JOAN

Privacy Policy

Last updated: May 30, 2026 · Pilot version

1. What we collect during a screening

When you use JOAN, the following happens:

• Your typed answers are sent to JOAN's server and then forwarded to our AI provider (Anthropic) to generate follow-up questions and the final screening result.
• Your screening result (scores and clinical brief) is returned to your browser. It is not saved to any JOAN account.
• Your session ends when you close your browser tab. At that point, JOAN's servers do not retain the raw text of your conversation.

2. What we do store, on aggregate

JOAN records anonymous, aggregate counters so we can understand how the pilot is being used and manage capacity responsibly. These counters include:

• Number of screenings started and completed per day and per month
• Distribution of concern-level outcomes (minimal, mild, moderate, high)
• Frequency at which the self-harm crisis pathway is surfaced
• Average time to complete a screening
• Number of times the "at capacity" screen was shown

None of these counters are linked to individual users, to conversation content, or to any identifying information.

3. Rate limiting

To keep the pilot open to as many people as possible, JOAN limits how many screenings can be completed from a single network address in a 24-hour window. To enforce this we temporarily store a counter keyed by your IP address. This counter expires automatically after 24 hours and is never combined with any other data about you.

4. Email waitlist

If you choose to submit your email address for future updates about JOAN, we store that email address along with the date submitted. Your email is not linked to any screening result you produced. You may request removal from the waitlist by emailing help@hellojoan.co.

5. Third parties

JOAN uses the following third-party service providers to operate:

• Anthropic (AI model provider). During your conversation, the text you type is sent to Anthropic to generate follow-up questions and scoring. Anthropic's own privacy policies apply to that transmission. JOAN does not currently operate under a Business Associate Agreement (BAA) with Anthropic. This is why we ask you not to include identifying information in your conversation during the pilot.
• Vercel (hosting provider). JOAN runs on Vercel infrastructure. Vercel collects standard server logs (IP address, request timestamps) for security and operational purposes.
• Redis (Marketplace) (data store). Anonymous counters and email addresses are stored in a managed Redis instance connected to the JOAN Vercel project.

6. Not HIPAA-covered during pilot

JOAN's pilot phase operates outside of HIPAA covered entity status. Do not use JOAN as a substitute for HIPAA-protected clinical intake. When JOAN moves out of pilot phase, this section will be updated with the applicable HIPAA framework.

7. Your rights

• You can request removal of your email from the waitlist at any time.
• Because JOAN does not persist raw conversation text or personally identifying data beyond the session and the optional waitlist email, there is no historical conversation record to request or delete.
• You can decline the consent screen at any time and JOAN will not proceed.

8. Children

JOAN is not intended for use by anyone under 18. We do not knowingly collect data from anyone under 18.

9. Changes to this Policy

As JOAN moves out of pilot phase, this Policy will be updated. Material changes will be posted here with a revised "Last updated" date.

10. Contact

Privacy questions or waitlist-removal requests: help@hellojoan.co.