Privacy policy

joyboy.club · effective 11 September 2026 · adds the microphone and notifications, and replaces membership with credits · replaces the policy of 7 September 2026

joyboy.club is an iPhone app made and run by one person. It turns a sentence you type into a small playable game (a "world"). This page says exactly what the app collects, why, who else sees it, how long it is kept, and how you delete it. There is no advertising, no analytics service and no tracking across apps or websites.

1. What we collect, and why

Data	Why	When
Email address	To sign you in with a six-digit code, to send the verification link if you change your address, and to answer you if you write to support. Never for marketing.	When you sign in with email.
Sign in with Apple identifier (and the email Apple shares, which may be a private relay address)	To sign you in with Apple instead of a code.	When you choose Sign in with Apple.
Username	The name shown on any world you send into the universe. Assigned at sign-up; you can change it in Me → Username.	At sign-up.
Sentences, revision notes, and the worlds made from them (the game's design and code)	This is the product. A world is private to you until you send it into the universe.	When you create or revise a world.
Plays, flags, reports and blocks	Play counts and flags rank the universe. A report tells the operator what to look at. A block hides a maker's worlds from you.	When you do those things.
Credits and purchases: how many worlds you have left, and Apple's transaction identifier for each pack you buy	To know whether you can create a world, and to make sure a purchase is counted once. Every change is kept as a line in a ledger so a refund or a dispute can be traced. Apple handles the payment; we never see your card or your Apple Account password.	When you buy a pack, create a world, or a credit is returned to you.
Spoken sentences (only if you use the microphone)	Turned into text on your phone, or by Apple's speech service, so it can become the sentence your world is made from. We never receive the recording — only the text, which is then the same as a typed sentence.	From the moment you tap the microphone button until you stop talking.
Notification token (only if you turn notifications on)	So a notification can reach your device. Deleted when you turn it off or delete your account.	When you turn notifications on.
Technical data: your IP address and the time of each request	To limit abuse (how many sign-in codes or creations one address may start per hour) and to keep the service running. Not linked to your account beyond the server's own logs.	Every request, briefly.

Device permissions. Two, both optional, both asked for only at the moment you reach for the feature — never on launch, and the app works fully without either.

Microphone and speech recognition — only after you tap the microphone button in the sentence box, and only until you stop talking (it stops on its own after two seconds of quiet), so you can say your sentence instead of typing it. On phones that support on-device recognition the audio never leaves the handset; where it does not, Apple's speech service turns it into text and Apple's privacy policy governs what Apple does with it. We never receive or store the audio. The resulting text becomes the sentence, and is treated exactly like a typed one.
Notifications — only if you turn the switch on in Me → Account. We store a device token against your account so a notification can reach you, and delete it when you delete your account or turn the switch off.

Nothing else is asked for: no camera, no location, no contacts, no photos, no advertising identifier. There is no tracking, of any kind, anywhere.

2. Who else sees data

We do not sell data, share it for advertising, or give it to data brokers. Three companies process data on our behalf, each only for the purpose named:

Apple (Apple Inc.) — Sign in with Apple, and App Store purchases. Apple's own privacy policy applies to what Apple sees.
Resend (Resend, Inc., USA) — delivers the sign-in code and verification emails. Resend sees your email address and the message.
DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd., China) — the AI model that designs and writes your world and inspects frames of it while it is tested, through DeepSeek's official API. It receives the sentence you typed, any revision note, the design, the generated code and images of the running game — and nothing that identifies you: no email, username, account id or device information. DeepSeek's own API terms govern what it does with the text it receives; because we send it no personal data, nothing it receives can be traced to you.

Our own server runs on Alibaba Cloud in Hong Kong. That is where your account data is stored. The sentence and the generated game are also sent to DeepSeek's servers in China while your world is being made.

3. What other people can see

A private world is visible only to you.
A world you send into the universe is first looked at by a person. If it is accepted, everyone who uses the app can see the world, its sentence and your username, and can play it. You can pull it back to private at any time from Me → the world → Manage.
Your email address is never shown to other members.

4. How long we keep data

Account data (email, username, sessions, private worlds, your credit ledger, flags, blocks) — until you delete your account.
Worlds already in the universe — kept after deletion so other members' shelves do not break, but with your name removed and no link back to you.
Reports — kept until the operator has acted on them, then as an anonymous count.
Server logs with IP addresses — up to 30 days.
Sign-in codes — 10 minutes.

5. Deleting your account

Me → Account → Delete my account. It takes effect immediately and removes your email, Apple identifier, sessions, private worlds, revision notes, flags, blocks and unspent credits. You can also email us and we will delete the account for you.

6. Your rights

You can see and change your username and email in the app, and see every world you made on the Me tab. You can ask us for a copy of the data we hold about you, ask us to correct it, or ask us to delete it, by writing to the address below; we answer within 30 days. If you live in the EU/EEA, the UK, California or another place with a data-protection law, these are the rights that law gives you and we honour them regardless of where you live.

7. Children

joyboy.club is not directed at children under 13, and we do not knowingly collect data from them. The app is rated 9+ on the App Store for mild cartoon action. If you believe a child has created an account, write to us and we will delete it.

8. Security

Traffic between the app and our server is encrypted (HTTPS). Sign-in uses one-time codes, so there is no password to steal. Apple's purchase receipts are verified against Apple's certificates on our server. The generated game code runs inside a sandbox in the app and cannot reach the network, your files or the rest of the app.

9. Changes

If this policy changes, the date at the top changes and the new version is published here before it takes effect. Changes that reduce your privacy will also be announced inside the app.

10. Contact

Liang, the developer of joyboy.club — hello@joyboy.club. Every message is read by a person.

Support · Terms of use