joybox Privacy Policy

Last updated: October 21, 2026

This Privacy Policy describes how joybox ("we," "us," or "our") collects, uses, discloses, and retains personal information when you use joybox and related pages, APIs, emails, checkout flows, and the Joybox iPhone app (collectively, the "Service").

Using the iPhone app? Read Section 9 and Section 10 too.

1. Information We Collect

1.1 Information you provide directly

Depending on your use of joybox, we may collect:

Contact information (such as name, email address, and phone number when you provide it).
Checkout and order information.
Song personalization inputs (for example recipient name, relationship, occasion, genre, voice preferences, message, memories, and other custom inputs).
Contributor details you provide for collaboration features (such as contributor name and email).
Photo uploads you submit for joybox experiences.
Account details, such as your email address, or your Apple Account if you sign in with Apple.
Saved people and dates, such as names, relationships, birthdays, and anniversaries.
Voice notes and video messages you add to a gift.
Support communications (for example name, email, and support message).

1.2 Information collected automatically

When you use the Service, we may collect:

Device and browser information.
IP address and user-agent string.
Page and event analytics (for example page views, checkout events, and conversion events).
Attribution and campaign parameters (for example UTM parameters, gclid, fbclid, and fbp values when available).
Product/session routing and A/B testing indicators.
Approximate location signals from platform geo headers (for example city, region, and country), where available.

1.3 Tracking technologies and identifiers we use

joybox currently uses a mix of cookies and browser storage identifiers for operations, attribution, and measurement, including examples such as:

Cookies for product routing and experience controls (for example product-id and paywall-variant style cookies).
Geo cookies used for regional experience logic.
Marketing and conversion identifiers where available (for example fbp, fbclid, and gclid), including a hashed version of our session identifier that we share with advertising partners for measurement.
Triple Whale pixel identifiers stored in cookies and browser storage on our marketing and checkout pages, used for marketing attribution.
Browser storage keys used for attribution and checkout continuity (for example first-touch/last-touch attribution records and pending checkout state).

1.4 Cookies and similar technologies

We use cookies, local storage, and session storage for:

Site operation and routing;
Session continuity and checkout recovery;
Analytics and performance measurement;
Marketing attribution and conversion measurement; and
Product experimentation (for example paywall variants).

You can control cookies through your browser settings. Disabling some cookies may affect Service functionality.

2. How We Use Information

We use personal information to:

Provide and operate joybox;
Process transactions and prevent fraud;
Generate, deliver, and support your custom song order;
Run the Joybox iPhone app features you use, such as signing you in, saving your people and dates, checking App Store purchases, and sending the notifications you allow;
Review reports of content that breaks our Terms and remove that content;
Send service emails (for example order confirmations, delivery, support responses, reminders about dates you saved, and account and membership notices);
Send transactional SMS messages if you provide a phone number and choose or consent to text updates, including order, delivery, account, and support messages;
Send recurring Joybox marketing texts about personalized songs, gifts, and offers only when you affirmatively sign up at https://joybox.studio/joybox/sms or select the separate recurring-marketing checkbox under email in the main song funnel. The separate, optional, initially unchecked box at the email step of Joybox's song-creation pages, when offered, covers a promotional song-preview link and up to three promotional unpaid reminders, up to four texts per song and none after purchase. That box does not enroll you in the recurring marketing program. We retain your mobile number, the exact consent disclosure and version, signup timestamp and source, and a hashed network identifier to document consent and prevent signup abuse. Text consent is optional and is not a condition of purchase. Message frequency varies for the separate marketing signup; message and data rates may apply. Reply STOP to unsubscribe or HELP for help;
Monitor product performance and reliability;
Measure ad and campaign effectiveness;
Enforce our Terms and protect users and the Service; and
Comply with legal obligations.

We share information with service providers and partners that help operate joybox, including:

Payment processing: Stripe and PayPal for purchases on joybox.studio. Apple for purchases in the Joybox iPhone app: Apple takes the payment and sends us a signed record of the purchase. We never receive your card number from Apple.
Sign-in and notifications (iPhone app): Apple (Sign in with Apple and the Apple Push Notification service) and Firebase Authentication.
Analytics and product measurement: Google Cloud BigQuery, Vercel Analytics.
Marketing attribution and analytics: Triple Whale. Triple Whale receives website activity collected by its pixel on our marketing and checkout pages (for example page views, add-to-cart, checkout, and purchase events, device and browser details, IP address, and its own identifiers) and order records (order ID, amount, refunds, and the purchaser's email address) so we can measure which marketing channels lead to orders.
Advertising and conversion measurement: Meta Pixel/CAPI, Google Ads, TikTok Pixel/Events API, Pinterest Tag/Conversions API, LinkedIn Insight Tag.
Email delivery and support messaging: Resend.
SMS delivery, messaging compliance, and SMS purchase attribution: Twilio and Klaviyo. For purchase attribution, Klaviyo receives an existing subscriber profile identifier, the confirmed payment amount and currency, payment time and transaction identifier, and message/campaign attribution. A purchase does not grant messaging consent.
Cloud storage/database hosting: Firebase services (Firestore and Storage), Google Cloud, and Vercel.
Support inbox: Google (Gmail) for the contact@joybox.studio mailbox.
AI and generation providers: OpenAI (lyrics/generation features, speech-to-text for optional voice answers, and a safety screen of text that contributors add, see Section 9.5), SUNO (music generation, reached through the aimusicapi.ai service), Google Lyria (music generation when our main music provider is unavailable), ElevenLabs (voice/audio features), Google Gemini (greeting card image generation, including photos you upload for a card, backup lyric writing, and speech-to-text for optional voice answers), TypeSafe (automated quality checks on song details), and Anthropic (Claude, used in our support tooling), along with related processing services used by joybox. Section 9.4 explains what the iPhone app sends to them.

We share only what is reasonably necessary for these providers to perform their services for us.

The Joybox iPhone app contains no advertising or analytics SDKs. The advertising and attribution tools named above are used for our website and checkout, not inside the app.

Mobile information and SMS consent: We do not sell or share mobile numbers, SMS opt-in data, or text messaging originator consent with third parties or affiliates for their marketing or promotional purposes. This exclusion applies to every information-sharing category in this policy. We may provide this information to service providers such as Twilio and Klaviyo only as necessary to deliver and operate our own text messaging program and honor opt-outs.

4. Data Retention

We keep personal information for as long as reasonably necessary for the purposes described in this policy, including order fulfillment, support, security, analytics, legal compliance, and dispute resolution.

Certain records (for example transaction and order records) may be retained longer where required or permitted by law.

Songs, Joyboxes, cards, saved people and dates, and uploaded files stay in your account until you delete them or delete your account. Section 10 lists what account deletion removes and what we keep. Activity events from the iPhone app are deleted when you delete your account.

Photos you upload for a "put you in the video" lyric video are deleted 30 days after the order is delivered, canceled, or refunded, and 30 days after the photos of a draft that was never purchased go idle.

If you choose to answer optional questions about your song by voice after purchase, your recording is sent for speech-to-text and is not stored. The resulting text answers are kept for up to 30 days after your purchase so we can apply them to your song and help with support; details applied to your song are kept with the song.

5. Your Choices and Rights

Depending on your jurisdiction, you may have rights to request access, deletion, or correction of personal information, and to request information about certain disclosures. You may also have rights related to targeted advertising or "sharing" under certain U.S. state laws.

To submit a privacy request, email contact@joybox.studio.

In the iPhone app you can also delete your account (More, then Settings, then Delete account), withdraw permission for AI sharing (Settings, then Privacy & support), and turn off Contacts, Calendar, notification, microphone, and speech recognition access in iOS Settings.

6. Children

joybox is not directed to children under 16, and we do not knowingly collect personal information from children under 16. The Joybox iPhone app is not made for children. If you believe a child under 16 has given us personal information, email contact@joybox.studio and we will delete it.

7. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No method of transmission or storage is completely secure.

8. International Transfers

Your information may be processed in the United States and other countries where we or our service providers operate.

9. Joybox for iPhone

This section covers the Joybox iPhone app. It adds to the rest of this policy.

9.1 What the app collects

Account. Your email address and password, or your Apple Account if you use Sign in with Apple. With Sign in with Apple we ask Apple for your name and email. If you choose Hide My Email, we receive Apple's private relay address. Your password is handled by Firebase Authentication.
What you create. The people you save (name, how you know them, birthday, and other important dates), the memories and messages you write or dictate, lyrics, songs, cards, Joyboxes, and scheduled gifts.
Photos, voice notes, and video messages. Only the ones you choose to add. We store them to build and deliver your gift.
Symphony. If you start a Symphony, the names, emails, and relationships of the people you invite, and what they add. If someone invites you, your name, email, relationship, and what you contribute.
Purchases. When you subscribe in the app, Apple takes the payment. We receive a signed record from Apple with the product, dates, price, currency, store country, and transaction IDs, linked to your account.
Notifications. If you allow notifications, your device's push token, app version, language, and time zone, so we can send them.
Activity in the app. Simple events, such as finishing setup, starting or finishing a song, answering a permission prompt, opening a notification, and app errors. They are stored with your account ID, email address, app version, and device platform.
Support messages you send us.
Technical data, such as your IP address, which our servers and hosting providers log when the app talks to our servers.

9.2 Contacts

Joybox can find birthdays and anniversaries in your Contacts. You choose how.

Add my contacts. iOS asks for your permission. If you allow it, the app reads your address book on your iPhone: each person's name, nickname, birthday, and anniversary. It does not read phone numbers, email addresses, or street addresses. You then see a list and choose who to add. Only the people you choose are sent to us. We store their name, how they relate to you (a guess from their name or nickname, or the choice you make), and the month and day of their birthday and anniversary. We do not store the birth year.
Choose people one by one. Apple's contact picker shares only the people you pick, and the app gets no access to the rest.

We use this to remind you before each date and to suggest making something for that person. You can delete a saved person at any time in the app.

9.3 Calendar

If you allow full access to your Calendar, the app looks through the calendars on your iPhone for the next 400 days. It picks out events whose titles look like birthdays, anniversaries, graduations, weddings, retirements, baby showers, engagements, or bridal showers. You see the list and choose which to add. For the ones you add, we store the event title, date, type, and whether it repeats every year. The app does not read event notes, locations, or guest lists.

9.4 AI services

To write lyrics, create a card, or make music, our servers send what you give us to the AI providers in Section 3. That can include the recipient's name, your relationship, the occasion, memories, qualities, messages, and any changes you ask for. Photos you choose for a card are sent to Google (Gemini) so the card can include them.

The app asks for your permission before it first does this, and asks again if the providers or the data change. You can withdraw in Settings, then Privacy & support. Withdrawing does not undo what was already made.
Voice notes and video messages you add to a gift are stored and delivered with it. We do not send them to AI services.
Speech-to-text in the app uses Apple's speech recognition, on your iPhone when it supports that. On an iPhone that does not, Apple may process the audio under Apple's terms. We only receive the text you choose to submit, not the audio.
Providers handle what they receive under their own terms.

9.5 Safety screening of what others add

Other people can add text to your Joybox: contributors to a Symphony, contributors to a shared song link, and people who fill in an intake form for you. We screen that text before we keep it.

What we screen. For a Symphony contribution or a shared song link, the contributor's name, relationship, memories, and qualities. For the Symphony join form and the intake form, names and short labels only. Voice notes and video that contributors add are not screened this way.
How. First our own rules, which look for a short list of clearly severe content: sexual content involving minors, explicit sexual acts, slurs, instructions for self-harm, threats against someone's family, and phone and ID numbers. Then, for memories and other free text, we send the text to OpenAI's moderation service, which returns a safety verdict. Names and short labels on the join and intake forms go through our own rules only and are not sent to OpenAI.
What OpenAI does with it. We use OpenAI's answer only to decide whether to accept the text, and we use the text for nothing else there. OpenAI's published API data controls say that data sent to its moderation service is not used to train its models and is not kept for abuse monitoring. With each accepted contribution we store the result of the screen (allowed or held back, and category names), not extra text.
If our screening finds a message clearly severe, we reject it. The contributor sees a short message and the text is not stored. We keep a small record that a rejection happened: the reason category and, where there is one, the Symphony or song ID and the account ID. We do not keep what was written. Screening does not catch everything.
If we cannot screen a message (for example, OpenAI's service is unavailable), we accept it but hold it back. It is not shown to the Symphony owner and is not used in the song until it has been screened. We screen it again when the owner opens or generates the Symphony. If it passes, it appears. If our screening then finds it clearly severe, we remove the text. While a message is waiting, the owner is asked to try generating the song again in a minute.
Reports. The owner of a Symphony can choose Report and block on a contributor's entry in the iPhone app. That sends us a report with the Symphony and entry IDs and the owner's name and email, removes the entry, and blocks that person from adding more. Anyone can report content by emailing contact@joybox.studio.

9.6 Saved people, reminders, and cards

When you save a person with a date, whether by hand, from Contacts, or from your Calendar:

Your iPhone can show reminders two weeks, one week, and two days before and on the day. You switch them on or off in Settings. They are created on your iPhone and send nothing to us.
We may prepare a keepsake card for the date. To make the artwork we send the person's name, your relationship, and the occasion to Google (Gemini). The card has a web link, and anyone who has the link can open it.
We may email you reminders and card previews at the email on your account. You can turn email reminders off in Settings in your Joybox dashboard on joybox.studio, or by emailing us.

9.7 Notifications

We may send a notification when a Joybox you made is ready. It can include the recipient's name. Notifications go through the Apple Push Notification service. You can turn them off in iOS Settings. When you sign out, the app asks us to remove its push token.

If you sign in with Apple, the app sends Apple's one-time authorization code to our server. We exchange it with Apple and keep the resulting token only in encrypted form, so we can revoke the link with Apple when you delete your account.

9.9 On your iPhone

Your sign-in tokens are kept in the iOS Keychain. A copy of your library and any unfinished draft are kept in the app's protected storage. Signing out clears them.

9.10 No tracking

The app does not track you. It has no advertising SDKs, does not use the advertising identifier, and does not ask for App Tracking Transparency permission.

10. Deleting Your Account and What We Keep

In the iPhone app, go to More, then Settings, then Delete account, and type DELETE. On the website, email contact@joybox.studio from the address on your account. If something goes wrong, the app tells you and you can email us.

Deleting your account removes:

Your sign-in account and profile.
Your songs, Joyboxes, cards, saved people and dates, scheduled gifts, and Symphonies you created, including what contributors added to them.
The photos, voice notes, video messages, and audio files stored for them.
Your credits and credit history, promo redemptions, preferences, and reminders.
Your push notification tokens.
Your app activity events and the support tickets created from your email address.
Orders and customer records in our database that match your email address.
Your stored Sign in with Apple link, which we revoke with Apple.

Memberships:

PayPal. Before anything is deleted, we cancel any PayPal membership that is still billing. If we cannot cancel it, the deletion stops with an error and nothing is removed. You can try again, or email us.
Stripe. We ask Stripe to cancel your Stripe membership. This is a best effort. If Stripe's cancellation fails, your account is still deleted, so check that the membership has ended or email us.
Apple. Deleting your account does not cancel an Apple subscription. Apple bills it, so cancel it first in your Apple Account settings (Settings, your name, Subscriptions).

What we keep:

Payment records. We do not delete the Stripe customer record, because refund and dispute records need it. Stripe also keeps its own records.
A deletion marker for each song. It holds the song ID, the date, whether the song was paid, and the related Stripe payment IDs. It holds none of your content or contact details. It lets us recognize a late payment or a repeated payment notice for a deleted song.
Past membership records. If an App Store membership replaced a web membership on your account, we keep an archive copy of the earlier membership: its provider, dates, billing IDs, and the email on it. Account deletion does not remove it.
Reminder-planning records. Drafts of songs prepared ahead of a saved date, if any were made for you, and daily logs of which reminders we considered. They are tied to your account ID. Drafts can include the saved person's name and the lyrics. Account deletion does not remove them.
Apple purchase markers. We keep the purchase record from Apple without your Joybox account ID, so that repeated notices from Apple cannot grant access twice.
Analytics records. Records in our analytics warehouse can include your email address, account ID, or order IDs. Account deletion does not remove them. Email us if you want them reviewed.
Support email. Emails you sent to contact@joybox.studio stay in our support mailbox.
Removed Symphony entries. When an owner removes an entry, it is hidden and not used for the song, but we may keep a hidden copy for safety review. It is deleted when the owner's account is deleted.
Entries in other people's Symphonies. Something you added to a Symphony someone else started stays with that Symphony. Ask its owner to remove it, or email us.
Copies held by others. The AI providers and other services in Section 3 keep what they received under their own terms. Our deletion does not reach them.

11. Changes to this Policy

We may update this Privacy Policy from time to time. We will post updates on this page and update the "Last updated" date.

12. Contact

If you have privacy questions or requests, email contact@joybox.studio.

Related legal pages:

joybox Terms of Service: https://joybox.studio/joybox/terms
joybox Refund Policy: https://joybox.studio/joybox/refund-policy

joybox Privacy Policy

Last updated: October 21, 2026

Using the iPhone app? Read Section 9 and Section 10 too.

1. Information We Collect

1.1 Information you provide directly

Depending on your use of joybox, we may collect:

Contact information (such as name, email address, and phone number when you provide it).
Checkout and order information.
Song personalization inputs (for example recipient name, relationship, occasion, genre, voice preferences, message, memories, and other custom inputs).
Contributor details you provide for collaboration features (such as contributor name and email).
Photo uploads you submit for joybox experiences.
Account details, such as your email address, or your Apple Account if you sign in with Apple.
Saved people and dates, such as names, relationships, birthdays, and anniversaries.
Voice notes and video messages you add to a gift.
Support communications (for example name, email, and support message).

1.2 Information collected automatically

When you use the Service, we may collect:

Device and browser information.
IP address and user-agent string.
Page and event analytics (for example page views, checkout events, and conversion events).
Attribution and campaign parameters (for example UTM parameters, gclid, fbclid, and fbp values when available).
Product/session routing and A/B testing indicators.
Approximate location signals from platform geo headers (for example city, region, and country), where available.

1.3 Tracking technologies and identifiers we use

joybox currently uses a mix of cookies and browser storage identifiers for operations, attribution, and measurement, including examples such as:

Cookies for product routing and experience controls (for example product-id and paywall-variant style cookies).
Geo cookies used for regional experience logic.
Marketing and conversion identifiers where available (for example fbp, fbclid, and gclid), including a hashed version of our session identifier that we share with advertising partners for measurement.
Triple Whale pixel identifiers stored in cookies and browser storage on our marketing and checkout pages, used for marketing attribution.
Browser storage keys used for attribution and checkout continuity (for example first-touch/last-touch attribution records and pending checkout state).

1.4 Cookies and similar technologies

We use cookies, local storage, and session storage for:

Site operation and routing;
Session continuity and checkout recovery;
Analytics and performance measurement;
Marketing attribution and conversion measurement; and
Product experimentation (for example paywall variants).

You can control cookies through your browser settings. Disabling some cookies may affect Service functionality.

2. How We Use Information

We use personal information to:

Provide and operate joybox;
Process transactions and prevent fraud;
Generate, deliver, and support your custom song order;
Run the Joybox iPhone app features you use, such as signing you in, saving your people and dates, checking App Store purchases, and sending the notifications you allow;
Review reports of content that breaks our Terms and remove that content;
Send service emails (for example order confirmations, delivery, support responses, reminders about dates you saved, and account and membership notices);
Send transactional SMS messages if you provide a phone number and choose or consent to text updates, including order, delivery, account, and support messages;
Send recurring Joybox marketing texts about personalized songs, gifts, and offers only when you affirmatively sign up at https://joybox.studio/joybox/sms or select the separate recurring-marketing checkbox under email in the main song funnel. The separate, optional, initially unchecked box at the email step of Joybox's song-creation pages, when offered, covers a promotional song-preview link and up to three promotional unpaid reminders, up to four texts per song and none after purchase. That box does not enroll you in the recurring marketing program. We retain your mobile number, the exact consent disclosure and version, signup timestamp and source, and a hashed network identifier to document consent and prevent signup abuse. Text consent is optional and is not a condition of purchase. Message frequency varies for the separate marketing signup; message and data rates may apply. Reply STOP to unsubscribe or HELP for help;
Monitor product performance and reliability;
Measure ad and campaign effectiveness;
Enforce our Terms and protect users and the Service; and
Comply with legal obligations.

We share information with service providers and partners that help operate joybox, including:

Payment processing: Stripe and PayPal for purchases on joybox.studio. Apple for purchases in the Joybox iPhone app: Apple takes the payment and sends us a signed record of the purchase. We never receive your card number from Apple.
Sign-in and notifications (iPhone app): Apple (Sign in with Apple and the Apple Push Notification service) and Firebase Authentication.
Analytics and product measurement: Google Cloud BigQuery, Vercel Analytics.
Marketing attribution and analytics: Triple Whale. Triple Whale receives website activity collected by its pixel on our marketing and checkout pages (for example page views, add-to-cart, checkout, and purchase events, device and browser details, IP address, and its own identifiers) and order records (order ID, amount, refunds, and the purchaser's email address) so we can measure which marketing channels lead to orders.
Advertising and conversion measurement: Meta Pixel/CAPI, Google Ads, TikTok Pixel/Events API, Pinterest Tag/Conversions API, LinkedIn Insight Tag.
Email delivery and support messaging: Resend.
SMS delivery, messaging compliance, and SMS purchase attribution: Twilio and Klaviyo. For purchase attribution, Klaviyo receives an existing subscriber profile identifier, the confirmed payment amount and currency, payment time and transaction identifier, and message/campaign attribution. A purchase does not grant messaging consent.
Cloud storage/database hosting: Firebase services (Firestore and Storage), Google Cloud, and Vercel.
Support inbox: Google (Gmail) for the contact@joybox.studio mailbox.
AI and generation providers: OpenAI (lyrics/generation features, speech-to-text for optional voice answers, and a safety screen of text that contributors add, see Section 9.5), SUNO (music generation, reached through the aimusicapi.ai service), Google Lyria (music generation when our main music provider is unavailable), ElevenLabs (voice/audio features), Google Gemini (greeting card image generation, including photos you upload for a card, backup lyric writing, and speech-to-text for optional voice answers), TypeSafe (automated quality checks on song details), and Anthropic (Claude, used in our support tooling), along with related processing services used by joybox. Section 9.4 explains what the iPhone app sends to them.

We share only what is reasonably necessary for these providers to perform their services for us.

The Joybox iPhone app contains no advertising or analytics SDKs. The advertising and attribution tools named above are used for our website and checkout, not inside the app.

4. Data Retention

Certain records (for example transaction and order records) may be retained longer where required or permitted by law.

5. Your Choices and Rights

To submit a privacy request, email contact@joybox.studio.

6. Children

7. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No method of transmission or storage is completely secure.

8. International Transfers

Your information may be processed in the United States and other countries where we or our service providers operate.

9. Joybox for iPhone

This section covers the Joybox iPhone app. It adds to the rest of this policy.

9.1 What the app collects

Account. Your email address and password, or your Apple Account if you use Sign in with Apple. With Sign in with Apple we ask Apple for your name and email. If you choose Hide My Email, we receive Apple's private relay address. Your password is handled by Firebase Authentication.
What you create. The people you save (name, how you know them, birthday, and other important dates), the memories and messages you write or dictate, lyrics, songs, cards, Joyboxes, and scheduled gifts.
Photos, voice notes, and video messages. Only the ones you choose to add. We store them to build and deliver your gift.
Symphony. If you start a Symphony, the names, emails, and relationships of the people you invite, and what they add. If someone invites you, your name, email, relationship, and what you contribute.
Purchases. When you subscribe in the app, Apple takes the payment. We receive a signed record from Apple with the product, dates, price, currency, store country, and transaction IDs, linked to your account.
Notifications. If you allow notifications, your device's push token, app version, language, and time zone, so we can send them.
Activity in the app. Simple events, such as finishing setup, starting or finishing a song, answering a permission prompt, opening a notification, and app errors. They are stored with your account ID, email address, app version, and device platform.
Support messages you send us.
Technical data, such as your IP address, which our servers and hosting providers log when the app talks to our servers.

9.2 Contacts

Joybox can find birthdays and anniversaries in your Contacts. You choose how.

Add my contacts. iOS asks for your permission. If you allow it, the app reads your address book on your iPhone: each person's name, nickname, birthday, and anniversary. It does not read phone numbers, email addresses, or street addresses. You then see a list and choose who to add. Only the people you choose are sent to us. We store their name, how they relate to you (a guess from their name or nickname, or the choice you make), and the month and day of their birthday and anniversary. We do not store the birth year.
Choose people one by one. Apple's contact picker shares only the people you pick, and the app gets no access to the rest.

We use this to remind you before each date and to suggest making something for that person. You can delete a saved person at any time in the app.

9.3 Calendar

9.4 AI services

The app asks for your permission before it first does this, and asks again if the providers or the data change. You can withdraw in Settings, then Privacy & support. Withdrawing does not undo what was already made.
Voice notes and video messages you add to a gift are stored and delivered with it. We do not send them to AI services.
Speech-to-text in the app uses Apple's speech recognition, on your iPhone when it supports that. On an iPhone that does not, Apple may process the audio under Apple's terms. We only receive the text you choose to submit, not the audio.
Providers handle what they receive under their own terms.

9.5 Safety screening of what others add

Other people can add text to your Joybox: contributors to a Symphony, contributors to a shared song link, and people who fill in an intake form for you. We screen that text before we keep it.

What we screen. For a Symphony contribution or a shared song link, the contributor's name, relationship, memories, and qualities. For the Symphony join form and the intake form, names and short labels only. Voice notes and video that contributors add are not screened this way.
How. First our own rules, which look for a short list of clearly severe content: sexual content involving minors, explicit sexual acts, slurs, instructions for self-harm, threats against someone's family, and phone and ID numbers. Then, for memories and other free text, we send the text to OpenAI's moderation service, which returns a safety verdict. Names and short labels on the join and intake forms go through our own rules only and are not sent to OpenAI.
What OpenAI does with it. We use OpenAI's answer only to decide whether to accept the text, and we use the text for nothing else there. OpenAI's published API data controls say that data sent to its moderation service is not used to train its models and is not kept for abuse monitoring. With each accepted contribution we store the result of the screen (allowed or held back, and category names), not extra text.
If our screening finds a message clearly severe, we reject it. The contributor sees a short message and the text is not stored. We keep a small record that a rejection happened: the reason category and, where there is one, the Symphony or song ID and the account ID. We do not keep what was written. Screening does not catch everything.
If we cannot screen a message (for example, OpenAI's service is unavailable), we accept it but hold it back. It is not shown to the Symphony owner and is not used in the song until it has been screened. We screen it again when the owner opens or generates the Symphony. If it passes, it appears. If our screening then finds it clearly severe, we remove the text. While a message is waiting, the owner is asked to try generating the song again in a minute.
Reports. The owner of a Symphony can choose Report and block on a contributor's entry in the iPhone app. That sends us a report with the Symphony and entry IDs and the owner's name and email, removes the entry, and blocks that person from adding more. Anyone can report content by emailing contact@joybox.studio.

9.6 Saved people, reminders, and cards

When you save a person with a date, whether by hand, from Contacts, or from your Calendar:

Your iPhone can show reminders two weeks, one week, and two days before and on the day. You switch them on or off in Settings. They are created on your iPhone and send nothing to us.
We may prepare a keepsake card for the date. To make the artwork we send the person's name, your relationship, and the occasion to Google (Gemini). The card has a web link, and anyone who has the link can open it.
We may email you reminders and card previews at the email on your account. You can turn email reminders off in Settings in your Joybox dashboard on joybox.studio, or by emailing us.

9.7 Notifications

9.9 On your iPhone

Your sign-in tokens are kept in the iOS Keychain. A copy of your library and any unfinished draft are kept in the app's protected storage. Signing out clears them.

9.10 No tracking

The app does not track you. It has no advertising SDKs, does not use the advertising identifier, and does not ask for App Tracking Transparency permission.

10. Deleting Your Account and What We Keep

Deleting your account removes:

Your sign-in account and profile.
Your songs, Joyboxes, cards, saved people and dates, scheduled gifts, and Symphonies you created, including what contributors added to them.
The photos, voice notes, video messages, and audio files stored for them.
Your credits and credit history, promo redemptions, preferences, and reminders.
Your push notification tokens.
Your app activity events and the support tickets created from your email address.
Orders and customer records in our database that match your email address.
Your stored Sign in with Apple link, which we revoke with Apple.

Memberships:

PayPal. Before anything is deleted, we cancel any PayPal membership that is still billing. If we cannot cancel it, the deletion stops with an error and nothing is removed. You can try again, or email us.
Stripe. We ask Stripe to cancel your Stripe membership. This is a best effort. If Stripe's cancellation fails, your account is still deleted, so check that the membership has ended or email us.
Apple. Deleting your account does not cancel an Apple subscription. Apple bills it, so cancel it first in your Apple Account settings (Settings, your name, Subscriptions).

What we keep:

Payment records. We do not delete the Stripe customer record, because refund and dispute records need it. Stripe also keeps its own records.
A deletion marker for each song. It holds the song ID, the date, whether the song was paid, and the related Stripe payment IDs. It holds none of your content or contact details. It lets us recognize a late payment or a repeated payment notice for a deleted song.
Past membership records. If an App Store membership replaced a web membership on your account, we keep an archive copy of the earlier membership: its provider, dates, billing IDs, and the email on it. Account deletion does not remove it.
Reminder-planning records. Drafts of songs prepared ahead of a saved date, if any were made for you, and daily logs of which reminders we considered. They are tied to your account ID. Drafts can include the saved person's name and the lyrics. Account deletion does not remove them.
Apple purchase markers. We keep the purchase record from Apple without your Joybox account ID, so that repeated notices from Apple cannot grant access twice.
Analytics records. Records in our analytics warehouse can include your email address, account ID, or order IDs. Account deletion does not remove them. Email us if you want them reviewed.
Support email. Emails you sent to contact@joybox.studio stay in our support mailbox.
Removed Symphony entries. When an owner removes an entry, it is hidden and not used for the song, but we may keep a hidden copy for safety review. It is deleted when the owner's account is deleted.
Entries in other people's Symphonies. Something you added to a Symphony someone else started stays with that Symphony. Ask its owner to remove it, or email us.
Copies held by others. The AI providers and other services in Section 3 keep what they received under their own terms. Our deletion does not reach them.

11. Changes to this Policy

We may update this Privacy Policy from time to time. We will post updates on this page and update the "Last updated" date.

12. Contact

If you have privacy questions or requests, email contact@joybox.studio.

Related legal pages:

joybox Terms of Service: https://joybox.studio/joybox/terms
joybox Refund Policy: https://joybox.studio/joybox/refund-policy

joybox Privacy Policy

1. Information We Collect

1.1 Information you provide directly

1.2 Information collected automatically

1.3 Tracking technologies and identifiers we use

1.4 Cookies and similar technologies

2. How We Use Information

3. Third Parties We Share Data With

4. Data Retention

5. Your Choices and Rights

6. Children

7. Security

8. International Transfers

9. Joybox for iPhone

9.1 What the app collects

9.2 Contacts

9.3 Calendar

9.4 AI services

9.5 Safety screening of what others add

9.6 Saved people, reminders, and cards

9.7 Notifications

9.8 Sign in with Apple

9.9 On your iPhone

9.10 No tracking

10. Deleting Your Account and What We Keep

11. Changes to this Policy

12. Contact

joybox Privacy Policy

1. Information We Collect

1.1 Information you provide directly

1.2 Information collected automatically

1.3 Tracking technologies and identifiers we use

1.4 Cookies and similar technologies

2. How We Use Information

3. Third Parties We Share Data With

4. Data Retention

5. Your Choices and Rights

6. Children

7. Security

8. International Transfers

9. Joybox for iPhone

9.1 What the app collects

9.2 Contacts

9.3 Calendar

9.4 AI services

9.5 Safety screening of what others add

9.6 Saved people, reminders, and cards

9.7 Notifications

9.8 Sign in with Apple

9.9 On your iPhone

9.10 No tracking

10. Deleting Your Account and What We Keep

11. Changes to this Policy

12. Contact