- Home
- Privacy
Privacy
Joocy keeps only what it needs to run your presentations: your account, your decks, and what your audience chooses to send during a session. No ads, no selling data, no tracking cookies, and audiences join without an account.
Updated
Who we are
Joocy (joo.cy) is an interactive presentation service. In this policy, "we" and "us" means the people who run it. Write to us about anything here at hello@joo.cy.
This policy covers the website, the presenter app, the screens audiences use on their phones, the API and the MCP server that AI agents connect to.
What we keep about presenters
- Your account: your email address and your name if you give one. Your password is stored only as a salted hash (PBKDF2), so nobody, us included, can read it.
- Your decks: the slides, PDFs, pictures, videos and HTML you upload or make, every saved version of a deck, and your folders.
- Your sessions: when you presented, and everything your audience sent, so you can read the results afterwards.
- Keys for your AI: the keys you make for Claude, ChatGPT or another agent are stored only as hashes, with the name you gave them.
- The early access list: your email, the optional note about what you present, and how you found us, if you choose to say.
What we keep about audiences
Joining a session needs no app and no account. A phone gets a random id and key for that one session, kept in the phone's own browser so it can rejoin after a dropped signal.
- A name, only when the presenter's deck asks for one.
- Answers, votes and reactions to the presenter's questions.
- Photos and voice notes, only when a question asks for one and the person chooses to send it. They wait for the presenter's approval by default.
- Contact details, only when a sign up question asks for them.
We do not keep audience members' IP addresses with their answers. The presenter decides what the room is asked, and can see and download what it sends.
How we use it
- To run Joocy: show answers on the presenter's screen, keep results, sync between the stage, the console and phones.
- To keep it safe: rate limits on sign in and joining, the bad word filter, approval of photos, and finding abuse.
- To send the emails you ask for: invites and password resets.
- To fix problems: short request logs, with keys and passwords taken out.
We do not sell personal data, show ads, or use your decks or your audience's answers to train AI models.
Who else can see it
- Your audience sees what you choose to show on the big screen and on their phones.
- Your AI, if you connect one with a key, reads and changes your decks and reads your results. What it does with them is between you and that AI's provider, under their terms.
- Service providers who run parts of Joocy for us: Cloudflare hosts the site, the database, the files and the live rooms; Resend delivers our emails; Google Fonts serves the fonts on our public pages, so your browser asks Google for them; YouTube plays our film, only if you press play.
- The law: we share data only when the law requires it.
Cookies and what your browser keeps
| Name | What it is for | How long |
|---|---|---|
| stoa_auth | Keeps you signed in to the app. A cookie only our server can read. | 30 days |
| stoa_known | Remembers that this browser signed in before, so other people's wrong passwords never lock you out. Sent only to the sign in pages. | 1 year |
| stoa.p.(code) | On a phone: its place in one session, so it can rejoin. | Stays in that browser until cleared |
| stoa.mute, poured | On our pages: your sound choice, and whether the opening animation already played this visit. | Until cleared, or this visit |
| stoa-remote, stoa.clock | In the console: the key for your phone remote, and the talk's clock. | Until cleared, or this visit |
There are no analytics or advertising cookies, and Cloudflare's web analytics is turned off.
How long we keep it
- Your account stays until you ask us to delete it.
- Your decks and results stay until you delete them. A deleted deck goes to the trash first; deleting it for good removes the deck, its history, its files, and every session with its answers, photos and voice notes.
- The early access list keeps your email until you are invited or ask to be taken off.
- Request logs are kept for a short time by Cloudflare, then deleted.
Your choices
- See and take your data: download any session's results as a spreadsheet, as JSON, or all its photos, from the app.
- Correct or delete it: change your decks any time, delete them yourself, or write to hello@joo.cy to delete your account and everything in it.
- In the audience: ask the presenter to remove what you sent, or write to us.
- Your rights under the law where you live, such as the GDPR in Europe or India's Digital Personal Data Protection Act: write to us and we will answer within 30 days.
Safety, children, places and changes
- Safety: everything travels over HTTPS; passwords and keys are stored as hashes; slides and phone screens written in code run in sealed sandboxes that cannot reach your account.
- Children: presenter accounts are for adults. Audiences of any age can join a session run by a presenter, such as a teacher; they need no account, and presenters should ask only for what the session needs.
- Where: Cloudflare stores and serves Joocy from its network around the world, so your data may be processed outside your country.
- Changes: when this policy changes, the date at the top changes. If a change matters, we tell signed in presenters first.
Questions: hello@joo.cy. Also see the terms.