joy jar

Privacy policy

Last updated 16 October 2026

This is the privacy policy for the app JoyJar: Shared Gratitude Jar and for JoyJar’s web pages. It says what we keep, where, who can see it, and how you can take it out or have it deleted.

Who we are

JoyJar is made and run by ReAlign Leadership LLC, 464 Ewing St, Princeton, NJ 08540, USA. In this policy “we” means that company. For anything about your privacy, write to support@joyjar.app.

The short version

• Your own jar is yours alone. Nobody else using JoyJar can see it.
• No advertising and no tracking. Nothing records what you do in the app. The one thing we count is purchases. We do not sell your data or share it for advertising.
• Photos lose their location before they are kept.
• You can export everything you wrote, and delete your account, at any time.

What we keep, and why

• Your email address, to sign you in. JoyJar has no passwords: we email you a 6-digit code.
• Your name, if you give one. It is shown to the people in a jar you share, and on a joy you send if you sign it.
• Your joys: the words, the day each is for, and which jar it is in.
• Your photos. Before a photo is kept, your phone redraws it. That removes the location and everything else the camera wrote into the file.
• Your free 30 days and your unlock: the day your account was made, and, if you unlock JoyJar, the day you did and whether it was through Apple or Google. Nothing else about the payment.
• Shared jars: which jars you are in, the invite codes you made, and a jar’s guest link if you switched one on.
• Joys you send as a link: a copy of the words, the name you signed and the photos you ticked, until you delete the link or its 90 days are up.
• Reports, described below.
• Feedback you send, only when you press Send under “Send feedback”: your words, the screenshot if you add one, your email address (so we can reply), and the version of JoyJar and the model and system of your phone. The screen lists all of it before you send.

We use all of this only to run JoyJar for you: to keep your joys, bring them to your other phones, and show them to the people you chose.

Some things never leave your phone: your reminder time and the other switches under “You”, and which joys or people you chose to hide. The daily reminder is set by your phone itself. JoyJar does not ask for your contacts or your location and does not read an advertising identifier.

Where it is kept

Your joys and photos are kept on your phone, in JoyJar’s own storage there, so the app works with no connection. They are also kept in your account on servers run for us by Supabase, a company that provides databases and file storage, so they reach your other phones and are not lost with a phone. Feedback you send, and its screenshot, are kept there too, where nobody using the app can reach them. Postmark sends the email with your sign-in code for us.

Your data may be stored and handled in the United States and in other countries where the companies named in this policy work.

Who can see what

• Your own jar: only you.
• A shared jar: everyone in it (six people at most) can read every joy and photo in it and sees the name you gave. They never see your email address or anything in your own jar. The person who started the jar can remove a joy or a person from it.
• A guest link: someone you send a guest link to sees the jar’s name and the name of the person who started it, and nothing that is in the jar. The note and name they leave are seen by everyone in the jar.
• A joy sent as a link: anyone who has the link can see the words, the photos you ticked and the name you signed, until you delete the link or its 90 days are up. JoyJar tells you this before it makes the link.
• A postcard or an export: these go from your phone to wherever you choose in your phone’s share menu. They are not sent to us.

When we see your words

We do not read your joys. The people who run JoyJar can technically reach the database, as is true of any service, and do so only to keep JoyJar working.

There is one place where a person’s words are put in front of us: a report.

• When someone in a shared jar reports a joy, we keep a copy of that joy’s words, the reason given, and which account reported it (so that one person can report a joy only once). The person who started the jar sees that the joy was reported and why, never who reported it.
• When someone reports a page made from a joy sent as a link, we keep a copy of the words on that page and the reason. We keep nothing about the person who reported it.

We read reports to decide whether to remove something, end a link, remove someone from a jar or close an account. If we act on a report about something you wrote, we email you to say so. If we remove someone from a shared jar, or remove a joy or a guest’s note from it, we also tell the person who started the jar. A report’s copy of the words is kept even if the joy, the link or the writer’s account is later deleted; after an account is deleted the copy no longer says whose words they were.

We read the feedback you send, to answer you and to improve JoyJar. A screenshot may show your joys, or other people’s in a shared jar; only the people who run JoyJar see it, and it is never put in an email.

One more copy is kept out of sight: when the person who started a shared jar removes someone else’s joy from it, or we remove a joy after a report, the words leave the jar and a copy is kept on the server, where nobody using the app can reach it, in case the removal has to be looked into. It is erased when the writer deletes their account.

Other companies involved

We use a small number of companies to run JoyJar, and only for that.

• Supabase keeps the database and the photos, and checks sign-ins.
• Postmark sends the email with your sign-in code. For that it receives your email address and the code, and nothing else. It also sends the emails, described above, that tell someone we acted on a report, and brings us the feedback you send: your words, your email address and the app and phone details, never the screenshot.
• Cloudflare stands in front of Supabase and passes requests on. It may attach a short-lived cookie that it uses to tell people from robots. JoyJar does not read or use that cookie, and our web pages are built so that they neither store it nor send it back.
• Netlify serves JoyJar’s web pages.
• Apple or Google takes the payment if you unlock JoyJar. We never see your card or your billing details.
• RevenueCat confirms to us that a purchase was made. It receives your JoyJar account number (a random number, not your email address), the record of the purchase, and the technical details about the app and phone that its software needs for this. RevenueCat also counts purchases for us: how many, on which day and through which store. We use those numbers to see how JoyJar is doing, and for nothing else.

When the app or a web page connects, Supabase, Cloudflare and Netlify see your internet address and basic details of your phone or browser, as any web host does, and may keep them for a short time in their technical logs. JoyJar’s own code keeps no record of who visited a page.

Each of these companies handles data under its own agreement and privacy policy, and is required to protect it to at least the standard described here. We do not give your data to anyone else, unless the law requires us to.

A limit you should know about

When someone leaves a shared jar, is removed from it, or the jar is deleted, they can no longer open anything in it. One exception: a photo their phone had already downloaded can still be fetched again by that same sign-in from our storage company’s short-term cache, for up to an hour. They cannot get anything they had not already seen.

How long we keep things

• Your account, joys and photos: until you delete them or your account.
• A joy or photo you delete: it goes from your jar on every phone at once. The server keeps it, marked as deleted and out of everyone’s sight, so that the deletion reaches your other phones. It is erased for good when you delete your account.
• A link you sent: its words and photos are erased when you delete the link, when you delete the joy, or after 90 days.
• An invite code: 7 days.
• Reports: for as long as we need them to deal with misuse.
• Feedback: a screenshot for 90 days, the rest for 1 year. Both are erased at once if you delete your account. A copy of the email it reaches us in stays in our support inbox.
• An account we closed for breaking the terms: we keep its email address on a list, so that it cannot be used to open a new JoyJar account. We keep nothing else of it.

Your choices

• Take a copy. “Export my joys”, under “You”, gives you one file with every joy you wrote and your photos. It is always free.
• Change or remove things. You can edit or delete any joy you wrote, change your name, delete a link you sent, and leave a shared jar.
• Delete your account. Under “You”, “Delete my account” deletes it straight away. Or write to us from your account’s email address and we will do it within 30 days and tell you when it is done. What is deleted and what is kept.
• Ask us. Depending on where you live, the law may give you the right to see, correct, move or delete the data we hold about you, or to object to how it is used. Write to support@joyjar.app and we will answer within 30 days.

If you do not have an account

If you left a note through a guest link: we keep the name and the note you typed, as a joy in that jar. Everyone in the jar can see it. To have it removed, ask the person who invited you, or write to us.

If you opened a joy someone sent you: we keep nothing about you.

JoyJar’s web pages use no tracking, no advertising and no outside scripts, set no cookie of their own, and keep nothing in your browser. The secret part of a link is never sent to the company that serves the pages.

Keeping it safe

Everything travels over an encrypted connection. Rules in the database let each account reach only the jars it is in, and photos are in private storage that cannot be opened without permission. No system can promise perfect security; if something ever went wrong with your data we would tell you.

Children

JoyJar is for people aged 13 and over. We do not knowingly keep data about a child under 13. If you believe a child under 13 has an account, write to us and we will delete it.

Changes to this policy

If we change this policy we will put the new version here with a new date at the top.

Reaching us

ReAlign Leadership LLC, 464 Ewing St, Princeton, NJ 08540, USA. support@joyjar.app