Privacy Policy

Your data, your rights. Sokkai will never sell your personal data. We comply with the Singapore PDPA 2012, the GDPR, and equivalent laws worldwide.

1. Introduction

This Privacy Policy explains how JAB Productions PTE. LTD. (trading as Sokkai, "we", "us", or "our") collects, stores, uses, and shares personal data when you use the Sokkai mobile application (the "App") and sokkai.com (the "Website"), including subdomains, products, and services (together, the "Services"). JAB Productions PTE. LTD. is incorporated in Singapore and is the data controller.

Sokkai is an AI-powered wellness platform for women, including fitness planning, nutrition guidance, menstrual cycle tracking, wellness monitoring, and an AI wellness information assistant. We may update this policy and will notify you of material changes by email or in the App.

2. Personal Data We Collect

2.1 Data you provide

Account: name (optional), email, date of birth or age, password, country and time zone, language, sex or gender.

Wellness data (special category data) may include weight, height, BMI, body temperature, menstrual cycle details, symptoms, mood and stress, sleep, energy, fitness activity, nutrition, conditions, injuries, medications, and questions to the AI assistant.

With permission we may import data from Apple HealthKit and Google Health Connect (activity, heart rate, steps, sleep, temperature). Those imports follow the third-party privacy policies.

2.2 Data collected automatically

Device model and OS, device identifiers, accessibility features, network information, storage; IP address for approximate location only (not precise location); usage of features; payment transaction metadata excluding full card numbers.

3. How We Use Personal Data

Legal bases: consent, contract, legitimate interests, and legal obligation. We do not sell personal data. We do not use HealthKit or Health Connect data for advertising. The AI assistant is informational only and is not medical advice.

4. Your Rights

GDPR-standard rights worldwide: access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and complaint to the PDPC. Contact support@sokkai.com or dpo@sokkai.com.

5. Third-Party Processing

Processors may include AWS, Cloudflare, Auth0/Okta, Anthropic or OpenAI, SendGrid/Twilio, Firebase/Google, Stripe, Apple, Google, Mixpanel or Amplitude, Zendesk, and Edamam or Open Food Facts. Wellness data is never shared with marketing partners.

6. Retention

Deletion requests are processed within one month; backups may take 90 days. Inactive accounts are deleted after three years unless you ask sooner.

7. Security

TLS 1.3 in transit, AES-256 at rest, access controls, and processor contracts.

8. International Transfers

We are based in Singapore. Transfers use SCCs, adequacy decisions, or equivalent safeguards.

9. Children

13+ generally; 16+ in the EEA, UK, and Canada without verified parental consent.

10. Changes

Material changes are emailed and shown in the App.

11. Contact

Support: support@sokkai.com
DPO: dpo@sokkai.com
PDPC: www.pdpc.gov.sg