Joyn helps small groups organize activities and stay in touch. This Privacy Policy explains what personal data we use, why we use it, who receives it, how long we keep it, and the choices you have.
This policy covers the Joyn iOS app and joynevents.com. Joyn is operated by Kasper Fellkjær Thoring, a Norwegian sole proprietorship. In this policy, Joyn, we, and us refer to that business.
Privacy at a glance
- We use personal data to provide the account, activity, messaging, safety, website, notification, calendar, and AI features described below.
- We do not sell personal data, show ads, profile you for marketing, or use analytics or tracking SDKs.
- Content is shared with the people you choose and with the service providers needed to run Joyn.
- When you delete content, Joyn removes it from the product and schedules its private files for permanent deletion instead of keeping a user-restorable copy, except for the narrow legal and safety cases described below.
- Joyn is not an end-to-end encrypted messenger. Messages are stored on our servers and on your device so they can sync and support the features you use, including AI features when they are triggered.
1. Information we collect
We collect information you provide, information created when you use Joyn, and limited technical information needed to operate and secure the service.
Account and profile
When you create an account, we process your email address and sign-in information. If you use Sign in with Apple, we may receive the name and email address Apple makes available. Your Joyn profile can include your full name, username, avatar, time zone, locale, notification settings, and selected assistant. We do not ask for your birthday.
Messages, activities, and connections
We process the content and activity you create in Joyn, including messages, photos, selected videos, GIFs, stickers, reactions, mentions, replies, read and delivery status, event and hangout details, locations, dates and times, RSVPs, polls and votes, posts, comments, tasks, and activity media.
We also process friend connections, requests, groups, and invites, as well as blocks, reports, and moderation records. Other people may provide information about you when they invite or mention you, include you in shared content, or report an interaction.
When a message contains a web link, Joyn may request its title and image. A request from the iOS app can reveal standard connection information, including your IP address, to the linked website. On the web, Joyn requests the preview through its hosting service instead.
Location, photos, camera, and calendar
If you allow location access, Joyn can use your current location to suggest a nearby address through Apple MapKit. Locations you add to an activity may include text and coordinates. Joyn does not collect continuous, background, or live location.
Joyn accesses the camera, selected photos or videos, and your calendar only when you use a feature that needs them and grant the relevant iOS permission. Calendar sync can add, update, and remove Joyn activities in Apple Calendar. Joyn does not request access to your contacts, microphone, health data, or tracking permission.
Device, website, and waitlist data
We process a device identifier for push notifications, along with your time zone and locale. Joyn's crash log stays on your device and is not sent to us.
When you use the website, our hosting and backend providers receive standard request information such as your IP address, browser or device information, requested page, and date and time. If you join the waitlist, we store your email address, the date you agreed to receive updates, and the version of the consent wording.
Joyn does not use analytics, advertising, tracking identifiers, or third-party crash-reporting SDKs.
2. How we use your information
We use personal data to:
- Create, secure, and support your account.
- Deliver messages, activities, media, notifications, and the other features you use.
- Run AI features and content moderation as described in section 3.
- Keep Joyn reliable, prevent abuse, respond to reports, and enforce our terms.
- Respond to you and comply with legal obligations.
We do not use personal data for advertising or marketing profiles.
Legal bases for EEA and UK users
We rely on performance of our contract to create your account and provide Joyn; your consent or request for optional device permissions, waitlist updates, and sensitive booking details you choose to provide; our legitimate interests in securing and maintaining Joyn, supporting users, preventing abuse, and reviewing reports; and legal obligations where the law requires us to keep or disclose information. You can withdraw consent at any time without affecting earlier lawful processing.
Some information, such as an email address and profile name, is required to create and use a Joyn account. If you do not provide optional information or device access, the related feature may not work, but the rest of Joyn remains available where possible.
3. AI features and moderation
When AI uses your content
Joyn uses OpenAI to provide a private assistant, private help from a chat, assistants in group conversations, and an assistant-written Home brief. These features can help organize activities, summarize, search Joyn information you can access, prepare drafts, and create actions for you to review.
When an AI feature runs, Joyn sends OpenAI the request and the context needed to answer it. Depending on the feature, this may include:
- Your request, recent assistant history, and relevant messages from conversations the feature is allowed to read.
- Participant names, time zone, locale, and relevant activities, RSVPs, polls, friends, or messages.
- Personal AI memories available to your private assistant, or shared notes available to a conversation assistant.
- For the Home brief, short titles and snippets from recent activity changes and relevant unread messages.
- Web search or booking details when you ask for those features.
OpenAI states that API inputs and outputs are not used to train its models by default. Joyn configures requests not to be stored for product use, but OpenAI may keep abuse-monitoring logs for up to 30 days unless a different retention control applies. See OpenAI's API data controls for details.
Joyn keeps a separate AI activity log for safety and abuse prevention. It records operational details such as which assistant ran and where, but not your message or the assistant's reply. We delete these logs after 30 days.
Plan suggestions in group chats
In group chats, Joyn can notice when a plan is forming (for example "beers tonight, anyone?") and pin it as a suggestion so the group can see who's in. To do this, Joyn periodically sends a short window of recent messages from the group chat to OpenAI to check for plan-shaped messages and extract a short title, time, and place. This runs in group chats only — never in direct messages.
- Names are not sent with this scan: senders are replaced with neutral placeholders before processing, and results that would echo a placeholder are discarded.
- The output is limited to structured plan fields (title, time, place, who expressed interest). No AI-written content is added to your conversation.
- Scanning is rate-limited per chat per day, and suggestions expire on their own if the plan doesn't happen.
- Any member can turn plan suggestions off for a chat in the chat's settings, which also removes its active suggestions for everyone. You can also hide an individual suggestion just for yourself.
Memories, shared notes, and AI controls
A private assistant can save short personal memories to make future help more relevant. You can view, edit, delete, or clear these memories in the app. Personal memories stay with your account and are not given to an assistant replying publicly in a group chat.
Conversation assistants can use shared notes for that conversation. These notes are separate from personal memories and visible to conversation members. Members can manage notes they create, and the conversation owner may have additional controls.
You control whether you use the private assistant or add and trigger conversation assistants. Messages you share can still be processed when another participant uses private help on content they can see, or when a conversation assistant responds. The Home brief may be generated when you open or refresh Home and currently has no separate off switch.
Actions that would change Joyn data, such as sending a message or changing an activity, are shown for review where the feature supports review. A conversation assistant can post its own reply when triggered.
Reports and automated moderation
When content is reported, we send the reported item and report details—not the wider conversation—to OpenAI's moderation tools to help assess whether it breaks our rules. Clear and serious violations may be hidden automatically. Unclear or higher-stakes reports are reviewed by a person, and automated hiding can be reversed. Suspected illegal content is handled separately and is not sent to these AI tools.
We keep a protected record of moderation decisions and their reasons. If an automated decision hides your content or affects your account, you can ask for human review by replying to the notice or contacting us.
6. How long we keep information
Most account and content data remains while your account is active, unless you delete it sooner. Deletion is the default: we do not impose a waiting period or keep a user-restorable copy of deleted content. A shared activity or conversation container may continue for other participants, but that does not let Joyn keep the deleted message body, media, or departing account merely because it was shared.
- Deleting a message makes its content unavailable in Joyn and removes its text, media paths, GIF and mention data, search data, metadata, edit history, reactions, read receipts, polls, pending AI work, Home-brief source copy, and pending notification copy from the active database. A content-free marker with limited structural information can remain so replies and conversation order still make sense. Deleting the account removes the departing user's message rows instead.
- Deleted message media, activity photos, assistant images, replaced covers, and replaced avatars are put into a server-side deletion queue. Joyn normally processes this queue within minutes and retries failures independently of your device. Completed queue records are removed after 7 days and contain object identifiers and operational status, not the deleted file itself.
- AI activity logs, Home briefs, and the recent-change records used to create those briefs are deleted after 30 days. Temporary AI queue records are cleared within a day.
- Waitlist emails remain until you unsubscribe or the launch-update purpose ends. We may keep a minimal suppression record after you unsubscribe so we do not email you again.
- Browser and waitlist rate-limit periods are described in section 5.
We may retain only limited information when necessary to comply with law, respond to a live legal claim, or investigate and prevent serious abuse. We separate that information from ordinary product use, limit access, and review whether continued retention is still necessary. We do not keep deleted content merely because it might be useful later.
The related content becomes unavailable in Joyn when the deletion request succeeds. Database payloads are removed in that transaction; private-file deletion is queued and retried until Supabase confirms removal. Encrypted database backups may contain an older copy until Supabase's configured backup window expires; backup data is not available in Joyn and is held only for disaster recovery. You can read about Supabase database backups. Copies another person saved outside Joyn and local device or browser data outside our control are not deleted from that person's device.
7. Your choices and rights
Delete your account
In the iOS app, go to Profile → Edit profile → Delete account. Joyn first deletes every private file owned by the account and verifies that none remain, then deletes the account, profile, messages, notification tokens, personal AI history and memories, and data tied only to you. If you own an activity with a co-host, Joyn transfers ownership to the longest-standing co-host so the shared activity can continue; an activity with no other host is deleted. Shared conversation containers stay available to remaining participants, with their creator role transferred, but your account and messages are removed. Only a narrowly necessary legal or serious-safety record may be retained as described in section 6.
Access, correction, deletion, and portability
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data; withdraw consent; or object to or restrict certain processing. You can update much of your information directly in Joyn. For any other request, email privacy@joynevents.com. We will respond as required by law and will not discriminate against you for exercising your rights.
If you are in Norway or the EEA, you can complain to your local data-protection authority or to Datatilsynet, the Norwegian Data Protection Authority.
8. Security
We use safeguards designed to protect personal data, including encryption in transit, access controls that limit accounts to permitted data, private file storage, and platform-protected credential storage. No method of transmission or storage is perfectly secure, but we review and update these protections as Joyn develops.
9. Children
Joyn is not intended for children under 13. If the law where you live requires a higher age to consent to an online service's use of personal data, you must meet that age.
We do not knowingly collect personal data from anyone below the applicable age. If you believe a child has given us personal data, contact privacy@joynevents.com and we will take appropriate steps to remove it.
10. International data transfers
Joyn is operated from Norway, and some providers process data in other countries. Those countries may have different data-protection laws. Where required, we use a recognized legal safeguard, such as an adequacy decision or approved contractual terms. Contact us if you want more information about the safeguards used for your data.
11. Changes to this policy
We may update this policy as Joyn changes. We will revise the date at the top and provide a more prominent notice when a change is significant. If a change requires new consent, we will ask for it.
12. Contact us
Joyn's data controller is Kasper Fellkjær Thoring, a sole proprietorship registered in Norway (organisation number 926 450 042).
For privacy questions or requests, email privacy@joynevents.com or write to Kasper Fellkjær Thoring, Husebyskogen 74, 1570 Dilling, Norway.