Last updated 7 September 2026.
The short version
Everything you log stays on your phone. There is no account, no server holding your health data, and no analytics.
Four things leave your device, and only when you ask for them: a photo of a meal you choose to scan, a barcode you choose to scan, a message you choose to send Juno in chat, and a report you choose to export.
What is stored, and where
Your symptoms, cycle, mood, sleep, medications, meals, notes, lab results, and any body measurements are stored on this device only, in the app's own database. They are not uploaded, not backed up to our servers, and not synced to iCloud by the app.
Meal photos you take are saved on this device.
If you allow it, Juno reads four things from Apple Health: your step count, so days you were on your feet count towards your level; your weight, so readings from smart scales reach your chart without being typed in twice; finished workouts — what the activity was, how long it lasted, and when — so a session you recorded in another app is counted here as well; and hours of sleep, so a night your watch already measured fills in a night you did not type. How the night felt is never imported — Apple Health has no field for that, and it stays your answer. It reads nothing else from Health and writes nothing back to it, all four stay on this device, and the app works normally if you say no to any of them.
What leaves your device
Food scanning. When you scan a meal, the photo is sent to our server, which forwards it to Anthropic's Claude API to identify the food and estimate the portion, and then to the USDA FoodData Central database to look up nutrition figures for the food's name. The photo is not stored on our server. Anthropic processes it under their own terms; USDA receives only a text food name, never your photo and never anything else about you.
If you never scan a meal, no photo is ever sent.
Barcodes and nutrition labels do not work that way. Scanning a barcode sends the barcode number — nothing else, and no photo — to Open Food Facts, a public community food database, to look the product up. Photographing a nutrition label sends nothing at all: the text is read on your phone by iOS itself, and the photo never leaves the device.
Juno chat. This is the one place where your logged health data leaves the device, so it is worth being exact about what goes and what does not.
When you send a message in chat, your message and a summary of what you have logged are sent to our server, which forwards them to Anthropic's Claude API to write the reply. The summary is the same one the doctor report is built from: counts of how many days each symptom was logged and its average severity, your period dates and cycle lengths, medication names and how often you recorded taking them, lab results and their dates, your age, and any pattern you flagged to raise with a doctor. It covers the last six months.
What is not sent: your name, your free-text notes, your meal photos, your contacts, and anything Apple would call a device or advertising identifier. There is no account attached to it, so it does not arrive labelled as you.
Your conversation is stored on this device so that Juno remembers it. It is not stored on our server. Anthropic processes what is sent under their own terms.
If you never open chat, none of this is ever sent.
The install number. Scanning a meal, sending a chat message and looking up a supplement all carry one more thing to our server: a random number made when you first install the app. It is how the server counts how many scans and messages an install has made, which is what stops the free limits from being a suggestion.
It is a fresh random number and nothing else. It is not taken from your phone, your Apple Account, or anything about you, we cannot work backwards from it to you, and it is attached to no name, no email and no address. What the server keeps against it is a count, not a copy of what was sent. Reinstalling the app does not mint a new one, because a clean count on reinstall would make the limits meaningless.
The doctor report. When you export the PDF, it goes wherever you send it — Mail, Messages, Files, or another app you pick. We never see it.
What comes from Health does not leave. Your step count, your weight, your finished workouts and your hours of sleep are read from Health, used to work out the day's points, to draw your chart, and to show what you did on a day, and stored with the rest of your log on this device. None of it is sent to our server, and none of it is part of what chat sends.
Purchases. Subscriptions are handled by Apple. We never see your payment details. We receive only whether a subscription is active on your Apple Account.
What we do not do
- No accounts, no sign-in, no password.
- No analytics, no crash reporting, no advertising, no tracking of any kind.
- No selling or sharing of your data. There is no data on our side to sell.
- No profiling and no automated decisions about you.
Deleting your data
Settings → Delete everything erases every entry, photo, and setting on this device immediately and irreversibly.
Deleting the app removes all of it. Nothing is left behind on the device, and there is nothing on our side to delete.
Your subscription is held by Apple, not by us, and reinstalling does not change it. Cancel it in Settings › Apple Account › Subscriptions.
Children
PCOS Juno is not intended for anyone under 13.
Medical disclaimer
PCOS Juno is not a medical device. It does not diagnose any condition and does not recommend treatment. It records what you log and shows you what is in it. Decisions about your health belong to you and your doctor.
Changes and contact
If this policy changes in a way that affects what leaves your device, the app will say so before the change takes effect.
Questions: info@pcosjuno.com