Privacy
Last changed 20 October 2026.
Project Joy is a place to keep the small moments of your day. Other people cannot open your saved moments through their own accounts, except a moment you choose to leave at the campfire. A note you send there goes only to the person who left that moment. The person who runs Project Joy can open saved moments and photos, with the limits explained below. This page says what we hold and who handles it. If anything here is unclear, write to hello@projectjoy.me and we’ll answer plainly.
What you give us
- An email address and a password, to make an account. Supabase stores the password in a form we cannot read back.
- A display name and a photo, if you add them in Settings. Both are optional. The app shrinks the photo in your browser and uploads it to private storage.
- Your moments: the words and photos you keep, their rooms, the day you chose for when they happened, and when they were kept and last changed.
- A reminder, if you set one in Settings: its words, its time and your time zone, and an address from your phone for delivering it. Turning it off removes this information from the live database. It may remain in backups until those copies are removed.
- A moment you leave at the campfire: its words, and its photo if it has one. Changes you make to the moment show there too. Taking it back removes it from the campfire.
- Your campfire choices and responses: whether each moment accepts acknowledgement, your acknowledgements, notes you send or receive, and whether a note has been deliberately acknowledged. Opening a note sends no acknowledgement.
What is collected on its own
- Sign-ins and service requests. Supabase, which runs our accounts, database and photo storage, may keep technical details of requests, including internet addresses and times, to run and protect the service.
- Page requests. Vercel, which serves the app and this site, may keep request details such as internet address, page asked for and browser to run and protect the service.
- Crashes. If the app breaks, Sentry may receive an error report with technical details such as the error, the page, browser and operating system. We turn off its default collection of personal information, performance tracing and session replay. We do not intentionally add your moments or photos to reports.
- Fonts. Some typefaces come from Google Fonts, so Google’s servers see your browser ask for them.
- Earlier alpha versions collected usage notes linked to your account, such as when you opened the app or kept a moment. We have stopped collecting those notes, and on 30 September 2026 we deleted the ones we had. They held no journal text. Backups made before that day may still hold them until those backups are removed.
- Reminders. Your phone’s notification service, such as Apple’s or Google’s, delivers each reminder. It sees when one is sent. The words are encrypted so only your phone can read them.
We do not use advertising or analytics trackers.
What stays in your browser
Your sign-in is held in the browser’s own storage so you stay signed in between visits. The app sends proof of that sign-in to Supabase when it reads or saves your data. An unsaved draft of words is stored in the tab while you work. It is removed when you save or sign out. We do not send those words before you save them.
Email and feedback
The app’s automated account emails, from hello@projectjoy.me, confirm a new account or help reset a password. They go through Resend, which sees your address and the message.
During the alpha, we also send updates, invitations to try Project Joy and questions about the experience to confirmed account holders and people on our earlier waitlist. These emails go through Resend or Buttondown, which receive your address and the message. Answering our questions is optional.
Buttondown holds the email addresses from our earlier waitlist and handles unsubscribe requests for that list. Its emails include an unsubscribe link.
To stop receiving updates, invitations and feedback questions, reply to one of those emails or write to hello@projectjoy.me. We will stop sending them to you. This does not stop emails needed to confirm your account or reset your password.
When you email us, we receive your email address, your message and anything you attach. Forward Email passes the message to our Proton Mail inbox. We use messages to answer questions and handle requests. We also keep feedback you choose to share in our project notes to help improve Project Joy.
We use AI tools from OpenAI and Anthropic (Claude) to help review feedback. These services receive feedback included in our requests or in project notes made available to them. This can include identifying details in the feedback.
Who can see your moments and photos
Other people cannot open your saved journal moments or photos through their own accounts, except a moment you choose to share at the campfire. Supabase checks which account owns each moment and photo when the app requests it. The person who runs Project Joy has administrator access to the database and photo storage and can open your saved moments and photos.
We read your private moments and photos only with your permission, for the specific support purpose you have agreed to. This includes investigating service or security problems. Your permission ends when the issue is closed, and you can withdraw it at any time. We do not read them for personal interest or product research. The same rule applies to a reminder’s words and notes you send or receive at the campfire. This is a rule we follow; the system does not technically prevent administrator access.
Moments shared at the campfire
Anyone signed in to Project Joy can read a moment you leave at the campfire and see its photo. Your name, your profile photo and the time are not shown with it. Project Joy keeps a note of which account left it, so you can find your own and take it back. The person who runs Project Joy looks up who left a moment only with that person’s permission, for the specific support purpose they have agreed to. They can take down anything left at the campfire. People who know you may still recognise your words or your photo.
Campfire responses
Each moment starts with acknowledgement off. If you choose to receive acknowledgement, other signed-in people can acknowledge that moment or leave you one note of up to 500 characters. A moment acknowledgement shows that someone spent a moment with your writing, without a name or count. Notes are visible through the sender’s and recipient’s accounts, with no name or time shown. The recipient can acknowledge a note but cannot write back. There are no response notifications.
Project Joy keeps account links to deliver each note, let you find your own responses and prevent a second send to the same moment. These links are not shown to the other person. The person who runs Project Joy looks up who sent a note only with the sender’s permission, for the specific support purpose they have agreed to. Receiving a note does not let you give permission to identify its sender. The access limits above apply to note text too. Someone who knows you may recognise your words.
Removing campfire responses
Turning acknowledgement off stops new responses and keeps the ones you already have. Existing notes remain readable, and the recipient can still acknowledge them. You can undo your moment acknowledgement. Either person can remove a note for both people; its words and acknowledgement are then deleted. A marker that the note was sent stays until the campfire moment or either account is deleted, so removal does not allow another send. Notes do not expire on their own.
Taking back or taking down a campfire moment, deleting its original journal entry, or deleting either account removes the related responses. Removing a note cannot erase a copy someone already saved. For a problem with a note, email hello@projectjoy.me with its reference, available beside the note.
Writing privately from a campfire moment
If you write in your journal from a campfire moment, Project Joy saves your words and a private link to that shared moment. The shared moment’s words and photo are not copied into your journal. Your entry and its link are not shown to the person who shared it.
You can open the shared moment from your entry while it remains at the campfire. If it is taken back, taken down or deleted, your own entry stays. The link remains in your entry, but the shared moment is no longer available through it. Your download includes this reference.
Temporary links to photos
The app creates a temporary link to show each photo. Anyone who has that link can open the photo until the link expires, about an hour later.
Backups
The person who runs Project Joy makes backups by hand on their computer. Each completed backup includes the database and saved photos, so we can recover from a mistake or outage. We aim to keep backups for no more than 30 days. We review and remove old copies by hand, so a backup may remain longer until that review is done. A moment, note or account you delete, or a reminder you turn off, may remain in one of those copies.
Where it lives
Our Supabase project is in Oregon, United States. Vercel serves pages from data centres near you. The other providers named here may process information in the United States or other countries.
Who else handles it
We use Supabase, Vercel, Resend, Sentry, Buttondown, Google Fonts, Forward Email, Proton Mail, OpenAI and Anthropic for the services described above. UptimeRobot checks whether the public site and app are up. We do not sell or rent your information or share it for advertising. Project Joy does not charge for the app or collect payment card details.
Your choices
- Change or delete any moment in the app, any time. A deleted moment is removed from the live database and photo storage. It can remain in backups until those copies are removed, as explained above.
- Take back anything you left at the campfire, any time. Deleting the moment in your journal also removes it from the campfire.
- Change your display name, or add, replace or remove your photo in Settings.
- Download everything you have kept, words and pictures, from the settings screen, any time. The download includes notes you sent and received and their acknowledgement, without the other person’s account details. It is one file, and it is yours.
- To delete your account, email hello@projectjoy.me from the address on the account. It cannot be done inside the app yet. It is done by hand, within thirty days and usually much sooner.
Changes
If this page changes, the date at the top changes with it. During the alpha, we may update this page without sending an advance email.