Joyn helps friends make plans together. This policy explains what personal data we use, why, who receives it, how long we keep it, and the choices you have.
It covers the Joyn apps for iOS and Android, the iOS App Clip, and joynevents.com. Joyn is run by Joyn Events AS in Norway. In this policy, Joyn, we, and us mean that company.
The short version
- We use your data to run Joyn. We don't sell it, show ads, or use third-party analytics or tracking.
- What you share goes to the people you share it with, and to the companies that run parts of Joyn for us, listed in section 4.
- Joyn is not end-to-end encrypted. Messages are stored on our servers so they sync across your devices and so AI features can work.
- AI features send the content they need to OpenAI, which does not train its models on it. Some run on their own, such as event suggestions in chats. Section 3 explains each one and how to turn it off.
- You can delete what you post, or your whole account, at any time. Deletion is permanent.
1. What we collect
Your account
Your email address, and how you sign in: a one-time code or link sent to your email, Sign in with Apple, or Sign in with Google. Apple gives us your name and email address, or a private relay address if you hide yours. Google gives us your name, email address, and Google account ID, along with a link to your profile picture, which Joyn does not use. Your profile holds your name, username, photo, time zone, language, and settings.
Joyn is for people aged 16 and over, and checks this before you sign up. On iOS, Apple can share just an age range around 16, never your birth date. Otherwise you enter your birth date, which our server uses once to work out the answer. We keep neither, only the result: the minimum age applied, how it was checked, and when. If Apple confirmed your age, we also keep the identifier Apple gives the app, so Apple can tell us if a parent or guardian later withdraws consent for your account.
What you create and share
Messages, photos, videos, GIFs, reactions, events and their details, RSVPs, polls, posts, comments, tasks, your conversations with the assistant, and anything else you add to Joyn. We also keep your connections: friends, friend requests, invites, blocks, and reports. The apps and website keep a copy on your device so Joyn stays fast and works offline.
Other people can give us information about you, for example when they invite you, mention you, or report something. If someone invites you to an event by email, we use your address to send you that invitation and keep it with the invite.
When a message contains a link, our servers fetch the page's title and image for a preview, and the preview travels with the message. People who receive it never contact the linked site. In the iOS app, if our servers can't get a full preview, the sender's iPhone fetches the page itself, so that site sees the sender's IP address, as it would if they opened the link.
Device permissions
Joyn uses these only when you use a feature that needs them and have allowed it in your device or browser settings:
- Camera and microphone, to take the photos and videos you choose, and to dictate to the assistant. The microphone is on only while you record a video or dictate. When you dictate, Joyn streams your voice to OpenAI, which turns it into text as you speak. OpenAI receives only your voice and the languages set on your device or browser. Joyn's servers then spell names in the text the way your friends' names are spelled. Joyn keeps the text, never the recording.
- Photos, to share the photos and videos you pick, and to save photos to your library when you ask.
- Location, only at the moment you choose Current location or ask the assistant for something nearby, to look up the address through Apple Maps. Joyn never tracks your location in the background.
- Calendar (iOS), to add events you host or plan to attend to Apple Calendar and keep them up to date. The assistant reads your calendar only if you also turn that on, as section 3 explains.
- Notifications, which give us a push token for each device or browser you use, and one for each Live Activity on your Lock Screen.
Joyn never asks for access to your contacts or health data, and never asks to track you.
Joyn Plus
If you subscribe in the iOS app, Apple tells us your plan, its transaction identifiers, its status, and when it renews or ends. On joynevents.com, Joyn Plus is sold through Link (Sold through Link, LLC, part of Stripe), which takes the payment, charges any tax, and sends your receipts. For the payment, Link is an independent controller under its own privacy policy. Stripe tells us the subscription's identifiers, plan, status, amount, and paid period. Joyn never sees your card or bank details. The Cancel contracts here page uses the email address you enter only to find your account and confirm the cancellation.
Feedback
If you send feedback, we receive what you write, any screenshots you attach, and details about the app and your device: app version, device type or browser, system version, language, and time zone. Screenshots show whatever was on your screen, including other people's messages, so attach them only when you are happy for us to see them. We email you an acknowledgement.
Technical and usage data
Like any online service, our hosting providers receive your IP address, device or browser type, and the time of each request. Our sign-in provider also records the IP address and device type of each signed-in session, for security.
When Joyn crashes, freezes, or shows you an error, it sends us a report so we can fix it: what went wrong, the app and system version, the device type, and a short trail of the app's own steps just before, such as which screen was open and which requests ran. Reports carry no account ID, email address, message content, location, or lasting device identifier.
To know whether Joyn is used, we record that your account was active on a given day (just the date), and, when an invite link brings someone in, who invited whom. We also keep a few anonymous counts that are not linked to anyone: how many people opened Joyn for the first time that day in each local hour, by continent; how often the Joyn Plus offer was shown, closed, or acted on; how many people finished each setup step; where the covers people put on events came from (a photo, a web search, or a generated image) and how often the cover assistant's web search and image generation were used; and, on the front page and Joyn Plus page of our website, how often each page was viewed (by the page's language and whether it was seen on a phone or a computer), how often its main button was pressed and where on the page, and how often the waitlist was opened and joined. The website counts use no cookie and store nothing on your device. So that Joyn introduces a new feature only once, your account also records when you have seen its introduction or already used the feature. Beyond these, we don't track how you use Joyn. Turning off Share usage statistics in your privacy settings stops every anonymous count your use of Joyn adds to; the active-day record is not affected. In the iOS app, our servers work out the active-day record and the hourly count from the app's regular check of your Joyn Plus status, so nothing is stored on your device for them. On the website and in the Android app, the active-day record and the hourly count are made only if you allow analytics.
2. How we use it, and why
We use personal data only for the purposes below. For people in the EEA, the UK, and Switzerland, each one names the legal basis we rely on.
- Running your account and the features you use, including messages, events, notifications, and Joyn Plus. Basis: our contract with you, and legal obligations for the accounting records of website payments.
- AI features you use, and your private assistant's memory. Basis: our contract. AI features that run on their own, such as event suggestions, the Home brief, and an assistant's reactions and shared memory in a chat. Basis: our legitimate interest in offering planning help that works, which you can turn off.
- Device features such as camera, location, and calendar. Basis: your consent, given and withdrawn in your device or browser settings.
- Restaurant booking requests. Basis: steps you ask us to take. Where your notes include health information, such as an allergy, your explicit consent, given by writing it and sending the request.
- Safety, moderation, and preventing abuse. Basis: our legitimate interest in protecting the people who use Joyn, and legal obligations where they apply.
- Keeping Joyn reliable and secure, using error reports and request logs. Basis: our legitimate interest in a service that works.
- Measuring whether Joyn is used. Basis: our legitimate interest in knowing whether the product works, and on the website and in the Android app your consent.
- Invitations, feedback, and support. Basis: our legitimate interest in delivering invitations and answering you.
- Waitlist updates. Basis: your consent, which you can withdraw at any time.
- Legal claims and compliance. Basis: legal obligations, and our legitimate interest in establishing or defending legal claims.
Where we rely on legitimate interest, we have weighed it against your rights and use as little data as we can. You can object to it, and withdraw consent at any time; see section 7. To have an account you only need an email address, a name, and a username. Everything else is optional, though a feature may not work without the data it needs.
3. AI features
How AI uses your data
Joyn's AI features run on OpenAI. When one runs, Joyn sends OpenAI the request and the context it needs, such as relevant messages, names, events, RSVPs, polls, and photos. A request made for you carries a coded identifier that lets OpenAI spot abuse but not link it to your Joyn account. OpenAI does not use it to train its models, and may keep it for up to 30 days only to monitor abuse; see OpenAI's API data controls. Joyn keeps its own log of which AI feature ran and where, without content, for 30 days.
Features you start
- Your private assistant helps you plan, searches the Joyn information you can already see, drafts messages, and suggests changes for you to review. With Reference history on, it can also draw on your past assistant chats, conversations, and events.
- An assistant in a chat replies there when someone mentions it, using that chat. Anyone in a chat can also ask the private assistant about it, using messages they can already see.
- Reading the web. When you ask something only the web can answer, your words become a search, and Joyn's servers open and read the pages, sometimes in a browser Joyn runs at Cloudflare. The sites see Joyn, not you, and Joyn never signs in anywhere.
- Images. The assistant can find or create images, such as an event cover, including from photos you give it. Covers it creates are marked as made by AI.
- Assistant personalities. When you create an assistant from a description, Joyn may look that description up on the web.
- Apple Calendar (iOS). Only if you turn it on under Profile → Personalization, or allow it once when the assistant asks, and only when you ask about your time, the assistant receives up to 96 entries from about two weeks either side of today, or around the dates you name (up to six months). Each entry has its title, times, place, and whether you are busy. Never notes or calendar names. Joyn does not store it.
Features that run on their own
- The Home brief is written when you open Home, from recent event changes and unread messages. Turn it off with Brief under Profile → Personalization.
- Event suggestions. In group and one-to-one chats, Joyn sends recent messages to OpenAI to spot an event taking shape, and pins it as a suggestion everyone in the chat can see. Names are replaced with placeholders first. The check also includes each sender's time zone and the titles of upcoming events everyone in the chat is already invited to. It does not run in an event's own chat. Anyone in the chat can turn suggestions off for everyone in the chat's settings.
- Assistants added to a chat can react to messages with an emoji, and can speak up without being asked if Unprompted messages is on. With Automatic memory on, they also keep a shared memory of the chat: notes, summaries of what was discussed, and a profile of the group, built from its messages and events with names included. Everyone in the chat can see this memory and remove lines from it. These are set in the assistant's settings in the chat.
- Photo descriptions. When an assistant needs to understand a photo or video, OpenAI writes a short description of it, which Joyn keeps so it doesn't have to look again.
What your private assistant remembers
Your private assistant keeps saved memories, summaries of your past conversations with it, and a short profile of how you plan, built at most once a day from those summaries and your activity in Joyn. All of it is private to you, never given to an assistant in a chat, and shown in full on the memory screen, where you can delete any part. Turn off Personal memory under Profile → Personalization to stop it.
Reports and moderation
When something is reported, we send the reported content, a little context such as the post it replies to, and the report to OpenAI's moderation tools. Content that clearly and seriously breaks our rules can be hidden automatically. Anything else goes to a person, and an automatic decision can be undone. If we hide a post, we email its author which rule it broke, and when we close a report, we email the people who made it what we decided. You can ask for a person to review any decision by contacting us.
If you send a copyright notice or counter-notice under US law, as the Company information page explains, we keep it with the case. We tell the member who posted the content what the notice claims. US law requires us to send a counter-notice, including the name and contact details in it, to the person who sent the original notice.
6. How long we keep it
We keep your data while your account exists, unless you delete it sooner or a shorter period below applies. Deletion can't be undone: there is no copy for you to restore.
- Deleted messages lose their text, media, reactions, and everything attached. An empty placeholder remains so the conversation stays in order. Deleted files are normally erased within minutes.
- Deleted assistant conversations and assistants disappear at once and are erased after 30 days.
- AI logs, Home briefs, and the records used to write them are deleted after 30 days, and the daily tally of how much you use AI after 90 days.
- Shared chat memory stays until someone removes it or the chat is deleted. Its summaries are not rewritten when a single message is deleted. Photo descriptions are deleted together with the photo.
- Error reports are deleted after 90 days, and the record that limits how many your account can send after two hours.
- Age check: an unfinished check expires after 10 minutes. The result stays with your account.
- App Store subscriptions: after you delete your account, we keep a record of the purchase without your identity, so renewals and refunds still work, until 180 days after both the deletion and the subscription's end.
- Website subscriptions: we keep the payment records Norwegian bookkeeping law requires, for five years.
- Moderation records are kept as long as needed to keep Joyn safe, handle appeals, and meet legal obligations, even after an account is deleted.
- Waitlist: your email stays until you ask us to remove it or we stop sending launch updates. The one-way value we make from your IP address to limit abuse is deleted after 24 hours.
- Backups: our database backups expire on Supabase's backup schedule. Backup copies of a file are removed within an hour after you delete it.
Copies other people saved outside Joyn, and data on their devices, are beyond our reach.
7. Your choices and rights
Delete your account
In the app or on the website, go to Profile → Manage account → Delete account. Joyn deletes your files first, then your account, profile, assistant history and memories, bookings, feedback, and everything else held only for you. Your messages are emptied and no longer linked to you. An event you host passes to a co-host, or is deleted if there is none, and shared chats stay for the people still in them. A website Joyn Plus subscription is cancelled. An App Store subscription is not; cancel it in your Apple account settings. Deleting from the iOS app also asks Apple to remove Sign in with Apple; otherwise you can remove Joyn in your Apple account settings yourself.
Your rights
Depending on where you live, you can ask to see your personal data, correct it, delete it, get a copy in a portable format, restrict or object to how we use it, and withdraw consent. You can change most things in Joyn yourself. For anything else, email privacy@joynevents.com. We may need to confirm the request is yours. We answer within a month, or tell you within that month if we need up to two more. Using your rights is free and never affects your account.
You can also complain to a data protection authority: your local one, Datatilsynet in Norway, which supervises us, the Information Commissioner's Office in the UK, or the Federal Data Protection and Information Commissioner in Switzerland. We would rather you came to us first, but you don't have to.
Automated decisions
Two things in Joyn are decided automatically. Content that clearly and seriously breaks our rules can be hidden automatically (section 3), though suspending an account is always a person's decision. And if Apple tells us a parent or guardian withdrew consent for an account, Joyn restricts that account. You can ask a person to review either decision by emailing privacy@joynevents.com. Nothing else that affects you significantly is decided by automation alone.
If you live in the United States
We give everyone the rights above, wherever they live. We do not sell or share your personal data for advertising, so there is nothing to opt out of. We use sensitive data, such as precise location or a health detail in a booking note, only for the feature you asked for. You can use your rights yourself or through an authorized agent. If we refuse a request, you can appeal by replying to our answer.
Joyn does not track what you do on other websites or apps, so it works the same whether or not your browser sends a Do Not Track signal. No advertising or analytics company collects that kind of data through Joyn. Apple, Google, and Stripe run sign-in, maps, and checkout under their own policies, and Stripe may set its own cookies during checkout (section 5).
8. Security
We encrypt data in transit, keep private files private, limit each account to the data it is allowed to see, and store credentials in the platform's secure storage. No system is perfectly secure, but we keep improving ours.
9. Children
Joyn is not for anyone under 16, or under a higher minimum age where the law requires one. We do not knowingly collect data from younger children. If you believe a child has given us personal data, email privacy@joynevents.com and we will delete it.
10. Where your data is processed
Most of your data stays in Europe: Supabase stores it in Ireland, the website runs in Vercel's Dublin region, and Cloudflare keeps file backups in the EU. Some data leaves the EEA: AI requests go to OpenAI, emails go through Resend, and website payments go through Stripe, all in the United States. Klipy, also in the United States, receives only GIF search words and an identifier that changes daily. Cloudflare's page-reading browser and GIF relay run wherever its global network places them. Apple, Google, and browser push services handle data under their own policies.
For transfers to countries without an EU adequacy decision, we rely on the European Commission's standard contractual clauses together with the provider's own safeguards. Those countries may give you fewer rights against their public authorities. Email privacy@joynevents.com to learn which safeguard covers a particular transfer.
11. Changes to this policy
When we change this policy, we update the date at the top and record the change in the version history. We will tell you more prominently about a significant change, and ask for your consent where the law requires it.
12. Contact us
Joyn's data controller is Joyn Events AS. Organisation number: 938 238 294. Organisation form: Aksjeselskap (AS). Register: Foretaksregisteret. Registered business address: Fossen 20, 1530 Moss, Norway.
For privacy questions or requests, email privacy@joynevents.com. Company details are also on the Company information page.