This page is a draft. It is written from what the product actually does today, and it has not been reviewed by a lawyer yet. We will keep making it clearer — if any part of it does not read straight, tell us.
The email or phone number you sign in with, the name you give yourself, your order history, the messages and photos sent in the chat between you and a shop, and — for the orders that need them — a delivery address, a recipient name and a phone number to reach you on. If you open a shop, we hold your shop's details too — and, once you are owed money, the bank account you ask us to send it to. The product and shopfront photos a shop uploads are public. Photos sent in a chat are kept separately and privately, are never public, and stay with that conversation after the order is over, until you ask us to delete them.
Your delivery address is yours: visible to you and to the shop that has to bring you the thing. For a shop, the precise pin is kept privately for the owner's own use, and the point we publish is deliberately coarsened to roughly a kilometre.
That coarsening is not a setting somebody can turn off — the database refuses anything finer. We publish the area, never the seller's door.
Payment details live with Stripe, not with us. We never see or store your card number. What we keep is the amount, the status, and the reference for that payment.
Once you're owed money, you can give us an account to send it to: the bank, the account number, and the name on the account. That is everything we ask for and everything we hold — no ID card number, no house registration, no photograph of you. It is visible to you alone. Someone on the joyzii team can look it up when they are about to make your transfer, and every time anyone does is recorded. It is never copied into a statement, into a record of a transfer, or into an error message. You can change it or delete it yourself, whenever you like.
We ask for it at the moment there is money to send you — never as a condition of opening a shop or posting a drop.
If you pick a link name on your account page, you get a public profile at joyzii.com/u/your-link. It shows the name you set, your profile photo, the month you joined, and the reviews you've written. Reviews are already public on the shop's page, so they always show. The shops you follow and the rounds you've saved each have a switch on your account page — turn one off and nobody else sees it. With no link name there is no profile page at all, and no other URL reaches one.
A profile page never shows an email, a phone number, an address, an order or an amount.
The app holds the same things the website does, plus only what an app needs. If you sign in with Apple, we receive the name and email Apple sends us — or Apple's relay address, if you chose to hide your email. If you allow notifications, we keep your device's push token with your account so order and chat news can reach that device, and delete it when you sign out. If you look for rounds near you, the app asks for your device's location, coarsens it to roughly a kilometre on the phone before sending it, and uses it for that one search — we do not store it. When you pay by card, the card field belongs to Stripe: the number goes straight to Stripe, and Stripe's toolkit in the app sends Stripe some usage data to help prevent fraud.
Address search — on the website and in the app — uses Longdo Map, and the app's maps are drawn by Apple Maps (MapKit). Those two services receive only what you search for, or the part of the map on screen; we do not send them your name, email or phone number.
The room you share with a shop — its messages and its photos — is open to the two of you; the system does not give our team a way to read it. The room where you message the joyzii team is one we read ourselves, photos included, because that is a conversation with us. If something is reported to us, or there is a safety problem, we may have to look at the data that belongs to it — and we look only as far as that problem needs.
You can ask what we hold about you, ask us to correct it, ask us to delete it, and withdraw your consent. The one thing deletion cannot reach is what the law requires us to keep as the record of a transaction.
We do not sell personal data to anyone, and we do not trade it for advertising. Your data travels only as far as the sale needs it to — a delivery address reaching the shop that has to deliver, a payment reaching Stripe.
Email us. Tell us what you want to see, correct or have deleted, and we will answer as soon as we can.
Close your account yourself, on your account pagehello@joyzii.comContact us