Privacy
JoyMingle stores event media so the host can moderate, project, and download it. We do not sell guest photos or require an App Store account.
Hosts create an account with a name and email. Guests may upload photos, short video, and optional voice notes, plus a display name, table number, and caption. Camera and microphone access happens only in the browser after the guest grants permission.
Event media exists so the host can moderate, project, share a guest gallery, and download a high-res ZIP. We do not sell guest photos, train models on event media, or require social login for guests.
Lite keeps media for 3 months after the event date; Celebration and VIP for 12 months. Hosts get an email a week before the window closes, then the media is permanently deleted. Download ZIPs are deleted after 7 days. If a host deletes an event or it is refunded, its media is deleted 30 days later. Deleting a host account removes its events and media immediately.
When our filter blocks an upload or a host reports one, we keep a copy in a restricted store that only JoyMingle staff can reach, together with the guest name, device identifier, and upload details. It is kept for 90 days while we review it, for at least one year if it involves child safety or is reported to the authorities, and longer if law enforcement asks us to preserve it. This copy survives event and account deletion, because the law requires it. When the hold ends, the copy is deleted automatically.
Hosts choose whether uploads go live instantly or wait for approval before the projector and public gallery. Next-morning reveal can hide the album until 9:00 AM. Guests never see rejected media. Every photo and sampled video frames are screened for nudity by an image classifier that runs on our own servers — no media is sent to a third-party moderation service — and anything it flags is held for the host or blocked. We record the version of the upload rules a guest accepted and when, alongside each upload.
Event licenses are processed by Stripe; we never see full card numbers. Print add-ons collect a shipping address and phone number so the JoyMingle team can pack and ship QR cards or acrylic stands. Photobooks are not offered yet.
We use a small set of processors: Supabase (database, file storage, sign-in), Stripe (payments), Resend (transactional email), Vercel (hosting and privacy-friendly page analytics without cookies), and Sentry (error reports, with guest names, emails, and media links stripped). Each only receives what it needs to run its part of the service.
Hosts can export their account data or delete their account from the account page. Guests who want an upload removed can ask the host, who can delete it instantly, or contact us with the event name and a description of the photo and we will remove it.
Questions about an event’s media or account? Reach us from the contact page with the event name and date.
More product detail is on how it works and FAQ. See also the Terms of Service.