Privacy Policy
JOY by Mureli (“JOY”, “the app”) hands you one small, doable task at a time. This policy explains what data the app and this website collect, why, who else handles it, how long it is kept, and the rights you have. We keep it short on purpose: we collect only what JOY needs to work.
1. Who is responsible
The controller of your personal data is Andrii Murko, a private individual based in Poland, who develops and publishes JOY.
For anything about your data — questions, requests, deleting your account — write to hello@lab4-studio.com.
2. What we collect
Your account
- Email address and name — to create your account, sign you in, and send password-reset emails.
- Password — stored only as a secure hash by our authentication provider. We never see it.
How you use JOY
- Your tasks — which tasks you took, completed, rejected or replaced, and when. This is your history in the app and what the daily limits are counted from.
- Likes and dislikes you give tasks.
- Your settings — app language and the task filters you choose (place, time, activity, cost, categories).
- Your completed-tasks count.
- Extra tries from ads — when you watch a rewarded ad to the end, we record the time, which limit it raised, and the transaction id Google sends us to confirm the view.
Kept only on your phone
- Reminder settings. Reminders are local notifications scheduled by your iPhone; they are not sent through our servers.
Technical data
- When the app or this website talks to a server, that server logs technical details such as your IP address, the time and the request, for security and to keep the service running.
We do not use analytics or tracking tools in the app or on this website, and the website sets no cookies. JOY does not ask for your location, contacts, photos, camera or microphone.
3. Ads
JOY is free. When you reach a daily limit, the app may offer a short rewarded ad: you choose to watch it, and a fully watched ad gives you one more try for the day. Ads are shown by Google AdMob, which handles ad-related data as an independent controller under Google’s Privacy Policy.
- To show and measure ads, Google may process device information, your IP address, ad interactions and — only if you allow tracking in the iOS prompt — your device’s advertising identifier (IDFA), which makes ads more relevant to you.
- In the European Economic Area, the UK and Switzerland, Google’s consent form asks for your choice before any personalised ads. You can refuse.
- You can change your mind at any time: in the app under Settings → Privacy → Ad privacy choices (where available) and in iOS Settings → Privacy & Security → Tracking.
- If you decline, you may still see ads, but they are not personalised.
We never sell your personal data, and we do not share your email, name or task history with advertisers.
4. Why we use your data (legal bases)
| Purpose | Legal basis (GDPR) |
|---|---|
| Your account, tasks, history, filters, limits and extra tries | Performing our agreement with you — the Terms of Use (Art. 6(1)(b)) |
| Password-reset and other account emails | Performing our agreement with you (Art. 6(1)(b)) |
| Personalised ads and the advertising identifier | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
| Non-personalised ads, security, preventing abuse of limits and rewards, server logs | Our legitimate interests in keeping JOY free, safe and working (Art. 6(1)(f)) |
| Keeping records the law requires | Legal obligation (Art. 6(1)(c)) |
5. Who else handles your data
- Supabase — hosts our database and sign-in. Your data is stored in the EU (Frankfurt, Germany).
- Google (AdMob) — shows rewarded ads and confirms watched ads to our server, as described above.
- Hostinger — delivers our account emails and hosts this website.
- Apple — distributes the app through the App Store under its own privacy policy. We do not receive your Apple account data.
Some of these providers may process data outside the EEA (for example in the United States). Where they do, the transfer is protected by the European Commission’s Standard Contractual Clauses or the EU–U.S. Data Privacy Framework.
6. How long we keep it
- Your account data and history — for as long as you have an account.
- When you delete your account, everything linked to it is deleted immediately. Copies in encrypted backups are overwritten within 30 days.
- Server logs — kept for a short period for security, then deleted.
7. Deleting your account
Open JOY and go to Settings → Profile → Delete account. This removes your account, history, likes, settings and reward records at once. If you cannot open the app, email hello@lab4-studio.com from the address of your account and we will delete it for you.
8. Your rights
Depending on where you live, you have the right to access your data, correct it, delete it, restrict or object to its use, receive it in a portable format, and withdraw consent at any time without affecting earlier processing. To use any of these rights, write to hello@lab4-studio.com; we answer within one month.
You can also complain to a data protection authority — in Poland the President of the Personal Data Protection Office (UODO), or the authority where you live or work.
9. Children
JOY is meant for people aged 13 and over. In the European Economic Area, if you are under 16 (or the lower age set by your country), you need a parent’s or guardian’s consent to use JOY. We do not knowingly collect data from children under 13; if we learn that we have, we delete it.
10. Security
Data travels encrypted (HTTPS). Access to your data in our database is limited to your own account by row-level security rules, and the actions that matter — like daily limits and extra tries — are enforced on the server, not in the app.
11. Changes to this policy
If we change this policy, we will update the date at the top and, for significant changes, tell you by email or in the app before they apply.
12. Contact
Andrii Murko · Poland · hello@lab4-studio.com