Privacy Policy
Last updated 29 October 2026Version 0.1
Your stories can be some of the most personal things you write. This policy explains, as plainly as we can, what personal data we handle, why, and what control you have. It is written for the EU General Data Protection Regulation (GDPR), and we apply the same standard to everyone, wherever they live.
1. Who is responsible for your data
The controller of your personal data is {{COMPANY_LEGAL_NAME}} OÜ, {{STREET}}, {{POSTCODE}} Tallinn, Harju maakond, Estonia, registry code {{ESTONIAN_REGISTRY_CODE}}.
For anything about your data, write to hello@joyandjack.com. You can also reach us at hello@joyandjack.com.
2. What we collect
- Account data: your email address, an encrypted password, the date you confirmed you are an adult and accepted our terms, and your preferred language. Guests get an anonymous identifier instead of an account.
- Story prompts and content: the choices you make (format, point of view, comfort level, language, personal boundaries), the ideas and details you type or dictate, the stories we write for you, their covers and audio narration, and the characters and places we keep for you to reuse.
- Preferences: settings you save, favourites, and your consent choice for analytics cookies.
- Payment data: handled by CCBill. When you subscribe, you give your card details to CCBill directly; we never receive or store your full card number. CCBill tells us whether a payment succeeded and the status of your subscription.
- Usage and device data: technical logs (time, pages, errors), your approximate country (to decide whether to ask for cookie consent) and, if you allow analytics, how you use the site. We do not store your IP address in clear: we keep only a salted hash of it, to enforce story limits.
- Support emails: what you write to us and our replies.
If you use dictation, your browser's own speech recognition turns your voice into text. We only receive the text.
3. Sensitive data and your explicit consent
Your story choices and the stories themselves may reveal information about your sex life or sexual orientation. The GDPR treats this as a special category of data (Article 9).
We process this data only with your explicit consent, which you give {{CONFIRM}} when you create your account or a story, and only to write, store, narrate and moderate your stories. You can withdraw your consent at any time by deleting your stories or your account, or by writing to hello@joyandjack.com. Withdrawing does not affect what we did before, but we can no longer write stories for you.
4. Why we use your data and on what legal basis
| Purpose | Data used | Legal basis | How long we keep it |
|---|---|---|---|
| Create and secure your account | Account data | Performance of our contract with you | Until you delete your account |
| Write, store and show your stories | Story prompts and content, preferences | Explicit consent (Art. 9(2)(a)) and contract | Until you delete the story or your account |
| Narrate your stories (Premium) | Story content | Explicit consent and contract | Until you delete the story or your account |
| Check requests and stories against our rules | Story prompts and content | Explicit consent; legitimate interest in keeping the service lawful and safe | Refused requests: {{RETENTION_REFUSED_REQUESTS}} |
| Enforce fair usage limits | Account identifier, hashed IP address | Legitimate interest in preventing abuse | {{RETENTION_IP_HASH}} |
| Block bots | Browser signals checked by Cloudflare Turnstile | Legitimate interest in preventing abuse | Not stored by us |
| Bill your subscription | Subscription status from CCBill | Contract; legal obligations (accounting) | 7 years for accounting records |
| Answer your messages | Support emails | Contract or legitimate interest | {{RETENTION_SUPPORT_EMAILS}} |
| Fix errors and keep the service running | Technical logs | Legitimate interest | {{RETENTION_LOGS}} |
| Understand how the site is used | Analytics data | Consent (cookie banner) | {{RETENTION_ANALYTICS}} |
| Comply with the law and handle complaints | Any relevant data | Legal obligation; legitimate interest | As long as the law or the case requires |
5. Who processes your data for us
We use carefully chosen providers who process data on our behalf, under contract, and only to run Joy & Jack:
| Provider | What they do | Data involved | Location |
|---|---|---|---|
| Netlify | Website hosting | Requests, technical logs | {{CONFIRM}} |
| Supabase | Database, sign-in, sign-in emails, cover storage | Account data, stories, covers | {{CONFIRM}} |
| OpenRouter, and the model providers it routes to (DeepSeek, Mistral AI, Nous Research) | Writing stories, checking them against our rules | Story prompts and content | {{CONFIRM}} |
| Replicate (running a Black Forest Labs model) | Generating cover illustrations | A short description of the scene, with no account data | United States |
| Modal | Generating audio narration | Story content | {{CONFIRM}} |
| Backblaze B2 | Storing audio files | Narration audio | {{CONFIRM}} |
| Unsplash | Stock photographs for character and place cards | Short search words, with no account data | United States |
| Cloudflare Turnstile | Bot protection | Browser signals | {{CONFIRM}} |
| PostHog | Analytics (with consent) and error logs | Usage and device data | {{CONFIRM}} |
| {{EMAIL_PROVIDER}} | Sending emails | Email address, message | {{CONFIRM}} |
| CCBill | Payment processing | Payment data | United States |
CCBill processes your payment data as an independent controller under its own privacy policy. We may also share data with authorities when the law requires it, and with professional advisers bound by confidentiality.
6. International transfers
Some providers are located, or have staff, outside the European Economic Area, mainly in the United States. When data leaves the EEA, we rely on an adequacy decision (such as the EU-US Data Privacy Framework, for certified companies) or on the European Commission's Standard Contractual Clauses, with additional measures where needed. You can ask us for a copy of the relevant safeguards.
7. Never used for training, never sold
- We never use your prompts or stories to train AI models. Our requests to AI providers ask them not to store or train on your data, and we route only to providers that accept this.
- We never sell your personal data or share it for advertising.
- A small number of authorised staff may read a story only when needed: to handle a report or an appeal, to investigate a technical problem, or to check narration quality. Every such access has a purpose.
8. How long we keep your data
We keep your data only as long as we need it, as shown in the table above. When you delete your account, we delete your account data, stories, covers and audio within 30 days, except what we must keep by law (such as accounting records) or to deal with a pending complaint or legal claim. Backups are overwritten within {{RETENTION_BACKUPS}}.
To delete stories or your account, write to hello@joyandjack.com from the address linked to your account.
9. Your rights
You have the right to:
- access the data we hold about you and receive a copy;
- rectify inaccurate data;
- erase your data ("right to be forgotten");
- port your data: receive your stories and account data in a common machine-readable format;
- object to processing based on our legitimate interests;
- restrict processing while a request or complaint is being dealt with;
- withdraw your consent at any time, without affecting earlier processing.
To use any of these rights, write to hello@joyandjack.com. We answer within one month and may ask you to confirm your identity first. Using your rights is free.
10. Complaints to the supervisory authority
If you are not satisfied with how we handle your data, please tell us first so we can fix it. You also have the right to complain to a data protection authority, in particular in the country where you live or work. Our lead authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) (www.aki.ee).
11. Cookies
We use a few essential cookies and similar browser storage that the site cannot work without: to keep you signed in, to remember your age confirmation and your cookie choice, and to protect forms against bots. They do not need your consent.
We use analytics cookies (PostHog) only if you accept them. Visitors from the EU, EEA, UK and Switzerland, and anyone whose country we cannot detect, are asked first. You can change your choice at any time from Cookie settings, also linked in the footer.
12. Security
We protect your data with encryption in transit, private storage for covers and audio (only reachable through short-lived signed links), access rules that keep each person's stories visible only to them, and access for a small number of authorised staff only. No system is perfectly secure: if a breach affects your rights, we will tell you and the authorities as the law requires.
13. Children
Joy & Jack is strictly for adults. We do not knowingly collect data from anyone under 18. If you believe a minor is using Joy & Jack, tell us at hello@joyandjack.com and we will close the account and delete its data.
14. Changes to this policy
We will update this policy when our practices change. The date and version at the top show the latest one. If a change is significant, we will tell you by email or in the app before it applies.
15. Contact
- Privacy questions and requests: hello@joyandjack.com
- General support: hello@joyandjack.com
- Post: {{COMPANY_LEGAL_NAME}} OÜ, {{STREET}}, {{POSTCODE}} Tallinn, Harju maakond, Estonia
