Privacy Policy

Happy Brain, Inc. ("Happy Brain", "we", "us") makes Joyo, a habit tracker and journal for iPhone. This Privacy Policy explains what information we collect through the Joyo app and through this website at joyo.my, how we use it, who we share it with, and the choices you have.

Joyo is a private journal, and almost everything in it is there for one reader: you. Because your journal lives in your account — so that it syncs, and so that it survives a lost or replaced phone — we do store it. What follows is a plain description of what that means.

1. Information we collect

Account information

To create an account we collect an email address and a password, or the account identifier and email address returned to us by Sign in with Apple or Sign in with Google if you sign in that way. If you use Sign in with Apple and choose to hide your email address, we receive only the private relay address Apple gives us. Passwords are stored by our hosting provider in hashed form; we do not see them.

Your journal content

The content you create in Joyo: moments (an activity, together with the mood and the factors you tag it with), free-text notes, photos you attach to a moment, affirmations, goals, and your in-app settings. This content is stored in your account so that it syncs between your devices and can be restored to a new one.

Joyo offers optional extra encryption for your notes. When you turn it on you choose a note password, which is kept in your device's keychain and sent with your requests so that your notes can be encrypted and unlocked for you. It is an additional lock on your notes, on top of the encryption every request already uses in transit — it is not end-to-end encryption, and if you lose that password we may not be able to recover the notes it protects.

Health and photo data you choose to share

If you allow it, Joyo reads sleep and workout data from Apple Health so that it can suggest entries for your journal, and reads the photos you pick from your photo library so that you can attach them to a moment. Joyo asks for these permissions the first time it needs them, and you can withdraw them at any time in the iOS Settings app. This data reaches our servers only when you save it into your journal; anything you do not save stays on your device.

Device and diagnostic information

Joyo includes third-party crash-reporting and app-analytics SDKs. They collect technical information — device model, operating system and app version, language, a generated device or installation identifier, crash reports and error traces, and the names of in-app events such as which screen was opened — so that we can find and fix problems and understand which parts of the app get used. We do not send the text of your notes, or the content of your journal entries, to these SDKs.

Purchases

Joyo's subscription is sold through the Apple App Store. Apple processes the payment; we never receive your card details. We receive the state of your purchase — which subscription you have and whether it is active — so that the app can unlock the features you paid for.

Notifications

If you allow notifications, Apple issues a push token for your installation, which we store so that we can deliver the reminders you asked for and, occasionally, a service message.

Messages you send us

If you email us, or send feedback from inside the app, we keep your message and your email address so that we can reply and keep a record of the request.

2. How we use information

Your information is used to run Joyo, and for nothing else:

• to provide the service you asked for — storing your journal, syncing it between your devices, restoring it onto a new phone, and unlocking the features you purchased;
• to respond to your emails, feedback, questions, comments, requests and complaints, and to provide customer support;
• to send you the reminders you set up, and service messages such as security, account and administrative notices;
• to keep Joyo working — diagnosing crashes, fixing bugs, and understanding in aggregate which parts of the app are used, so that we can improve the quality of the service;
• to protect the service and its users against abuse, fraud and security incidents, and to comply with the law;
• to tell you about changes to Joyo — new features, and occasional news about the app. You can stop these at any time from the link in any such email, at joyo.my/email-choice, or by writing to mind@happybrain.app.

We do not use your journal content to build advertising profiles, and we do not sell personal data.

3. Where your information is stored, and who we share it with

Your account and your journal are stored on the servers of our hosting provider, Back4App, which runs the Parse Platform. Those servers may be located in a country other than the one you live in.

We share information only with the service providers that make Joyo work — our hosting provider, our crash-reporting and analytics providers, Apple and Google for sign-in, Apple for purchases, and Postmark, a service of ActiveCampaign, for delivering the email we send you — and only to the extent each of them needs it in order to provide their service to us.

We do not sell your personal data, and we do not share it with anyone for advertising.

We may disclose information where we are legally required to do so, or where we believe in good faith that it is necessary to protect the rights, safety or property of our users, the public, or Happy Brain, Inc.

4. Cookies

joyo.my is a static marketing site. It sets no cookies, runs no advertising or analytics scripts, and does not track you across other websites. Our web host records standard server logs — such as IP address, request time and user agent — for security and reliability. The Joyo app itself does not use cookies.

5. Your choices and your data

• You can edit or delete individual moments, notes, photos, affirmations and goals inside the app at any time.
• You can delete your account at any time in the app, under Settings, then Privacy & Data, then Delete Account.
• To close your account and have the data associated with it deleted, or to request a copy of that data, email us at mind@happybrain.app from the address on your account. We will carry out the request and confirm to you when it is done.
• You can turn the optional note encryption on or off in the app's settings.
• You can withdraw the Health, photo, camera and notification permissions at any time in the iOS Settings app.
• You can view, manage or cancel your subscription in your Apple ID settings.
• You can choose whether to receive Joyo news by email, and change that choice at any time at joyo.my/email-choice or from the link in any news email.

We keep your information for as long as your account exists. When you ask us to delete your account, we delete the account and its journal content from our systems; copies may remain in routine backups until those backups are cycled out.

6. Your rights under GDPR (EEA and UK)

If you are in the European Economic Area or the United Kingdom, the General Data Protection Regulation and the UK GDPR give you rights over the personal information we hold about you. Happy Brain, Inc. is the controller of that information, and you can reach us about any of it at mind@happybrain.app.

The legal bases we rely on

• Performing our contract with you. We keep your account, store your journal, sync it between your devices, restore it onto a new phone and unlock the features you purchased, because that is the service you asked us for.
• Our legitimate interests. We use device and diagnostic information to find and fix crashes and bugs and to understand in aggregate which parts of the app are used, and we process information as needed to protect the service and its users against abuse, fraud and security incidents. We also send you news about Joyo — new features, and occasional news about the app — on the basis of the agreement you accepted when you created your account and our legitimate interest in telling the people who use our product about it. You have the right to object to that at any time, and stopping is one click: the link in any such email, or joyo.my/email-choice. We rely on this basis only where your interests and fundamental rights do not override it.
• Your consent. Apple Health data, photos from your photo library, and push notifications are processed only after you grant the matching permission on your device. Where you choose to record health or mood information in your journal, or to bring it in from Apple Health, we treat it as special category data and process it on the basis of your explicit consent, for the single purpose of keeping your journal for you.
• Legal obligations. We may process information where the law requires us to keep or disclose it.

Your rights

• Access: you can ask whether we hold personal information about you, and be given a copy of it.
• Rectification: you can ask us to correct personal information that is inaccurate or incomplete. Most of what we hold you can correct yourself inside the app.
• Erasure: you can ask us to delete your personal information. Deleting your account in the app (Settings, then Privacy & Data, then Delete Account) is the fastest way to do it, and you can also email us as described in section 5. We may need to keep limited information where the law requires it, such as records of a transaction.
• Restriction: you can ask us to restrict how we process your personal information in certain circumstances — for example while you contest the accuracy of something we hold.
• Portability: you can ask to be given the personal information you provided to us in a structured, commonly used, machine-readable format, and to have it transferred to another controller where that is technically feasible.
• Objection: you can object to processing that we carry out on the basis of our legitimate interests, and you can object at any time to any use of your information for direct marketing.
• Withdrawal of consent: you can withdraw the Health, photo, camera and notification permissions at any time in the iOS Settings app, and you can turn the optional note encryption off in the app's settings. Withdrawing consent does not affect the lawfulness of the processing we carried out before you withdrew it.
• Complaint: you can lodge a complaint with the data protection authority in the country where you live or work, or where you believe your rights were infringed. In the United Kingdom that authority is the Information Commissioner's Office. We would welcome the chance to address your concern first, so please consider writing to us before you do.

To exercise any of these rights, email us at mind@happybrain.app from the address on your account. To protect your privacy and security we may take steps to verify your identity before acting on a request. We will respond within one month. Where requests are complex or numerous we may extend that period by up to two further months, and we will tell you within the first month that we need the extension and why. Exercising these rights costs you nothing.

Where your information goes

As described in section 3, your account and your journal are stored on the servers of our hosting provider, Back4App, which runs the Parse Platform, and those servers may be located in a country other than the one you live in, including the United States. Some of the other service providers named in section 3 are also based outside the EEA and the United Kingdom. Where personal information is transferred out of the EEA or the United Kingdom, we rely on the GDPR data processing terms our providers commit to — our hosting provider Back4App incorporates a GDPR data processing addendum into its terms of service — and, where a transfer requires one, on a transfer mechanism recognized under the GDPR. If you would like to know which safeguard applies to a particular transfer, email us at mind@happybrain.app.

How long we keep it

We keep your information for as long as your account exists, as section 5 describes. Deleting your account is how erasure is carried out: the account is deactivated immediately, the personal details attached to it are scrambled at the same time, and the remaining records are purged from our systems within a few days. Copies may remain in routine backups until those backups are cycled out.

7. California privacy rights (CCPA and CPRA)

If you live in California, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you rights over the personal information we collect. This section restates, in the categories that law uses, the collection already described in section 1. It does not describe anything new.

The categories we collect

• Identifiers: the email address and password you register with, or the account identifier and email address that Sign in with Apple or Sign in with Google returns to us, together with the generated device or installation identifier and the push token described in section 1, the email address you write to us from, and the IP address our web host records in the server logs described in section 4. If you turn on the optional note encryption, the note password you choose is, as section 1 describes, kept in your device's keychain and sent with your requests so that your notes can be encrypted and unlocked for you.
• Personal information described in the California Customer Records statute (Civil Code section 1798.80(e)), which is where your journal content and the health information in it belong: moments, the moods and factors you tag them with, free-text notes, photos you attach, affirmations, goals and your in-app settings, together with the sleep and workout data you choose to bring in from Apple Health and any health or mood information you choose to record yourself. Health information is sensitive personal information under California law.
• Commercial information: the state of your Joyo subscription — which subscription you have and whether it is active. Apple processes the payment, so we never receive your card details.
• Internet or other electronic network activity information: the device and diagnostic information our crash-reporting and app-analytics SDKs collect — device model, operating system and app version, language, crash reports and error traces, and the names of in-app events such as which screen was opened — together with the standard server logs our web host keeps for joyo.my, described in section 4: IP address, request time and user agent.
• Audio, electronic, visual, thermal, olfactory or similar information: the photos you attach to a moment, and the content of the emails and in-app feedback you send us that section 1 describes under "Messages you send us".

We collect this information from you, from the app on your device, and from Apple and Google when you sign in with them or when Apple tells us the state of your purchase. We collect and use it for the business purposes described in section 2; we disclose it to the service providers described in section 3, so that they can provide their service to us, and otherwise only where section 3 already permits — where we are legally required to disclose it, or where we believe in good faith that it is necessary to protect the rights, safety or property of our users, the public, or Happy Brain, Inc.; and we keep each category for as long as your account exists, as section 5 describes.

We do not sell or share your personal information

We do not sell personal information, and we do not share it for cross-context behavioral advertising, which is what "sharing" means under the CCPA. We have not done either in the preceding twelve months, and we do not knowingly do either with the personal information of anyone under sixteen. Because there is nothing to opt out of, we publish no "Do Not Sell or Share My Personal Information" link, and we offer no financial incentive in exchange for personal information.

Sensitive personal information

The health information you record in Joyo, and the credentials you use to sign in, are sensitive personal information under the CPRA. We use them only to provide Joyo to you, to keep your account secure, and for the other purposes described in section 2. We do not use or disclose sensitive personal information in order to infer characteristics about you, and we never use it for advertising, so there is nothing for a request to limit its use to restrict. You can still write to us about it at mind@happybrain.app.

Your California rights

• Right to know: you can ask for the categories and the specific pieces of personal information we have collected about you, where we got them, why we collected them, and the categories of third parties we disclosed them to.
• Right to delete: you can ask us to delete the personal information we hold about you. Deleting your account in the app (Settings, then Privacy & Data, then Delete Account) does this, and you can also ask us by email.
• Right to correct: you can ask us to correct inaccurate personal information. Most of what we hold you can correct yourself inside the app.
• Right to opt out of the sale or sharing of personal information: we do not sell or share personal information, so there is nothing here to opt out of.
• Right to limit the use of sensitive personal information: as described above, we do not use sensitive personal information for any purpose that this right restricts.
• Right to non-discrimination: we will not deny you the service, charge you a different price, or give you a lower quality of service because you exercised any of these rights.

To exercise any of these rights, email us at mind@happybrain.app from the address on your account, or use the in-app deletion described above. We will acknowledge your request and respond within 45 days; if the request is complex we may take up to a further 45 days, and we will tell you if we need to. Before we act on a request about a Joyo account, we verify it by having you authenticate to that account: either by making the request from inside the app, where you are already signed in, or by writing from the email address on the account and then completing the confirmation step we send you. Deleting your account in the app sits behind that sign-in already, so it needs no further verification. Matching the email address you write from is how we verify a request that is not tied to a Joyo account.

An authorized agent may make a request on your behalf. Send it to mind@happybrain.app with written permission signed by you; we will still ask you to authenticate to the account in the way described above, and we may contact you to confirm that you gave that permission.

8. Security

Traffic between the app and our servers is encrypted in transit; your notes can be given the additional layer of encryption described above; and access to our systems is limited to the people who need it. No method of transmission or storage is completely secure, however, so we cannot guarantee absolute security.

9. Changes

This Privacy Policy may be revised and modified in the future. We will post the revised policy on this page and update the effective date shown at the top, and we will tell you in the app or by email if the changes are significant. Please check back periodically to keep informed of updates or changes. By continuing to use Joyo after a revision takes effect, you agree to be bound by the revised policy.

10. Contact

Joyo is made by Happy Brain, Inc. If you have a question about this policy, or about the information we hold about you, email us at mind@happybrain.app.