Joyora
Start free trial

PRIVACY POLICY

See also: How sign-up works on our website

Joyora Pty Ltd · ACN 696 443 786 · Last updated: 16 October 2026

1 INTRODUCTION

This document sets out the privacy policy of Joyora Pty Ltd, an Australian business with ACN 696 443 786 (referred to in this privacy policy as 'we', 'us' or 'our'). We are an Australian business and this privacy policy is primarily intended to explain how we collect, use, store and disclose personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

In this privacy policy, "Platform" means our website at joyora.com.au together with our native mobile application, available via the Apple App Store (and via Google Play once our Android app is released), and any related services we provide. Where this policy refers only to "the App", it means our native mobile application specifically.

We take our privacy obligations seriously. Please read this privacy policy carefully as it contains important information on who we are and how and why we collect, store, use and share your personal information in connection with your use of our website, app and related services. It also explains your rights in relation to your personal information and how to contact us or a relevant regulator if you have a complaint.

2 CHILDREN AND THIS APP

Joyora is designed to be used by parents, guardians and other adult carers, not directly by children. Account holders must be 18 years of age or older. Any information about a child that we hold has been entered by a parent, guardian or authorised adult carer. Children do not create their own accounts, sign in independently, or provide information to us directly.

3 TYPES OF PERSONAL INFORMATION WE COLLECT

The personal data we collect may include:

3.1 Parent / Account Holder Information

  1. (a) name;
  2. (b) email address;
  3. (c) telephone number;
  4. (d) billing and payment information;
  5. (e) account login credentials.

3.2 Child Profile Information

Where a parent chooses to create a child profile, we may collect:

  1. (a) child’s first name;
  2. (b) date of birth;
  3. (c) sex (recorded as Boy or Girl), used to calculate WHO growth percentiles and to personalise content with your child's correct pronouns;
  4. (d) optional profile photograph;
  5. (e) height, weight and head circumference measurements, if you use the Growth Tracker feature;
  6. (f) photographs and videos you choose to upload to Memory Vault, a private family photo and video journal;
  7. (g) records of developmental milestones marked as observed by you or an invited educator or carer, which may include an attached photo or video;
  8. (h) information relating to personal growth, development or activities;
  9. (i) your child’s schedule and routine, such as sleeps, feeds, meals and medicines, and records of doses marked as given.

Children do not independently provide information to us.

3.3 Family, Co-parent and Helper Information (Your village)

Where you invite another adult to share access to your account, or you join a family’s village as a helper, we may collect:

  1. (a) the name and email address of an invited co-parent, educator or carer (shown in the App as a helper);
  2. (b) the role you choose for a helper (for example nanny, babysitter, grandparent or other) and any nickname you give them. These are visible only to you and your co-parent, never to the helper. If you invite someone who does not yet have an account, we hold their email address and these details with the invitation and use them to set up their access when they join;
  3. (c) care time information, such as the dates, times and children covered by care time you plan, and whether it has been accepted or cancelled;
  4. (d) comments, photos and other records a helper adds for you to review;
  5. (e) a helper’s own name and, where this feature is available and they choose to add it, their phone number. A helper’s phone number is visible only to families whose village they currently belong to;
  6. (f) hourly rates, and the pay estimates worked out from them, where you or a helper choose to enter a rate. A family’s rate is visible only to that family’s parent and co-parent, and a helper’s rate only to that helper. Neither can see the other’s rate.

A co-parent you invite has the same access to the Platform as you, other than managing the subscription itself. A helper’s access is limited to the children and times covered by care time you plan, and may include those children’s names, ages, planned activities and daily routine, such as sleeps, meals and medicines. Helpers cannot see Memory Vault entries or your custom Planner entries, and once you end a helper’s access they can no longer see your family’s information.

3.4 Referral Programme Information (Joyora Circle)

If you take part in our Joyora Circle referral programme, we may collect:

  1. (a) your unique referral code (which also works as your invite code in the App) and referral link activity;
  2. (b) where a friend joins through your referral link or invite code: their email address, their Joyora account, the progress of the referral (such as when they start a free trial and when they first pay), and the payment confirmation and refund details we receive from our payment providers to decide whether a reward applies;
  3. (c) records of successful referrals and of rewards earned, ready, used or expired for your household (you and any linked co-parent).

We use referral records to run the referral programme, to prevent misuse, and to understand, in aggregate, how people who join through friends use Joyora. If you share your Joyora referral link or invite code, we may show your first name to the people who open it, so they know who invited them. If you join Joyora through a friend's referral link or invite code, we show that friend your first name and the progress of your referral, such as when you start a free trial and when you join, so they know their invitation worked. If we do not have your first name, they see only “a friend”. We do not show them your email address, your payment details or anything else about your use of Joyora.

3.5 Subscription and Purchase Information

Where you subscribe to Joyora, we may collect or receive:

  1. (a) confirmation of your subscription status, plan and renewal date from the Apple App Store, Google Play or our subscription management provider, RevenueCat;
  2. (b) billing and payment information processed directly by Apple, Google or our payment processor, Airwallex, for web-based subscriptions.

We do not collect or store your full payment card details ourselves. Purchases made through the Apple App Store or Google Play are also subject to Apple's and Google's own privacy policies.

3.6 Usage Information

We keep a simple, first-party record of how the Platform is used, for example which activities or recipes are marked complete, linked to your account and, where relevant, a child's internal profile identifier rather than their name. We do not currently use third-party analytics, advertising or crash-reporting tools, and this usage information is not shared with advertisers or other third parties.

3.7 Health and Sensitive Information

If a parent chooses to enter it into the Platform, we may collect health-related information about a child, including:

  1. (a) medicine details you add to a child’s schedule, such as the medicine’s name and timing, reminders, and records of doses marked as given, including who marked them and when;
  2. (b) height, weight and head circumference measurements recorded using the Growth Tracker feature;
  3. (c) relevant medical notes entered by a parent; and
  4. (d) information relating to a child's routines, wellbeing, care preferences or similar matters entered by a parent or guardian.

Under Australian privacy law, health information is sensitive information. If an overseas privacy law applies to particular processing activities, that information may also be treated as a special category or otherwise protected class of data under that law.

We only collect such information where it is voluntarily provided by a parent or legal guardian for the limited purposes described in this policy.

We do not require parents to provide health information to use the core features of the Platform.

4 HOW WE COLLECT PERSONAL INFORMATION

We collect personal data:

  1. (a) directly from parents when they create an account;
  2. (b) when parents create and manage child profiles;
  3. (c) when parents voluntarily enter information into scheduling or notes fields;
  4. (d) through first-party cookies and analytics on our website (joyora.com.au); the App itself does not currently use third-party analytics, advertising or tracking technologies;
  5. (e) from service providers who support payment processing or infrastructure.
  6. (f) when you upload photographs or videos to Memory Vault or a milestone record;
  7. (g) when you invite, or accept an invitation from, a co-parent, educator or carer;
  8. (h) when a helper you invite joins your village, accepts care time or adds information for you to review, and, if you are a helper, from the family who invited you;
  9. (i) when you take part in the Joyora Circle referral programme;
  10. (j) from Apple, Google or RevenueCat when you subscribe or make a purchase through the App.

We do not knowingly collect personal data directly from children without parental involvement.

We may also collect personal data from you when you use or access our website or our social media pages. This may be done through use of web analytics tools, ‘cookies’ or other similar tracking technologies that allow us to track and analyse your website usage. For more information, please see our Cookie Policy.

5 USE OF YOUR PERSONAL INFORMATION

We collect and use personal data for the following purposes:

  1. (a) to provide and operate the Platform;
  2. (b) to enable scheduling, reminders and organisational features;
  3. (c) to provide account administration and support;
  4. (d) to improve our services and user experience;
  5. (e) to comply with legal obligations;
  6. (f) to enable shared family access between a subscribing parent and an invited co-parent;
  7. (g) to enable helper invitations, care time and the helper access described above;
  8. (h) to show you pay estimates based on an hourly rate you choose to enter;
  9. (i) to operate the Joyora Circle referral programme, deliver rewards and prevent misuse;
  10. (j) to process and manage your subscription through the Apple App Store, Google Play or Airwallex;
  11. (k) where you have opted in, to send newsletters, updates, downloadable activity packs and other direct marketing communications about our content, products or services.

If you opt in to receive direct marketing communications from us, you can unsubscribe at any time by using the unsubscribe link in the relevant email or by contacting us. You do not need a separate in-app opt-out control for email marketing provided each marketing message contains a functional unsubscribe mechanism.

6 Use of Health Information

Where parents choose to enter health or medication information:

  1. (a) The information is used solely to enable scheduling reminders, organisational tools and profile management features.
  2. (b) Medicine information is shown in your child’s schedule, used to send reminders to you and your co-parent, and kept as a record of doses marked as given. It is visible to your co-parent, and may be visible to a helper during care time for that child. Reminders are sent as push notifications and, depending on your notification settings, their text may appear on your device’s lock screen.
  3. (c) The information is not monitored, reviewed or analysed by medical professionals.
  4. (d) The Platform does not provide medical advice, diagnosis, treatment or health monitoring services.
  5. (e) Growth measurements are used only to generate percentile charts and your Growth Card keepsake. They are not monitored or reviewed by us or any third party, and are not used to diagnose, predict or assess your child's health;
  6. (f) We do not use health information for profiling, advertising, or automated decision-making.
  7. (g) Parents may delete health information at any time within the Platform, or ask us to delete it.

7 ADDITIONAL RIGHTS WHERE OTHER PRIVACY LAWS APPLY

If and to the extent an overseas privacy law such as the GDPR or UK GDPR applies to a particular handling activity, the additional rights, obligations, lawful bases and safeguards required by that law will apply to that activity in addition to this policy.

  1. (a) Where an overseas privacy law applies, we may rely on performance of a contract, legitimate interests, legal obligations or consent, depending on the nature of the relevant processing activity.

Where a parent chooses to enter health or medication information, we will only handle that information for the limited purposes described in this policy. Where consent is required by applicable law, we may ask the parent or guardian to provide that consent by selecting a consent checkbox or taking a similar affirmative action.

Parents may withdraw any consent they have given for optional processing at any time by deleting the relevant information, updating their settings where available, unsubscribing from the relevant communication or contacting us. Withdrawal of consent does not affect processing already carried out lawfully before that withdrawal.

8 SHARING YOUR DATA

We do not sell personal data.

We may share your personal data in certain circumstances, as follows:

In particular, we may disclose personal information to third-party service providers who help us operate our business and services, including Vercel (website hosting), Squarespace (our previous website host), Supabase (our database and secure file storage provider), Apple Inc. and Google LLC (processing in-app subscription purchases through the App Store and Google Play, and delivering push notifications), RevenueCat Inc. (subscription management for in-app purchases), Airwallex (payment processing for web-based subscriptions), Zapier (workflow automation), Xero (accounting), Glide (our previous web app platform, being phased out as customers move to the App), IT support providers, professional advisers and other service providers we use from time to time. We do not currently use any third-party analytics or advertising providers within the App.

  1. (a) hosting and cloud infrastructure providers;
  2. (b) payment processors;
  3. (c) IT and technical service providers;
  4. (d) professional advisers;
  5. (e) regulators or authorities where required by law;
  6. (f) in connection with a business sale or restructuring.

Health information is only shared with core infrastructure providers strictly as necessary to provide hosting and storage services.

We do not share children’s information with advertisers or data brokers.

We do not show a family’s hourly rate to a helper, or a helper’s rate to a family.

If you choose to share something from the App, for example a photo, a Growth Card or an invitation sent using your device’s share options, it leaves our Platform and is handled by the app or person you share it with.

9 SECURITY

We implement appropriate technical and organisational measures to protect personal data, including:

  1. (a) encrypted transmission (where applicable);
  2. (b) secure cloud hosting environments;
  3. (c) restricted access controls;
  4. (d) password protection and authentication mechanisms;
  5. (e) internal access limitation on a need-to-know basis.
  6. (f) private, access-controlled cloud storage for photographs and videos such as Memory Vault entries, which are never publicly accessible and are visible only to the carers linked to that child;

While we take reasonable steps to protect personal data, no system is completely secure and we cannot guarantee absolute security.

If we become aware of an eligible data breach affecting personal information, we will take the steps required by applicable law, which may include investigating the incident, containing the breach and notifying affected individuals and regulators, including by email or in-app notice where appropriate.

10 LINKS

Our website may contain links to other websites. Those links are provided for convenience and may not remain current or be maintained. We are not responsible for the privacy practices of those linked websites and we suggest you review the privacy policies of those websites before using them.

11 YOUR RIGHTS

You have rights in relation to your personal information under Australian privacy law, and additional rights may apply where another privacy law applies to the relevant processing.

  1. (a) Access and correction: You may request access to the personal information we hold about you and ask us to correct that information if it is inaccurate, out-of-date, incomplete, irrelevant or misleading.
  2. (b) Complaint: You may complain to us if you think we have handled your personal information in a way that breaches applicable privacy law.
  3. (c) Direct marketing opt-out: If you have opted in to receive direct marketing from us, you may opt out at any time using the unsubscribe link in the relevant email or by contacting us.
  4. (d) Deletion requests: You may request deletion of your account or certain personal information. We will consider each request in light of our legal, regulatory, accounting, fraud prevention, dispute resolution and backup retention obligations.
  5. (e) If you are in Australia and believe we have interfered with your privacy, you may lodge a complaint with the Office of the Australian Information Commissioner. If another privacy law applies to the relevant processing, you may also have the right to complain to the regulator in that jurisdiction.
  6. (f) Where another privacy law applies to the relevant processing, you may also have any additional rights that are mandatory under that law, including rights relating to objection, restriction, portability or withdrawal of consent to the extent applicable.

You may, at any time, exercise any of the above rights, by contacting our email address provided below.

12 RETENTION, INACTIVE ACCOUNTS AND DELETION

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to provide our services, maintain our systems, resolve disputes, enforce our agreements and satisfy legal, accounting, tax and reporting requirements.

If your subscription ends, your account and the information in it, including your Memory Vault, stay available to you unless you delete your account. If an account has been inactive for a long period, we may contact you and then delete or de-identify the relevant information, subject to our backup retention cycles and any legal obligation or legitimate need to retain it for longer. If you use the delete account function or otherwise request deletion, we will action that request within a reasonable time, subject to those same limitations.

Some deletions are held for a short time before they become permanent. A photo or video deleted from Memory Vault stays in Recently deleted for 30 days, during which you or your co-parent can restore it, and is then permanently deleted, including the file. A child profile you remove is kept for 30 days and then permanently deleted, together with that child’s photos, videos and records. When you delete your account, child profiles that only you care for are handled the same way, and any helper access you have granted ends.

When a helper’s access to your family ends, they can no longer see your family’s information, and their phone number is no longer visible to you. Your family keeps its own record of past care time and of any rate you entered.

13 OVERSEAS DISCLOSURE AND STORAGE

Some of our service providers may store or process personal information outside Australia. This can occur, for example, where we use third-party providers such as Supabase, Apple, Google, RevenueCat, Vercel, Squarespace, Airwallex, Zapier, Xero, Glide (during the transition to our native App) or other service providers with personnel, infrastructure or subcontractors located overseas.

Where we disclose personal information overseas, we will take reasonable steps to ensure the recipient handles the information in a manner consistent with applicable privacy law, while acknowledging that overseas recipients may be subject to different privacy regimes.

You can contact us using the details below if you would like more information about our use of overseas service providers or our cross-border data handling practices.

14 CONTACT US

For further information about our privacy policy or practices, or to access or correct your personal data, or make a complaint, please contact us using the details set out below:

Email: support@joyora.com.au

We may change this privacy policy from time to time by posting an updated copy on our website and we encourage you to check our website regularly to ensure that you are aware of our most current privacy policy. Where we make any significant changes, we will endeavour to notify you by email.