Introduction
This policy explains how Feel Joy Limited, trading as Joy (“we”, “us”), collects, uses and protects your personal data when you visit our website, join our early access list, or use Joy. We follow the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR) and the Data Protection Act 2018.
Who we are
Feel Joy Limited is the data controller for your personal data. We are a company registered in England and Wales, number 17071372. You can contact us at hello@feeljoy.ai.
Our representative in the EU, under Article 27 of the EU GDPR, is Feel Joy ApS, CVR 46684893, Østerbrogade 226, st. 1, 2100 København Ø, Denmark. You can contact our representative at hello@feeljoy.ai about anything in this policy.
What Joy does
Joy connects to the tools you choose, sorts your work into the hats you wear, and shows you how your time and effort are spread across them. You can correct your hats, set the balance you want, and hand a hat over to someone else when it is time. Your hats are visible only to you. You decide what you share.
Personal data we collect
4.1 When you request early access
- Your name, email address and role.
- The link you came from, and a referral code if someone invited you.
- Your company’s approximate size, if you sign up with a personal email address and choose to tell us.
- The consent wording you agreed to and the time you agreed to it.
4.2 When you refer someone
If you share your invite link, the person you invite may see your name on their invite page, and we record that they joined through your link.
4.3 When you use Joy
- Account details: your name, email address and login information.
- Content from tools you connect: Joy only reads tools you connect yourself, with your own login. Depending on what you connect, this can include your calendar events, meeting notes from Granola, emails from Gmail, and messages from Slack. You can disconnect any tool at any time.
- What Joy creates for you: your hats, the summaries within them, the corrections and additions you make, and the balance you set.
- How you use Joy: for example, which hats you open and when, so we can improve the product.
4.4 Collected automatically
Our website does not use analytics or advertising trackers. Our hosting provider keeps technical server logs, such as your IP address and browser type, to deliver the site and protect it from abuse. When you submit the early access form we store a one-way hash of your IP address for one hour to rate-limit submissions; it is never linked to your entry. When you use the standards checker we store a one-way hash of your IP address and the date, with a count against it, for one day, so that the five free checks a day can be counted. It holds nothing but that number, it cannot be turned back into your address, it is never linked to the piece you checked, and the piece itself is not stored at all. In the Joy app we keep technical logs, such as your IP address, browser and device type, to keep the service secure and working.
4.5 Sensitive information
We do not ask for sensitive information, such as details about your health. Content from the tools you connect may sometimes contain it, for example an email that mentions a medical appointment. Joy is not designed to use this information. We do not use it to infer anything about your health, feelings or mood, and we filter details such as account numbers and access codes out of your hats.
How we use your data
- To run the early access list, invite you in, and credit referrals.
- To provide Joy: sorting your work into hats, showing where your time goes, and preparing handovers when you ask for one.
- To learn from your corrections, so Joy sorts your work better for you.
- To keep Joy secure and fix problems.
- To contact you about your account and early access.
- To send you news about Joy, only if you have agreed to it.
- To meet our legal obligations.
Legal basis for using your data
- Contract: in Joy, to provide the service to you once you have an account.
- Legitimate interests: on the website, to run the early access list and referrals, to protect the forms and the checker from abuse, to count the five free checks a day, and to keep a daily tally of use by country. In Joy, to keep the service secure and to improve it. In both, only where this does not override your rights.
- Consent: on the website, to send you early access emails, and to count whether you came back to the standards checker. In Joy, to connect each tool you choose. You can withdraw at any time: unsubscribe, clear site data for the website, or disconnect a tool.
- Legal obligation: where the law requires it.
How Joy sorts your work
Joy uses automated processing to sort your work into hats and to summarise what is happening in each one. These are suggestions for you. You can rename, merge, move or correct anything. Joy does not make decisions about you, does not rank you, and is not used to evaluate your performance. Under UK GDPR and EU GDPR you have the right to ask for human review of any automated processing that significantly affects you.
Who can see your data
Only you can see your hats and the content behind them. Your employer, your manager and your colleagues cannot see them, unless you choose to share something or hand a hat over. When you hand a hat over, you review what goes with it before it is sent. If your company later uses Joy’s team features, only what you choose to share will be visible to others.
Service providers
We use trusted providers to run Joy. They may only process your data on our instructions and for the purposes we set:
- Hosting and storage: Google Cloud (Firebase), EU region (Belgium).
- Email delivery: Resend, EU region (Ireland).
- The standards checker: Google Cloud Vertex AI (Gemini), EU multi-region. It reads the piece you drop in to judge it, and nothing else. Google does not use it to train its models.
- Language processing, to sort and summarise your work: we will name these providers here before the Joy app launches. Under our agreements they do not use your data to train their models.
We never sell your personal data. We never share your individual data with your employer.
Google user data
Joy’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular: we only use Google data to provide the features you see in Joy; we do not use it for advertising; we do not sell it; we do not use it to develop, improve or train generalised AI or machine learning models; and people at Joy do not read it unless you ask us to, it is needed for security, or the law requires it.
Aggregate insights
We may publish general findings about how people work, for example how many hats people wear on average. These use anonymised, combined figures only and can never identify you or your company. Data received from Google APIs is not used for this.
Legal demands for data
If a government authority, law enforcement agency or court demands your data, we will tell you where the law allows, and we will share no more than the order requires.
International transfers
Where your data is transferred outside the UK or the European Economic Area, we use approved safeguards, such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses. Ask us at hello@feeljoy.ai for details.
How long we keep your data
- Early access list: until you join Joy or ask us to remove you, and no longer than 24 months. If you unsubscribe we keep your record, marked as unsubscribed, so that we do not contact you again and can show that our earlier emails were sent with your consent. If you sign up again after unsubscribing, we treat that as new consent and send you a new confirmation email.
- Content from connected tools: deleted within 30 days of disconnecting that tool or closing your account.
- Your hats and account data: for as long as you have an account, then deleted within 30 days of closing it, except where the law requires us to keep something longer.
- Anonymised, combined data: may be kept, as it cannot identify you.
Your rights
You have the right to: access your data; correct it; have it deleted; restrict how we use it; receive it in a portable format; object to processing based on legitimate interests or for marketing; withdraw consent at any time; and ask for human review of automated processing. Email hello@feeljoy.ai and we will respond within one month.
Counting on the website
We keep a daily tally of how many visits, checks and sign-ups happen on the website and roughly which country they came from. It is counters and nothing else, with no identifier of any kind, so it is not personal data and it is always on.
Separately, and only if you say yes when the website asks, we keep a record of whether you came back to use the standards checker again. It holds three things: how many days you used it, how many checks you ran, and whether you joined the early access list. It is kept against a one-way hash of your IP address, salted with a secret that rotates every month and is then deleted, so it cannot be reversed and two months of it cannot be joined together. It holds no address, no name and nothing about the work you checked, and it is deleted after a month.
This is pseudonymous personal data and our lawful basis for it is your consent, which you give or withhold when the website asks and can withdraw by clearing site data for the website. Nothing is written before you answer. If your browser sends Global Privacy Control or Do Not Track we treat that as a no and do not ask. We use it to understand whether the checker is useful more than once. We do not use it for advertising, we do not sell it, and it is never joined to your account or to your work.
Cookies
Our website uses no cookies at all, and loads nothing from anybody else, so nobody else sets any either. It keeps five small preferences in your browser’s own storage, which it never sends anywhere, one of them being your answer to the question in section 16. The cookies page names all five and says how to remove them. The Joy app uses only the session cookie it needs to keep you logged in and keep somebody else out.
Security
We protect your data with measures including encryption, access controls and regular security reviews. No system is completely secure, but we take protecting your data seriously.
Complaints
If you have a concern, please contact us first at hello@feeljoy.ai. You can also complain to the Information Commissioner’s Office (ico.org.uk) in the UK, or to your local data protection authority in the EU.
Changes to this policy
We will post any changes here and update the date at the top. If a change is significant, we will also email you.