Last updated: September 17, 2025
This is the Privacy Policy of Joi Video Chat App (“Joi”, “us”, “we”, the “Service” or “our”), which is operated by VLMedia A.Ş. This Privacy Policy is incorporated into and subject to our Terms of Service.
We respect your privacy and want you to understand how we collect, use, and share data about you. This Privacy Policy covers our data collection practices and describes your rights to access, correct, or restrict our use of your personal data; in plain language, keeping legal and technical jargon to a minimum. Your privacy is at the core of the way we design and build our Services and products you know and love so that you can fully trust them and focus on building meaningful connections.
Unless we link to a different policy or state otherwise, this Privacy Policy applies when you visit or use the Service. Your use of the Service signifies that you agree with the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, do not use the Service.
The controller responsible for your personal data is:
VLMedia A.Ş.
Universiteler Mahallesi Ihsan Doğramacı Bulvarı
Gümüş Blok No:29 B K1-1 ODTÜ Teknokent
Çankaya, Ankara, Turkey
Data Protection Officer (DPO):
You can reach our Data Protection Officer at [email protected]. Please include “Privacy Request” in the subject line so your inquiry can be properly routed. Our customer support team forwards all privacy-related emails directly to the DPO.
EU Representative:
Naq Cyber B.V.
Vlamingstraat 4, 2712 BZ Zoetermeer, Netherlands
[email protected]
This Privacy Policy applies to websites, apps, and other services operated by us. We process personal data that you as a user of the Products make available to us, for example by using our Products and that users provide to us (“Data”). We can’t help you develop meaningful connections without some data about you, such as basic profile details and the types of people you’d like to meet. We also ask for some in-app permissions to access and enable some features you may want to use such as photos, videos, gallery, and audio. These are permissions and they are subject to your consent and are always reversible. We also collect information generated as you use our services, for example, access logs, as well as information from third parties, like when you access our services through a social media account. We also collect some data automatically, like information about your device and what parts of our Services you interact with or spend time using. We may also generate inferences about your preferences or behavior (for example, suggesting users with similar interests or showing you content you are more likely to engage with) in order to personalize your experience.
Summary of Data Categories and Purposes:We collect and process personal data in the following categories: device identifiers (such as IDFA/GAID) with your consent, usage and interaction data, approximate or precise location (if permitted), contact details (if provided by you), purchase and subscription metadata, support messages, and user-generated content (such as photos, videos, or profile data). This data is used to operate and improve the app, analyze performance, provide customer support, personalize your experience, prevent fraud, deliver advertising, and comply with legal requirements.
In addition to the information you provide us directly, we receive information about you from others or by automated means, including:
We use tools like analytics services, and advertising providers to gather the data listed below. Some of these tools offer you the ability to opt-out of data collection. Where legally required, we ask for your consent before using cookies, SDKs, or similar tracking technologies.
The main reason we use your information is to deliver and improve our Services. Additionally, we use your info to help keep you safe. Read on for a more detailed explanation of the various reasons we use your information, together with practical examples.
These SDKs may process data such as app usage patterns, user-submitted content, session metadata, or limited purchase data solely for the purpose of enabling these features. We do not allow these service providers to use your data for their own advertising or model training. All SDKs are implemented with appropriate safeguards in accordance with applicable privacy laws.
A full list of currently active SDKs is available upon request by contacting us.
We use third-party advertising services like Google’s ad services to deliver online advertisements to our end users within our Services including mobile applications and websites. The ads may be based on information we know about you as detailed in Section 2.2 Data From Others and information that these ad service providers know about you based on their tracking data. The ads can be based on your recent activity or activity over time and across other services and may be personalized to your likes and interests. When using other services you may also receive personalized online advertisements. We may use data to include you in a ‘custom audience’ for Facebook that will receive Joi ad content (a custom audience is essentially a list of people who we think are most likely to be interested in a particular advertisement).
The main reason we use your information is to deliver and improve our Services. Additionally, we use your info to help keep you safe. Read on for a more detailed explanation of the various reasons we use your information, together with practical examples.
You share information with other users when you voluntarily disclose information on the service (including your public profile). Please be careful with your information and make sure that the content you share is the stuff that you’re comfortable being publicly viewable since neither you nor we can control what others do with your information once you share it.
We use third parties to help us operate and improve our Services. These third parties assist us with various tasks, including data hosting and maintenance, analytics, customer care, marketing, advertising, payment processing, and security operations. These service providers may access your personal data and are required to use it solely as we direct, to provide our requested service.
We may also share information with partners who distribute and assist us in advertising our Services. For instance, we may share limited information on you in hashed, non-human readable form to advertising partners.
We follow a strict vetting process prior to engaging any service provider or working with any partner. All of our service providers and partners must agree to strict confidentiality obligations.
We may disclose your information if reasonably necessary: (i) to comply with a legal process, such as a court order, subpoena or search warrant, government/law enforcement investigation or other legal requirements; (ii) to assist in the prevention or detection of crime (subject in each case to applicable law); or (iii) to protect the safety of any person.
Where we receive requests from foreign law enforcement or government authorities, we only respond where required or permitted under applicable laws, and we assess each request carefully to ensure it is valid and proportionate.
We may also share information: (i) if disclosure would mitigate our liability in an actual or threatened lawsuit; (ii) as necessary to protect our legal rights and legal rights of our users, business partners or other interested parties; (iii) to enforce our agreements with you; and (iv) to investigate, prevent, or take other action regarding illegal activity, suspected fraud or other wrongdoing.
We use a combination of automated systems and a team of moderators to monitor and review accounts (including photos and any other information uploaded onto user profiles) and messages for content that indicates breaches of our Terms of Service. If an account or message meets certain criteria that demonstrate that the Terms of Service are likely to have been breached, the relevant account will be subject to a warning and the user’s access restricted and/or blocked.
Automated moderation may involve the use of artificial intelligence or machine learning tools to flag content. These tools assist human moderators and do not replace final human review where decisions may significantly affect users.
If you post anything that is inconsistent with our Terms of Service, we reserve the right to terminate or restrict access to your Account.
In the event that our Services or any of its affiliates undergoes a business transition or change of ownership, such as a merger, acquisition by another company, reorganization, or sale of all or a portion of its assets, or in the event of insolvency or administration, we may be required to disclose your personal data.
In such cases, we will take steps to ensure that your personal data continues to be protected in accordance with this Privacy Policy, and we will notify you of any material changes or new uses of your data.
You have certain rights around the use of your data, including the ability to opt-out of cookies, and the collection of your data by certain analytics providers. You can update or terminate your account from within our Services, and can also contact us for individual rights requests about your personal data. We want you to be in control of your information, so we have provided you with the following tools:
We want you to be aware of your privacy rights. Here are a few key points to remember:
For your protection and the protection of all of our users, we may ask you to provide proof of identity before we can answer the above requests.
Keep in mind, we may reject requests for certain reasons, including if the request is unlawful or if it may infringe on trade secrets or intellectual property or the privacy of another user. If you wish to receive information relating to another user, such as a copy of any messages you received from him or her through our service, the other user will have to contact our Privacy Officer to provide their written consent before the information is released.
Also, we may not be able to accommodate certain requests to object to the processing of personal information, notably where such requests would not allow us to provide our service to you anymore. For instance, we cannot provide our service if we do not have your date of birth.
If you want to exercise any of your rights listed above please visit our feedback form or email us at [email protected].
We keep your personal information only as long as we need it for legitimate business purposes and as permitted by applicable law. To protect the safety and security of our users on and off our Services, we implement a safety retention window of six months following account deletion unless there is a technical difficulty. During this period, some of your account information will be retained although the account will of course not be visible on the Services anymore. In practice, we delete or anonymize your information upon the deletion of your account (following the safety retention window) or after 5 years of continuous inactivity. An account is considered inactive when the Application of the Member has not established contact with Joi’s servers (including due to deactivation of the geolocation process), and the Member has not used the Application. In any event, the Account of a Premium Member is not considered inactive.
Unless:Correspondence with our Customer Support team will be retained for longer to allow us to deal with any subsequent queries you may have but will usually be deleted within 6 years if there are no queries.
Anonymized information about activity on our Services is retained for longer periods of time for statistical and product research purposes but this is not attributable to an individual once the profile has been deleted.
If we process your personal information based on your consent, we will delete that information if you withdraw your consent, unless we have another lawful basis to retain it.
Where required by applicable law (such as GDPR, LGPD, Quebec Law 25), we will provide you with further details of specific retention periods for particular types of data upon request.
Keep in mind that even though our systems are designed to carry out data deletion processes according to the above guidelines, we cannot promise that all data will be deleted within a specific time frame due to technical constraints.
We work hard to protect you from unauthorized access to or alteration, disclosure or destruction of your personal information. As with all technology companies, although we take steps to secure your information, we do not promise, and you should not expect, that your personal information will always remain secure. Your password is an important part of our security system, and it is your responsibility to protect it. You should not share your password with any third party, and if you believe your password or account has been compromised, you should change it immediately and contact [email protected] with any concerns.
We regularly monitor our systems for possible vulnerabilities and attacks and regularly review our information collection, storage, and processing practices to update our physical, technical and organizational security measures. These measures include, where appropriate, encryption, access controls, firewalls, secure hosting environments, and regular security training for our staff.
We may suspend your use of all or part of the Services without notice if we suspect or detect any breach of security. If you believe that your account or information is no longer secure, please notify us immediately. We are not responsible for virus protection outside our service network. We are also not responsible for the damage or destruction of user data. We will pursue every detected attack by hackers, etc. under civil law and, if necessary, by the prosecution.
We store your personal information on servers located in secure facilities, and we limit access to such information to authorized personnel and contractors who need to know that information in order to process it for us and who are subject to strict contractual confidentiality obligations.
In case of a breach, we will notify; the EU representatives, our DPO and our users who were or potentially were affected by the breach within 72 hours of the attack. We will announce it on our webpage.
Our Services are restricted to users who are 18 years of age or older. We do not permit users under the age of 18 on our platform and we do not knowingly collect personal information from anyone under the age of 18. If you are located in a jurisdiction where the age of digital consent is higher than 18, you must meet that minimum age to use our Services.
We do not knowingly sell or share the personal information of users under 18. If we ever receive verifiable knowledge that we have collected personal information from a person under the applicable minimum age, we will delete it promptly in accordance with applicable law, including the U.S. Children’s Online Privacy Protection Act (“COPPA”), the EU GDPR, and Brazil’s LGPD.
If you suspect that a user is under the age of 18, please use the reporting mechanism available through the service. If we become aware that a child, minor or anyone under the age of 18 has registered with us and provided us with personal data, we will take steps to terminate that person’s registration and delete their profile information from our Services. If we do delete a Profile because you violated our no children rule, we may retain basic account and profile information to ensure that you do not try to get around our rules by creating a new profile. Such retained information will be limited to what is strictly necessary for this purpose and will be deleted when no longer required.
In order to provide the Services to you, we must transfer your data to our servers and process it there. By visiting or using our Services, you consent to the storage of your data on servers. If you are using the Services, you consent to the transfer, storage, and processing of your data. Specifically, personal data collected in Switzerland and the European Economic Area (“EEA”) is transferred and stored outside those areas.
That data is also processed outside of Switzerland and the EEA by our Joi companies, or our service providers, including to process transactions, facilitate payments and provide support services as described in Sections 4 & 5. We have entered into data processing agreements with our service providers that restrict and regulate their processing of your data on our behalf. By submitting your data or using our Services, you consent to this transfer, storage, and processing by Joi and its processors. We operate a global network of servers including in Germany, Netherlands, Turkey, and Canada. We ensure that the data is adequately protected by ensuring that valid, legal mechanisms are in place. If you want more information relating to the nature of the safeguards we have in place please email [email protected].
We’re always looking for new and innovative ways to help you build meaningful connections, this policy may change over time. We will notify you before any material changes take effect so that you have time to review the changes.
If you have any questions regarding this privacy statement, the processing of your personal data, you can contact us directly. We are also available to you in the case of requests for information, requests or complaints:
Address: VLMedia Inc. Universiteler Mahallesi Ihsan Dogramacı Bulvarı Gumus Blok NO:29 B K1-1 ODTU TEKNOKENT Cankaya\Ankara TURKEY
FAX: +90(312)2101777
E-MAIL: [email protected]
For European citizens or residents:
You can exercise your rights as a data subject (right to be informed; right of access; right to rectification; right to erasure; right to restriction; right of data portability; and the right to object) by contacting our European representative:
Naq Cyber B.V.;
Contact: Nadia Kadhim
Address: Vlamingstraat 4, 2712BZ Zoetermeer, Netherlands
Email: [email protected]
This representative may be contacted at any time for inquiries or complaints related to the processing of your data if you are a European national or resident. You may contact our representative to exercise your rights as described in this privacy policy.
When contacting our European representative, always mention our name and the nature of your request or inquiry in the subject of your email.
If you are a California resident, please review our CCPA/CPRA Privacy Notice for additional information about your rights. Depending on your state of residence, you may have additional rights under US privacy laws. These rights may include:
Right to Know and Access You can request that we confirm whether we process your personal information and obtain a copy of the categories and specific pieces of personal information we have collected about you.
Right to Delete You can request that we delete personal information we have collected from you, subject to certain exceptions.
Right to Correct You can request that we correct inaccurate personal information we maintain about you.
Right to Opt Out of Sales or Sharing You can direct us not to “sell” or “share” your personal information for cross-context behavioral advertising. We do not sell personal information. If in the future we share information for targeted advertising, we will provide a “Do Not Sell or Share My Personal Information” option.
Right to Opt Out of Targeted Advertising and Profiling In some states, you may opt out of the use of your personal information for targeted advertising or for certain automated decision-making and profiling activities.
Right to Limit Use of Sensitive Personal Information If you are a California resident, you may request that we limit the use of sensitive personal information (such as precise geolocation, or information about sexual orientation) to what is necessary to provide the services.
Right to Non-Discrimination you will not be discriminated against for exercising your privacy rights.
How to Exercise Your Rights:
You may exercise these rights by contacting us at [email protected] or through the in-app support feature. To protect your privacy, we may ask you to verify your identity before fulfilling your request.
If you are a California resident, please review our dedicated California Privacy Notice for more information about your rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).
If you are a resident of Canada, including Quebec, you have certain privacy rights under federal and provincial laws (such as the Personal Information Protection and Electronic Documents Act, PIPEDA, and Quebec’s Law 25). These include:
Right to Access and Rectification You may request access to the personal information we hold about you and ask that inaccurate information be corrected.
Right to Withdraw Consent Where our processing is based on your consent, you may withdraw that consent at any time.
Right to Deletion You may request deletion of your personal information, subject to our legal obligations and legitimate business needs.
Right to Information About Automated Decisions We may use automated tools to moderate content, recommend matches, prevent fraud, and suggest personalized features. You have the right to request information about the logic of these tools, their significance, and the potential consequences of such decisions.
Cross-Border Transfers Your information may be transferred outside of Canada, including to the United States, Turkey, and the European Union, where it may be subject to the laws of those jurisdictions. We take steps to ensure that your information continues to receive adequate protection when transferred.
Right to File a Complaint You may lodge a complaint with the Office of the Privacy Commissioner of Canada or, if you reside in Quebec, with the Commission d’accès à l’information du Québec.
How to Exercise Your Rights:
You may exercise these rights by contacting us at [email protected]. We may require you to verify your identity before processing your request.
Copyright © 2025 Joi - All rights reserved