We don't collect anything.

What the app does on your device.

TheraJoy stores a small amount of information locally so the app can work the way you'd expect:

• Session history. When a set ends, the app records its duration, pace, preset name, and the optional body-check tags or note-to-self you may have entered. This is saved in iOS's local database (SwiftData) and never leaves the device.
• Settings. Your defaults (preferred tone, volume, clinician mode toggle, whether you've completed onboarding) are saved in iOS UserDefaults, also on-device.
• Bluetooth pairing state. If you pair Joy-Cons, iOS manages that pairing in Bluetooth settings; the app uses Apple's GameController framework to read controller events. We don't store, sync, or report on your hardware.

If you delete the app, all of this data is removed by iOS. If you reinstall, you start from scratch.

What we don't collect.

• Your identity. No name, email, phone number, or account.
• Your content. Notes, session counts, journal entries — none of it is transmitted off your device.
• Analytics or telemetry. The app makes no analytics requests of any kind. There is no Sentry, no Firebase, no Mixpanel, no anything.
• Advertising identifiers. The app does not access IDFA and includes no ad SDK.
• Biometric or health data. No HealthKit access, no heart rate, no sleep, no location.
• Crash reports. Crashes reach Apple if you've opted in to share analytics with Apple at the iOS level; they never reach us.

Live pairing (optional).

If you choose to share a session with a second device — your own iPad, a partner, or a clinician — the app uses a small relay we operate at relay.therajoyapp.com to broker the connection. Here's exactly what crosses it and what doesn't.

What does cross the relay:

• A random 6-character pairing code, generated server-side and expiring in 10 minutes.
• Numeric or enumerated control commands sent during the session — tempo (a number in Hz), intensity (a number from 1 to 10), visual mode (orb / horizon / ambient), and start / stop / pause events.

What does not cross the relay:

• No name, email, phone number, or any account identifier.
• No notes, journal entries, body tags, target descriptions, SUDS/VOC ratings, or any other personal content.
• No client name from either side of the pairing.
• No IP addresses retained beyond the connection's lifetime.
• No clinical content whatsoever.

The relay validates every message against a strict allow-list of message types; anything not on that list is dropped at the server before it reaches the other device. We hold a small in-memory buffer of recent control messages (up to 200 entries, capped at 1 KB each) so that a peer joining via HTTP polling can catch up to the current session state. That buffer is wiped when both peers disconnect, and the entire pairing session self-destructs after 10 minutes of inactivity.

Because no individually identifying information and no clinical content is ever transmitted, the relay is not a Business Associate under HIPAA and a BAA is neither required nor offered. If your clinic's compliance process needs a written non-Business-Associate statement, contact us and we'll provide one.

Third parties.

The app uses Apple platform frameworks that run on-device:

• GameController — for reading Joy-Con button and stick events.
• SwiftData / Core Haptics / AVFoundation — for storage, rumble, and audio.
• StoreKit — for the auto-renewable subscription and 7-day free trial. Apple handles payment, billing, and renewal end to end; we don't see your name, email, or payment method. Apple's own privacy notice covers this transaction.

The only third party that touches our infrastructure is Cloudflare, which serves the relay described in the Live Pairing section above and also serves this marketing website. Per the Live Pairing section, no personal information or clinical content traverses that path.

No analytics vendors, no error reporters, no marketing pixels, no third-party payment processor.

Subscriptions.

TheraJoy is free to download. A 7-day free trial unlocks the full app; after the trial it auto-renews annually at the price shown in the App Store unless you cancel at least 24 hours before the renewal date. You can review or cancel anytime in Settings › Apple ID › Subscriptions, or via the App Store. We have no power to charge you, refund you, or adjust your subscription — only Apple does. If you need a refund, request it from Apple directly.

This website + the join page.

The marketing site you're reading uses Google Fonts (served from Google's CDN) and otherwise sets no cookies, runs no analytics, and embeds no third-party scripts. If you submit the contact form, your message is delivered to us by email.

The live-session join page at /join opens a connection to the relay described above. It needs your device for two things only: to send and receive control messages over WebSocket (or, on networks that block WebSocket, plain HTTPS polling), and — only on Chrome or Edge, only if you ask — to drive your own Joy-Cons via the Web HID API. The page itself uses no cookies and no tracking.

Your rights.

Because we hold none of your personal data, there's nothing for us to access, correct, delete, or export on your behalf. To clear all on-device data, delete the app from your device. You can also email privacy@therajoyapp.com with any privacy question.

Children.

TheraJoy is rated 4+ on the App Store. The app is intended for general audiences and does not knowingly collect any personal information from anyone, including children.

Changes.

If the app's data practices change in a future version — for example, if we ever add an account system or sync — we will update this notice and call out the change clearly before the new version ships.

---

Last updated June 10, 2026 · TheraJoy is a product of C6 Labs LLC · Privacy inquiries: privacy@therajoyapp.com