, or another lawful mechanism.

14. Adults only

Jayo is not directed to anyone under 18, and we do not knowingly collect personal data from children or minors. If you believe a minor has provided data, contact us so we can investigate and delete it as appropriate. We do not condition this deletion on a parent or guardian providing more information than reasonably necessary to verify and complete the request.

15. HIPAA

Jayo is offered directly to consumers for general wellness and is not acting as a health plan, health-care clearinghouse, or health-care provider. Unless we expressly enter a written business-associate arrangement for a specific service, information you provide to Jayo is not protected by HIPAA. Other privacy, consumer-protection, health-data, and breach-notification laws may still apply, and this Notice describes our commitments regardless of HIPAA status.

16. Changes to this Notice

We may update this Notice to reflect product, legal, or operational changes. We will post the revised date and provide additional notice or obtain consent when required. Material changes to the collection or sharing of consumer health data will not apply retroactively without any consent required by law.

17. Contact us

For questions, privacy requests, consumer health data requests, or complaints, contact:

How It’s Built, LLC
Massachusetts, United States
support@howitsbuilt.io

jayoBack to Jayo

Small steps.Made for real life.