What we collect
We collect what Joint needs to function as a shared inbox and credential vault for two partners, and nothing further. The categories below cover every piece of data we hold about a household.
- Account email — your personal login email, set at sign-up, used to authenticate you.
- Partner invitee addresses — the addresses you enter when pairing your household with a partner.
- Encrypted vault entries — any logins, notes, and forwarded credentials you save to the household credential vault.
- Inbox messages — mail addressed to your joint inbox. Both partners can read everything that lives in the joint inbox.
How we use it
We use your data to deliver Joint to you and to keep it that way. We do not sell it. We do not share it for marketing. We share it with third parties only where that third party is necessary to deliver the core service, and no further than that.
- Delivering the service: authentication, partner pairing, inbox delivery, vault decryption on your sign-in, receipt matching, renewal reminders.
- Never sold. We do not sell, rent, or trade any of your data to advertisers, data brokers, or third-party marketers.
- Never shared for marketing. We do not share your data with anyone for their own marketing purposes.
- Shared with processors as needed: Stripe for billing, R2 (Cloudflare) for vault attachment storage, our transactional email proxy for system mail. Each processor receives only the data it needs to perform the role we have given it.
How long we keep it
We keep your data for the life of the account. When the account closes, we delete the data on a short timeline and keep an even smaller backup only as long as our infrastructure requires us to.
- Active data is kept for the life of the account, while either partner remains signed in to the household.
- On account deletion, customer data is deleted within thirty days.
- Encrypted backup copies are kept for no more than ninety days and are then overwritten.
Your rights
You own the data that lives in your Joint household. The controls below are available from settings; if you need them in a form you can hand to a regulator, write to us and we'll help shape the export.
- Export via the queued CSV vault export — request a download from settings; we email both partners when it's ready.
- Separation Mode — either partner can freeze shared changes while both personal sign-ins and the export/activity paths remain available.
- Access and correction — open settings to view and update your account email, partner pairing, and the data we hold about you.
Security
Vault entries are encrypted at rest; mail and metadata are transmitted over TLS; key custody is handled inside our infrastructure rather than on the device you happen to be holding. We will tell both partners promptly if we ever conclude that any of your data has been accessed by someone it should not have been.
Third parties we work with
Joint uses a small set of processors, each for a specific job. We share with each only the data that job requires.
- Stripe — payment processing. Receives billing details, never mailbox or vault data.
- R2 (Cloudflare) — attachment storage for vault entries. Receives encrypted blobs only.
- Transactional email proxy — system mail (receipts, renewal reminders, invite notifications). Receives recipient and message content.
International transfers
Data is stored in the region in which the application is deployed. If we ever offer an explicit region choice, that choice will also control where your data is stored and processed; transfers between regions will be governed by an adequacy decision or by your explicit consent.
Children
Joint is built for adults sharing a household. We do not knowingly collect data from anyone under sixteen. If a household is for a minor under your care, that data is held under your account and is governed by these terms.
Changes to this notice
If we change this notice in a way that materially affects you, we will email both partners on the partnership at least thirty days before the change takes effect. The previous version stays archived at /privacy/previous for at least twelve months.
Questions about your privacy
To exercise a right, request an export, or ask a question, write to us at joint@polsia.app. A person on the team will reply within two business days.
Back to Create your shared inbox.