Privacy Policy

Your photo stays yours.

Joymet keeps selected photos and postcard artwork on your device. After explicit consent, relevant chat content and text prompts may be sent to SiliconFlow. Optional AI Interpretations are generated from text prompts, never by uploading your selected photo.

Effective June 3, 2026 | Last updated August 17, 2026

1. Summary

  • Joymet turns one photo and a guided chat into an Original postcard, with an optional AI Interpretation.
  • The photo you choose or take stays on your device. Joymet does not send the photo, its file path, or its bytes to SiliconFlow.
  • After explicit consent, Joymet may send relevant chat content and generated text prompts to SiliconFlow.
  • Joymet does not require an account and does not include advertising or cross-app tracking.
  • Postcard records, Original artwork, downloaded AI artwork, drafts, selected photos, and settings are stored locally.
  • The first successful AI Interpretation is free. Additional AI Interpretations use Gems available through one-time App Store purchases.
  • Sharing happens only when you choose Share and confirm a destination through your device's share sheet.

2. Information We Process

Information you provide

  • One photo you select from your photo library or take with your camera for each draft.
  • Messages you type during guided creation or companion chat.
  • Your selected companion, creation intent, visual mood, and optional recipient name.
  • Postcard-back details, including recipient, signature, and stamp selection.
  • A profile avatar if you choose one from your photo library or camera.

Please do not include highly sensitive personal information in text submitted for AI processing.

Information generated or stored by the App

  • A local creation-session record and chat history.
  • A local Original copy of your selected photo.
  • Postcard copy, image prompt, mood, back details, bookmark status, and selected cover version.
  • An optional AI Interpretation, its provider URL, and a downloaded local copy.
  • Your free AI Interpretation status, local Gem balance, and a local Gem ledger containing product identifiers, App Store transaction identifiers, Gems credited or spent, and transaction timestamps.
  • Temporary 1024 x 1536 front and back PNG files created when you choose Share.
  • Onboarding, AI consent, selected companion, auto-save, and avatar preferences.

Information Joymet does not intentionally collect

Joymet does not intentionally collect contacts, precise location, microphone audio, health data, payment card or bank account details, government identifiers, advertising identifiers, or account credentials. Apple processes payment information for App Store purchases and does not provide those payment details to Joymet.

3. How We Use Information

  • Restore an unfinished draft on your device.
  • Guide you through a short conversation about the selected moment.
  • Ask SiliconFlow for guided replies, postcard copy, tags, and visual direction after consent.
  • Create and preserve the Original version from your selected photo.
  • Create or regenerate an optional AI Interpretation only when you request it.
  • Deliver purchased Gems, maintain your local Gem balance, record Gem spending, and prevent duplicate purchase delivery.
  • Compare versions, choose a cover, personalize the back, bookmark, share, and remove postcards.

Regenerating an AI Interpretation replaces only AI artwork and never modifies the selected photo or stored Original.

4. Photos Stay on Your Device

  • Joymet copies the photo you choose into app-owned local storage so the draft can be resumed and an Original can be created.
  • Original artwork and share rendering are handled locally on your device.
  • Joymet does not upload the selected photo to SiliconFlow. Optional AI artwork is generated from a text prompt.
  • Joymet does not write postcards directly to your system photo library.
  • Selected photo copies remain in app-local storage until removed through available app-data controls or uninstallation, subject to operating-system backup behavior.
  • Device backups may include app data depending on your operating system and backup settings.

5. AI Provider Processing

  • Joymet uses SiliconFlow for guided replies, postcard copy and visual direction, and optional text-to-image generation.
  • Before chat content or generated prompts are sent, Joymet asks for explicit AI processing consent.
  • Submitted text may include relevant chat messages, companion context, creation intent, recipient context, selected mood, and prompts needed for the current request.
  • Create AI version and Regenerate AI send the saved text image prompt to SiliconFlow's image-generation service. The selected photo, its path, and its bytes are not included.
  • SiliconFlow may return generated text, tags, an image prompt, and a generated-image URL. Joymet downloads the generated image into app-local storage.
  • If you do not consent, Joymet does not send your chat content or generated prompts to SiliconFlow.
  • SiliconFlow processes submitted data under its own terms, privacy policy, and retention practices. Its infrastructure may process data outside your region.

6. App Store Purchases

  • Joymet offers one-time consumable Gem purchases through Apple's App Store. Joymet does not offer subscriptions in the current version.
  • The first successful AI Interpretation is free. Later successful Create AI version or Regenerate AI actions spend 1,800 Gems. Failed or timed-out generation does not spend Gems.
  • Apple processes payment authorization, payment method details, billing, and refunds under Apple's terms and privacy practices. Joymet does not receive your payment card, bank account, or App Store account credentials.
  • StoreKit provides the App with product information and transaction status. Joymet stores the product identifier, App Store transaction identifier, Gems credited or spent, and transaction timestamp locally to deliver Gems and prevent duplicate delivery.
  • Purchased Gems do not expire while the App's local data remains available. Joymet does not provide its own cloud backup, purchase restoration, or cross-device Gem sync. Availability after reinstallation or moving devices may depend on your operating-system backup settings.

7. Permissions and Device Features

  • Photo library: Requested only after you choose to select a photo for a postcard.
  • Camera: Requested only after you choose to take a photo for a postcard.
  • Internet: Used for consented text and optional image-generation requests, generated-artwork downloads, and App Store purchase requests.
  • System share sheet: Opened only after you choose Share. The receiving app then processes the exported front and back PNG files under its own privacy practices.

Joymet does not request contacts, precise location, microphone, or broad device-storage access for its core features.

8. Storage, Accounts, and Tracking

  • Structured drafts, messages, and postcard records are stored in a local database on your device.
  • Selected photos, Original artwork, and downloaded AI artwork are stored in Joymet's app-local directories.
  • Gem balances, Gem ledger entries, and free-use status are stored only in the App's local database and preferences.
  • Joymet has no account system, cloud sync, or Joymet-operated server in this version.
  • Joymet does not include third-party advertising, analytics, or remote crash-reporting SDKs or track you across apps or websites.
  • Joymet does not sell personal information or share it with data brokers.

9. Data Retention and Your Controls

  • Local chat, draft, preference, and selected-photo records remain until removed through available app controls, app-data controls, or uninstallation, subject to backups.
  • Deleting an individual postcard removes its record and associated local Original and AI artwork.
  • Clear History removes saved postcard records and their associated artwork. It does not erase unrelated chat, draft, preference, avatar, Gem balance, Gem ledger, or free-use data.
  • Regenerating AI replaces the previous local AI artwork and leaves the Original unchanged.
  • Temporary share files may remain until the operating system or App clears them.
  • The local Gem ledger, Gem balance, and free-use status remain until the App's local data is removed or the App is uninstalled, subject to operating-system backup behavior.
  • Data already processed by SiliconFlow may be retained according to SiliconFlow's own policies.

10. User-Directed Sharing

Joymet does not publish postcards or send them automatically. Sharing starts only when you select Share and choose a destination. Joymet passes locally rendered front and back PNG files to the system share sheet, after which the destination service's terms and privacy practices apply.

11. Children's Privacy

Joymet is not directed to children under the age required by applicable law to independently consent to data processing in their jurisdiction.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we do, we will update the Last Updated date and publish the revised version with the App or its distribution page.

13. Contact

If you have questions about this Privacy Policy, email [email protected].