Privacy Policy
Last updated: [LAST UPDATED]
This Privacy Policy explains what personal data the JOYMAX app and website collect, why we collect it, who we share it with, and the choices and rights you have. Please read it together with our Terms of Service.
1. Who we are & scope
The JOYMAX mobile application and the website you are reading (together, the “Services”) are operated by [COMPANY LEGAL NAME], located at [COMPANY ADDRESS] (“JOYMAX”, “we”, “us”).
This policy applies to personal data processed when you use the JOYMAX app, visit this website, contact our support team, or otherwise interact with us. It does not apply to the practices of the Apple App Store or Google Play, which handle payments under their own privacy policies.
2. Data we collect
We collect the following categories of data:
- Account data — email address, display name, password (stored hashed), and optional profile details you choose to add. If you sign in with Apple, Google, or another provider, we receive the identifiers that provider shares with us.
- Purchase data — your subscription status, coin balance, and purchase history. Payment card details are processed by Apple or Google and are never visible to us.
- Usage data— which dramas and episodes you watch, watch progress, favorites, searches, and in-app interactions. This powers your recommendations and “continue watching” features.
- Device & technical data — device model, operating system version, app version, language, approximate region (from IP address), crash logs, and performance data.
- Support data — the contents of messages you send to our support and privacy teams.
3. How we use your data
We use personal data to:
- provide, operate and maintain the Services;
- save your watch progress and sync it across devices;
- personalize recommendations and your For-You feed;
- process subscriptions and coin unlocks via the app stores;
- send service messages (e.g. receipts, security notices);
- send marketing communications where permitted, which you can opt out of at any time;
- monitor performance, debug crashes and improve the app;
- detect fraud and abuse, and enforce our Terms of Service;
- comply with legal obligations.
Where the GDPR applies, our legal bases are: performance of a contract (providing the Services), legitimate interests (analytics, security, improvement), consent (marketing, optional permissions), and legal obligation.
6. Children & age requirements
The Services are not directed to children under 13 (or the higher minimum age required in your country, e.g. 16 in parts of the EEA). We do not knowingly collect personal data from children under that age. If you believe a child has provided us personal data, contact [PRIVACY EMAIL] and we will delete it. Some content on JOYMAX may be inappropriate for younger viewers; store age ratings apply.
7. Your rights (GDPR / CCPA)
Depending on where you live, you may have the right to:
- access a copy of the personal data we hold about you;
- correct inaccurate data;
- delete your data (“right to be forgotten”);
- receive your data in a portable format;
- object to or restrict certain processing;
- withdraw consent at any time, where processing is based on consent;
- (California residents) know what categories of personal information we collect and opt out of “sale” or “sharing” — as noted above, we do not sell personal information;
- lodge a complaint with your local data-protection authority.
To exercise any of these rights, email [PRIVACY EMAIL]. We respond within the timeframe required by applicable law (generally 30 days under GDPR, 45 days under CCPA). We will not discriminate against you for exercising your rights.
8. Data retention & deletion
We keep personal data only as long as needed for the purposes above: account data for as long as your account exists; usage data for up to 24 months; support tickets for up to 24 months after resolution. When you delete your account, we delete or anonymize your personal data within 30 days, except data we must retain for legal, tax, or fraud-prevention reasons (kept no longer than legally required).
See our Account & Data Deletion page for step-by-step deletion instructions.
9. Security
We use industry-standard safeguards — encryption in transit, access controls, and least-privilege practices — to protect your data. No system is 100% secure, so we cannot guarantee absolute security; please use a strong, unique password for your account.
10. International transfers
Your data may be processed in countries other than your own. Where we transfer data out of the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
11. Changes to this policy
We may update this policy from time to time. Material changes will be announced in the app or by email before they take effect. The “Last updated” date at the top shows the latest revision.
12. Contact us
Questions about privacy? Contact our privacy team at [PRIVACY EMAIL] or write to: [COMPANY LEGAL NAME], [COMPANY ADDRESS].